last executing test programs: 2.863976259s ago: executing program 1 (id=7295): socket$kcm(0x10, 0xd, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="630fe4f3d3a9d499ff7f0000000000000200"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x8, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="55df00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES8=r4], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@cgroup, 0x8, 0x1, 0x8, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/149, 0x95}, {&(0x7f00000006c0)=""/211, 0xd3}, {&(0x7f00000007c0)=""/66, 0x42}, {&(0x7f0000000840)=""/87, 0x57}, {&(0x7f00000008c0)=""/203, 0xcb}], 0x5}, 0x40000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(r5) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x0}, 0x22008095) r9 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) r12 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x8915, &(0x7f0000001cc0)) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r14 = socket$kcm(0xa, 0x2, 0x3a) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10, r13}, 0x18) setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r13, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10, 0x0}, 0x2404c055) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) 2.37757036s ago: executing program 1 (id=7298): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b25, &(0x7f0000000040)={'wlan1\x00', @random="01001400"}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8800) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000001940)=""/4128, 0x1020}, {&(0x7f0000000940)=""/4064, 0xfe0}, {&(0x7f00000000c0)=""/159, 0x9f}], 0x4}, 0x120) 2.01188003s ago: executing program 1 (id=7308): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5f33}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xbb78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020"], 0xfe33) r7 = socket$kcm(0x2, 0x7, 0x106) sendmsg$inet(r7, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x19, &(0x7f0000000000)=r11, 0x8) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="15bf2938d263590d88ef9bf09aa20a5086adaddd143c0b9714174f146de365d6d6920fa5765ff5df511889dca105c0b88f98d29d4939bd8f5035281035ae473a9eafbfc104c48b7eb18e1c40249281080c2e8e2e6f6ee448e1e0ec1014350013d674f3c3f6a8", 0x66}, {&(0x7f0000000980)="be91c9ad09473656b90b4be9e992bcf877a4ae9f221ef5d1db0a9d20399dfe4887d2554e953ddb28dbccb157fe2265e04f9a1bd5a9487328cc5bb397148cdda4e59bfbca8b5456731f4c51a48cbcb3595de021d24acdde0daf5e29a4049f9bc8d1a9b64438fcc2848b1809040b0f776422bedb9c52a2072f2c72ffed97ac84b1c30769ee7a647970130c8915c47a7b87de84946fde0bebf19ca6a6b9b8460eb44d564831e0f0c3f8f7866f", 0xab}], 0x2}, 0x861) 1.972387891s ago: executing program 3 (id=7301): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x845) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.767708596s ago: executing program 0 (id=7303): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x2, &(0x7f0000000300)=@raw=[@generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) 1.629532509s ago: executing program 3 (id=7304): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x2db}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) (async) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0xfffffffffffffd6c) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) (async) r3 = getpid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x2, 0x80000000, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, r3, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b0113", 0x4d}], 0x1, 0x0, 0x0, 0x6}, 0x0) 1.59610241s ago: executing program 0 (id=7305): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x5, 0x40, 0x9, 0x0, 0x7, 0x8002, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0xf}, 0x2000, 0x0, 0xe6d, 0x2, 0x3, 0x1, 0x2, 0x0, 0xfffff1a0, 0x0, 0x7}, 0xffffffffffffffff, 0xb, r0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)) 1.420621644s ago: executing program 3 (id=7307): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x7, 0x10, 0x0, &(0x7f0000000400)="ecbe44cae6eca0f0979b1553cdf0e4d5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 1.418506574s ago: executing program 1 (id=7316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x87}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x4}, 0x2002) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, r5, 0x7fff, '\x00', 0x0, r6, 0x1, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x0, 0xac, &(0x7f0000000a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r10 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r12, 0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={r5, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, r4, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x23, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x91}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @generic={0x5, 0x0, 0x3, 0x9, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x5}, @ldst={0x2, 0x2, 0x3, 0xb, 0x4, 0x50, 0x7fffffffffffffea}, @call={0x85, 0x0, 0x0, 0xc0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x7b56, 0x0, 0x0, 0x41100, 0x50, '\x00', r9, 0x0, r12, 0x8, &(0x7f0000000c40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0x3, 0xfffffff9, 0x1633}, 0x10, 0xd, 0xffffffffffffffff, 0x0, &(0x7f0000000e00)=[r13, r5, r14, r15, r5], 0x0, 0x10, 0x6}, 0x94) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 1.362106616s ago: executing program 0 (id=7309): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r3) write$cgroup_int(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 1.17978628s ago: executing program 2 (id=7310): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2d, 'cpuset'}]}, 0x8) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r7, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x17, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5beceba51b92e0ba50f4ac", 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r8, 0x7, 0xffffffffffffffff, 0x1) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r9, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000440)=r10) 1.117090382s ago: executing program 0 (id=7311): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0xd6001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 1.065235873s ago: executing program 3 (id=7312): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0205000004000000080000000100ab0880000001df82ebbf20d57d07b54ac9e2b87fb382cb57b45a0403d4ab572a00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xc73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x104010, 0x1, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000"], 0x0, 0x4c}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8941, &(0x7f0000000080)) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0x12, &(0x7f00000003c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x2, 0x3, 0x5, 0x2, 0xfffffffffffffffc}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @generic={0x9, 0xd, 0x5, 0x8ee, 0x6}], &(0x7f0000000580)='syzkaller\x00', 0x401, 0xf0, &(0x7f00000009c0)=""/240, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000ac0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0x3, 0x6, 0xffffffff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000bc0)=[r0, r0], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000d00)={r5, r6, 0x0, r1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x9, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xffffffffffffff74, 0x8000000000000001}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x800000, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="93443f14c10900c600c2000020991d5f334d0b16bd0000004014414fe4b2c9b011db00320ef76ca8b490a3de4374678be8cafd436ce81560dad25ff0e1f0954010b5b644ebd5100357bd948935c77bc65b7d4aba5cb64af6cc56"], &(0x7f00000002c0)='GPL\x00', 0xe, 0xa9, &(0x7f0000000300)=""/169, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], &(0x7f00000007c0), 0x10, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xac6, '\x00', 0x0, r2, 0x5, 0x2}, 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x4, 0x2020, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001040)={@map, 0xffffffffffffffff, 0x1d, 0x2000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r1, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000d40), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) 1.038178584s ago: executing program 2 (id=7313): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x845) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.008221625s ago: executing program 0 (id=7314): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x17, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5beceba51b92e0ba50f4ac", 0x0, 0xa7, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 728.842531ms ago: executing program 0 (id=7315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xa, &(0x7f0000000580)=r3, 0x49) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0xffffffff, 0x8}, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e80)={0x11, 0xc, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c4803e2, 0x0, 0x0, 0x0, 0x57f}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @generic={0x45, 0x4, 0x4, 0xfff, 0x10}, @ldst={0x0, 0x0, 0x2, 0x7, 0x2, 0xffffffffffffffff, 0x8}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0x28, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000002dc0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002e00)=[r4], &(0x7f0000002e40)=[{0x4, 0x1, 0x8, 0x4}, {0x3, 0x3, 0x0, 0x4}, {0x0, 0x3, 0x9}, {0x5, 0x1, 0xb, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000740)='GPL\x00', 0xe1d, 0x51, &(0x7f0000001040)=""/81, 0x40f00, 0x50, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000880)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6], &(0x7f0000000b40)=[{0x2, 0x3, 0x0, 0x8}], 0x10, 0x7fff}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x0, 0x28}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r10}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xe, 0x14, &(0x7f00000008c0)="7a09000000ff88df53ef32ace13c", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x61, 0x30]}}, 0x0, 0x2c, 0x0, 0x0, 0x40}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080403000000f70002a1180002000607002603600e12080b0f0000810401a800160520000140020000082f3d4e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9851627504575107ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100001340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff00e0b42a9ecbee5de6ccd40dd6e4edef5d2defd5cc9b8d3fb7c27a1059ae31c60e", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 713.668972ms ago: executing program 2 (id=7317): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000080)=0xd0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x61, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xf3, 0x120, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c077212", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50) 662.783723ms ago: executing program 3 (id=7318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000024f8b02ae600"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd0e}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x1a, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2286}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='GPL\x00', 0xbc, 0x9a, &(0x7f00000010c0)=""/154, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="030000001a0000002b666c80e86aaf1569b87bfd3e727b4e14ca6ed29fda5bb04761dcea0377b395f5da56eb21819f545375f5cc629ab6744d58939d9b6f465d3ab5c64a609ea4b4be3cedfaea072ff145b89705", @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x20000000}, 0xffffffffffffffb4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x6}, 0x108786, 0x200005, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="ffa7dd3cff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000731135000000000007000000000000008500000005000000af000000000000009500a505000000008afd2048747973"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYBLOB="0000000000000000b702000014000000b7030053b07038008500000083000000bf09000000000000550901000000000002000000"], 0x0, 0xbe50, 0xcf, &(0x7f00000005c0)=""/207, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xd, 0xfff, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x75d}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup, r8, 0x7, 0x2, 0xffffffffffffffff, @void, @value=r9}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000e0000000000000000000000018110000808dc859", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000b8000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 585.042675ms ago: executing program 2 (id=7319): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e37040001", 0x27}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbea725e905d6b73f9b14a90b3b32f7", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 426.181669ms ago: executing program 1 (id=7320): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000540)="a1d075ca178dccbbbbc532eb655fe8b05f86cc01bfe557b7de", 0x19}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="30000000000000000000000007000000831bbfe0000001ac1e0101ac1414aaac1414bbac1414aae000000101010000001400000000000000000000000100000006000000000000006c00000000000000000000000700000000831fc90a010101ac1e0101ac1e0001ac1e0101e0000002ac1414bbac1414aa830d0092b8961f35dee3c7ce05008923ae0000000000000002ac1414aaac14143e00000000ac1414bb64010102000000009407d592a9e77500010000000000001400000000000000000000000100000008e80000000000001100000000000000000000000100000001000000000000001400000000000000000000000200000005000000000000005c000000000000000000000007000000862100000001070ebe5db11890c70bcb0cb1430e050dbafbfe5a68b667fc7349b094040100862700000003010c95d9b676773ab7bc91bc050b116b514c7921da9deb00055b412c07055f63df000000006c00000000000000000000000700000001891390ac1e0001e00000020a010101e0000002890f92ffffffff64010101ac14142a4408d9f0000000074418abf00000000300000014fffffffc000000090000008144147800000000030000000d00000009000001009404000000000000001c0000000000dbbf6cae7c3756ea6c47", @ANYRES32=0x0, @ANYBLOB="00000000ac14143f00000000110000000000000000000000010000000500000000000000"], 0x208}, 0x800) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000f6070000050000000800000000007d938603cf7f75bff09f7766f3f98f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000000000000000000000fb018000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000020000000000000000", @ANYRES32=r2, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x800000}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f44c0fffcffffff954000000000000003a005000100000085100000f8ffffff"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x66, 0x101, 0x6}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) r7 = socket$kcm(0x29, 0x2, 0x0) close(r7) r8 = socket$kcm(0x2b, 0xfd27eaa9e8b7d79b, 0x0) close(r8) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, 0x0, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@cgroup=r6, 0x14, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0]}, 0x40) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000000000)={'vlan1\x00', @random}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xaf, 0xf4, 0x3, 0x8, 0x0, 0xc, 0x10000, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x118, 0x3, 0x4, 0x7, 0x4, 0x5, 0xd, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0xb, r6, 0x1) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x0) 426.041549ms ago: executing program 2 (id=7321): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x7, 0x10, 0x0, &(0x7f0000000400)="ecbe44cae6eca0f0979b1553cdf0e4d5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 261.827583ms ago: executing program 3 (id=7322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000007001000040000002100000001000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000007f00000400"/28], 0x50) socket$kcm(0xa, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x50, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000003c0), 0x1bf1, r5}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000000000001833000001000000000000000000000085100000fdffffff950000000000000018170000", @ANYRES32=r6, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r9, @cgroup_sysctl=0x12, r6, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0xffffffffffffffff, r4, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb, 0xa}, {0x1, 0x2, 0xb, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x9c, 0x91, 0x4, 0xff, 0x0, 0x1, 0x10, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x7f}, 0xc, 0x4, 0x9, 0x7, 0x53, 0x10, 0x3, 0x0, 0xff, 0x0, 0x8}, r6, 0x7, r6, 0xb) 168.414515ms ago: executing program 2 (id=7323): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0xd6001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 0s ago: executing program 1 (id=7324): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) socket$kcm(0x22, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff0000207da65ebce74075feb6570000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x4, r6, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc820d5b7b980000a6020000f8ffffffb700000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10}, &(0x7f0000000340), &(0x7f0000000380)=r11}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x200}) kernel