last executing test programs: 8.587578875s ago: executing program 2 (id=2216): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 8.055972669s ago: executing program 0 (id=2217): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={&(0x7f0000001240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffffffff, 0x1, 0x2, 0x1, {0xa, 0x4e23, 0x8, @loopback, 0x95da}}}, 0x80, 0x0}, 0x20020830) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="60d6b068fc45"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0xb, 0x0, 0x321b63ad, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r3, 0x10, 0x2c, 0x0, @void, @void, @void, @value=r6, r5}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 8.055471889s ago: executing program 2 (id=2218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b0000000500000001000100"], 0x48) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r0}, &(0x7f00000012c0), &(0x7f0000001340)}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x7, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) 6.385387435s ago: executing program 0 (id=2220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r0}, 0x0, &(0x7f0000001340)}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x7, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.365946468s ago: executing program 2 (id=2222): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') ioctl$TUNSETFILTEREBPF(r0, 0xb702, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7fff}, 0x400, 0x32, 0x43a1bd56, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x500, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x35, &(0x7f0000000300)}, 0xffffffffffffffb6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x3c, 0x0, 0x0, 0x2000}, 0x28) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='memory.events\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x58, &(0x7f0000000200)}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) (async) r7 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x8, &(0x7f0000000100), 0x4) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000210081044e810382db44b9040a00000000fe0500002015000600142603600e1209001100800000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) (async) recvmsg$kcm(r7, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x22) (async) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000800)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240fecfd95e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c57000000000000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f9886862c9e2841033c91633d5f77d6a6e3b589c7", 0x91}, {&(0x7f0000000100)="d83b06000000fd03ce3e01df4c000000009e7af9e172000000aa", 0x1a}, {&(0x7f0000000940)="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", 0xe18}, {&(0x7f0000000280)="c2f6aac64f849ece2d0d299cf2b00229025a081ec12dd5a7128ad08f18c9f01625", 0x21}], 0x6}, 0x40080) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.989537267s ago: executing program 3 (id=2224): socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="62042700590253000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331656457048a75f930a248b705d70eb29c1b54cbe", 0xee}, {&(0x7f0000000840)="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", 0x1c1}, {0x0}], 0x3}, 0x8001) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000000c0), 0x9d) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 4.950746315s ago: executing program 1 (id=2225): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000700)=""/64, 0x40}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c) sendmsg$kcm(r0, &(0x7f0000001bc0)={&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, &(0x7f0000001b40)=[{0x0}, {0x0}, {&(0x7f0000001a40)}, {0x0}], 0x4}, 0xc8c0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x1c) 4.676393018s ago: executing program 0 (id=2226): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 4.610295031s ago: executing program 2 (id=2227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000e6ffffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x18, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0xf2, 0x50, &(0x7f00000009c0)=""/80, 0x41000, 0x4, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000a80)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x6, 0x4, 0x8}, 0x10, 0x2bddf, r1, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x3, 0xffff0f00}]}, {0x0, [0x61, 0x2e, 0x2e]}}, 0x0, 0x2d}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) socket$kcm(0x21, 0x2, 0x2) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.582169826s ago: executing program 3 (id=2228): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f000000a1c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000008c000000a700000000000000180000000000000000000000000000009500000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x13}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x8000) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d2600d00030009000100ff35", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000500000000001d000000008041"], 0x50) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0xe, [{@private=0xa010101, 0x7}, {@multicast2, 0x9}, {@multicast1, 0x2}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x80b}, {@multicast2, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}]}]}}}], 0x88}, 0x20002800) 4.440083524s ago: executing program 1 (id=2229): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff34, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff34, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="1801ffff00000000800000000000000001000000950000000000001a184000000200000000004e91ff4eba23bf6600000000000085100000ffffffff9500000000000000c62a057c3c8f019985ca634c6c89999c925ebb40b6ae4826aaed61c1680979a31ca5d9b07b58a2fcac23506ce1a5b231134abd2fcc140d55b65ecc92dffff67f752d013754af7a2b93c1bffb4647cea821f1d620b84be73b6da7d06c0e7e297f50096d3e0ba6b2f71ea9e16c5e75c85a0b6c1c71012d274f5748912edb3624111dfcf513f81bb22dd1c3e0550ac784720a274bae"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x805}, 0x94) 4.239052843s ago: executing program 0 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b0000000500000001000100"], 0x48) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r0}, &(0x7f00000012c0), &(0x7f0000001340)}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x7, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) 3.886559302s ago: executing program 3 (id=2231): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x6e7fdfba497cce4d, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r1}, &(0x7f00000012c0), &(0x7f0000001340)=r2}, 0x20) syz_clone(0x4000000, 0x0, 0x1100, 0x0, 0x0, 0x0) 3.646854149s ago: executing program 3 (id=2232): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00', @random="000000010020"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac03800060007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x22903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, r4, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000340)) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b", 0x7}], 0x1}, 0x20000800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) close(r7) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffef, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r7, 0x0, 0xfe33) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000000), 0xce, r9}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000000000faffffff"], &(0x7f0000000100)='syzkaller\x00', 0x40, 0xf7, &(0x7f0000000240)=""/247, 0x41100, 0x5f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0x1], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x22, 0x0, 0x7ff, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r10, @ANYBLOB='\x00'/12, @ANYRES32, @ANYRES64=r11], 0x20) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e00886ae9531f3b3f0000007ea20864160af3653c001ac00400020208000200030001001400060007b556a737c160f9555b4755bb05251e180000000051f74e1476dfb6f60a84c9f4d4", 0x56}, {&(0x7f00000000c0)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) 1.477529572s ago: executing program 1 (id=2233): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) 1.475045112s ago: executing program 0 (id=2241): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r1}, &(0x7f00000012c0), &(0x7f0000001340)=r4}, 0x20) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.260557204s ago: executing program 2 (id=2234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r0}, 0x0, &(0x7f0000001340)}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x7, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.155593505s ago: executing program 3 (id=2235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000740), 0xe}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010080)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xfffffffe, 0x0, 0x2, 0x9}, {0x1, 0x0, 0x1}], 0x10, 0x316bb6af}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x19, &(0x7f0000000000), 0x8) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r8, @ANYBLOB="0100000002"], 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x9, &(0x7f0000000400), 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000580), 0x8, 0x38, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) 1.154486205s ago: executing program 1 (id=2236): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0048003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) 973.94253ms ago: executing program 0 (id=2237): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000700)=""/64, 0x40}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c) sendmsg$kcm(r0, &(0x7f0000001bc0)={&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, &(0x7f0000001b40)=[{0x0}, {0x0}, {&(0x7f0000001a40)}, {0x0}], 0x4}, 0xc8c0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x1c) 727.900768ms ago: executing program 1 (id=2238): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) close(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 149.451761ms ago: executing program 2 (id=2239): socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="62042700590253000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331656457048a75f930a248b705d70eb29c1b54cbe", 0xee}, {&(0x7f0000000840)="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", 0x1c1}, {0x0}], 0x3}, 0x8001) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x1e, 0x2, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000000c0), 0x9d) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 119.384477ms ago: executing program 3 (id=2240): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x402, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./file0\x00', r3, 0x4000, r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x800) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02000000ff8d"}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x60, 0x4, 0x4, 0x0, 0xe, 0x1000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x5f7, 0xa4f598d}, 0xc00, 0x4, 0x8, 0x0, 0x2, 0x8, 0x7, 0x0, 0xffffffff, 0x0, 0x4}, r0, 0xb, r4, 0x2) recvmsg$unix(r7, 0x0, 0x120c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002400000000000050000000000615f00cc4046e21618a078a0f84e87571f83611133c88a71e4e323417d25a53507b9b92d0e70ac4de6fe0f1b43065ad67462b0b24c6921a85b2a1183d53a40601e1bc5c7edd974f15ef323633f851c94157aa5ec4d78db5b7621d87d8bc8084d6ed207432c1f3a4412ba6d38b5cde98b79d6ea43721b0cbb017a32369f3a0140a491ca9da30efdd56e6338cb0bcf8ee0e0d39a1d430dd37c3023364f85cf7d507a445360beb8598ddc6eddcb57e8a53b8aea19df5c1c00aa9aaadbdd907cf2f116b0fa2b3af3bd620852563cf905"], 0x0, 0x28, 0x0, 0x1, 0x3ff}, 0x28) 0s ago: executing program 1 (id=2242): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r2, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r6 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16384kB local_pcp:7872kB free_cma:0kB [ 264.583338][ T8285] lowmem_reserve[]: 0 0 0 0 0 [ 264.588196][ T8285] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.607000][ T8285] Node 0 DMA32: 1239*4kB (UME) 1049*8kB (UME) 925*16kB (UME) 1332*32kB (UME) 590*64kB (UME) 456*128kB (UME) 272*256kB (UME) 135*512kB (UM) 63*1024kB (UME) 15*2048kB (M) 261*4096kB (M) = 1469940kB [ 264.631574][ T8285] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 264.646252][ T8285] Node 1 Normal: 225*4kB (UME) 56*8kB (UME) 28*16kB (UME) 95*32kB (UME) 34*64kB (UE) 10*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3900004kB [ 264.678471][ T8285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.690214][ T8285] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.699945][ T8285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.710478][ T8285] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.719940][ T8285] 60377 total pagecache pages [ 264.725295][ T8285] 0 pages in swap cache [ 264.729524][ T8285] Free swap = 124996kB [ 264.734511][ T8285] Total swap = 124996kB [ 264.739083][ T8285] 2097051 pages RAM [ 264.744116][ T8285] 0 pages HighMem/MovableOnly [ 264.748856][ T8285] 416965 pages reserved [ 264.754501][ T8285] 0 pages cma reserved [ 266.495486][ T8278] netlink: 140 bytes leftover after parsing attributes in process `syz.0.824'. [ 266.660496][ T8294] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 266.676705][ T8294] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 266.689144][ T8294] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 266.700520][ T8294] netlink: 'syz.1.831': attribute type 29 has an invalid length. [ 266.782009][ T8294] netlink: 144 bytes leftover after parsing attributes in process `syz.1.831'. [ 267.193064][ T8310] netlink: 830 bytes leftover after parsing attributes in process `syz.1.839'. [ 268.415120][ T8328] netlink: 