console output (not intermixed with test programs): 1002.009938][T23889] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1002.390204][T23903] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1003.607207][T23926] netlink: 'syz.1.6371': attribute type 2 has an invalid length. [ 1003.657271][T23926] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1003.739255][T23924] pim6reg1: entered promiscuous mode [ 1003.770316][T23924] pim6reg1: entered allmulticast mode [ 1004.263834][T23937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6376'. [ 1006.836115][T23961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1007.788235][T23982] netlink: 'syz.2.6389': attribute type 2 has an invalid length. [ 1007.877299][T23982] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6389'. [ 1007.950191][T23988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6396'. [ 1008.656020][T23999] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6393'. [ 1008.799010][T23999] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1009.027065][T24005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6402'. [ 1009.108324][T24004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6394'. [ 1009.715530][T24015] sock: sock_timestamping_bind_phc: sock not bind to device [ 1009.784398][T24015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1010.243370][T24023] netlink: 'syz.1.6400': attribute type 10 has an invalid length. [ 1011.095416][T24037] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6406'. [ 1011.345539][T24043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6407'. [ 1011.402097][T24037] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1011.633539][T24041] netlink: 'syz.3.6405': attribute type 2 has an invalid length. [ 1011.650302][T24041] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6405'. [ 1011.853300][T24052] netlink: 'syz.1.6409': attribute type 1 has an invalid length. [ 1011.862694][T24052] __nla_validate_parse: 2 callbacks suppressed [ 1011.862894][T24052] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1012.128409][T24064] sock: sock_timestamping_bind_phc: sock not bind to device [ 1012.145044][T24064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6412'. [ 1012.923778][T24077] netlink: 'syz.0.6415': attribute type 46 has an invalid length. [ 1016.100017][T24095] netlink: 'syz.3.6422': attribute type 9 has an invalid length. [ 1016.112033][T24095] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6422'. [ 1016.143026][T24099] netlink: 'syz.0.6424': attribute type 10 has an invalid length. [ 1016.942539][T24117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1017.237584][T24129] netlink: 'syz.2.6430': attribute type 46 has an invalid length. [ 1019.670838][T24144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6436'. [ 1021.050492][T24151] netlink: 'syz.1.6437': attribute type 9 has an invalid length. [ 1021.060451][T24151] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6437'. [ 1021.337005][T24163] netlink: 'syz.2.6442': attribute type 9 has an invalid length. [ 1021.348819][T24163] netlink: 399 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1021.405903][T24166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6441'. [ 1021.722903][T24175] netlink: 'syz.1.6445': attribute type 9 has an invalid length. [ 1021.744773][T24175] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1021.999485][T24178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6446'. [ 1022.859522][T24205] netlink: 'syz.0.6454': attribute type 9 has an invalid length. [ 1022.868390][T24205] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6454'. [ 1023.068944][T24208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6455'. [ 1023.517197][T24218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6459'. [ 1026.711354][T24240] veth1_to_bond: entered allmulticast mode [ 1026.841023][T24242] netlink: 'syz.3.6466': attribute type 39 has an invalid length. [ 1026.848944][T24242] macvlan0: entered promiscuous mode [ 1026.881360][T24242] macvlan0: entered allmulticast mode [ 1026.886855][T24242] veth1_vlan: entered allmulticast mode [ 1026.962528][T24244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6468'. [ 1027.028781][T24250] FAULT_INJECTION: forcing a failure. [ 1027.028781][T24250] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.056258][T24250] CPU: 0 PID: 24250 Comm: syz.2.6470 Not tainted syzkaller #0 [ 1027.063811][T24250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1027.073919][T24250] Call Trace: [ 1027.077295][T24250] [ 1027.080270][T24250] dump_stack_lvl+0x18c/0x250 [ 1027.085014][T24250] ? show_regs_print_info+0x20/0x20 [ 1027.090284][T24250] ? load_image+0x420/0x420 [ 1027.094857][T24250] ? __might_sleep+0xe0/0xe0 [ 1027.099503][T24250] ? __lock_acquire+0x7d80/0x7d80 [ 1027.104586][T24250] should_fail_ex+0x394/0x4c0 [ 1027.109322][T24250] should_failslab+0x9/0x20 [ 1027.113883][T24250] slab_pre_alloc_hook+0x59/0x300 [ 1027.118973][T24250] ? __lock_acquire+0x7d80/0x7d80 [ 1027.124069][T24250] kmem_cache_alloc_node+0x5e/0x310 [ 1027.129322][T24250] ? __alloc_skb+0x103/0x2c0 [ 1027.133970][T24250] __alloc_skb+0x103/0x2c0 [ 1027.138446][T24250] netlink_sendmsg+0x66a/0xbf0 [ 1027.143269][T24250] ? netlink_getsockopt+0x590/0x590 [ 1027.148524][T24250] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1027.154130][T24250] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1027.159479][T24250] ? security_socket_sendmsg+0x80/0xa0 [ 1027.164995][T24250] ? netlink_getsockopt+0x590/0x590 [ 1027.170255][T24250] ____sys_sendmsg+0x61b/0x980 [ 1027.175069][T24250] ? __asan_memset+0x22/0x40 [ 1027.179701][T24250] ? __sys_sendmsg_sock+0x30/0x30 [ 1027.184752][T24250] ? __import_iovec+0x5f2/0x850 [ 1027.189645][T24250] ? import_iovec+0x73/0xa0 [ 1027.194189][T24250] ___sys_sendmsg+0x2a6/0x360 [ 1027.198895][T24250] ? get_pid_task+0x20/0x1e0 [ 1027.203528][T24250] ? __sys_sendmsg+0x2b0/0x2b0 [ 1027.208339][T24250] ? __lock_acquire+0x7d80/0x7d80 [ 1027.213418][T24250] __se_sys_sendmsg+0x1d0/0x2c0 [ 1027.218307][T24250] ? perf_trace_preemptirq_template+0x269/0x330 [ 1027.224582][T24250] ? __x64_sys_sendmsg+0x80/0x80 [ 1027.229554][T24250] ? lockdep_hardirqs_on+0x98/0x150 [ 1027.234793][T24250] do_syscall_64+0x55/0xb0 [ 1027.239257][T24250] ? clear_bhb_loop+0x40/0x90 [ 1027.243974][T24250] ? clear_bhb_loop+0x40/0x90 [ 1027.248686][T24250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1027.254604][T24250] RIP: 0033:0x7f597539de99 [ 1027.259045][T24250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.278686][T24250] RSP: 002b:00007f59761f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.287126][T24250] RAX: ffffffffffffffda RBX: 00007f5975625fa0 RCX: 00007f597539de99 [ 1027.295118][T24250] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 1027.303114][T24250] RBP: 00007f59761f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.311110][T24250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.319108][T24250] R13: 00007f5975626038 R14: 00007f5975625fa0 R15: 00007ffc25fea8d8 [ 1027.327116][T24250] [ 1027.493697][T24260] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1027.811133][T24270] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.6477'. [ 1027.897040][T24275] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6478'. [ 1027.921019][T24275] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1028.326286][T24292] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1028.651613][T24307] netlink: 'syz.2.6490': attribute type 3 has an invalid length. [ 1028.659576][T24307] netlink: 'syz.2.6490': attribute type 4 has an invalid length. [ 1028.667891][T24307] netlink: 'syz.2.6490': attribute type 7 has an invalid length. [ 1028.676638][T24307] netlink: 'syz.2.6490': attribute type 8 has an invalid length. [ 1028.685178][T24307] netlink: 'syz.2.6490': attribute type 7 has an invalid length. [ 1028.693441][T24307] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.6490'. [ 1029.313811][T24323] FAULT_INJECTION: forcing a failure. [ 1029.313811][T24323] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.330978][T24323] CPU: 0 PID: 24323 Comm: syz.3.6495 Not tainted syzkaller #0 [ 1029.338546][T24323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1029.348648][T24323] Call Trace: [ 1029.351973][T24323] [ 1029.354954][T24323] dump_stack_lvl+0x18c/0x250 [ 1029.359692][T24323] ? show_regs_print_info+0x20/0x20 [ 1029.364946][T24323] ? load_image+0x420/0x420 [ 1029.369510][T24323] ? __might_sleep+0xe0/0xe0 [ 1029.374153][T24323] ? __lock_acquire+0x7d80/0x7d80 [ 1029.379236][T24323] should_fail_ex+0x394/0x4c0 [ 1029.383984][T24323] should_failslab+0x9/0x20 [ 1029.388540][T24323] slab_pre_alloc_hook+0x59/0x300 [ 1029.393637][T24323] ? __get_vm_area_node+0x125/0x370 [ 1029.398897][T24323] __kmem_cache_alloc_node+0x53/0x250 [ 1029.404339][T24323] ? __get_vm_area_node+0x125/0x370 [ 1029.409673][T24323] kmalloc_node_trace+0x26/0xe0 [ 1029.414597][T24323] __get_vm_area_node+0x125/0x370 [ 1029.419712][T24323] __vmalloc_node_range+0x36f/0x1320 [ 1029.425053][T24323] ? netlink_sendmsg+0x602/0xbf0 [ 1029.430081][T24323] ? netlink_insert+0x1094/0x1390 [ 1029.435202][T24323] ? netlink_insert+0x2ba/0x1390 [ 1029.440225][T24323] ? free_vm_area+0x50/0x50 [ 1029.444812][T24323] ? netlink_sendmsg+0x602/0xbf0 [ 1029.449824][T24323] vmalloc+0x79/0x90 [ 1029.453800][T24323] ? netlink_sendmsg+0x602/0xbf0 [ 1029.458829][T24323] netlink_sendmsg+0x602/0xbf0 [ 1029.463699][T24323] ? netlink_getsockopt+0x590/0x590 [ 1029.468954][T24323] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1029.474549][T24323] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1029.479876][T24323] ? security_socket_sendmsg+0x80/0xa0 [ 1029.485395][T24323] ? netlink_getsockopt+0x590/0x590 [ 1029.490662][T24323] ____sys_sendmsg+0x61b/0x980 [ 1029.495508][T24323] ? __asan_memset+0x22/0x40 [ 1029.500157][T24323] ? __sys_sendmsg_sock+0x30/0x30 [ 1029.505236][T24323] ? __import_iovec+0x5f2/0x850 [ 1029.510163][T24323] ? import_iovec+0x73/0xa0 [ 1029.514736][T24323] ___sys_sendmsg+0x2a6/0x360 [ 1029.519485][T24323] ? __sys_sendmsg+0x2b0/0x2b0 [ 1029.524357][T24323] ? __lock_acquire+0x7d80/0x7d80 [ 1029.529495][T24323] __se_sys_sendmsg+0x1d0/0x2c0 [ 1029.534406][T24323] ? __x64_sys_sendmsg+0x80/0x80 [ 1029.539434][T24323] ? lockdep_hardirqs_on+0x98/0x150 [ 1029.544691][T24323] do_syscall_64+0x55/0xb0 [ 1029.549151][T24323] ? clear_bhb_loop+0x40/0x90 [ 1029.553870][T24323] ? clear_bhb_loop+0x40/0x90 [ 1029.558591][T24323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.564533][T24323] RIP: 0033:0x7fefa879de99 [ 1029.568990][T24323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.588728][T24323] RSP: 002b:00007fefa96ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.597211][T24323] RAX: ffffffffffffffda RBX: 00007fefa8a25fa0 RCX: 00007fefa879de99 [ 1029.605243][T24323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1029.613257][T24323] RBP: 00007fefa96ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.621273][T24323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.629282][T24323] R13: 00007fefa8a26038 R14: 00007fefa8a25fa0 R15: 00007ffdd54f69e8 [ 1029.637341][T24323] [ 1029.652546][T24323] syz.3.6495: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1029.679482][T24323] CPU: 1 PID: 24323 Comm: syz.3.6495 Not tainted syzkaller #0 [ 1029.687151][T24323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1029.697229][T24323] Call Trace: [ 1029.700559][T24323] [ 1029.703517][T24323] dump_stack_lvl+0x18c/0x250 [ 1029.708225][T24323] ? show_regs_print_info+0x20/0x20 [ 1029.713454][T24323] ? load_image+0x420/0x420 [ 1029.718001][T24323] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1029.724448][T24323] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1029.730979][T24323] warn_alloc+0x246/0x340 [ 1029.735341][T24323] ? zone_watermark_ok_safe+0x230/0x230 [ 1029.740930][T24323] ? __get_vm_area_node+0x356/0x370 [ 1029.746167][T24323] __vmalloc_node_range+0x394/0x1320 [ 1029.751483][T24323] ? netlink_insert+0x1094/0x1390 [ 1029.756551][T24323] ? netlink_insert+0x2ba/0x1390 [ 1029.761528][T24323] ? free_vm_area+0x50/0x50 [ 1029.766069][T24323] ? netlink_sendmsg+0x602/0xbf0 [ 1029.771122][T24323] vmalloc+0x79/0x90 [ 1029.775049][T24323] ? netlink_sendmsg+0x602/0xbf0 [ 1029.780024][T24323] netlink_sendmsg+0x602/0xbf0 [ 1029.784826][T24323] ? netlink_getsockopt+0x590/0x590 [ 1029.790045][T24323] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1029.795618][T24323] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1029.800930][T24323] ? security_socket_sendmsg+0x80/0xa0 [ 1029.806423][T24323] ? netlink_getsockopt+0x590/0x590 [ 1029.811660][T24323] ____sys_sendmsg+0x61b/0x980 [ 1029.816469][T24323] ? __asan_memset+0x22/0x40 [ 1029.821094][T24323] ? __sys_sendmsg_sock+0x30/0x30 [ 1029.826171][T24323] ? __import_iovec+0x5f2/0x850 [ 1029.831081][T24323] ? import_iovec+0x73/0xa0 [ 1029.835619][T24323] ___sys_sendmsg+0x2a6/0x360 [ 1029.840334][T24323] ? __sys_sendmsg+0x2b0/0x2b0 [ 1029.845130][T24323] ? __lock_acquire+0x7d80/0x7d80 [ 1029.850195][T24323] __se_sys_sendmsg+0x1d0/0x2c0 [ 1029.855080][T24323] ? __x64_sys_sendmsg+0x80/0x80 [ 1029.860056][T24323] ? lockdep_hardirqs_on+0x98/0x150 [ 1029.865284][T24323] do_syscall_64+0x55/0xb0 [ 1029.869726][T24323] ? clear_bhb_loop+0x40/0x90 [ 1029.874430][T24323] ? clear_bhb_loop+0x40/0x90 [ 1029.879138][T24323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.885059][T24323] RIP: 0033:0x7fefa879de99 [ 1029.889498][T24323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.909132][T24323] RSP: 002b:00007fefa96ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.917716][T24323] RAX: ffffffffffffffda RBX: 00007fefa8a25fa0 RCX: 00007fefa879de99 [ 1029.925717][T24323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1029.933708][T24323] RBP: 00007fefa96ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.941717][T24323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.949709][T24323] R13: 00007fefa8a26038 R14: 00007fefa8a25fa0 R15: 00007ffdd54f69e8 [ 1029.957732][T24323] [ 1029.974562][T24323] Mem-Info: [ 1029.977834][T24323] active_anon:8473 inactive_anon:0 isolated_anon:0 [ 1029.977834][T24323] active_file:19005 inactive_file:40329 isolated_file:0 [ 1029.977834][T24323] unevictable:768 dirty:639 writeback:0 [ 1029.977834][T24323] slab_reclaimable:10707 slab_unreclaimable:98024 [ 1029.977834][T24323] mapped:24876 shmem:1361 pagetables:478 [ 1029.977834][T24323] sec_pagetables:0 bounce:0 [ 1029.977834][T24323] kernel_misc_reclaimable:0 [ 1029.977834][T24323] free:1340933 free_pcp:8044 free_cma:0 [ 1030.035480][T24323] Node 0 active_anon:33992kB inactive_anon:0kB active_file:76020kB inactive_file:161116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99504kB dirty:2556kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10440kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no [ 1030.076514][T24326] netlink: 'syz.2.6497': attribute type 3 has an invalid length. [ 1030.077100][T24323] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1030.115236][T24326] netlink: 'syz.2.6497': attribute type 4 has an invalid length. [ 1030.124860][T24323] Node 0 [ 1030.124928][T24326] netlink: 'syz.2.6497': attribute type 7 has an invalid length. [ 1030.138207][T24326] netlink: 'syz.2.6497': attribute type 8 has an invalid length. [ 1030.138204][T24323] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1030.171123][T24326] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.6497'. [ 1030.174964][T24323] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1030.188263][T24323] Node 0 DMA32 free:1456636kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34076kB inactive_anon:0kB active_file:76020kB inactive_file:160292kB unevictable:1536kB writepending:2560kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:11296kB local_pcp:800kB free_cma:0kB [ 1030.224610][T24323] lowmem_reserve[]: 0 0 0 0 0 [ 1030.229560][T24323] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1030.270723][T24323] lowmem_reserve[]: 0 0 0 0 0 [ 1030.275682][T24323] Node 1 Normal free:3891236kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20800kB local_pcp:13344kB free_cma:0kB [ 1030.317497][T24323] lowmem_reserve[]: 0 0 0 0 0 [ 1030.324906][T24323] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1030.353491][T24323] Node 0 DMA32: 2579*4kB (UME) 2130*8kB (UME) 1381*16kB (UME) 807*32kB (UME) 1642*64kB (UME) 921*128kB (UME) 258*256kB (UME) 69*512kB (UME) 22*1024kB (UME) 15*2048kB (UME) 245*4096kB (M) = 1456396kB [ 1030.386434][T24323] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1030.398338][T24323] Node 1 Normal: 239*4kB (UME) 59*8kB (UME) 31*16kB (UME) 47*32kB (UME) 17*64kB (UE) 3*128kB (UME) 1*256kB (U) 2*512kB (ME) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3891236kB [ 1030.430746][T24323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.448490][T24323] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1030.470732][T24323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1030.480340][T24323] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1030.505507][T24323] 60695 total pagecache pages [ 1030.510285][T24323] 0 pages in swap cache [ 1030.525823][T24323] Free swap = 124996kB [ 1030.534756][T24323] Total swap = 124996kB [ 1030.540189][T24334] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1030.544151][T24323] 2097051 pages RAM [ 1030.564618][T24323] 0 pages HighMem/MovableOnly [ 1030.569398][T24323] 416955 pages reserved [ 1030.590930][T24323] 0 pages cma reserved [ 1030.948666][T14703] Bluetooth: hci0: ISO packet for unknown connection handle 8 [ 1031.306747][T24359] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1031.326404][T24359] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 1031.660689][T24371] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1031.729348][T24375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1032.064001][T24378] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1032.462252][T24381] validate_nla: 4 callbacks suppressed [ 1032.462292][T24381] netlink: 'syz.0.6515': attribute type 3 has an invalid length. [ 1032.491763][T24381] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6515'. [ 1033.175962][T24415] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6528'. [ 1033.201769][T24415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.238871][T24416] C: renamed from team_slave_0 [ 1033.295166][T24416] netlink: 'syz.2.6526': attribute type 4 has an invalid length. [ 1033.321716][T24416] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6526'. [ 1033.357816][T24416] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1034.219152][T24450] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 1034.232404][T24450] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 1034.302216][T24458] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 1034.309770][T24458] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 1034.964951][T24474] netlink: 'syz.2.6546': attribute type 2 has an invalid length. [ 1034.981823][T24474] netlink: 'syz.2.6546': attribute type 8 has an invalid length. [ 1034.990072][T24474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1035.189210][T24475] C: renamed from team_slave_0 [ 1035.240772][T24475] netlink: 'syz.3.6547': attribute type 4 has an invalid length. [ 1035.262740][T24475] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6547'. [ 1035.273227][T24475] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1035.873255][T24502] netlink: 'syz.0.6557': attribute type 2 has an invalid length. [ 1035.891396][T24502] netlink: 'syz.0.6557': attribute type 8 has an invalid length. [ 1035.902626][T24502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6557'. [ 1035.918396][T24509] netlink: 'syz.1.6566': attribute type 1 has an invalid length. [ 1035.926653][T24509] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6566'. [ 1036.209327][T24514] netlink: 'syz.3.6561': attribute type 10 has an invalid length. [ 1036.422357][T24531] C: renamed from team_slave_0 [ 1036.435628][T24531] netlink: 'syz.1.6567': attribute type 4 has an invalid length. [ 1036.445665][T24531] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6567'. [ 1036.454927][T24531] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1036.477647][T24534] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.6569'. [ 1036.820771][T24551] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1037.458666][T24574] mac80211_hwsim hwsim32 wlan0: left promiscuous mode [ 1037.468742][T24574] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 1037.505323][T24577] netlink: 'syz.0.6583': attribute type 2 has an invalid length. [ 1037.514176][T24577] netlink: 119 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1037.544258][T24582] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 1037.570493][T24582] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 1037.628775][T24585] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1038.290224][T24601] FAULT_INJECTION: forcing a failure. [ 1038.290224][T24601] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.304168][T24601] CPU: 0 PID: 24601 Comm: syz.2.6591 Not tainted syzkaller #0 [ 1038.311712][T24601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1038.321809][T24601] Call Trace: [ 1038.325114][T24601] [ 1038.328070][T24601] dump_stack_lvl+0x18c/0x250 [ 1038.332779][T24601] ? sctp_sendmsg+0x1519/0x27b0 [ 1038.337652][T24601] ? ___sys_sendmsg+0x2a6/0x360 [ 1038.342518][T24601] ? show_regs_print_info+0x20/0x20 [ 1038.347734][T24601] ? load_image+0x420/0x420 [ 1038.352287][T24601] should_fail_ex+0x394/0x4c0 [ 1038.357001][T24601] should_failslab+0x9/0x20 [ 1038.361541][T24601] slab_pre_alloc_hook+0x59/0x300 [ 1038.366627][T24601] ? sctp_add_bind_addr+0x8c/0x360 [ 1038.371774][T24601] __kmem_cache_alloc_node+0x53/0x250 [ 1038.377177][T24601] ? sctp_add_bind_addr+0x8c/0x360 [ 1038.382319][T24601] kmalloc_trace+0x2a/0xe0 [ 1038.386783][T24601] sctp_add_bind_addr+0x8c/0x360 [ 1038.391760][T24601] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1038.397422][T24601] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1038.403177][T24601] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1038.409267][T24601] ? sctp_v4_is_any+0x35/0x60 [ 1038.413963][T24601] ? sctp_copy_one_addr+0x8c/0x350 [ 1038.419094][T24601] sctp_bind_addr_copy+0xb3/0x3c0 [ 1038.424138][T24601] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1038.430500][T24601] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1038.435850][T24601] ? __sctp_connect+0xd80/0xd80 [ 1038.440724][T24601] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1038.446127][T24601] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1038.451699][T24601] ? security_sctp_bind_connect+0x89/0xb0 [ 1038.457449][T24601] sctp_sendmsg+0x1519/0x27b0 [ 1038.462157][T24601] ? sctp_getsockopt+0xb60/0xb60 [ 1038.467113][T24601] ? aa_af_perm+0x330/0x330 [ 1038.471641][T24601] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1038.478098][T24601] ? sock_rps_record_flow+0x19/0x3f0 [ 1038.483404][T24601] ? inet_sendmsg+0xce/0x2a0 [ 1038.488037][T24601] ? inet_send_prepare+0x250/0x250 [ 1038.493193][T24601] ____sys_sendmsg+0x61b/0x980 [ 1038.497976][T24601] ? __asan_memset+0x22/0x40 [ 1038.502587][T24601] ? __sys_sendmsg_sock+0x30/0x30 [ 1038.507621][T24601] ? __import_iovec+0x5f2/0x850 [ 1038.512498][T24601] ? import_iovec+0x73/0xa0 [ 1038.517040][T24601] ___sys_sendmsg+0x2a6/0x360 [ 1038.521737][T24601] ? __sys_sendmsg+0x2b0/0x2b0 [ 1038.526551][T24601] ? __lock_acquire+0x7d80/0x7d80 [ 1038.531619][T24601] __se_sys_sendmsg+0x1d0/0x2c0 [ 1038.536497][T24601] ? perf_trace_preemptirq_template+0x269/0x330 [ 1038.542765][T24601] ? __x64_sys_sendmsg+0x80/0x80 [ 1038.547844][T24601] ? lockdep_hardirqs_on+0x98/0x150 [ 1038.553065][T24601] do_syscall_64+0x55/0xb0 [ 1038.557506][T24601] ? clear_bhb_loop+0x40/0x90 [ 1038.562199][T24601] ? clear_bhb_loop+0x40/0x90 [ 1038.566922][T24601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1038.572828][T24601] RIP: 0033:0x7f597539de99 [ 1038.577270][T24601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.596891][T24601] RSP: 002b:00007f59761f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.605322][T24601] RAX: ffffffffffffffda RBX: 00007f5975625fa0 RCX: 00007f597539de99 [ 1038.613313][T24601] RDX: 0000000004040001 RSI: 00002000000024c0 RDI: 0000000000000004 [ 1038.621388][T24601] RBP: 00007f59761f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.629388][T24601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1038.637508][T24601] R13: 00007f5975626038 R14: 00007f5975625fa0 R15: 00007ffc25fea8d8 [ 1038.645508][T24601] [ 1038.677500][T24604] netlink: 826 bytes leftover after parsing attributes in process `syz.1.6592'. [ 1038.861444][T24612] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1039.285830][T24635] netlink: 'syz.0.6602': attribute type 10 has an invalid length. [ 1039.419814][T24641] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1039.648322][T24650] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6610'. [ 1039.753025][T24656] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1039.773404][T24656] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1039.783461][T24656] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1039.836249][T24658] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6612'. [ 1039.883295][T24660] netlink: 'syz.1.6613': attribute type 10 has an invalid length. [ 1039.893853][T24660] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6613'. [ 1040.035659][T24658] IPv6: Can't replace route, no match found [ 1040.125349][T24665] netlink: 'syz.0.6614': attribute type 10 has an invalid length. [ 1040.915839][T24664] delete_channel: no stack [ 1042.722886][T24669] FAULT_INJECTION: forcing a failure. [ 1042.722886][T24669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.736409][T24669] CPU: 0 PID: 24669 Comm: syz.0.6615 Not tainted syzkaller #0 [ 1042.743911][T24669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1042.753997][T24669] Call Trace: [ 1042.757299][T24669] [ 1042.760250][T24669] dump_stack_lvl+0x18c/0x250 [ 1042.764976][T24669] ? show_regs_print_info+0x20/0x20 [ 1042.770205][T24669] ? load_image+0x420/0x420 [ 1042.774756][T24669] ? __might_fault+0xaa/0x120 [ 1042.779479][T24669] ? __lock_acquire+0x7d80/0x7d80 [ 1042.784550][T24669] should_fail_ex+0x394/0x4c0 [ 1042.789275][T24669] _copy_from_user+0x2f/0xe0 [ 1042.793899][T24669] __sys_bpf+0x23e/0x890 [ 1042.798180][T24669] ? bpf_link_show_fdinfo+0x390/0x390 [ 1042.803612][T24669] ? lock_chain_count+0x20/0x20 [ 1042.808511][T24669] __x64_sys_bpf+0x7c/0x90 [ 1042.812956][T24669] do_syscall_64+0x55/0xb0 [ 1042.817396][T24669] ? clear_bhb_loop+0x40/0x90 [ 1042.822092][T24669] ? clear_bhb_loop+0x40/0x90 [ 1042.826802][T24669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.832722][T24669] RIP: 0033:0x7f4011d9de99 [ 1042.837153][T24669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.856776][T24669] RSP: 002b:00007f4012bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.865208][T24669] RAX: ffffffffffffffda RBX: 00007f4012025fa0 RCX: 00007f4011d9de99 [ 1042.873201][T24669] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 0000000000000000 [ 1042.881204][T24669] RBP: 00007f4012bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.889212][T24669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.897221][T24669] R13: 00007f4012026038 R14: 00007f4012025fa0 R15: 00007ffdacecb588 [ 1042.905234][T24669] [ 1043.026517][T24674] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1043.497811][T24695] FAULT_INJECTION: forcing a failure. [ 1043.497811][T24695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.528289][T24695] CPU: 0 PID: 24695 Comm: syz.3.6622 Not tainted syzkaller #0 [ 1043.535820][T24695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1043.545901][T24695] Call Trace: [ 1043.549203][T24695] [ 1043.552182][T24695] dump_stack_lvl+0x18c/0x250 [ 1043.556895][T24695] ? show_regs_print_info+0x20/0x20 [ 1043.562129][T24695] ? load_image+0x420/0x420 [ 1043.564960][T24697] netlink: 'syz.1.6623': attribute type 1 has an invalid length. [ 1043.566665][T24695] ? __might_fault+0xaa/0x120 [ 1043.579105][T24695] ? __lock_acquire+0x7d80/0x7d80 [ 1043.584160][T24695] ? __might_fault+0xaa/0x120 [ 1043.588868][T24695] should_fail_ex+0x394/0x4c0 [ 1043.593581][T24695] _copy_from_iter+0x1cd/0x1290 [ 1043.598464][T24695] ? __might_fault+0xaa/0x120 [ 1043.603180][T24695] ? copyout_mc+0x70/0x70 [ 1043.607541][T24695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1043.613718][T24695] ? copyout_mc+0x70/0x70 [ 1043.618065][T24695] ? page_copy_sane+0x16a/0x270 [ 1043.622935][T24695] copy_page_from_iter+0x7b/0x100 [ 1043.627975][T24695] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1043.633822][T24695] tun_get_user+0xc84/0x3d70 [ 1043.638441][T24695] ? aa_file_perm+0x3e3/0xee0 [ 1043.643133][T24695] ? rcu_read_unlock+0xa0/0xa0 [ 1043.647921][T24695] ? tun_get+0x1c/0x2e0 [ 1043.652094][T24695] ? __lock_acquire+0x7d80/0x7d80 [ 1043.657134][T24695] ? tun_get+0x1c/0x2e0 [ 1043.661314][T24695] tun_chr_write_iter+0x119/0x200 [ 1043.666359][T24695] vfs_write+0x474/0x9a0 [ 1043.670641][T24695] ? file_end_write+0x250/0x250 [ 1043.675524][T24695] ? __fget_files+0x3fc/0x460 [ 1043.680228][T24695] ? __fdget_pos+0x1d8/0x330 [ 1043.684843][T24695] ? ksys_write+0x74/0x260 [ 1043.689276][T24695] ksys_write+0x151/0x260 [ 1043.693628][T24695] ? __ia32_sys_read+0x90/0x90 [ 1043.698421][T24695] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1043.704335][T24695] do_syscall_64+0x55/0xb0 [ 1043.708761][T24695] ? clear_bhb_loop+0x40/0x90 [ 1043.713467][T24695] ? clear_bhb_loop+0x40/0x90 [ 1043.718173][T24695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.724105][T24695] RIP: 0033:0x7fefa879de99 [ 1043.728534][T24695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.748159][T24695] RSP: 002b:00007fefa96ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1043.756587][T24695] RAX: ffffffffffffffda RBX: 00007fefa8a25fa0 RCX: 00007fefa879de99 [ 1043.764573][T24695] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 1043.772555][T24695] RBP: 00007fefa96ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.780555][T24695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.788542][T24695] R13: 00007fefa8a26038 R14: 00007fefa8a25fa0 R15: 00007ffdd54f69e8 [ 1043.796541][T24695] [ 1043.847020][T24701] netlink: 'syz.2.6625': attribute type 10 has an invalid length. [ 1043.855202][T24701] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6625'. [ 1043.952573][T24705] netlink: 'syz.1.6628': attribute type 8 has an invalid length. [ 1043.980770][T24705] netlink: 'syz.1.6628': attribute type 3 has an invalid length. [ 1043.988600][T24705] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6628'. [ 1044.358080][T24716] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1044.521311][T24727] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6635'. [ 1045.223351][T24753] netlink: 'syz.2.6643': attribute type 9 has an invalid length. [ 1045.237657][T24753] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6643'. [ 1045.282767][T24752] netlink: 'syz.0.6642': attribute type 10 has an invalid length. [ 1045.290934][T24752] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1045.418570][T24757] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1045.963408][T24769] syzkaller0: entered promiscuous mode [ 1045.968999][T24769] syzkaller0: entered allmulticast mode [ 1047.735447][T24792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6655'. [ 1047.781483][T24792] bond0: (slave bond_slave_0): Releasing backup interface [ 1047.817238][T24792] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1048.383499][T24814] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6661'. [ 1048.430400][T24813] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6661'. [ 1049.022696][T24824] netlink: 'syz.0.6664': attribute type 10 has an invalid length. [ 1049.051079][T24824] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6664'. [ 1049.859554][T24848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6671'. [ 1050.031883][T24854] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.6674'. [ 1050.188236][T24860] netlink: 'syz.3.6677': attribute type 29 has an invalid length. [ 1050.207084][T24860] netlink: 'syz.3.6677': attribute type 29 has an invalid length. [ 1050.236321][T24860] netlink: 'syz.3.6677': attribute type 29 has an invalid length. [ 1050.281523][T24859] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1050.688350][T24864] netlink: 'syz.1.6678': attribute type 46 has an invalid length. [ 1050.728928][T24864] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6678'. [ 1051.218106][T24874] netlink: 'syz.2.6681': attribute type 10 has an invalid length. [ 1052.269953][T24892] netlink: 'syz.3.6686': attribute type 8 has an invalid length. [ 1052.300758][T24892] netlink: 'syz.3.6686': attribute type 3 has an invalid length. [ 1052.308584][T24892] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6686'. [ 1052.503962][T24896] netlink: 'syz.1.6688': attribute type 10 has an invalid length. [ 1052.647342][T24903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6687'. [ 1054.689217][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.698860][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.821094][T24938] netlink: 'syz.0.6701': attribute type 17 has an invalid length. [ 1055.850915][T24938] netlink: 'syz.0.6701': attribute type 16 has an invalid length. [ 1055.858823][T24938] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1056.318125][T24949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1057.138086][T24978] FAULT_INJECTION: forcing a failure. [ 1057.138086][T24978] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.153023][T24978] CPU: 0 PID: 24978 Comm: syz.2.6712 Not tainted syzkaller #0 [ 1057.160585][T24978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1057.170687][T24978] Call Trace: [ 1057.174012][T24978] [ 1057.176968][T24978] dump_stack_lvl+0x18c/0x250 [ 1057.181723][T24978] ? show_regs_print_info+0x20/0x20 [ 1057.186948][T24978] ? load_image+0x420/0x420 [ 