'syz.2.846': attribute type 29 has an invalid length. [ 268.423584][ T8328] netlink: 'syz.2.846': attribute type 29 has an invalid length. [ 268.447434][ T8328] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.846'. [ 268.497467][ T8330] netlink: 'syz.2.846': attribute type 29 has an invalid length. [ 268.529030][ T8330] netlink: 'syz.2.846': attribute type 29 has an invalid length. [ 268.830646][ T8338] netlink: 144 bytes leftover after parsing attributes in process `syz.2.850'. [ 270.220524][ T8361] netlink: 'syz.2.858': attribute type 25 has an invalid length. [ 270.228529][ T8361] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 270.546285][ T8372] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.862'. [ 270.563915][ T8372] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 272.005734][ T8395] netlink: 'syz.2.871': attribute type 21 has an invalid length. [ 272.044724][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 272.290584][ T8407] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 272.342543][ T8405] netlink: 'syz.0.875': attribute type 3 has an invalid length. [ 272.353007][ T8405] netlink: 132 bytes leftover after parsing attributes in process `syz.0.875'. [ 273.011414][ T8418] netlink: 'syz.0.880': attribute type 21 has an invalid length. [ 273.477360][ T8432] netlink: 'syz.1.887': attribute type 33 has an invalid length. [ 273.487526][ T8432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.887'. [ 276.798398][ T8488] FAULT_INJECTION: forcing a failure. [ 276.798398][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.829432][ T8488] CPU: 1 PID: 8488 Comm: syz.0.913 Not tainted syzkaller #0 [ 276.837054][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.848546][ T8488] Call Trace: [ 276.852297][ T8488] [ 276.855261][ T8488] dump_stack_lvl+0x18c/0x250 [ 276.859987][ T8488] ? show_regs_print_info+0x20/0x20 [ 276.865305][ T8488] ? load_image+0x420/0x420 [ 276.869832][ T8488] ? __might_fault+0xaa/0x120 [ 276.874785][ T8488] ? __lock_acquire+0x7d80/0x7d80 [ 276.879841][ T8488] ? __virt_addr_valid+0x10c/0x380 [ 276.884982][ T8488] should_fail_ex+0x394/0x4c0 [ 276.889781][ T8488] _copy_to_user+0x2f/0xa0 [ 276.894213][ T8488] bpf_verifier_vlog+0x4e6/0x840 [ 276.899180][ T8488] __btf_verifier_log+0xe3/0x140 [ 276.904145][ T8488] ? btf_check_sec_info+0x350/0x350 [ 276.909359][ T8488] ? lockdep_hardirqs_on+0x98/0x150 [ 276.914667][ T8488] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.921450][ T8488] ? btf_parse_hdr+0x1f0/0x700 [ 276.926417][ T8488] btf_parse_hdr+0x29e/0x700 [ 276.931028][ T8488] btf_new_fd+0x397/0x9e0 [ 276.935465][ T8488] ? bpf_btf_show_fdinfo+0x80/0x80 [ 276.940623][ T8488] ? capable+0x88/0xe0 [ 276.944758][ T8488] __sys_bpf+0x670/0x890 [ 276.949032][ T8488] ? read_tsc+0x9/0x20 [ 276.953119][ T8488] ? bpf_link_show_fdinfo+0x560/0x560 [ 276.958516][ T8488] ? lock_chain_count+0x20/0x20 [ 276.963400][ T8488] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 276.969405][ T8488] __x64_sys_bpf+0x7c/0x90 [ 276.973836][ T8488] do_syscall_64+0x55/0xb0 [ 276.978268][ T8488] ? clear_bhb_loop+0x40/0x90 [ 276.983326][ T8488] ? clear_bhb_loop+0x40/0x90 [ 276.988043][ T8488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.993967][ T8488] RIP: 0033:0x7fe9c099e159 [ 276.998399][ T8488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.018200][ T8488] RSP: 002b:00007fe9c179e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.026668][ T8488] RAX: ffffffffffffffda RBX: 00007fe9c0c25fa0 RCX: 00007fe9c099e159 [ 277.034667][ T8488] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 277.042671][ T8488] RBP: 00007fe9c179e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.050678][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.058662][ T8488] R13: 00007fe9c0c26038 R14: 00007fe9c0c25fa0 R15: 00007ffce994aaa8 [ 277.066856][ T8488] [ 277.298007][ T8496] netlink: 'syz.1.916': attribute type 21 has an invalid length. [ 277.325358][ T8496] netlink: 156 bytes leftover after parsing attributes in process `syz.1.916'. [ 277.447607][ T8497] netlink: 'syz.2.914': attribute type 10 has an invalid length. [ 277.712677][ T8504] netlink: 'syz.1.919': attribute type 10 has an invalid length. [ 277.727240][ T8504] netlink: 55 bytes leftover after parsing attributes in process `syz.1.919'. [ 278.112155][ T8509] sock: sock_timestamping_bind_phc: sock not bind to device [ 280.537376][ T8552] can: request_module (can-proto-0) failed. [ 281.027877][ T8547] delete_channel: no stack [ 281.524185][ T8563] netlink: 'syz.3.940': attribute type 10 has an invalid length. [ 281.901616][ T8570] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 281.955407][ T8570] netlink: 'syz.2.941': attribute type 3 has an invalid length. [ 282.056613][ T8571] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 282.120510][ T8570] netlink: 132 bytes leftover after parsing attributes in process `syz.2.941'. [ 282.146062][ T8571] netlink: 168 bytes leftover after parsing attributes in process `syz.2.941'. [ 282.325964][ T8579] raw_sendmsg: syz.3.946 forgot to set AF_INET. Fix it! [ 282.507779][ T8580] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.945'. [ 282.519094][ T8580] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.945'. [ 282.531673][ T8580] netlink: 2 bytes leftover after parsing attributes in process `syz.0.945'. [ 282.652277][ T8586] netlink: 'syz.1.947': attribute type 10 has an invalid length. [ 282.684009][ T8586] team0: Port device wlan1 added [ 282.708315][ T8587] Dead loop on virtual device ip6_vti0, fix it urgently! [ 283.846367][ T8603] netlink: 'syz.1.954': attribute type 25 has an invalid length. [ 283.900641][ T8603] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 283.943807][ T8605] netlink: 'syz.2.956': attribute type 2 has an invalid length. [ 283.971072][ T8609] netlink: 'syz.2.956': attribute type 2 has an invalid length. [ 283.997660][ T8607] FAULT_INJECTION: forcing a failure. [ 283.997660][ T8607] name failslab, interval 1, probability 0, space 0, times 0 [ 284.017775][ T8607] CPU: 0 PID: 8607 Comm: syz.0.957 Not tainted syzkaller #0 [ 284.025137][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.035235][ T8607] Call Trace: [ 284.038550][ T8607] [ 284.041733][ T8607] dump_stack_lvl+0x18c/0x250 [ 284.046471][ T8607] ? show_regs_print_info+0x20/0x20 [ 284.051710][ T8607] ? load_image+0x420/0x420 [ 284.056251][ T8607] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.062457][ T8607] should_fail_ex+0x394/0x4c0 [ 284.067361][ T8607] should_failslab+0x9/0x20 [ 284.072008][ T8607] slab_pre_alloc_hook+0x59/0x300 [ 284.077113][ T8607] kmem_cache_alloc+0x5a/0x2c0 [ 284.082023][ T8607] ? skb_clone+0x1eb/0x370 [ 284.086631][ T8607] skb_clone+0x1eb/0x370 [ 284.090894][ T8607] __netlink_deliver_tap+0x411/0x7f0 [ 284.096297][ T8607] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.101521][ T8607] netlink_deliver_tap+0x19c/0x1b0 [ 284.106664][ T8607] netlink_dump+0x95b/0xec0 [ 284.111197][ T8607] ? netlink_lookup+0x200/0x200 [ 284.116161][ T8607] ? netlink_lookup+0x30/0x200 [ 284.120947][ T8607] ? netlink_lookup+0x30/0x200 [ 284.125846][ T8607] __netlink_dump_start+0x57c/0x7a0 [ 284.131189][ T8607] rtnetlink_rcv_msg+0xe19/0xf90 [ 284.136249][ T8607] ? rtnetlink_rcv_msg+0x220/0xf90 [ 284.141497][ T8607] ? nla_put_uid_range+0x200/0x200 [ 284.146663][ T8607] ? rtnetlink_bind+0x80/0x80 [ 284.151366][ T8607] ? perf_trace_preemptirq_template+0x269/0x330 [ 284.157659][ T8607] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.163749][ T8607] ? lock_chain_count+0x20/0x20 [ 284.168629][ T8607] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 284.174461][ T8607] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.180540][ T8607] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 284.187755][ T8607] ? lock_chain_count+0x20/0x20 [ 284.192623][ T8607] ? __dev_queue_xmit+0x1329/0x37e0 [ 284.197930][ T8607] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.204098][ T8607] ? lockdep_hardirqs_on+0x98/0x150 [ 284.209579][ T8607] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.215843][ T8607] ? nla_put_uid_range+0x200/0x200 [ 284.221064][ T8607] ? kasan_check_range+0x1b1/0x290 [ 284.226216][ T8607] netlink_rcv_skb+0x235/0x4c0 [ 284.231082][ T8607] ? rtnetlink_bind+0x80/0x80 [ 284.235786][ T8607] ? netlink_ack+0x1160/0x1160 [ 284.240839][ T8607] ? __lock_acquire+0x7d80/0x7d80 [ 284.245879][ T8607] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.251096][ T8607] netlink_unicast+0x7b1/0x930 [ 284.255886][ T8607] netlink_sendmsg+0x8d0/0xbf0 [ 284.260673][ T8607] ? netlink_getsockopt+0x590/0x590 [ 284.265897][ T8607] ? apparmor_socket_sendmsg+0x8e/0x330 [ 284.271606][ T8607] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.277182][ T8607] ? security_socket_sendmsg+0x80/0xa0 [ 284.282673][ T8607] ? netlink_getsockopt+0x590/0x590 [ 284.287889][ T8607] ____sys_sendmsg+0x61b/0x980 [ 284.292852][ T8607] ? __asan_memset+0x22/0x40 [ 284.297465][ T8607] ? __sys_sendmsg_sock+0x30/0x30 [ 284.302589][ T8607] ? __import_iovec+0x5f2/0x850 [ 284.307627][ T8607] ? import_iovec+0x73/0xa0 [ 284.312155][ T8607] ___sys_sendmsg+0x2a6/0x360 [ 284.317246][ T8607] ? __sys_sendmsg+0x2b0/0x2b0 [ 284.322074][ T8607] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.328182][ T8607] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.334384][ T8607] ? __x64_sys_sendmsg+0x71/0x80 [ 284.339639][ T8607] ? __se_sys_sendmsg+0xf2/0x2c0 [ 284.344853][ T8607] ? kasan_check_range+0x12/0x290 [ 284.349896][ T8607] __se_sys_sendmsg+0x1d0/0x2c0 [ 284.354769][ T8607] ? __x64_sys_sendmsg+0x80/0x80 [ 284.359737][ T8607] ? syscall_enter_from_user_mode+0x2e/0x80 [ 284.365652][ T8607] do_syscall_64+0x55/0xb0 [ 284.370087][ T8607] ? clear_bhb_loop+0x40/0x90 [ 284.374791][ T8607] ? clear_bhb_loop+0x40/0x90 [ 284.379658][ T8607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.386202][ T8607] RIP: 0033:0x7fe9c099e159 [ 284.390643][ T8607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.410359][ T8607] RSP: 002b:00007fe9c179e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.418884][ T8607] RAX: ffffffffffffffda RBX: 00007fe9c0c25fa0 RCX: 00007fe9c099e159 [ 284.426873][ T8607] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 284.435115][ T8607] RBP: 00007fe9c179e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.443106][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.451258][ T8607] R13: 00007fe9c0c26038 R14: 00007fe9c0c25fa0 R15: 00007ffce994aaa8 [ 284.459425][ T8607] [ 284.949217][ T8627] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 284.964206][ T8627] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 284.982525][ T8627] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.964'. [ 285.300779][ T12] wlan1: Trigger new scan to find an IBSS to join [ 286.447407][ T8651] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 286.472069][ T8651] macvlan0: entered promiscuous mode [ 286.553538][ T8651] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 286.718221][ T8660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.975'. [ 286.825334][ T8660] netlink: 128 bytes leftover after parsing attributes in process `syz.3.975'. [ 286.887044][ T8660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.922569][ T8665] netlink: 'syz.1.978': attribute type 25 has an invalid length. [ 286.932025][ T8665] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 286.971268][ T8667] FAULT_INJECTION: forcing a failure. [ 286.971268][ T8667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.017951][ T8667] CPU: 1 PID: 8667 Comm: syz.0.979 Not tainted syzkaller #0 [ 287.025341][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.035841][ T8667] Call Trace: [ 287.039249][ T8667] [ 287.042318][ T8667] dump_stack_lvl+0x18c/0x250 [ 287.047334][ T8667] ? show_regs_print_info+0x20/0x20 [ 287.052965][ T8667] ? load_image+0x420/0x420 [ 287.057544][ T8667] ? __might_fault+0xaa/0x120 [ 287.062894][ T8667] ? __lock_acquire+0x7d80/0x7d80 [ 287.068002][ T8667] should_fail_ex+0x394/0x4c0 [ 287.072796][ T8667] _copy_from_iter+0x1cd/0x1290 [ 287.077729][ T8667] ? copyout_mc+0x70/0x70 [ 287.082382][ T8667] ? __virt_addr_valid+0x10c/0x380 [ 287.087572][ T8667] ? __virt_addr_valid+0x10c/0x380 [ 287.093350][ T8667] ? __virt_addr_valid+0x10c/0x380 [ 287.098914][ T8667] ? __check_object_size+0x4fc/0xa40 [ 287.104297][ T8667] tipc_msg_build+0x87a/0xe60 [ 287.109337][ T8667] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 287.115551][ T8667] ? net_generic+0x1e/0x240 [ 287.120797][ T8667] ? tipc_group_bc_cong+0x15c/0x210 [ 287.126616][ T8667] tipc_send_group_bcast+0x7d8/0xad0 [ 287.132158][ T8667] ? tipc_wait_for_connect+0x650/0x650 [ 287.137972][ T8667] ? perf_trace_lock_acquire+0x105/0x400 [ 287.144181][ T8667] ? wait_woken+0x180/0x180 [ 287.148604][ T8672] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.981'. [ 287.148780][ T8667] __tipc_sendmsg+0x314/0x2b20 [ 287.160857][ T8672] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 287.163842][ T8667] ? __lock_acquire+0x1336/0x7d80 [ 287.163896][ T8667] ? rht_unlock+0x1d0/0x1d0 [ 287.182054][ T8667] ? verify_lock_unused+0x140/0x140 [ 287.187413][ T8667] ? perf_trace_lock_acquire+0x105/0x400 [ 287.193139][ T8667] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 287.199845][ T8667] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 287.206471][ T8667] ? mark_lock+0x94/0x320 [ 287.211090][ T8667] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 287.217111][ T8667] ? __local_bh_enable_ip+0x13a/0x1c0 [ 287.222625][ T8667] ? lockdep_hardirqs_on+0x98/0x150 [ 287.227888][ T8667] ? __local_bh_enable_ip+0x13a/0x1c0 [ 287.233741][ T8667] ? _local_bh_enable+0xa0/0xa0 [ 287.238831][ T8667] tipc_sendmsg+0x55/0x70 [ 287.243318][ T8667] sock_write_iter+0x2dc/0x420 [ 287.248153][ T8667] ? sock_read_iter+0x3f0/0x3f0 [ 287.253247][ T8667] ? common_file_perm+0x198/0x1f0 [ 287.258430][ T8667] vfs_write+0x474/0x9a0 [ 287.262836][ T8667] ? file_end_write+0x250/0x250 [ 287.267758][ T8667] ? __fget_files+0x3fc/0x460 [ 287.272607][ T8667] ? __fdget_pos+0x1d8/0x330 [ 287.277266][ T8667] ? ksys_write+0x74/0x260 [ 287.281939][ T8667] ksys_write+0x151/0x260 [ 287.286443][ T8667] ? __ia32_sys_read+0x90/0x90 [ 287.291545][ T8667] ? lockdep_hardirqs_on+0x98/0x150 [ 287.297317][ T8667] do_syscall_64+0x55/0xb0 [ 287.301797][ T8667] ? clear_bhb_loop+0x40/0x90 [ 287.306636][ T8667] ? clear_bhb_loop+0x40/0x90 [ 287.311405][ T8667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.317723][ T8667] RIP: 0033:0x7fe9c099e159 [ 287.322467][ T8667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.342748][ T8667] RSP: 002b:00007fe9c179e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.351226][ T8667] RAX: ffffffffffffffda RBX: 00007fe9c0c25fa0 RCX: 00007fe9c099e159 [ 287.359878][ T8667] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 287.368066][ T8667] RBP: 00007fe9c179e090 R08: 0000000000000000 R09: 0000000000000000 [ 287.376243][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.384500][ T8667] R13: 00007fe9c0c26038 R14: 00007fe9c0c25fa0 R15: 00007ffce994aaa8 [ 287.393048][ T8667] [ 287.961771][ T8688] netlink: 'syz.1.986': attribute type 17 has an invalid length. [ 288.343269][ T12] wlan1: Trigger new scan to find an IBSS to join [ 288.586132][ T8705] netlink: 190016 bytes leftover after parsing attributes in process `syz.1.993'. [ 288.995618][ T8714] FAULT_INJECTION: forcing a failure. [ 288.995618][ T8714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.014235][ T8714] CPU: 1 PID: 8714 Comm: syz.2.997 Not tainted syzkaller #0 [ 289.021928][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 289.032024][ T8714] Call Trace: [ 289.035335][ T8714] [ 289.038294][ T8714] dump_stack_lvl+0x18c/0x250 [ 289.043062][ T8714] ? show_regs_print_info+0x20/0x20 [ 289.048305][ T8714] ? load_image+0x420/0x420 [ 289.052852][ T8714] ? __lock_acquire+0x7d80/0x7d80 [ 289.057927][ T8714] ? snprintf+0xe9/0x140 [ 289.062296][ T8714] should_fail_ex+0x394/0x4c0 [ 289.067118][ T8714] _copy_to_user+0x2f/0xa0 [ 289.071576][ T8714] simple_read_from_buffer+0xe7/0x150 [ 289.077000][ T8714] proc_fail_nth_read+0x1e8/0x260 [ 289.082271][ T8714] ? proc_fault_inject_write+0x360/0x360 [ 289.087978][ T8714] ? fsnotify_perm+0x271/0x5e0 [ 289.092797][ T8714] ? proc_fault_inject_write+0x360/0x360 [ 289.098691][ T8714] vfs_read+0x298/0x990 [ 289.103027][ T8714] ? kernel_read+0x1e0/0x1e0 [ 289.107803][ T8714] ? __fget_files+0x28/0x460 [ 289.112546][ T8714] ? __fget_files+0x3fc/0x460 [ 289.117317][ T8714] ? __fdget_pos+0x2a3/0x330 [ 289.122070][ T8714] ? ksys_read+0x74/0x260 [ 289.126479][ T8714] ksys_read+0x151/0x260 [ 289.130779][ T8714] ? vfs_write+0x9a0/0x9a0 [ 289.135245][ T8714] ? lockdep_hardirqs_on+0x98/0x150 [ 289.140582][ T8714] do_syscall_64+0x55/0xb0 [ 289.145048][ T8714] ? clear_bhb_loop+0x40/0x90 [ 289.149795][ T8714] ? clear_bhb_loop+0x40/0x90 [ 289.154620][ T8714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.160905][ T8714] RIP: 0033:0x7f566e95e98e [ 289.165356][ T8714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.185315][ T8714] RSP: 002b:00007f566f79ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.193788][ T8714] RAX: ffffffffffffffda RBX: 00007f566f7a06c0 RCX: 00007f566e95e98e [ 289.201878][ T8714] RDX: 000000000000000f RSI: 00007f566f7a00a0 RDI: 0000000000000004 [ 289.209978][ T8714] RBP: 00007f566f7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 289.218307][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.226588][ T8714] R13: 00007f566ec26038 R14: 00007f566ec25fa0 R15: 00007ffe60e022d8 [ 289.234698][ T8714] [ 290.373452][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 291.711776][ T1077] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.370361][ T8762] netlink: 'syz.0.1014': attribute type 4 has an invalid length. [ 293.409250][ T8762] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1014'. [ 294.615430][ T8776] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 294.707453][ T8773] netlink: 'syz.0.1017': attribute type 10 has an invalid length. [ 294.763230][ T8776] netlink: 'syz.0.1017': attribute type 3 has an invalid length. [ 294.787707][ T8773] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1017'. [ 294.810838][ T8776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1017'. [ 295.422582][ T8789] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 295.789369][ T8803] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 295.904752][ T8803] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 295.953183][ T8804] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 295.982311][ T8803] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 296.002052][ T8804] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 296.037912][ T8803] netlink: 'syz.1.1025': attribute type 29 has an invalid length. [ 299.313459][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 302.022161][ T8836] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.306490][ T1102] wlan1: Trigger new scan to find an IBSS to join [ 304.301861][ T8896] FAULT_INJECTION: forcing a failure. [ 304.301861][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 304.322991][ T8896] CPU: 0 PID: 8896 Comm: syz.2.1057 Not tainted syzkaller #0 [ 304.330549][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.340728][ T8896] Call Trace: [ 304.344040][ T8896] [ 304.347102][ T8896] dump_stack_lvl+0x18c/0x250 [ 304.351875][ T8896] ? show_regs_print_info+0x20/0x20 [ 304.357322][ T8896] ? load_image+0x420/0x420 [ 304.361877][ T8896] ? __lock_acquire+0x7d80/0x7d80 [ 304.366927][ T8896] should_fail_ex+0x394/0x4c0 [ 304.371908][ T8896] should_failslab+0x9/0x20 [ 304.377391][ T8896] slab_pre_alloc_hook+0x59/0x300 [ 304.382564][ T8896] ? kernel_clone+0x24b/0x8a0 [ 304.387468][ T8896] ? __x64_sys_clone+0x1b7/0x230 [ 304.392644][ T8896] ? do_syscall_64+0x55/0xb0 [ 304.397409][ T8896] kmem_cache_alloc_node+0x5e/0x310 [ 304.402667][ T8896] ? alloc_vmap_area+0x1b4/0x1e50 [ 304.407987][ T8896] alloc_vmap_area+0x1b4/0x1e50 [ 304.412888][ T8896] ? vm_map_ram+0xcf0/0xcf0 [ 304.417585][ T8896] ? rcu_is_watching+0x15/0xb0 [ 304.422380][ T8896] __get_vm_area_node+0x162/0x370 [ 304.427517][ T8896] __vmalloc_node_range+0x36f/0x1320 [ 304.432996][ T8896] ? copy_process+0x5a6/0x3da0 [ 304.437927][ T8896] ? __lock_acquire+0x7d80/0x7d80 [ 304.443204][ T8896] ? free_vm_area+0x50/0x50 [ 304.447838][ T8896] ? arch_dup_task_struct+0x57/0xd0 [ 304.453067][ T8896] ? __asan_memcpy+0x40/0x70 [ 304.457863][ T8896] dup_task_struct+0x3c8/0x800 [ 304.462732][ T8896] ? copy_process+0x5a6/0x3da0 [ 304.467513][ T8896] ? lockdep_hardirqs_on+0x98/0x150 [ 304.472826][ T8896] copy_process+0x5a6/0x3da0 [ 304.477627][ T8896] ? __might_fault+0xaa/0x120 [ 304.482880][ T8896] ? get_pid_task+0x20/0x1e0 [ 304.487663][ T8896] ? __pidfd_prepare+0x140/0x140 [ 304.493089][ T8896] kernel_clone+0x24b/0x8a0 [ 304.498133][ T8896] ? create_io_thread+0x190/0x190 [ 304.503374][ T8896] __x64_sys_clone+0x1b7/0x230 [ 304.508409][ T8896] ? __fget_files+0x3fc/0x460 [ 304.513679][ T8896] ? __ia32_sys_vfork+0x140/0x140 [ 304.519113][ T8896] ? lock_chain_count+0x20/0x20 [ 304.524204][ T8896] ? lockdep_hardirqs_on+0x98/0x150 [ 304.529532][ T8896] do_syscall_64+0x55/0xb0 [ 304.533982][ T8896] ? clear_bhb_loop+0x40/0x90 [ 304.538957][ T8896] ? clear_bhb_loop+0x40/0x90 [ 304.543678][ T8896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.549735][ T8896] RIP: 0033:0x7f566e99e159 [ 304.554355][ T8896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.574344][ T8896] RSP: 002b:00007f566f79ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 304.583206][ T8896] RAX: ffffffffffffffda RBX: 00007f566ec25fa0 RCX: 00007f566e99e159 [ 304.591192][ T8896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000000 [ 304.599267][ T8896] RBP: 00007f566f7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 304.607252][ T8896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 304.615407][ T8896] R13: 00007f566ec26038 R14: 00007f566ec25fa0 R15: 00007ffe60e022d8 [ 304.623501][ T8896] [ 304.632801][ T36] wlan1: Trigger new scan to find an IBSS to join [ 304.641246][ T36] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 304.691519][ T8896] syz.2.1057: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 304.736119][ T8896] CPU: 1 PID: 8896 Comm: syz.2.1057 Not tainted syzkaller #0 [ 304.743727][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.754240][ T8896] Call Trace: [ 304.757572][ T8896] [ 304.760564][ T8896] dump_stack_lvl+0x18c/0x250 [ 304.765378][ T8896] ? show_regs_print_info+0x20/0x20 [ 304.770649][ T8896] ? load_image+0x420/0x420 [ 304.775552][ T8896] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 304.781995][ T8896] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 304.788808][ T8896] warn_alloc+0x246/0x340 [ 304.793188][ T8896] ? slab_free_freelist_hook+0x130/0x1a0 [ 304.798872][ T8896] ? zone_watermark_ok_safe+0x230/0x230 [ 304.804444][ T8896] ? __get_vm_area_node+0x17b/0x370 [ 304.809678][ T8896] ? __get_vm_area_node+0x17b/0x370 [ 304.815197][ T8896] __vmalloc_node_range+0x394/0x1320 [ 304.820657][ T8896] ? __lock_acquire+0x7d80/0x7d80 [ 304.825891][ T8896] ? free_vm_area+0x50/0x50 [ 304.830675][ T8896] ? arch_dup_task_struct+0x57/0xd0 [ 304.836538][ T8896] ? __asan_memcpy+0x40/0x70 [ 304.841339][ T8896] dup_task_struct+0x3c8/0x800 [ 304.846121][ T8896] ? copy_process+0x5a6/0x3da0 [ 304.850925][ T8896] ? lockdep_hardirqs_on+0x98/0x150 [ 304.856416][ T8896] copy_process+0x5a6/0x3da0 [ 304.861039][ T8896] ? __might_fault+0xaa/0x120 [ 304.865752][ T8896] ? get_pid_task+0x20/0x1e0 [ 304.870647][ T8896] ? __pidfd_prepare+0x140/0x140 [ 304.875884][ T8896] kernel_clone+0x24b/0x8a0 [ 304.880434][ T8896] ? create_io_thread+0x190/0x190 [ 304.885526][ T8896] __x64_sys_clone+0x1b7/0x230 [ 304.890402][ T8896] ? __fget_files+0x3fc/0x460 [ 304.895190][ T8896] ? __ia32_sys_vfork+0x140/0x140 [ 304.900241][ T8896] ? lock_chain_count+0x20/0x20 [ 304.905110][ T8896] ? lockdep_hardirqs_on+0x98/0x150 [ 304.910415][ T8896] do_syscall_64+0x55/0xb0 [ 304.914938][ T8896] ? clear_bhb_loop+0x40/0x90 [ 304.919712][ T8896] ? clear_bhb_loop+0x40/0x90 [ 304.924415][ T8896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.931887][ T8896] RIP: 0033:0x7f566e99e159 [ 304.936315][ T8896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.956297][ T8896] RSP: 002b:00007f566f79ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 304.964728][ T8896] RAX: ffffffffffffffda RBX: 00007f566ec25fa0 RCX: 00007f566e99e159 [ 304.972719][ T8896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004000000 [ 304.980727][ T8896] RBP: 00007f566f7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 304.988910][ T8896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 304.996921][ T8896] R13: 00007f566ec26038 R14: 00007f566ec25fa0 R15: 00007ffe60e022d8 [ 305.005017][ T8896] [ 305.019180][ T8896] Mem-Info: [ 305.028051][ T8896] active_anon:6892 inactive_anon:0 isolated_anon:0 [ 305.028051][ T8896] active_file:18987 inactive_file:40037 isolated_file:0 [ 305.028051][ T8896] unevictable:768 dirty:217 writeback:0 [ 305.028051][ T8896] slab_reclaimable:10394 slab_unreclaimable:93214 [ 305.028051][ T8896] mapped:24471 shmem:1361 pagetables:483 [ 305.028051][ T8896] sec_pagetables:0 bounce:0 [ 305.028051][ T8896] kernel_misc_reclaimable:0 [ 305.028051][ T8896] free:1342365 free_pcp:11384 free_cma:0 [ 305.081780][ T8896] Node 0 active_anon:27568kB inactive_anon:0kB active_file:75948kB inactive_file:159944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97884kB dirty:868kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10472kB pagetables:2032kB sec_pagetables:0kB all_unreclaimable? no [ 305.115531][ T8896] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 305.163608][ T8896] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.192813][ T8896] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 305.198776][ T8896] Node 0 DMA32 free:1453712kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27632kB inactive_anon:0kB active_file:75948kB inactive_file:159120kB unevictable:1536kB writepending:868kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:28952kB local_pcp:14708kB free_cma:0kB [ 305.231022][ T8896] lowmem_reserve[]: 0 0 0 0 0 [ 305.235824][ T8896] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 305.278002][ T8896] lowmem_reserve[]: 0 0 0 0 0 [ 305.287159][ T8896] Node 1 Normal free:3900516kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15904kB local_pcp:8288kB free_cma:0kB [ 305.324360][ T8896] lowmem_reserve[]: 0 0 0 0 0 [ 305.343395][ T8896] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 305.389680][ T8896] Node 0 DMA32: 1632*4kB (UM) 1244*8kB (UME) 767*16kB (UM) 824*32kB (UME) 577*64kB (UME) 464*128kB (UME) 272*256kB (UME) 134*512kB (UM) 63*1024kB (UME) 15*2048kB (M) 261*4096kB (M) = 1453968kB [ 305.434995][ T8896] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 305.476198][ T8896] Node 1 Normal: 225*4kB (UME) 56*8kB (UME) 28*16kB (UME) 103*32kB (UME) 36*64kB (UE) 11*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3900516kB [ 305.523787][ T8896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.552008][ T8896] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.570320][ T8896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.592862][ T8911] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1063'. [ 305.603130][ T8896] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.614431][ T8896] 60385 total pagecache pages [ 305.619649][ T8911] validate_nla: 48 callbacks suppressed [ 305.619664][ T8911] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 305.634518][ T8896] 0 pages in swap cache [ 305.638727][ T8896] Free swap = 124996kB [ 305.643435][ T8896] Total swap = 124996kB [ 305.647781][ T8896] 2097051 pages RAM [ 305.652404][ T8911] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.1063'. [ 305.662335][ T8896] 0 pages HighMem/MovableOnly [ 305.667547][ T8896] 416965 pages reserved [ 305.675778][ T8896] 0 pages cma reserved [ 305.760176][ T8916] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1063'. [ 305.874255][ T8920] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1066'. [ 305.890298][ T8921] netlink: 'syz.2.1067': attribute type 21 has an invalid length. [ 305.905522][ T8921] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.951516][ T8921] IPv6: Can't replace route, no match found [ 306.112913][ T8930] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 306.158723][ T8930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1071'. [ 306.214993][ T8930] batman_adv: batadv0: Adding interface: veth0_vlan [ 306.222935][ T8930] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.273725][ T8930] batman_adv: batadv0: Interface activated: veth0_vlan [ 307.372117][ T8957] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 307.408631][ T8957] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1079'. [ 308.260292][ T1002] wlan1: Trigger new scan to find an IBSS to join [ 309.479025][ T1092] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 311.957443][ T8981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.965122][ T8981] IPv6: NLM_F_CREATE should be set when creating new route [ 311.975737][ T8982] netlink: 'syz.3.1089': attribute type 21 has an invalid length. [ 312.014498][ T8998] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 312.027120][ T8998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.101928][ T9005] netlink: 'syz.3.1095': attribute type 2 has an invalid length. [ 312.131207][ T9005] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1095'. [ 312.771011][ T9023] netlink: 'syz.1.1101': attribute type 21 has an invalid length. [ 312.789509][ T9023] netlink: 'syz.1.1101': attribute type 33 has an invalid length. [ 312.799541][ T9023] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1101'. [ 314.016867][ T9048] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1109'. [ 314.530743][ T9066] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1114'. [ 315.404253][ T9079] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 315.425750][ T9079] netlink: 'syz.3.1119': attribute type 6 has an invalid length. [ 315.445865][ T9079] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1119'. [ 315.583105][ T9086] FAULT_INJECTION: forcing a failure. [ 315.583105][ T9086] name failslab, interval 1, probability 0, space 0, times 0 [ 315.598851][ T9086] CPU: 0 PID: 9086 Comm: syz.2.1122 Not tainted syzkaller #0 [ 315.607423][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.618499][ T9086] Call Trace: [ 315.621969][ T9086] [ 315.624962][ T9086] dump_stack_lvl+0x18c/0x250 [ 315.630152][ T9086] ? show_regs_print_info+0x20/0x20 [ 315.635514][ T9086] ? load_image+0x420/0x420 [ 315.640613][ T9086] ? __might_sleep+0xe0/0xe0 [ 315.645269][ T9086] ? __lock_acquire+0x7d80/0x7d80 [ 315.651160][ T9086] should_fail_ex+0x394/0x4c0 [ 315.656180][ T9086] should_failslab+0x9/0x20 [ 315.660728][ T9086] slab_pre_alloc_hook+0x59/0x300 [ 315.665984][ T9086] ? kvmalloc_node+0x70/0x180 [ 315.672568][ T9086] ? kvmalloc_node+0x70/0x180 [ 315.677719][ T9086] __kmem_cache_alloc_node+0x53/0x250 [ 315.683690][ T9086] ? kvmalloc_node+0x70/0x180 [ 315.689159][ T9086] __kmalloc_node+0xa6/0x240 [ 315.696953][ T9086] kvmalloc_node+0x70/0x180 [ 315.702228][ T9086] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 315.708831][ T9086] ? 0xffffffffa00044c0 [ 315.714284][ T9086] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 315.720676][ T9086] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.727873][ T9086] ? xdp_convert_md_to_buff+0x330/0x330 [ 315.734016][ T9086] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 315.740472][ T9086] ? _copy_from_user+0xa5/0xe0 [ 315.745862][ T9086] ? bpf_test_init+0x119/0x140 [ 315.750912][ T9086] ? xdp_convert_md_to_buff+0x5b/0x330 [ 315.756622][ T9086] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 315.762207][ T9086] ? __lock_acquire+0x7d80/0x7d80 [ 315.767711][ T9086] ? dev_put+0x80/0x80 [ 315.772510][ T9086] ? dev_put+0x80/0x80 [ 315.777149][ T9086] bpf_prog_test_run+0x31f/0x390 [ 315.782735][ T9086] __sys_bpf+0x49d/0x890 [ 315.787168][ T9086] ? read_tsc+0x9/0x20 [ 315.791530][ T9086] ? bpf_link_show_fdinfo+0x560/0x560 [ 315.798111][ T9086] ? lock_chain_count+0x20/0x20 [ 315.803374][ T9086] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 315.809402][ T9086] __x64_sys_bpf+0x7c/0x90 [ 315.813942][ T9086] do_syscall_64+0x55/0xb0 [ 315.818946][ T9086] ? clear_bhb_loop+0x40/0x90 [ 315.824063][ T9086] ? clear_bhb_loop+0x40/0x90 [ 315.829836][ T9086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.836406][ T9086] RIP: 0033:0x7f566e99e159 [ 315.841232][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.864234][ T9086] RSP: 002b:00007f566f7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.873815][ T9086] RAX: ffffffffffffffda RBX: 00007f566ec25fa0 RCX: 00007f566e99e159 [ 315.884592][ T9086] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 315.895164][ T9086] RBP: 00007f566f7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 315.905391][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.914457][ T9086] R13: 00007f566ec26038 R14: 00007f566ec25fa0 R15: 00007ffe60e022d8 [ 315.923125][ T9086] [ 316.172995][ T9095] netlink: 'syz.2.1125': attribute type 153 has an invalid length. [ 316.208572][ T9095] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1125'. [ 317.879543][ T9108] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1130'. [ 318.601090][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.607860][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.630501][ T9137] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 320.908508][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1145'. [ 321.574269][ T9161] netlink: 'syz.1.1148': attribute type 17 has an invalid length. [ 321.640293][ T9161] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1148'. [ 322.484828][ T9162] netlink: 'syz.2.1147': attribute type 21 has an invalid length. [ 322.559109][ T9162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1147'. [ 325.373041][ T9190] syzkaller0: entered promiscuous