1057.191503][T24978] ? __might_sleep+0xe0/0xe0 [ 1057.196136][T24978] ? __lock_acquire+0x7d80/0x7d80 [ 1057.201249][T24978] should_fail_ex+0x394/0x4c0 [ 1057.205991][T24978] should_failslab+0x9/0x20 [ 1057.210575][T24978] slab_pre_alloc_hook+0x59/0x300 [ 1057.215664][T24978] ? prepend_path+0x8a7/0x950 [ 1057.220381][T24978] ? tomoyo_encode+0x2ad/0x570 [ 1057.225191][T24978] ? tomoyo_encode+0x2ad/0x570 [ 1057.230024][T24978] __kmem_cache_alloc_node+0x53/0x250 [ 1057.235468][T24978] ? tomoyo_encode+0x2ad/0x570 [ 1057.240267][T24978] __kmalloc+0xa7/0x240 [ 1057.244465][T24978] tomoyo_encode+0x2ad/0x570 [ 1057.249103][T24978] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1057.254794][T24978] ? tomoyo_domain+0xd6/0x120 [ 1057.259558][T24978] tomoyo_path_number_perm+0x248/0x5e0 [ 1057.265062][T24978] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1057.270738][T24978] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1057.276250][T24978] ? ksys_write+0x1d2/0x260 [ 1057.280837][T24978] ? __fget_files+0x28/0x460 [ 1057.285489][T24978] security_file_ioctl+0x70/0xa0 [ 1057.290474][T24978] __se_sys_ioctl+0x48/0x170 [ 1057.295152][T24978] do_syscall_64+0x55/0xb0 [ 1057.299611][T24978] ? clear_bhb_loop+0x40/0x90 [ 1057.304352][T24978] ? clear_bhb_loop+0x40/0x90 [ 1057.309074][T24978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.315012][T24978] RIP: 0033:0x7f597539de99 [ 1057.319455][T24978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.339101][T24978] RSP: 002b:00007f59761f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.347551][T24978] RAX: ffffffffffffffda RBX: 00007f5975625fa0 RCX: 00007f597539de99 [ 1057.355557][T24978] RDX: 0000200000000080 RSI: 00000000401054d5 RDI: 0000000000000003 [ 1057.363557][T24978] RBP: 00007f59761f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.371566][T24978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.379583][T24978] R13: 00007f5975626038 R14: 00007f5975625fa0 R15: 00007ffc25fea8d8 [ 1057.387614][T24978] [ 1057.401235][T24978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1058.057300][T24984] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6713'. [ 1058.083579][T24984] bond0: (slave bond_slave_0): Releasing backup interface [ 1058.147643][T24984] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1059.228173][T25015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6722'. [ 1059.254075][T25019] netlink: 'syz.0.6723': attribute type 10 has an invalid length. [ 1062.934632][T25056] netlink: 'syz.3.6734': attribute type 10 has an invalid length. [ 1062.945428][T25056] veth1_vlan: left allmulticast mode [ 1062.952359][T25056] macvlan0: left promiscuous mode [ 1062.959089][T25056] macvlan0: left allmulticast mode [ 1063.228146][T25070] netlink: 'syz.3.6738': attribute type 9 has an invalid length. [ 1063.271003][T25070] netlink: 399 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1064.215585][T25098] netlink: 'syz.1.6745': attribute type 9 has an invalid length. [ 1064.251100][T25098] netlink: 204476 bytes leftover after parsing attributes in process `syz.1.6745'. [ 1064.356131][T25103] netlink: 'syz.1.6745': attribute type 9 has an invalid length. [ 1064.380109][T25103] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6745'. [ 1065.372499][T25124] FAULT_INJECTION: forcing a failure. [ 1065.372499][T25124] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.394114][T25124] CPU: 1 PID: 25124 Comm: syz.1.6755 Not tainted syzkaller #0 [ 1065.401636][T25124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1065.411777][T25124] Call Trace: [ 1065.415067][T25124] [ 1065.418017][T25124] dump_stack_lvl+0x18c/0x250 [ 1065.422720][T25124] ? show_regs_print_info+0x20/0x20 [ 1065.427947][T25124] ? load_image+0x420/0x420 [ 1065.432474][T25124] ? __might_sleep+0xe0/0xe0 [ 1065.437081][T25124] ? __lock_acquire+0x7d80/0x7d80 [ 1065.442154][T25124] should_fail_ex+0x394/0x4c0 [ 1065.446857][T25124] should_failslab+0x9/0x20 [ 1065.451389][T25124] slab_pre_alloc_hook+0x59/0x300 [ 1065.456439][T25124] ? page_pool_create+0x71/0x5c0 [ 1065.461397][T25124] __kmem_cache_alloc_node+0x53/0x250 [ 1065.466794][T25124] ? page_pool_create+0x71/0x5c0 [ 1065.471781][T25124] kmalloc_node_trace+0x26/0xe0 [ 1065.476658][T25124] page_pool_create+0x71/0x5c0 [ 1065.481443][T25124] bpf_test_run_xdp_live+0x203/0x1b30 [ 1065.486849][T25124] ? 0xffffffffa0004740 [ 1065.491024][T25124] ? 0xffffffffa0004740 [ 1065.495197][T25124] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1065.501113][T25124] ? xdp_convert_md_to_buff+0x330/0x330 [ 1065.506728][T25124] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1065.512986][T25124] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1065.518460][T25124] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1065.523850][T25124] ? __lock_acquire+0x7d80/0x7d80 [ 1065.528895][T25124] ? dev_put+0x80/0x80 [ 1065.532986][T25124] ? dev_put+0x80/0x80 [ 1065.537067][T25124] bpf_prog_test_run+0x31f/0x390 [ 1065.542022][T25124] __sys_bpf+0x49d/0x890 [ 1065.546283][T25124] ? bpf_link_show_fdinfo+0x390/0x390 [ 1065.551706][T25124] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1065.557889][T25124] __x64_sys_bpf+0x7c/0x90 [ 1065.562329][T25124] do_syscall_64+0x55/0xb0 [ 1065.566759][T25124] ? clear_bhb_loop+0x40/0x90 [ 1065.571454][T25124] ? clear_bhb_loop+0x40/0x90 [ 1065.576149][T25124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1065.582061][T25124] RIP: 0033:0x7fd63299de99 [ 1065.586486][T25124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.606103][T25124] RSP: 002b:00007fd633861028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1065.614530][T25124] RAX: ffffffffffffffda RBX: 00007fd632c25fa0 RCX: 00007fd63299de99 [ 1065.622526][T25124] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1065.630576][T25124] RBP: 00007fd633861090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.638566][T25124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.646545][T25124] R13: 00007fd632c26038 R14: 00007fd632c25fa0 R15: 00007ffca24fe2b8 [ 1065.654538][T25124] [ 1065.933148][T14703] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1065.941206][T14703] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1066.403520][T25157] FAULT_INJECTION: forcing a failure. [ 1066.403520][T25157] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.435634][T25157] CPU: 0 PID: 25157 Comm: syz.2.6769 Not tainted syzkaller #0 [ 1066.443184][T25157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1066.453290][T25157] Call Trace: [ 1066.456623][T25157] [ 1066.459607][T25157] dump_stack_lvl+0x18c/0x250 [ 1066.464352][T25157] ? show_regs_print_info+0x20/0x20 [ 1066.469612][T25157] ? load_image+0x420/0x420 [ 1066.474202][T25157] ? __might_sleep+0xe0/0xe0 [ 1066.478868][T25157] ? __lock_acquire+0x7d80/0x7d80 [ 1066.483980][T25157] should_fail_ex+0x394/0x4c0 [ 1066.488774][T25157] should_failslab+0x9/0x20 [ 1066.493356][T25157] slab_pre_alloc_hook+0x59/0x300 [ 1066.498465][T25157] kmem_cache_alloc+0x5a/0x2c0 [ 1066.503295][T25157] ? getname_flags+0xbb/0x500 [ 1066.508084][T25157] getname_flags+0xbb/0x500 [ 1066.512695][T25157] do_sys_openat2+0xda/0x1d0 [ 1066.517365][T25157] ? do_sys_open+0xe0/0xe0 [ 1066.521863][T25157] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1066.527918][T25157] ? lock_chain_count+0x20/0x20 [ 1066.532842][T25157] __x64_sys_openat+0x139/0x160 [ 1066.537773][T25157] do_syscall_64+0x55/0xb0 [ 1066.542244][T25157] ? clear_bhb_loop+0x40/0x90 [ 1066.546976][T25157] ? clear_bhb_loop+0x40/0x90 [ 1066.551730][T25157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1066.557679][T25157] RIP: 0033:0x7f597535e6ce [ 1066.562154][T25157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1066.581842][T25157] RSP: 002b:00007f59761f7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1066.590323][T25157] RAX: ffffffffffffffda RBX: 00007f59761f86c0 RCX: 00007f597535e6ce [ 1066.598349][T25157] RDX: 0000000000000000 RSI: 00007f59761f7f90 RDI: ffffffffffffff9c [ 1066.606371][T25157] RBP: 00007f59761f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.614391][T25157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.622441][T25157] R13: 00007f5975626038 R14: 00007f5975625fa0 R15: 00007ffc25fea8d8 [ 1066.630546][T25157] [ 1067.121606][T25169] netlink: 'syz.1.6773': attribute type 22 has an invalid length. [ 1067.587762][T25195] netlink: 'syz.3.6782': attribute type 6 has an invalid length. [ 1067.595867][T25195] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1069.833835][T25273] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1070.337354][T25288] netlink: 'syz.1.6816': attribute type 29 has an invalid length. [ 1070.356001][T25288] netlink: 'syz.1.6816': attribute type 3 has an invalid length. [ 1070.382960][T25288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6816'. [ 1070.423024][T25294] netlink: 'syz.1.6816': attribute type 33 has an invalid length. [ 1070.444311][T25294] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6816'. [ 1070.698425][T25300] netlink: 'syz.3.6819': attribute type 21 has an invalid length. [ 1070.720967][T25300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6819'. [ 1070.938658][T25314] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1071.438908][T25340] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1071.482085][T25338] netlink: 'syz.0.6833': attribute type 21 has an invalid length. [ 1071.500153][T25338] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6833'. [ 1072.102566][T25365] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1072.393748][T25381] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1072.645519][T14703] Bluetooth: hci3: ISO packet for unknown connection handle 3152 [ 1072.728155][T25400] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1073.106423][T25419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1073.119268][T25419] netlink: 'syz.2.6864': attribute type 29 has an invalid length. [ 1073.128132][T25419] netlink: 'syz.2.6864': attribute type 29 has an invalid length. [ 1073.136473][T25420] netlink: 'syz.2.6864': attribute type 29 has an invalid length. [ 1073.144971][T25421] netlink: 'syz.2.6864': attribute type 29 has an invalid length. [ 1073.172102][T25419] netlink: 'syz.2.6864': attribute type 3 has an invalid length. [ 1073.644370][T25430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6867'. [ 1074.144212][T25442] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6871'. [ 1074.153838][T25442] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1074.935019][T25479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6883'. [ 1074.945518][T25482] FAULT_INJECTION: forcing a failure. [ 1074.945518][T25482] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1074.960514][T25482] CPU: 1 PID: 25482 Comm: syz.0.6885 Not tainted syzkaller #0 [ 1074.968064][T25482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1074.978149][T25482] Call Trace: [ 1074.981451][T25482] [ 1074.984397][T25482] dump_stack_lvl+0x18c/0x250 [ 1074.989097][T25482] ? show_regs_print_info+0x20/0x20 [ 1074.994315][T25482] ? load_image+0x420/0x420 [ 1074.998844][T25482] ? __lock_acquire+0x7d80/0x7d80 [ 1075.003891][T25482] should_fail_ex+0x394/0x4c0 [ 1075.008598][T25482] prepare_alloc_pages+0x1e1/0x5b0 [ 1075.013730][T25482] __alloc_pages+0x134/0x460 [ 1075.018344][T25482] ? zone_statistics+0x170/0x170 [ 1075.023334][T25482] __pmd_alloc+0x9a/0x8c0 [ 1075.027718][T25482] ? mt_find+0x169/0x640 [ 1075.031973][T25482] ? __lock_acquire+0x7d80/0x7d80 [ 1075.037023][T25482] ? __pud_alloc+0x200/0x200 [ 1075.041637][T25482] ? hugepage_vma_check+0x471/0x560 [ 1075.046880][T25482] handle_mm_fault+0xb75/0x4a50 [ 1075.051769][T25482] ? handle_mm_fault+0xe6/0x4a50 [ 1075.056727][T25482] ? numa_migrate_prep+0x350/0x350 [ 1075.061862][T25482] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1075.067161][T25482] do_user_addr_fault+0x736/0x12d0 [ 1075.072300][T25482] exc_page_fault+0x64/0x100 [ 1075.076913][T25482] asm_exc_page_fault+0x26/0x30 [ 1075.081781][T25482] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1075.087605][T25482] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 1075.107228][T25482] RSP: 0018:ffffc9000c597b90 EFLAGS: 00050202 [ 1075.113306][T25482] RAX: ffffffff8431f901 RBX: 0000000000000018 RCX: 0000000000000018 [ 1075.121298][T25482] RDX: 0000000000000001 RSI: 000000110c23403f RDI: ffffc9000c597c20 [ 1075.129282][T25482] RBP: ffffc9000c597d88 R08: ffffc9000c597c37 R09: 1ffff920018b2f86 [ 1075.137292][T25482] R10: dffffc0000000000 R11: fffff520018b2f87 R12: 000000110c234057 [ 1075.145288][T25482] R13: 1ffff1100ec229a5 R14: ffffc9000c597c20 R15: 000000110c23403f [ 1075.153280][T25482] ? _copy_from_user+0x11/0xe0 [ 1075.158069][T25482] _copy_from_user+0x8b/0xe0 [ 1075.162687][T25482] ipip6_tunnel_siocdevprivate+0x608/0x16e0 [ 1075.168611][T25482] ? rcu_is_watching+0x15/0xb0 [ 1075.173402][T25482] ? sit_tunnel_xmit+0x2390/0x2390 [ 1075.178528][T25482] ? trace_contention_end+0x39/0xe0 [ 1075.183741][T25482] ? __mutex_lock+0x30d/0xc80 [ 1075.188443][T25482] ? dev_load+0x21/0x1f0 [ 1075.192708][T25482] ? dev_ioctl+0x83c/0x1140 [ 1075.197226][T25482] ? __lock_acquire+0x7d80/0x7d80 [ 1075.202269][T25482] ? mutex_lock_nested+0x20/0x20 [ 1075.207233][T25482] ? full_name_hash+0x92/0xe0 [ 1075.211929][T25482] ? dev_ifsioc+0x957/0xc40 [ 1075.216449][T25482] dev_ioctl+0x84c/0x1140 [ 1075.220804][T25482] sock_ioctl+0x74c/0x7e0 [ 1075.225152][T25482] ? sock_poll+0x3e0/0x3e0 [ 1075.229590][T25482] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1075.234537][T25482] ? security_file_ioctl+0x80/0xa0 [ 1075.239661][T25482] ? sock_poll+0x3e0/0x3e0 [ 1075.244100][T25482] __se_sys_ioctl+0xfd/0x170 [ 1075.248710][T25482] do_syscall_64+0x55/0xb0 [ 1075.253141][T25482] ? clear_bhb_loop+0x40/0x90 [ 1075.257835][T25482] ? clear_bhb_loop+0x40/0x90 [ 1075.262525][T25482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.268430][T25482] RIP: 0033:0x7f4011d9de99 [ 1075.272861][T25482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.292480][T25482] RSP: 002b:00007f4012bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.300914][T25482] RAX: ffffffffffffffda RBX: 00007f4012025fa0 RCX: 00007f4011d9de99 [ 1075.308905][T25482] RDX: 0000200000000900 RSI: 00000000000089f9 RDI: 0000000000000004 [ 1075.316884][T25482] RBP: 00007f4012bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.324867][T25482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.332869][T25482] R13: 00007f4012026038 R14: 00007f4012025fa0 R15: 00007ffdacecb588 [ 1075.340877][T25482] [ 1075.436354][T25487] FAULT_INJECTION: forcing a failure. [ 1075.436354][T25487] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.450445][T25487] CPU: 1 PID: 25487 Comm: syz.0.6887 Not tainted syzkaller #0 [ 1075.457975][T25487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1075.468047][T25487] Call Trace: [ 1075.471343][T25487] [ 1075.474294][T25487] dump_stack_lvl+0x18c/0x250 [ 1075.478991][T25487] ? show_regs_print_info+0x20/0x20 [ 1075.484204][T25487] ? load_image+0x420/0x420 [ 1075.488729][T25487] ? __might_sleep+0xe0/0xe0 [ 1075.493338][T25487] ? __lock_acquire+0x7d80/0x7d80 [ 1075.498383][T25487] should_fail_ex+0x394/0x4c0 [ 1075.503091][T25487] should_failslab+0x9/0x20 [ 1075.507611][T25487] slab_pre_alloc_hook+0x59/0x300 [ 1075.512668][T25487] kmem_cache_alloc+0x5a/0x2c0 [ 1075.517449][T25487] ? getname_flags+0xbb/0x500 [ 1075.522146][T25487] getname_flags+0xbb/0x500 [ 1075.526680][T25487] do_sys_openat2+0xda/0x1d0 [ 1075.531291][T25487] ? do_sys_open+0xe0/0xe0 [ 1075.535728][T25487] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1075.541758][T25487] ? lock_chain_count+0x20/0x20 [ 1075.546621][T25487] __x64_sys_openat+0x139/0x160 [ 1075.551504][T25487] do_syscall_64+0x55/0xb0 [ 1075.555938][T25487] ? clear_bhb_loop+0x40/0x90 [ 1075.560643][T25487] ? clear_bhb_loop+0x40/0x90 [ 1075.565338][T25487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.571262][T25487] RIP: 0033:0x7f4011d5e6ce [ 1075.575730][T25487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1075.595349][T25487] RSP: 002b:00007f4012bd0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1075.603782][T25487] RAX: ffffffffffffffda RBX: 00007f4012bd16c0 RCX: 00007f4011d5e6ce [ 1075.611773][T25487] RDX: 0000000000000000 RSI: 00007f4012bd0f90 RDI: ffffffffffffff9c [ 1075.619765][T25487] RBP: 00007f4012bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.627748][T25487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.635731][T25487] R13: 00007f4012026038 R14: 00007f4012025fa0 R15: 00007ffdacecb588 [ 1075.643733][T25487] [ 1075.786922][T25489] validate_nla: 3 callbacks suppressed [ 1075.786956][T25489] netlink: 'syz.3.6889': attribute type 29 has an invalid length. [ 1075.803800][T25489] netlink: 'syz.3.6889': attribute type 3 has an invalid length. [ 1075.812401][T25489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6889'. [ 1075.844369][T25489] netlink: 'syz.3.6889': attribute type 33 has an invalid length. [ 1075.852938][T25489] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6889'. [ 1076.019701][T25500] netlink: 'syz.3.6894': attribute type 40 has an invalid length. [ 1076.371626][T25522] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6901'. [ 1076.463300][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6901'. [ 1076.562277][T25525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6900'. [ 1077.734734][T25556] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1077.746700][T25556] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1077.862890][T25558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1077.947984][T25562] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1078.009864][T25564] netlink: 'syz.2.6924': attribute type 1 has an invalid length. [ 1078.028119][T25565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1078.073541][T25564] netlink: 'syz.2.6924': attribute type 10 has an invalid length. [ 1079.140387][T25587] FAULT_INJECTION: forcing a failure. [ 1079.140387][T25587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.154429][T25587] CPU: 0 PID: 25587 Comm: syz.1.6922 Not tainted syzkaller #0 [ 1079.161937][T25587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1079.172034][T25587] Call Trace: [ 1079.175332][T25587] [ 1079.178275][T25587] dump_stack_lvl+0x18c/0x250 [ 1079.182984][T25587] ? show_regs_print_info+0x20/0x20 [ 1079.188200][T25587] ? load_image+0x420/0x420 [ 1079.192757][T25587] ? __lock_acquire+0x7d80/0x7d80 [ 1079.197802][T25587] should_fail_ex+0x394/0x4c0 [ 1079.202501][T25587] _copy_from_user+0x2f/0xe0 [ 1079.207105][T25587] bpf_prog_test_run_skb+0x267/0x18f0 [ 1079.212493][T25587] ? __fget_files+0x28/0x460 [ 1079.217099][T25587] ? __fget_files+0x3fc/0x460 [ 1079.221798][T25587] ? cpu_online+0x60/0x60 [ 1079.226142][T25587] bpf_prog_test_run+0x31f/0x390 [ 1079.231096][T25587] __sys_bpf+0x49d/0x890 [ 1079.235360][T25587] ? bpf_link_show_fdinfo+0x390/0x390 [ 1079.240774][T25587] ? lock_chain_count+0x20/0x20 [ 1079.245649][T25587] __x64_sys_bpf+0x7c/0x90 [ 1079.250077][T25587] do_syscall_64+0x55/0xb0 [ 1079.254505][T25587] ? clear_bhb_loop+0x40/0x90 [ 1079.259194][T25587] ? clear_bhb_loop+0x40/0x90 [ 1079.263894][T25587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.269799][T25587] RIP: 0033:0x7fd63299de99 [ 1079.274230][T25587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.293859][T25587] RSP: 002b:00007fd633861028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1079.302296][T25587] RAX: ffffffffffffffda RBX: 00007fd632c25fa0 RCX: 00007fd63299de99 [ 1079.310288][T25587] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1079.318279][T25587] RBP: 00007fd633861090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.326273][T25587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.334258][T25587] R13: 00007fd632c26038 R14: 00007fd632c25fa0 R15: 00007ffca24fe2b8 [ 1079.342268][T25587] [ 1079.677241][T25601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1080.689369][T25629] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1080.781183][T25633] netlink: 'syz.2.6938': attribute type 21 has an invalid length. [ 1081.052085][T25637] __nla_validate_parse: 3 callbacks suppressed [ 1081.052104][T25637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6939'. [ 1081.590946][T25658] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1081.602252][T25658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1081.904088][T25672] netlink: 'syz.2.6952': attribute type 21 has an invalid length. [ 1081.918046][T25672] netlink: 'syz.2.6952': attribute type 6 has an invalid length. [ 1081.926074][T25672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6952'. [ 1082.047672][T25674] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6953'. [ 1082.276267][T25682] netlink: 'syz.0.6958': attribute type 29 has an invalid length. [ 1082.300075][T25682] netlink: 'syz.0.6958': attribute type 29 has an invalid length. [ 1082.319654][T25682] netlink: 'syz.0.6958': attribute type 29 has an invalid length. [ 1082.338762][T25682] netlink: 'syz.0.6958': attribute type 29 has an invalid length. [ 1083.312800][T25704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6964'. [ 1085.349114][T25730] netlink: 'syz.3.6974': attribute type 3 has an invalid length. [ 1085.366983][T25730] netlink: 'syz.3.6974': attribute type 1 has an invalid length. [ 1085.390682][T25730] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6974'. [ 1085.592103][T25742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6977'. [ 1085.849446][T25750] FAULT_INJECTION: forcing a failure. [ 1085.849446][T25750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.872463][T25750] CPU: 0 PID: 25750 Comm: syz.3.6980 Not tainted syzkaller #0 [ 1085.880018][T25750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1085.890118][T25750] Call Trace: [ 1085.893433][T25750] [ 1085.896409][T25750] dump_stack_lvl+0x18c/0x250 [ 1085.901143][T25750] ? show_regs_print_info+0x20/0x20 [ 1085.906393][T25750] ? load_image+0x420/0x420 [ 1085.910955][T25750] ? __might_fault+0xaa/0x120 [ 1085.915680][T25750] ? __lock_acquire+0x7d80/0x7d80 [ 1085.920750][T25750] ? bpf_percpu_hash_update+0x2b/0x200 [ 1085.926253][T25750] ? __virt_addr_valid+0x10c/0x380 [ 1085.931411][T25750] should_fail_ex+0x394/0x4c0 [ 1085.936147][T25750] _copy_from_user+0x2f/0xe0 [ 1085.940787][T25750] generic_map_update_batch+0x58c/0x800 [ 1085.946402][T25750] ? rcu_read_unlock+0xa0/0xa0 [ 1085.951212][T25750] ? __fdget+0x180/0x210 [ 1085.955510][T25750] ? rcu_read_unlock+0xa0/0xa0 [ 1085.960316][T25750] bpf_map_do_batch+0x3f2/0x600 [ 1085.965215][T25750] ? bpf_lsm_audit_rule_known+0x10/0x10 [ 1085.970820][T25750] __sys_bpf+0x381/0x890 [ 1085.975122][T25750] ? bpf_link_show_fdinfo+0x390/0x390 [ 1085.980579][T25750] ? lock_chain_count+0x20/0x20 [ 1085.985503][T25750] __x64_sys_bpf+0x7c/0x90 [ 1085.989986][T25750] do_syscall_64+0x55/0xb0 [ 1085.994444][T25750] ? clear_bhb_loop+0x40/0x90 [ 1085.999166][T25750] ? clear_bhb_loop+0x40/0x90 [ 1086.003906][T25750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1086.009854][T25750] RIP: 0033:0x7fefa879de99 [ 1086.014304][T25750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.033940][T25750] RSP: 002b:00007fefa96ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1086.042379][T25750] RAX: ffffffffffffffda RBX: 00007fefa8a25fa0 RCX: 00007fefa879de99 [ 1086.050368][T25750] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1086.058354][T25750] RBP: 00007fefa96ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.066370][T25750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1086.074361][T25750] R13: 00007fefa8a26038 R14: 00007fefa8a25fa0 R15: 00007ffdd54f69e8 [ 1086.082393][T25750] [ 1086.295017][T25754] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6982'. [ 1087.261504][T25763] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1088.072987][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1088.103983][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1088.112280][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1088.115273][T25787] sock: sock_timestamping_bind_phc: sock not bind to device [ 1088.136769][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1088.146288][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1088.154231][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1088.219182][T25793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1088.316234][T10324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.327178][T25796] FAULT_INJECTION: forcing a failure. [ 1088.327178][T25796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1088.341882][T25796] CPU: 0 PID: 25796 Comm: syz.0.6996 Not tainted syzkaller #0 [ 1088.349407][T25796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1088.359489][T25796] Call Trace: [ 1088.362793][T25796] [ 1088.365743][T25796] dump_stack_lvl+0x18c/0x250 [ 1088.370446][T25796] ? show_regs_print_info+0x20/0x20 [ 1088.375669][T25796] ? load_image+0x420/0x420 [ 1088.380197][T25796] ? __lock_acquire+0x7d80/0x7d80 [ 1088.385270][T25796] should_fail_ex+0x394/0x4c0 [ 1088.389982][T25796] prepare_alloc_pages+0x1e1/0x5b0 [ 1088.395124][T25796] __alloc_pages+0x134/0x460 [ 1088.399764][T25796] ? kmem_cache_alloc_node+0x1d7/0x310 [ 1088.405283][T25796] ? zone_statistics+0x170/0x170 [ 1088.410256][T25796] ? __build_skb_around+0x245/0x3c0 [ 1088.415492][T25796] ? alloc_pages+0x4e1/0x740 [ 1088.420110][T25796] alloc_skb_with_frags+0x23e/0x7a0 [ 1088.425347][T25796] sock_alloc_send_pskb+0x883/0x9a0 [ 1088.430621][T25796] ? sock_kzfree_s+0x50/0x50 [ 1088.435250][T25796] ? verify_lock_unused+0x140/0x140 [ 1088.440472][T25796] ? aa_label_sk_perm+0x4d4/0x660 [ 1088.445544][T25796] ? dev_get_by_index+0x22/0x2d0 [ 1088.450532][T25796] ? dev_get_by_index+0x22/0x2d0 [ 1088.455504][T25796] packet_sendmsg+0x3058/0x4c70 [ 1088.460388][T25796] ? set_user_nice+0x630/0xb20 [ 1088.465183][T25796] ? verify_lock_unused+0x140/0x140 [ 1088.470414][T25796] ? aa_sk_perm+0x83c/0x970 [ 1088.474956][T25796] ? packet_getsockopt+0xad0/0xad0 [ 1088.480086][T25796] ? tomoyo_merge_path2_acl+0x30/0xb0 [ 1088.485486][T25796] ? aa_sock_msg_perm+0x94/0x150 [ 1088.490452][T25796] ? apparmor_socket_sendmsg+0x23d/0x330 [ 1088.496116][T25796] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1088.501429][T25796] ? security_socket_sendmsg+0x80/0xa0 [ 1088.506928][T25796] ? packet_getsockopt+0xad0/0xad0 [ 1088.512081][T25796] ____sys_sendmsg+0x61b/0x980 [ 1088.516874][T25796] ? __asan_memset+0x22/0x40 [ 1088.521495][T25796] ? __sys_sendmsg_sock+0x30/0x30 [ 1088.526546][T25796] ? __import_iovec+0x3fa/0x850 [ 1088.531430][T25796] ? import_iovec+0x73/0xa0 [ 1088.535966][T25796] ___sys_sendmsg+0x2a6/0x360 [ 1088.540676][T25796] ? get_pid_task+0x20/0x1e0 [ 1088.545302][T25796] ? __sys_sendmsg+0x2b0/0x2b0 [ 1088.550095][T25796] ? __lock_acquire+0x7d80/0x7d80 [ 1088.555184][T25796] __se_sys_sendmsg+0x1d0/0x2c0 [ 1088.560064][T25796] ? __x64_sys_sendmsg+0x80/0x80 [ 1088.565036][T25796] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.570258][T25796] do_syscall_64+0x55/0xb0 [ 1088.574696][T25796] ? clear_bhb_loop+0x40/0x90 [ 1088.579393][T25796] ? clear_bhb_loop+0x40/0x90 [ 1088.584092][T25796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1088.590007][T25796] RIP: 0033:0x7f4011d9de99 [ 1088.594443][T25796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.614071][T25796] RSP: 002b:00007f4012bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1088.622511][T25796] RAX: ffffffffffffffda RBX: 00007f4012025fa0 RCX: 00007f4011d9de99 [ 1088.630515][T25796] RDX: 0000000024004010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1088.638512][T25796] RBP: 00007f4012bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.646510][T25796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.654519][T25796] R13: 00007f4012026038 R14: 00007f4012025fa0 R15: 00007ffdacecb588 [ 1088.662539][T25796] [ 1088.787552][T10324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.917729][T25805] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1088.959052][T10324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.263864][T10324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.352486][T25786] chnl_net:caif_netlink_parms(): no params data found [ 1089.831308][T25824] FAULT_INJECTION: forcing a failure. [ 1089.831308][T25824] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.867118][T25824] CPU: 0 PID: 25824 Comm: syz.3.7004 Not tainted syzkaller #0 [ 1089.874684][T25824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1089.884799][T25824] Call Trace: [ 1089.888118][T25824] [ 1089.891082][T25824] dump_stack_lvl+0x18c/0x250 [ 1089.895808][T25824] ? show_regs_print_info+0x20/0x20 [ 1089.901138][T25824] ? load_image+0x420/0x420 [ 1089.905700][T25824] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1089.911749][T25824] ? __asan_memset+0x22/0x40 [ 1089.916385][T25824] should_fail_ex+0x394/0x4c0 [ 1089.921115][T25824] should_failslab+0x9/0x20 [ 1089.925682][T25824] slab_pre_alloc_hook+0x59/0x300 [ 1089.930762][T25824] ? __debug_object_init+0xec/0x450 [ 1089.936021][T25824] kmem_cache_alloc+0x5a/0x2c0 [ 1089.940819][T25824] ? slab_build_skb+0x28/0x3e0 [ 1089.945636][T25824] slab_build_skb+0x28/0x3e0 [ 1089.950278][T25824] bpf_prog_test_run_skb+0x38f/0x18f0 [ 1089.955710][T25824] ? __fget_files+0x28/0x460 [ 1089.960360][T25824] ? __fget_files+0x3fc/0x460 [ 1089.965106][T25824] ? cpu_online+0x60/0x60 [ 1089.969495][T25824] bpf_prog_test_run+0x31f/0x390 [ 1089.974479][T25824] __sys_bpf+0x49d/0x890 [ 1089.978744][T25824] ? bpf_link_show_fdinfo+0x390/0x390 [ 1089.984136][T25824] ? lock_chain_count+0x20/0x20 [ 1089.989001][T25824] __x64_sys_bpf+0x7c/0x90 [ 1089.993431][T25824] do_syscall_64+0x55/0xb0 [ 1089.997879][T25824] ? clear_bhb_loop+0x40/0x90 [ 1090.001743][T25786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.002576][T25824] ? clear_bhb_loop+0x40/0x90 [ 1090.009901][T25786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.014313][T25824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.014337][T25824] RIP: 0033:0x7fefa879de99 [ 1090.014357][T25824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.014376][T25824] RSP: 002b:00007fefa96ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1090.014398][T25824] RAX: ffffffffffffffda RBX: 00007fefa8a25fa0 RCX: 00007fefa879de99 [ 1090.014414][T25824] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1090.014428][T25824] RBP: 00007fefa96ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.022445][T25786] bridge_slave_0: entered allmulticast mode [ 1090.027343][T25824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.036227][T25786] bridge_slave_0: entered promiscuous mode [ 1090.051377][T25824] R13: 00007fefa8a26038 R14: 00007fefa8a25fa0 R15: 00007ffdd54f69e8 [ 1090.051413][T25824] [ 1090.144071][T25786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.152012][T25786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.159285][T25786] bridge_slave_1: entered allmulticast mode [ 1090.168158][T25786] bridge_slave_1: entered promiscuous mode [ 1090.204247][ T5779] Bluetooth: hci3: command tx timeout [ 1090.227973][T25786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.241400][T25786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.360357][T25786] team0: Port device team_slave_0 added [ 1090.383861][T25786] team0: Port device team_slave_1 added [ 1090.478169][T25838] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.7006'. [ 1090.501234][T25835] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7008'. [ 1090.543528][T25835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1090.709458][T25786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.725804][T25786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.783032][T25786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.885697][T25786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.902511][T25786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.950225][T25786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.124537][T25786] hsr_slave_0: entered promiscuous mode [ 1091.143003][T25786] hsr_slave_1: entered promiscuous mode [ 1091.153753][T25786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.171944][T25786] Cannot create hsr debugfs directory [ 1091.431161][T25872] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1091.763140][T25875] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1091.967567][T25883] sock: sock_timestamping_bind_phc: sock not bind to device [ 1092.035097][T25883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7021'. [ 1092.153339][T25888] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.7022'. [ 1092.280732][ T5779] Bluetooth: hci3: command tx timeout [ 1092.754133][T25786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1092.791767][T25786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1092.829219][T25786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1092.875669][T25786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1092.926380][T25914] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1093.247702][T25921] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1093.321431][T10324] macsec0: left allmulticast mode [ 1093.329735][T10324] veth1_macvtap: left allmulticast mode [ 1093.336282][T10324] macsec0: left promiscuous mode [ 1093.344332][T10324] : port 1(macsec0) entered disabled state [ 1093.358468][T10324] hsr_slave_0: left promiscuous mode [ 1093.365013][T10324] hsr_slave_1: left promiscuous mode [ 1093.404130][T10324] veth1_macvtap: left promiscuous mode [ 1093.409871][T10324] veth1_vlan: left promiscuous mode [ 1093.421980][T10324] veth0_vlan: left promiscuous mode [ 1093.789283][T25936] syz.0.7035[25936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1093.789462][T25936] syz.0.7035[25936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1094.360144][T10324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.371684][ T5779] Bluetooth: hci3: command tx timeout [ 1094.781589][T10324] bond0 (unregistering): Released all slaves [ 1094.839789][T25925] ipvlan1: entered promiscuous mode [ 1094.846619][T25925] ipvlan1: entered allmulticast mode [ 1094.852383][T25925] veth0_vlan: entered allmulticast mode [ 1094.869309][T25946] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1095.015556][T25786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.103936][T25786] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.233795][T25953] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1095.274699][T21111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.282003][T21111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.307159][T21111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.314416][T21111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.952587][T25786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.119496][T25786] veth0_vlan: entered promiscuous mode [ 1096.170040][T25786] veth1_vlan: entered promiscuous mode [ 1096.212527][T25993] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1096.335367][T25786] veth0_macvtap: entered promiscuous mode [ 1096.375215][T25786] veth1_macvtap: entered promiscuous mode [ 1096.431228][T25786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.453293][ T5779] Bluetooth: hci3: command tx timeout [ 1096.468308][T25786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.503768][T25786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.551190][T25786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.576143][T25786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.598330][T25786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.797424][T10335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.823320][T10335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.899041][T10317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.950794][T10317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.220556][T26026] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1098.262769][T26047] netlink: 'syz.2.7062': attribute type 10 has an invalid length. [ 1098.287508][T26047] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7062'. [ 1099.836863][T26086] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1100.225847][T26103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7073'. [ 1100.296358][T26111] netlink: 'syz.1.7076': attribute type 6 has an invalid length. [ 1100.309408][T26111] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7076'. [ 1100.646428][T26124] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1102.912463][T26151] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1103.077613][T26159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7095'. [ 1103.081832][T10324] wlan1: Trigger new scan to find an IBSS to join [ 1103.465070][T26176] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 1103.472097][T26176] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 1103.680009][T26188] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1103.775099][T26193] FAULT_INJECTION: forcing a failure. [ 1103.775099][T26193] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.792556][T26193] CPU: 1 PID: 26193 Comm: syz.0.7108 Not tainted syzkaller #0 [ 1103.800068][T26193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1103.810155][T26193] Call Trace: [ 1103.813471][T26193] [ 1103.816517][T26193] dump_stack_lvl+0x18c/0x250 [ 1103.821235][T26193] ? show_regs_print_info+0x20/0x20 [ 1103.826485][T26193] ? load_image+0x420/0x420 [ 1103.831033][T26193] ? verify_lock_unused+0x140/0x140 [ 1103.836298][T26193] should_fail_ex+0x394/0x4c0 [ 1103.841063][T26193] should_failslab+0x9/0x20 [ 1103.845638][T26193] slab_pre_alloc_hook+0x59/0x300 [ 1103.850723][T26193] kmem_cache_alloc+0x5a/0x2c0 [ 1103.855577][T26193] ? skb_clone+0x1eb/0x370 [ 1103.860042][T26193] skb_clone+0x1eb/0x370 [ 1103.864331][T26193] __netlink_deliver_tap+0x411/0x7f0 [ 1103.869677][T26193] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.874925][T26193] netlink_deliver_tap+0x19c/0x1b0 [ 1103.880084][T26193] netlink_sendskb+0x68/0x130 [ 1103.884820][T26193] netlink_ack+0xcd5/0x1160 [ 1103.889407][T26193] ? netlink_dump+0xec0/0xec0 [ 1103.894115][T26193] ? ref_tracker_free+0x686/0x830 [ 1103.899174][T26193] netlink_rcv_skb+0x2b3/0x4c0 [ 1103.903981][T26193] ? rtnetlink_bind+0x80/0x80 [ 1103.908688][T26193] ? netlink_ack+0x1160/0x1160 [ 1103.913487][T26193] ? __lock_acquire+0x7d80/0x7d80 [ 1103.918536][T26193] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.923797][T26193] netlink_unicast+0x7b1/0x930 [ 1103.928592][T26193] netlink_sendmsg+0x8d0/0xbf0 [ 1103.933403][T26193] ? netlink_getsockopt+0x590/0x590 [ 1103.938648][T26193] ? apparmor_socket_sendmsg+0x170/0x330 [ 1103.944317][T26193] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1103.949648][T26193] ? security_socket_sendmsg+0x80/0xa0 [ 1103.955141][T26193] ? netlink_getsockopt+0x590/0x590 [ 1103.960422][T26193] ____sys_sendmsg+0x61b/0x980 [ 1103.965242][T26193] ? __asan_memset+0x22/0x40 [ 1103.969878][T26193] ? __sys_sendmsg_sock+0x30/0x30 [ 1103.974939][T26193] ? __import_iovec+0x5f2/0x850 [ 1103.979846][T26193] ? import_iovec+0x73/0xa0 [ 1103.984426][T26193] ___sys_sendmsg+0x2a6/0x360 [ 1103.989148][T26193] ? get_pid_task+0x20/0x1e0 [ 1103.993789][T26193] ? __sys_sendmsg+0x2b0/0x2b0 [ 1103.998625][T26193] ? __lock_acquire+0x7d80/0x7d80 [ 1104.003853][T26193] __se_sys_sendmsg+0x1d0/0x2c0 [ 1104.008764][T26193] ? __x64_sys_sendmsg+0x80/0x80 [ 1104.013765][T26193] ? lockdep_hardirqs_on+0x98/0x150 [ 1104.019012][T26193] do_syscall_64+0x55/0xb0 [ 1104.023469][T26193] ? clear_bhb_loop+0x40/0x90 [ 1104.028181][T26193] ? clear_bhb_loop+0x40/0x90 [ 1104.032889][T26193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.038814][T26193] RIP: 0033:0x7f4011d9de99 [ 1104.043260][T26193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.062902][T26193] RSP: 002b:00007f4012bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.071344][T26193] RAX: ffffffffffffffda RBX: 00007f4012025fa0 RCX: 00007f4011d9de99 [ 1104.079386][T26193] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003 [ 1104.087392][T26193] RBP: 00007f4012bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.095398][T26193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.103406][T26193] R13: 00007f4012026038 R14: 00007f4012025fa0 R15: 00007ffdacecb588 [ 1104.111447][T26193] [ 1104.118668][T26199] ªªªªªª: renamed from vlan0 (while UP) [ 1104.923942][T26231] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1104.944905][T26229] netlink: 'syz.0.7120': attribute type 21 has an invalid length. [ 1104.966938][T26229] netlink: 'syz.0.7120': attribute type 11 has an invalid length. [ 1105.411518][T26252] netlink: 'syz.1.7127': attribute type 29 has an invalid length. [ 1106.627336][T26252] netlink: 'syz.1.7127': attribute type 29 has an invalid length. [ 1106.787434][T26261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7130'. [ 1106.813063][T26263] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1107.004678][T26273] FAULT_INJECTION: forcing a failure. [ 1107.004678][T26273] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.017727][T26273] CPU: 0 PID: 26273 Comm: syz.3.7132 Not tainted syzkaller #0 [ 1107.025223][T26273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1107.035305][T26273] Call Trace: [ 1107.038597][T26273] [ 1107.041547][T26273] dump_stack_lvl+0x18c/0x250 [ 1107.046262][T26273] ? show_regs_print_info+0x20/0x20 [ 1107.051483][T26273] ? load_image+0x420/0x420 [ 1107.056085][T26273] should_fail_ex+0x394/0x4c0 [ 1107.060799][T26273] should_failslab+0x9/0x20 [ 1107.065333][T26273] slab_pre_alloc_hook+0x59/0x300 [ 1107.070395][T26273] ? ida_alloc_range+0x5e7/0x860 [ 1107.075382][T26273] __kmem_cache_alloc_node+0x53/0x250 [ 1107.080802][T26273] ? ida_alloc_range+0x5e7/0x860 [ 1107.085769][T26273] kmalloc_trace+0x2a/0xe0 [ 1107.090211][T26273] ida_alloc_range+0x5e7/0x860 [ 1107.095001][T26273] ? __xdp_reg_mem_model+0x1fd/0x5a0 [ 1107.100326][T26273] ? idr_replace+0x1b0/0x1b0 [ 1107.104959][T26273] __xdp_reg_mem_model+0x219/0x5a0 [ 1107.110094][T26273] ? kvmalloc_node+0x70/0x180 [ 1107.114792][T26273] ? kvmalloc_node+0x70/0x180 [ 1107.119491][T26273] ? xdp_reg_mem_model+0x40/0x40 [ 1107.124453][T26273] xdp_reg_mem_model+0x22/0x40 [ 1107.129240][T26273] bpf_test_run_xdp_live+0x262/0x1b30 [ 1107.134635][T26273] ? 0xffffffffa0004740 [ 1107.138798][T26273] ? 0xffffffffa0004740 [ 1107.142965][T26273] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 1107.148875][T26273] ? xdp_convert_md_to_buff+0x330/0x330 [ 1107.154464][T26273] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1107.160737][T26273] ? _copy_from_user+0xa5/0xe0 [ 1107.165547][T26273] ? bpf_test_init+0x119/0x140 [ 1107.170327][T26273] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1107.175803][T26273] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 1107.181220][T26273] ? __lock_acquire+0x7d80/0x7d80 [ 1107.186279][T26273] ? dev_put+0x80/0x80 [ 1107.190460][T26273] ? dev_put+0x80/0x80 [ 1107.194597][T26273] bpf_prog_test_run+0x31f/0x390 [ 1107.199560][T26273] __sys_bpf+0x49d/0x890 [ 1107.203820][T26273] ? read_tsc+0x9/0x20 [ 1107.207926][T26273] ? bpf_link_show_fdinfo+0x390/0x390 [ 1107.213350][T26273] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1107.219568][T26273] __x64_sys_bpf+0x7c/0x90 [ 1107.224023][T26273] do_syscall_64+0x55/0xb0 [ 1107.228469][T26273] ? clear_bhb_loop+0x40/0x90 [ 1107.233174][T26273] ? clear_bhb_loop+0x40/0x90 [ 1107.237878][T26273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1107.243793][T26273] RIP: 0033:0x7fefa879de99 [ 1107.248225][T26273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.267851][T26273] RSP: 002b:00007fefa96ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1107.276287][T26273] RAX: ffffffffffffffda RBX: 00007fefa8a25fa0 RCX: 00007fefa879de99 [ 1107.284276][T26273] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1107.292262][T26273] RBP: 00007fefa96ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.300245][T26273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.308231][T26273] R13: 00007fefa8a26038 R14: 00007fefa8a25fa0 R15: 00007ffdd54f69e8 [ 1107.316230][T26273] [ 1107.321668][T10317] wlan1: Trigger new scan to find an IBSS to join [ 1108.397382][T26296] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1109.050829][T26298] FAULT_INJECTION: forcing a failure. [ 1109.050829][T26298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.071053][T26298] CPU: 0 PID: 26298 Comm: syz.2.7141 Not tainted syzkaller #0 [ 1109.078578][T26298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1109.088650][T26298] Call Trace: [ 1109.091947][T26298] [ 1109.094896][T26298] dump_stack_lvl+0x18c/0x250 [ 1109.099591][T26298] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1109.105763][T26298] ? show_regs_print_info+0x20/0x20 [ 1109.110990][T26298] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1109.117172][T26298] ? dump_stack+0x9/0x20 [ 1109.121442][T26298] should_fail_ex+0x394/0x4c0 [ 1109.126157][T26298] _copy_from_user+0x2f/0xe0 [ 1109.130771][T26298] generic_map_update_batch+0x58c/0x800 [ 1109.136350][T26298] ? rcu_read_unlock+0xa0/0xa0 [ 1109.141132][T26298] ? __fdget+0x180/0x210 [ 1109.145407][T26298] ? rcu_read_unlock+0xa0/0xa0 [ 1109.150193][T26298] bpf_map_do_batch+0x3f2/0x600 [ 1109.155055][T26298] ? bpf_lsm_audit_rule_known+0x10/0x10 [ 1109.160632][T26298] __sys_bpf+0x381/0x890 [ 1109.164921][T26298] ? bpf_link_show_fdinfo+0x390/0x390 [ 1109.170317][T26298] ? lock_chain_count+0x20/0x20 [ 1109.175188][T26298] __x64_sys_bpf+0x7c/0x90 [ 1109.179619][T26298] do_syscall_64+0x55/0xb0 [ 1109.184047][T26298] ? clear_bhb_loop+0x40/0x90 [ 1109.188756][T26298] ? clear_bhb_loop+0x40/0x90 [ 1109.193454][T26298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.199362][T26298] RIP: 0033:0x7f597539de99 [ 1109.203798][T26298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.223424][T26298] RSP: 002b:00007f59761f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1109.231858][T26298] RAX: ffffffffffffffda RBX: 00007f5975625fa0 RCX: 00007f597539de99 [ 1109.239843][T26298] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 1109.247824][T26298] RBP: 00007f59761f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.255810][T26298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.263798][T26298] R13: 00007f5975626038 R14: 00007f5975625fa0 R15: 00007ffc25fea8d8 [ 1109.271810][T26298] [ 1109.340881][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 2815 [ 1109.652354][T26309] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1110.130743][T26325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7150'. [ 1110.221480][T26330] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1110.244740][T26325] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7150'. [ 1110.523084][T26345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1110.536580][T26345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1110.549618][T26345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1110.662779][T26343] netlink: 'syz.0.7158': attribute type 16 has an invalid length. [ 1110.690727][T26343] netlink: 'syz.0.7158': attribute type 3 has an invalid length. [ 1110.698855][T26343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7158'. [ 1110.923575][T26357] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1111.263362][T26368] sctp: [Deprecated]: syz.0.7165 (pid 26368) Use of int in maxseg socket option. [ 1111.263362][T26368] Use struct sctp_assoc_value instead [ 1111.312255][T26364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1111.370482][T26364] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1111.644453][T26379] netlink: 'syz.2.7169': attribute type 2 has an invalid length. [ 1112.494471][T26396] delete_channel: no stack [ 1113.029228][T26421] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.7183'. [ 1113.060409][T26425] IPv6: NLM_F_CREATE should be specified when creating new route [ 1114.121491][T21111] wlan1: Trigger new scan to find an IBSS to join [ 1114.163114][T26445] netlink: 'syz.0.7190': attribute type 29 has an invalid length. [ 1114.171462][T26445] netlink: 'syz.0.7190': attribute type 29 has an invalid length. [ 1114.179542][T26430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1114.209654][T26445] netlink: 'syz.0.7190': attribute type 29 has an invalid length. [ 1114.622813][T26457] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1115.369835][T14703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1115.385109][T14703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1115.394774][T14703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1115.412286][T14703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1115.420952][T14703] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1115.428401][T14703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1115.531581][T21111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.648492][T21111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.794512][T21111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.961483][T26488] FAULT_INJECTION: forcing a failure. [ 1115.961483][T26488] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.990178][T21111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.005477][T26488] CPU: 0 PID: 26488 Comm: syz.1.7207 Not tainted syzkaller #0 [ 1116.013038][T26488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1116.023168][T26488] Call Trace: [ 1116.026522][T26488] [ 1116.029514][T26488] dump_stack_lvl+0x18c/0x250 [ 1116.034295][T26488] ? show_regs_print_info+0x20/0x20 [ 1116.039579][T26488] ? load_image+0x420/0x420 [ 1116.044185][T26488] ? __might_sleep+0xe0/0xe0 [ 1116.048868][T26488] ? __lock_acquire+0x7d80/0x7d80 [ 1116.053965][T26488] ? mark_lock+0x94/0x320 [ 1116.058389][T26488] should_fail_ex+0x394/0x4c0 [ 1116.063172][T26488] should_failslab+0x9/0x20 [ 1116.067765][T26488] slab_pre_alloc_hook+0x59/0x300 [ 1116.072895][T26488] ? __get_vm_area_node+0x125/0x370 [ 1116.078189][T26488] __kmem_cache_alloc_node+0x53/0x250 [ 1116.083680][T26488] ? __get_vm_area_node+0x125/0x370 [ 1116.089005][T26488] kmalloc_node_trace+0x26/0xe0 [ 1116.093965][T26488] __get_vm_area_node+0x125/0x370 [ 1116.099113][T26488] __vmalloc_node_range+0x36f/0x1320 [ 1116.104497][T26488] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1116.110134][T26488] ? mark_lock+0x94/0x320 [ 1116.114548][T26488] ? __lock_acquire+0x1336/0x7d80 [ 1116.119663][T26488] ? aa_get_newest_label+0xfd/0x5c0 [ 1116.124920][T26488] ? free_vm_area+0x50/0x50 [ 1116.129505][T26488] ? end_current_label_crit_section+0x170/0x170 [ 1116.135837][T26488] ? verify_lock_unused+0x140/0x140 [ 1116.141114][T26488] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1116.146708][T26488] __vmalloc+0x7a/0x90 [ 1116.150841][T26488] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1116.156445][T26488] bpf_prog_alloc_no_stats+0x46/0x430 [ 1116.161884][T26488] bpf_prog_alloc+0x3d/0x1a0 [ 1116.166529][T26488] bpf_prog_load+0x6b2/0x1610 [ 1116.171292][T26488] ? map_freeze+0x420/0x420 [ 1116.175857][T26488] ? __might_fault+0xaa/0x120 [ 1116.180589][T26488] ? __lock_acquire+0x7d80/0x7d80 [ 1116.185685][T26488] ? file_end_write+0x159/0x250 [ 1116.190601][T26488] ? __might_fault+0xaa/0x120 [ 1116.195336][T26488] ? __might_fault+0xc6/0x120 [ 1116.200075][T26488] ? __might_fault+0xaa/0x120 [ 1116.204796][T26488] ? bpf_lsm_bpf+0x9/0x10 [ 1116.209166][T26488] ? security_bpf+0x7e/0xa0 [ 1116.213721][T26488] __sys_bpf+0x5ba/0x890 [ 1116.218020][T26488] ? bpf_link_show_fdinfo+0x390/0x390 [ 1116.223475][T26488] ? lock_chain_count+0x20/0x20 [ 1116.228397][T26488] __x64_sys_bpf+0x7c/0x90 [ 1116.232860][T26488] do_syscall_64+0x55/0xb0 [ 1116.237325][T26488] ? clear_bhb_loop+0x40/0x90 [ 1116.242047][T26488] ? clear_bhb_loop+0x40/0x90 [ 1116.246775][T26488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.252734][T26488] RIP: 0033:0x7fde9319de99 [ 1116.257191][T26488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.276834][T26488] RSP: 002b:00007fde940b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1116.285289][T26488] RAX: ffffffffffffffda RBX: 00007fde93425fa0 RCX: 00007fde9319de99 [ 1116.293300][T26488] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1116.301313][T26488] RBP: 00007fde940b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.309324][T26488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.317334][T26488] R13: 00007fde93426038 R14: 00007fde93425fa0 R15: 00007ffc2dbea408 [ 1116.325389][T26488] [ 1116.329676][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.336261][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.368674][T26487] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1116.369620][T26488] syz.1.7207: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1116.397017][T26488] CPU: 0 PID: 26488 Comm: syz.1.7207 Not tainted syzkaller #0 [ 1116.404567][T26488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1116.414700][T26488] Call Trace: [ 1116.418039][T26488] [ 1116.421031][T26488] dump_stack_lvl+0x18c/0x250 [ 1116.425768][T26488] ? show_regs_print_info+0x20/0x20 [ 1116.431038][T26488] ? load_image+0x420/0x420 [ 1116.435606][T26488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1116.442066][T26488] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1116.448655][T26488] warn_alloc+0x246/0x340 [ 1116.453028][T26488] ? __get_vm_area_node+0x125/0x370 [ 1116.458274][T26488] ? zone_watermark_ok_safe+0x230/0x230 [ 1116.463864][T26488] ? rcu_is_watching+0x15/0xb0 [ 1116.468682][T26488] ? __get_vm_area_node+0x356/0x370 [ 1116.473941][T26488] __vmalloc_node_range+0x394/0x1320 [ 1116.479283][T26488] ? mark_lock+0x94/0x320 [ 1116.483663][T26488] ? __lock_acquire+0x1336/0x7d80 [ 1116.488746][T26488] ? aa_get_newest_label+0xfd/0x5c0 [ 1116.493990][T26488] ? free_vm_area+0x50/0x50 [ 1116.498551][T26488] ? end_current_label_crit_section+0x170/0x170 [ 1116.504843][T26488] ? verify_lock_unused+0x140/0x140 [ 1116.510079][T26488] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1116.515667][T26488] __vmalloc+0x7a/0x90 [ 1116.519787][T26488] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1116.525370][T26488] bpf_prog_alloc_no_stats+0x46/0x430 [ 1116.530787][T26488] bpf_prog_alloc+0x3d/0x1a0 [ 1116.535424][T26488] bpf_prog_load+0x6b2/0x1610 [ 1116.540152][T26488] ? map_freeze+0x420/0x420 [ 1116.544710][T26488] ? __might_fault+0xaa/0x120 [ 1116.549422][T26488] ? __lock_acquire+0x7d80/0x7d80 [ 1116.554487][T26488] ? file_end_write+0x159/0x250 [ 1116.559430][T26488] ? __might_fault+0xaa/0x120 [ 1116.564166][T26488] ? __might_fault+0xc6/0x120 [ 1116.568862][T26488] ? __might_fault+0xaa/0x120 [ 1116.573569][T26488] ? bpf_lsm_bpf+0x9/0x10 [ 1116.577957][T26488] ? security_bpf+0x7e/0xa0 [ 1116.582507][T26488] __sys_bpf+0x5ba/0x890 [ 1116.586799][T26488] ? bpf_link_show_fdinfo+0x390/0x390 [ 1116.592241][T26488] ? lock_chain_count+0x20/0x20 [ 1116.597149][T26488] __x64_sys_bpf+0x7c/0x90 [ 1116.601647][T26488] do_syscall_64+0x55/0xb0 [ 1116.606107][T26488] ? clear_bhb_loop+0x40/0x90 [ 1116.610843][T26488] ? clear_bhb_loop+0x40/0x90 [ 1116.615573][T26488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1116.621517][T26488] RIP: 0033:0x7fde9319de99 [ 1116.625983][T26488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.645646][T26488] RSP: 002b:00007fde940b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1116.654116][T26488] RAX: ffffffffffffffda RBX: 00007fde93425fa0 RCX: 00007fde9319de99 [ 1116.662133][T26488] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1116.670164][T26488] RBP: 00007fde940b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.678194][T26488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.686222][T26488] R13: 00007fde93426038 R14: 00007fde93425fa0 R15: 00007ffc2dbea408 [ 1116.694250][T26488] [ 1116.698145][T26488] Mem-Info: [ 1116.701535][T26488] active_anon:8592 inactive_anon:0 isolated_anon:0 [ 1116.701535][T26488] active_file:19005 inactive_file:40366 isolated_file:0 [ 1116.701535][T26488] unevictable:768 dirty:481 writeback:0 [ 1116.701535][T26488] slab_reclaimable:11017 slab_unreclaimable:95860 [ 1116.701535][T26488] mapped:24887 shmem:1361 pagetables:542 [ 1116.701535][T26488] sec_pagetables:0 bounce:0 [ 1116.701535][T26488] kernel_misc_reclaimable:0 [ 1116.701535][T26488] free:1336012 free_pcp:14646 free_cma:0 [ 1116.771901][T26488] Node 0 active_anon:34268kB inactive_anon:0kB active_file:76020kB inactive_file:161264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99548kB dirty:1924kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10432kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no [ 1116.815324][T26488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1116.890318][T26495] netlink: 'syz.0.7208': attribute type 2 has an invalid length. [ 1116.910711][T26488] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1116.934712][T26495] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.7208'. [ 1116.976573][T26472] chnl_net:caif_netlink_parms(): no params data found [ 1117.010710][T26488] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1117.016582][T26488] Node 0 DMA32 free:1436976kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34328kB inactive_anon:0kB active_file:76020kB inactive_file:160440kB unevictable:1536kB writepending:1924kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:39424kB local_pcp:19044kB free_cma:0kB [ 1117.083281][T26488] lowmem_reserve[]: 0 0 0 0 0 [ 1117.088092][T26488] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1117.132632][T26488] lowmem_reserve[]: 0 0 0 0 0 [ 1117.137425][T26488] Node 1 Normal free:3891236kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20800kB local_pcp:7456kB free_cma:0kB [ 1117.181485][T26488] lowmem_reserve[]: 0 0 0 0 0 [ 1117.190688][T26488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1117.212370][T26488] Node 0 DMA32: 2467*4kB (UME) 1327*8kB (UME) 823*16kB (UME) 391*32kB (UME) 1698*64kB (UME) 864*128kB (UME) 294*256kB (UM) 103*512kB (UME) 32*1024kB (UM) 15*2048kB (UME) 239*4096kB (M) = 1435860kB [ 1117.235122][T26488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1117.248043][T26488] Node 1 Normal: 239*4kB (UME) 59*8kB (UME) 31*16kB (UME) 47*32kB (UME) 17*64kB (UE) 3*128kB (UME) 1*256kB (U) 2*512kB (ME) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3891236kB [ 1117.266305][T26488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.276056][T26488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1117.285436][T26488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1117.295201][T26488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1117.304974][T26488] 60732 total pagecache pages [ 1117.309681][T26488] 0 pages in swap cache [ 1117.313952][T26488] Free swap = 124996kB [ 1117.318131][T26488] Total swap = 124996kB [ 1117.322342][T26488] 2097051 pages RAM [ 1117.326164][T26488] 0 pages HighMem/MovableOnly [ 1117.330986][T26488] 416955 pages reserved [ 1117.335190][T26488] 0 pages cma reserved [ 1117.480758][ T5779] Bluetooth: hci2: command tx timeout [ 1117.542257][T26472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.570298][T26472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.583911][T26472] bridge_slave_0: entered allmulticast mode [ 1117.596722][T26472] bridge_slave_0: entered promiscuous mode [ 1117.653280][T26472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.670871][T26472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.681104][T26472] bridge_slave_1: entered allmulticast mode [ 1117.688036][T26472] bridge_slave_1: entered promiscuous mode [ 1117.845103][T26472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.923136][T26472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.097321][T26523] netlink: 'syz.0.7214': attribute type 10 has an invalid length. [ 1118.164536][T26472] team0: Port device team_slave_0 added [ 1118.184653][T26472] team0: Port device team_slave_1 added [ 1118.298097][ T5779] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1118.329912][T26530] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1118.393997][T26536] netlink: 'syz.0.7218': attribute type 10 has an invalid length. [ 1118.404423][T26536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7218'. [ 1118.415556][T26472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.430717][T26472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.487479][T26472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.530007][T26472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.546344][T26472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.575109][T26472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.083600][T10319] wlan1: Trigger new scan to find an IBSS to join [ 1119.099241][T26540] syzkaller0: entered promiscuous mode [ 1119.107850][T26540] syzkaller0: entered allmulticast mode [ 1119.182617][T26472] hsr_slave_0: entered promiscuous mode [ 1119.189644][T26472] hsr_slave_1: entered promiscuous mode [ 1119.198311][T26472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1119.213926][T26472] Cannot create hsr debugfs directory [ 1119.563673][T14703] Bluetooth: hci2: command tx timeout [ 1119.982168][T10319] wlan1: Creating new IBSS network, BSSID fa:cb:5a:7a:53:bb [ 1121.204096][T26557] netlink: 'syz.3.7221': attribute type 10 has an invalid length. [ 1121.215746][T26557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7221'. [ 1121.227107][T26557] dummy0: entered promiscuous mode [ 1121.232319][T26557] dummy0: entered allmulticast mode [ 1121.238664][T26557] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1121.390356][T26567] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7222'. [ 1121.641141][T14703] Bluetooth: hci2: command tx timeout [ 1121.783394][T21111] hsr_slave_0: left promiscuous mode [ 1121.804209][T21111] hsr_slave_1: left promiscuous mode [ 1121.826684][T21111] veth1_macvtap: left promiscuous mode [ 1121.832774][T21111] veth1_vlan: left promiscuous mode [ 1121.838205][T21111] veth0_vlan: left promiscuous mode [ 1122.568895][T21111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.612844][T21111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.657033][T21111] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1122.846812][T21111] bond0 (unregistering): Released all slaves [ 1123.273248][T26597] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1123.723954][T14703] Bluetooth: hci2: command tx timeout [ 1123.760172][T26472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1123.790891][T26472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1123.831475][T26472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1123.878728][T26472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1124.172606][T26472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.233497][T26472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.276245][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.283503][T10335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.319324][T26623] netlink: 'syz.1.7233': attribute type 25 has an invalid length. [ 1124.338687][T26623] netlink: 'syz.1.7233': attribute type 9 has an invalid length. [ 1124.370548][T10319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.377827][T10319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.969480][T26647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1125.030212][T26472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.155073][T26472] veth0_vlan: entered promiscuous mode [ 1125.172451][T26472] veth1_vlan: entered promiscuous mode [ 1125.249912][T26472] veth0_macvtap: entered promiscuous mode [ 1125.274154][T26472] veth1_macvtap: entered promiscuous mode [ 1125.298737][T26472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.330013][T26472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.352612][T26472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.377103][T26472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.404216][T26472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.425527][T26472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.458043][T26472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.480863][T26472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.496302][T26472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.513970][T26472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.651548][T26666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1125.658854][T26666] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.666238][T26666] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.673520][T26666] IPv6: NLM_F_CREATE should be set when creating new route [ 1125.727132][T26668] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7241'. [ 1125.892626][T21111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.900538][T21111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.980360][T10317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.995655][T10317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.063100][T26675] FAULT_INJECTION: forcing a failure. [ 1126.063100][T26675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.129132][T26675] CPU: 1 PID: 26675 Comm: syz.1.7243 Not tainted syzkaller #0 [ 1126.136768][T26675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1126.146866][T26675] Call Trace: [ 1126.150199][T26675] [ 1126.153183][T26675] dump_stack_lvl+0x18c/0x250 [ 1126.157911][T26675] ? show_regs_print_info+0x20/0x20 [ 1126.163167][T26675] ? load_image+0x420/0x420 [ 1126.167740][T26675] ? __might_fault+0xaa/0x120 [ 1126.172478][T26675] ? __lock_acquire+0x7d80/0x7d80 [ 1126.177548][T26675] should_fail_ex+0x394/0x4c0 [ 1126.182293][T26675] _copy_from_iter+0x1cd/0x1290 [ 1126.187190][T26675] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1126.193384][T26675] ? copyout_mc+0x70/0x70 [ 1126.197762][T26675] ? __virt_addr_valid+0x10c/0x380 [ 1126.202918][T26675] ? __virt_addr_valid+0x10c/0x380 [ 1126.208070][T26675] ? __virt_addr_valid+0x10c/0x380 [ 1126.213209][T26675] ? __check_object_size+0x4fc/0xa40 [ 1126.218542][T26675] rxrpc_send_data+0xd12/0x29d0 [ 1126.223459][T26675] ? rxrpc_do_sendmsg+0x12d0/0x12d0 [ 1126.228675][T26675] ? do_raw_spin_unlock+0x121/0x230 [ 1126.233900][T26675] ? do_task_dead+0xd0/0xd0 [ 1126.238422][T26675] ? rxrpc_new_client_call+0xf64/0x1400 [ 1126.243989][T26675] rxrpc_do_sendmsg+0x10c6/0x12d0 [ 1126.249038][T26675] ? rxrpc_propose_abort+0x1f0/0x1f0 [ 1126.254339][T26675] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1126.259738][T26675] ? rxrpc_sendmsg+0x373/0x5b0 [ 1126.264513][T26675] ? rxrpc_getsockopt+0x150/0x150 [ 1126.269571][T26675] ____sys_sendmsg+0x61b/0x980 [ 1126.274354][T26675] ? __sys_sendmsg_sock+0x30/0x30 [ 1126.279404][T26675] ? __import_iovec+0x5f2/0x850 [ 1126.284308][T26675] ? import_iovec+0x73/0xa0 [ 1126.288830][T26675] ___sys_sendmsg+0x2a6/0x360 [ 1126.293529][T26675] ? __sys_sendmsg+0x2b0/0x2b0 [ 1126.298357][T26675] __se_sys_sendmsg+0x1d0/0x2c0 [ 1126.303231][T26675] ? perf_trace_preemptirq_template+0x269/0x330 [ 1126.309515][T26675] ? __x64_sys_sendmsg+0x80/0x80 [ 1126.314481][T26675] ? lockdep_hardirqs_on+0x98/0x150 [ 1126.319712][T26675] do_syscall_64+0x55/0xb0 [ 1126.324165][T26675] ? clear_bhb_loop+0x40/0x90 [ 1126.328870][T26675] ? clear_bhb_loop+0x40/0x90 [ 1126.333580][T26675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.339500][T26675] RIP: 0033:0x7fde9319de99 [ 1126.343982][T26675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.363622][T26675] RSP: 002b:00007fde940b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.372082][T26675] RAX: ffffffffffffffda RBX: 00007fde93425fa0 RCX: 00007fde9319de99 [ 1126.380091][T26675] RDX: 000000000000ff4c RSI: 0000200000000000 RDI: 0000000000000005 [ 1126.388098][T26675] RBP: 00007fde940b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.396117][T26675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.404111][T26675] R13: 00007fde93426038 R14: 00007fde93425fa0 R15: 00007ffc2dbea408 [ 1126.412109][T26675] [ 1126.897206][T26696] netlink: 'syz.1.7246': attribute type 10 has an invalid length. [ 1126.909667][T26696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7246'. [ 1126.919318][T26696] dummy0: entered promiscuous mode [ 1126.924895][T26696] dummy0: entered allmulticast mode [ 1126.941042][T26696] bridge0: port 3(dummy0) entered blocking state [ 1126.949092][T26696] bridge0: port 3(dummy0) entered disabled state [ 1126.967413][T26696] bridge0: port 3(dummy0) entered blocking state [ 1126.974400][T26696] bridge0: port 3(dummy0) entered forwarding state [ 1127.081517][T10317] wlan1: Trigger new scan to find an IBSS to join [ 1127.139451][T26705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1127.447472][T26713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7252'. [ 1127.900147][T26732] veth1_vlan: left promiscuous mode [ 1127.945151][T26732] macvlan1: entered allmulticast mode [ 1128.341793][T26739] veth1_vlan: entered promiscuous mode [ 1128.398307][T26739] veth1_vlan: entered allmulticast mode [ 1128.441212][T26739] macvlan1: left allmulticast mode [ 1128.450385][T26739] veth1_vlan: left allmulticast mode [ 1128.675716][T26755] netlink: 'syz.1.7268': attribute type 10 has an invalid length. [ 1129.003231][T26755] team0 (unregistering): Port device team_slave_0 removed [ 1129.052511][T26755] team0 (unregistering): Port device team_slave_1 removed [ 1129.336356][T26779] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7264'. [ 1129.707942][T26788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1129.715305][T26788] IPv6: NLM_F_CREATE should be set when creating new route [ 1129.722629][T26788] IPv6: NLM_F_CREATE should be set when creating new route [ 1129.729911][T26788] IPv6: NLM_F_CREATE should be set when creating new route [ 1130.120855][T10335] wlan1: Trigger new scan to find an IBSS to join [ 1130.196376][T26795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7269'. [ 1130.549663][T26793] @0Ùaaaaaaaaa: renamed from bond_slave_1 (while UP) [ 1130.587939][T26795] netlink: 'syz.3.7269': attribute type 21 has an invalid length. [ 1130.610423][T26795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7269'. [ 1130.751342][T26802] netlink: 'syz.0.7272': attribute type 10 has an invalid length. [ 1130.783452][T26799] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7270'. [ 1131.079430][T26820] netlink: 'syz.0.7276': attribute type 39 has an invalid length. [ 1131.094726][T10335] wlan1: Creating new IBSS network, BSSID b6:99:d1:86:ca:13 [ 1131.148713][T26823] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7276'. [ 1131.386219][T26827] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1131.416314][T26824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1132.092613][T26847] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1132.334549][T26857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7287'. [ 1132.416450][T26857] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7287'. [ 1132.451707][T26861] FAULT_INJECTION: forcing a failure. [ 1132.451707][T26861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1132.468528][T26861] CPU: 0 PID: 26861 Comm: syz.2.7287 Not tainted syzkaller #0 [ 1132.476053][T26861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1132.486152][T26861] Call Trace: [ 1132.489476][T26861] [ 1132.492440][T26861] dump_stack_lvl+0x18c/0x250 [ 1132.497177][T26861] ? show_regs_print_info+0x20/0x20 [ 1132.502421][T26861] ? load_image+0x420/0x420 [ 1132.506979][T26861] ? __lock_acquire+0x7d80/0x7d80 [ 1132.512049][T26861] ? verify_lock_unused+0x140/0x140 [ 1132.517298][T26861] should_fail_ex+0x394/0x4c0 [ 1132.522025][T26861] prepare_alloc_pages+0x1e1/0x5b0 [ 1132.527189][T26861] __alloc_pages+0x134/0x460 [ 1132.531833][T26861] ? zone_statistics+0x170/0x170 [ 1132.536803][T26861] ? mt_find+0x169/0x640 [ 1132.541077][T26861] ? handle_mm_fault+0xe6/0x4a50 [ 1132.546038][T26861] ? __lock_acquire+0x7d80/0x7d80 [ 1132.551179][T26861] __folio_alloc+0x10/0x20 [ 1132.555620][T26861] vma_alloc_folio+0x474/0x8f0 [ 1132.560403][T26861] ? handle_mm_fault+0xe6/0x4a50 [ 1132.565367][T26861] handle_mm_fault+0x1ab6/0x4a50 [ 1132.570348][T26861] ? handle_mm_fault+0xe6/0x4a50 [ 1132.575324][T26861] ? numa_migrate_prep+0x350/0x350 [ 1132.580484][T26861] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1132.585799][T26861] do_user_addr_fault+0x736/0x12d0 [ 1132.590947][T26861] exc_page_fault+0x64/0x100 [ 1132.595569][T26861] asm_exc_page_fault+0x26/0x30 [ 1132.600493][T26861] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1132.606336][T26861] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1132.625965][T26861] RSP: 0018:ffffc90004ecf630 EFLAGS: 00050206 [ 1132.632059][T26861] RAX: ffffffff842fa501 RBX: 0000000000000b0a RCX: 0000000000000b0a [ 1132.640053][T26861] RDX: 0000000000000000 RSI: ffff8880218f4096 RDI: 0000200000001940 [ 1132.648051][T26861] RBP: ffffc90004ecf7c0 R08: ffff8880218f4b9f R09: 1ffff1100431e973 [ 1132.656044][T26861] R10: dffffc0000000000 R11: ffffed100431e974 R12: 000020000000244a [ 1132.664051][T26861] R13: ffffc90004ecfe40 R14: 0000200000001940 R15: ffff8880218f4096 [ 1132.672078][T26861] ? _copy_to_iter+0x1071/0x1110 [ 1132.677063][T26861] copyout+0x70/0x90 [ 1132.680998][T26861] _copy_to_iter+0x42b/0x1110 [ 1132.685714][T26861] ? __virt_addr_valid+0x10c/0x380 [ 1132.690870][T26861] ? iov_iter_init+0x1e0/0x1e0 [ 1132.695698][T26861] ? __virt_addr_valid+0x10c/0x380 [ 1132.700844][T26861] ? __virt_addr_valid+0x10c/0x380 [ 1132.705994][T26861] ? __virt_addr_valid+0x10c/0x380 [ 1132.711162][T26861] ? __check_object_size+0x4fc/0xa40 [ 1132.716482][T26861] __skb_datagram_iter+0xdb/0x780 [ 1132.721543][T26861] ? skb_copy_datagram_iter+0x200/0x200 [ 1132.727126][T26861] skb_copy_datagram_iter+0xb1/0x200 [ 1132.732449][T26861] netlink_recvmsg+0x2d4/0xe60 [ 1132.737235][T26861] ? netlink_sendmsg+0xbf0/0xbf0 [ 1132.742200][T26861] ? aa_af_perm+0x330/0x330 [ 1132.746725][T26861] ? __lock_acquire+0x1262/0x7d80 [ 1132.751791][T26861] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1132.757127][T26861] ? security_socket_recvmsg+0x89/0xb0 [ 1132.762602][T26861] ? netlink_sendmsg+0xbf0/0xbf0 [ 1132.767556][T26861] ____sys_recvmsg+0x2bd/0x5d0 [ 1132.772357][T26861] ? __sys_recvmsg_sock+0x50/0x50 [ 1132.777413][T26861] ? import_iovec+0x73/0xa0 [ 1132.781979][T26861] ___sys_recvmsg+0x214/0x590 [ 1132.786680][T26861] ? __sys_recvmsg+0x2a0/0x2a0 [ 1132.791488][T26861] ? ksys_write+0x1d2/0x260 [ 1132.796033][T26861] ? __fget_files+0x3fc/0x460 [ 1132.800760][T26861] __x64_sys_recvmsg+0x21e/0x2f0 [ 1132.805745][T26861] ? ___sys_recvmsg+0x590/0x590 [ 1132.810656][T26861] ? lockdep_hardirqs_on+0x98/0x150 [ 1132.815884][T26861] do_syscall_64+0x55/0xb0 [ 1132.820322][T26861] ? clear_bhb_loop+0x40/0x90 [ 1132.825022][T26861] ? clear_bhb_loop+0x40/0x90 [ 1132.829716][T26861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1132.835655][T26861] RIP: 0033:0x7f594bf9de99 [ 1132.840093][T26861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.859717][T26861] RSP: 002b:00007f594ce1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1132.868153][T26861] RAX: ffffffffffffffda RBX: 00007f594c226090 RCX: 00007f594bf9de99 [ 1132.876149][T26861] RDX: 0000000000000120 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1132.884137][T26861] RBP: 00007f594ce1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.892130][T26861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.900128][T26861] R13: 00007f594c226128 R14: 00007f594c226090 R15: 00007ffd3c2ff5a8 [ 1132.908143][T26861] [ 1133.066746][T26861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7287'. [ 1133.102522][T26865] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1133.150510][T26860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7289'. [ 1133.316115][T26880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7293'. [ 1133.767199][T26891] FAULT_INJECTION: forcing a failure. [ 1133.767199][T26891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.802619][T26891] CPU: 0 PID: 26891 Comm: syz.2.7296 Not tainted syzkaller #0 [ 1133.810187][T26891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1133.820277][T26891] Call Trace: [ 1133.823595][T26891] [ 1133.826557][T26891] dump_stack_lvl+0x18c/0x250 [ 1133.831280][T26891] ? show_regs_print_info+0x20/0x20 [ 1133.836524][T26891] ? load_image+0x420/0x420 [ 1133.841086][T26891] ? __might_fault+0xaa/0x120 [ 1133.845810][T26891] ? __lock_acquire+0x7d80/0x7d80 [ 1133.850888][T26891] ? __virt_addr_valid+0x10c/0x380 [ 1133.856055][T26891] should_fail_ex+0x394/0x4c0 [ 1133.860792][T26891] _copy_from_user+0x2f/0xe0 [ 1133.865481][T26891] sctp_setsockopt+0x19e/0x11e0 [ 1133.870402][T26891] ? sock_common_recvmsg+0x190/0x190 [ 1133.875743][T26891] do_sock_setsockopt+0x175/0x1a0 [ 1133.880813][T26891] ? __fdget+0x180/0x210 [ 1133.885113][T26891] __x64_sys_setsockopt+0x182/0x200 [ 1133.890365][T26891] do_syscall_64+0x55/0xb0 [ 1133.894829][T26891] ? clear_bhb_loop+0x40/0x90 [ 1133.899552][T26891] ? clear_bhb_loop+0x40/0x90 [ 1133.904278][T26891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.910222][T26891] RIP: 0033:0x7f594bf9de99 [ 1133.914691][T26891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.934365][T26891] RSP: 002b:00007f594ce3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1133.942835][T26891] RAX: ffffffffffffffda RBX: 00007f594c225fa0 RCX: 00007f594bf9de99 [ 1133.950866][T26891] RDX: 0000000000000019 RSI: 0000000000000084 RDI: 0000000000000009 [ 1133.958885][T26891] RBP: 00007f594ce3e090 R08: 0000000000000008 R09: 0000000000000000 [ 1133.966901][T26891] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.974920][T26891] R13: 00007f594c226038 R14: 00007f594c225fa0 R15: 00007ffd3c2ff5a8 [ 1133.983036][T26891] [ 1134.022419][T26897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1134.114254][T26895] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1134.129521][T10319] wlan1: Trigger new scan to find an IBSS to join [ 1134.419459][T26911] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1134.543180][T26913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1135.160814][T10317] wlan1: Trigger new scan to find an IBSS to join [ 1135.425670][T26944] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1135.684315][T26956] netlink: 'syz.3.7318': attribute type 9 has an invalid length. [ 1135.701217][T26956] __nla_validate_parse: 9 callbacks suppressed [ 1135.701242][T26956] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1135.776743][T26954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7315'. [ 1135.870220][T26956] netlink: 'syz.3.7318': attribute type 9 has an invalid length. [ 1135.882384][T26956] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7318'. [ 1136.149583][T26969] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 1136.180758][T26969] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 1136.219370][T26972] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 1136.266246][T26972] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 1136.349580][ C0] [ 1136.349590][ C0] ================================ [ 1136.349595][ C0] WARNING: inconsistent lock state [ 1136.349618][ C0] syzkaller #0 Not tainted [ 1136.349628][ C0] -------------------------------- [ 1136.349633][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1136.349641][ C0] syz.1.7324/26975 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1136.349661][ C0] ffff8880600b1238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 1136.349718][ C0] {INITIAL USE} state was registered at: [ 1136.349725][ C0] lock_acquire+0x19e/0x420 [ 1136.349745][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1136.349772][ C0] trie_update_elem+0xc4/0xd60 [ 1136.349795][ C0] bpf_map_update_value+0x64b/0x710 [ 1136.349811][ C0] map_update_elem+0x586/0x710 [ 1136.349829][ C0] __sys_bpf+0x6b5/0x890 [ 1136.349845][ C0] __x64_sys_bpf+0x7c/0x90 [ 1136.349861][ C0] do_syscall_64+0x55/0xb0 [ 1136.349879][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.349901][ C0] irq event stamp: 1544 [ 1136.349907][ C0] hardirqs last enabled at (1543): [] pcpu_memcg_post_alloc_hook+0x282/0x3f0 [ 1136.349937][ C0] hardirqs last disabled at (1544): [] exc_debug+0x73/0x140 [ 1136.349960][ C0] softirqs last enabled at (1464): [] bpf_map_alloc_id+0x87/0xd0 [ 1136.349985][ C0] softirqs last disabled at (1462): [] bpf_map_alloc_id+0x21/0xd0 [ 1136.350010][ C0] [ 1136.350010][ C0] other info that might help us debug this: [ 1136.350015][ C0] Possible unsafe locking scenario: [ 1136.350015][ C0] [ 1136.350020][ C0] CPU0 [ 1136.350024][ C0] ---- [ 1136.350027][ C0] lock(&trie->lock); [ 1136.350039][ C0] [ 1136.350042][ C0] lock(&trie->lock); [ 1136.350071][ C0] [ 1136.350071][ C0] *** DEADLOCK *** [ 1136.350071][ C0] [ 1136.350075][ C0] no locks held by syz.1.7324/26975. [ 1136.350083][ C0] [ 1136.350083][ C0] stack backtrace: [ 1136.350089][ C0] CPU: 0 PID: 26975 Comm: syz.1.7324 Not tainted syzkaller #0 [ 1136.350107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1136.350118][ C0] Call Trace: [ 1136.350126][ C0] <#DB> [ 1136.350266][ C0] dump_stack_lvl+0x18c/0x250 [ 1136.350289][ C0] ? show_regs_print_info+0x20/0x20 [ 1136.350312][ C0] ? print_usage_bug+0x43d/0x6a0 [ 1136.350334][ C0] ? verify_lock_unused+0x15/0x140 [ 1136.350357][ C0] lock_acquire+0x2c2/0x420 [ 1136.350380][ C0] ? trie_delete_elem+0x94/0x630 [ 1136.350406][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1136.350428][ C0] ? look_up_lock_class+0x75/0x140 [ 1136.350452][ C0] ? verify_lock_unused+0x15/0x140 [ 1136.350474][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 1136.350501][ C0] ? trie_delete_elem+0x94/0x630 [ 1136.350526][ C0] ? _raw_spin_lock+0x40/0x40 [ 1136.350588][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 1136.350614][ C0] trie_delete_elem+0x94/0x630 [ 1136.350645][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1136.350665][ C0] bpf_overflow_handler+0x1fc/0x510 [ 1136.350696][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 1136.350719][ C0] ? bpf_overflow_handler+0xde/0x510 [ 1136.350747][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 1136.350774][ C0] ? lock_release+0xb5/0x8c0 [ 1136.350800][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1136.350825][ C0] __perf_event_overflow+0x461/0x660 [ 1136.350852][ C0] perf_swevent_event+0x319/0x570 [ 1136.350877][ C0] ? perf_tp_event+0x1550/0x1550 [ 1136.350898][ C0] ? perf_trace_lock_acquire+0x105/0x400 [ 1136.350923][ C0] perf_bp_event+0x319/0x430 [ 1136.350949][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 1136.350990][ C0] ? lock_acquire+0x2c2/0x420 [ 1136.351017][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1136.351045][ C0] notifier_call_chain+0x18f/0x380 [ 1136.351073][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 1136.351099][ C0] atomic_notifier_call_chain+0xda/0x180 [ 1136.351126][ C0] notify_die+0x145/0x1a0 [ 1136.351153][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1136.351183][ C0] ? rcu_is_watching+0x15/0xb0 [ 1136.351211][ C0] notify_debug+0x2e/0x50 [ 1136.351244][ C0] exc_debug+0xde/0x140 [ 1136.351268][ C0] asm_exc_debug+0x1e/0x40 [ 1136.351288][ C0] RIP: 0010:strncpy_from_user+0x10f/0x2f0 [ 1136.351321][ C0] Code: de e8 85 c1 22 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 4f 8b 3c 27 <48> b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48 f7 d5 48 b8 [ 1136.351338][ C0] RSP: 0018:ffffc900054afb50 EFLAGS: 00040246 [ 1136.351356][ C0] RAX: ffffffff8464b78b RBX: 000000000000007f RCX: ffff88801eeebc00 [ 1136.351371][ C0] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 1136.351383][ C0] RBP: ffffc900054afd70 R08: ffff88801eeebc00 R09: 0000000000000003 [ 1136.351397][ C0] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 1136.351409][ C0] R13: 0000000000000000 R14: fffffffffffffff8 R15: 00006370004c5047 [ 1136.351428][ C0] ? strncpy_from_user+0xeb/0x2f0 [ 1136.351461][ C0] [ 1136.351467][ C0] [ 1136.351477][ C0] bpf_prog_load+0xc9e/0x1610 [ 1136.351506][ C0] ? map_freeze+0x420/0x420 [ 1136.351536][ C0] ? __might_fault+0xaa/0x120 [ 1136.351555][ C0] ? __might_fault+0xc6/0x120 [ 1136.351581][ C0] ? __might_fault+0xaa/0x120 [ 1136.351601][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 1136.351628][ C0] ? security_bpf+0x7e/0xa0 [ 1136.351660][ C0] __sys_bpf+0x5ba/0x890 [ 1136.351680][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 1136.351709][ C0] ? lock_chain_count+0x20/0x20 [ 1136.351734][ C0] __x64_sys_bpf+0x7c/0x90 [ 1136.351754][ C0] do_syscall_64+0x55/0xb0 [ 1136.351772][ C0] ? clear_bhb_loop+0x40/0x90 [ 1136.351792][ C0] ? clear_bhb_loop+0x40/0x90 [ 1136.351813][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1136.351832][ C0] RIP: 0033:0x7fde9319de99 [ 1136.351846][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.351862][ C0] RSP: 002b:00007fde940b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1136.351881][ C0] RAX: ffffffffffffffda RBX: 00007fde93425fa0 RCX: 00007fde9319de99 [ 1136.351895][ C0] RDX: 0000000000000094 RSI: 0000200000000480 RDI: 0000000000000005 [ 1136.351907][ C0] RBP: 00007fde93233eaf R08: 0000000000000000 R09: 0000000000000000 [ 1136.351919][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.351930][ C0] R13: 00007fde93426038 R14: 00007fde93425fa0 R15: 00007ffc2dbea408 [ 1136.351951][ C0] [ 1137.032452][T26974] base_sock_release(ffff888054c89200) sk=ffff88805705f000 [ 1138.120787][T10341] wlan1: Trigger new scan to find an IBSS to join [ 1140.120851][T10317] wlan1: Trigger new scan to find an IBSS to join [ 1141.001002][T10317] wlan1: Creating new IBSS network, BSSID b6:cc:41:04:83:c5 [ 1141.160816][T10319] wlan1: Trigger new scan to find an IBSS to join [ 1144.120842][T10317] wlan1: Trigger new scan to find an IBSS to join [ 1145.000956][T10341] wlan1: Creating new IBSS network, BSSID 8e:64:9e:c0:72:33