mode [ 325.402175][ T9190] syzkaller0: entered allmulticast mode [ 332.653060][ T9214] netlink: 'syz.3.1165': attribute type 16 has an invalid length. [ 332.671075][ T9214] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1165'. [ 332.752555][ T9215] syzkaller0: entered promiscuous mode [ 332.758657][ T9215] syzkaller0: entered allmulticast mode [ 332.846576][ T9221] syzkaller0: entered promiscuous mode [ 332.860286][ T9221] syzkaller0: entered allmulticast mode [ 337.780645][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.557556][ T9247] FAULT_INJECTION: forcing a failure. [ 338.557556][ T9247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.571947][ T9247] CPU: 0 PID: 9247 Comm: syz.0.1176 Not tainted syzkaller #0 [ 338.579557][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.590576][ T9247] Call Trace: [ 338.594190][ T9247] [ 338.597240][ T9247] dump_stack_lvl+0x18c/0x250 [ 338.602179][ T9247] ? show_regs_print_info+0x20/0x20 [ 338.607546][ T9247] ? load_image+0x420/0x420 [ 338.612312][ T9247] ? __might_fault+0xaa/0x120 [ 338.617184][ T9247] ? __lock_acquire+0x7d80/0x7d80 [ 338.622536][ T9247] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 338.628508][ T9247] should_fail_ex+0x394/0x4c0 [ 338.633461][ T9247] _copy_from_user+0x2f/0xe0 [ 338.638195][ T9247] wext_handle_ioctl+0xc8/0x1e0 [ 338.643250][ T9247] ? call_commit_handler+0xf0/0xf0 [ 338.648680][ T9247] ? perf_trace_preemptirq_template+0xac/0x330 [ 338.654981][ T9247] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 338.660996][ T9247] ? lock_chain_count+0x20/0x20 [ 338.666056][ T9247] sock_ioctl+0x15d/0x7e0 [ 338.670596][ T9247] ? sock_poll+0x3e0/0x3e0 [ 338.675162][ T9247] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.681469][ T9247] ? sock_poll+0x3e0/0x3e0 [ 338.686017][ T9247] __se_sys_ioctl+0xfd/0x170 [ 338.691071][ T9247] do_syscall_64+0x55/0xb0 [ 338.695825][ T9247] ? clear_bhb_loop+0x40/0x90 [ 338.700768][ T9247] ? clear_bhb_loop+0x40/0x90 [ 338.705522][ T9247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.711550][ T9247] RIP: 0033:0x7fe9c099e159 [ 338.716128][ T9247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.736843][ T9247] RSP: 002b:00007fe9c179e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.746970][ T9247] RAX: ffffffffffffffda RBX: 00007fe9c0c25fa0 RCX: 00007fe9c099e159 [ 338.757166][ T9247] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000006 [ 338.765782][ T9247] RBP: 00007fe9c179e090 R08: 0000000000000000 R09: 0000000000000000 [ 338.775038][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.784109][ T9247] R13: 00007fe9c0c26038 R14: 00007fe9c0c25fa0 R15: 00007ffce994aaa8 [ 338.793183][ T9247] [ 339.616563][ T9262] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.1180'. [ 341.622529][ T1102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 349.158112][ T9360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1215'. [ 350.256847][ T9377] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1222'. [ 350.293071][ T9377] bridge_slave_1: default FDB implementation only supports local addresses [ 354.613506][ T9432] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1236'. [ 355.086887][ T9432] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 355.114195][ T9432] CPU: 1 PID: 9432 Comm: syz.3.1236 Not tainted syzkaller #0 [ 355.122221][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.132726][ T9432] Call Trace: [ 355.136259][ T9432] [ 355.141223][ T9432] dump_stack_lvl+0x18c/0x250 [ 355.147132][ T9432] ? show_regs_print_info+0x20/0x20 [ 355.152845][ T9432] ? load_image+0x420/0x420 [ 355.157914][ T9432] sysfs_warn_dup+0x8e/0xa0 [ 355.162914][ T9432] sysfs_do_create_link_sd+0xc0/0x110 [ 355.169156][ T9432] device_add_class_symlinks+0x1cf/0x240 [ 355.176869][ T9432] device_add+0x4f9/0xc40 [ 355.181739][ T9432] wiphy_register+0x1d99/0x2ac0 [ 355.187384][ T9432] ? cfg80211_event_work+0x40/0x40 [ 355.195616][ T9432] ? minstrel_ht_alloc+0x88a/0x990 [ 355.201161][ T9432] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 355.209313][ T9432] ieee80211_register_hw+0x2dd8/0x3b30 [ 355.216300][ T9432] ? ieee80211_register_hw+0xfb1/0x3b30 [ 355.222475][ T9432] ? ieee80211_tasklet_handler+0x20/0x20 [ 355.228514][ T9432] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 355.234814][ T9432] ? __debug_object_init+0xec/0x450 [ 355.240128][ T9432] ? __asan_memset+0x22/0x40 [ 355.245292][ T9432] ? __hrtimer_init+0x189/0x270 [ 355.250422][ T9432] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 355.256671][ T9432] ? mac80211_hwsim_free+0x220/0x220 [ 355.262295][ T9432] ? rcu_is_watching+0x15/0xb0 [ 355.267629][ T9432] ? kstrndup+0xbd/0x140 [ 355.272071][ T9432] hwsim_new_radio_nl+0xdad/0x1a70 [ 355.277689][ T9432] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 355.284839][ T9432] ? mark_lock+0x94/0x320 [ 355.290069][ T9432] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 355.296488][ T9432] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.303439][ T9432] ? lockdep_hardirqs_on+0x98/0x150 [ 355.309195][ T9432] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.317269][ T9432] genl_family_rcv_msg_doit+0x21a/0x310 [ 355.323154][ T9432] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 355.329736][ T9432] ? bpf_lsm_capable+0x9/0x10 [ 355.334759][ T9432] ? security_capable+0x89/0xb0 [ 355.340362][ T9432] genl_rcv_msg+0x611/0x7a0 [ 355.345958][ T9432] ? genl_bind+0x360/0x360 [ 355.351081][ T9432] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 355.358465][ T9432] netlink_rcv_skb+0x235/0x4c0 [ 355.363846][ T9432] ? genl_bind+0x360/0x360 [ 355.369253][ T9432] ? netlink_ack+0x1160/0x1160 [ 355.374952][ T9432] ? __lock_acquire+0x7d80/0x7d80 [ 355.380411][ T9432] ? down_read+0x1ac/0x2e0 [ 355.384982][ T9432] genl_rcv+0x28/0x40 [ 355.389227][ T9432] netlink_unicast+0x7b1/0x930 [ 355.394486][ T9432] netlink_sendmsg+0x8d0/0xbf0 [ 355.399544][ T9432] ? netlink_getsockopt+0x590/0x590 [ 355.404770][ T9432] ? netlink_getsockopt+0x590/0x590 [ 355.409998][ T9432] ____sys_sendmsg+0x61b/0x980 [ 355.414913][ T9432] ? __sys_sendmsg_sock+0x30/0x30 [ 355.420229][ T9432] ___sys_sendmsg+0x2a6/0x360 [ 355.425205][ T9432] ? __sys_sendmsg+0x2b0/0x2b0 [ 355.430514][ T9432] __se_sys_sendmsg+0x1d0/0x2c0 [ 355.435729][ T9432] ? __x64_sys_sendmsg+0x80/0x80 [ 355.440919][ T9432] ? lockdep_hardirqs_on+0x98/0x150 [ 355.446360][ T9432] do_syscall_64+0x55/0xb0 [ 355.450825][ T9432] ? clear_bhb_loop+0x40/0x90 [ 355.455526][ T9432] ? clear_bhb_loop+0x40/0x90 [ 355.460258][ T9432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.466304][ T9432] RIP: 0033:0x7f41e8b9e159 [ 355.470931][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.491056][ T9432] RSP: 002b:00007f41e9a4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.499722][ T9432] RAX: ffffffffffffffda RBX: 00007f41e8e25fa0 RCX: 00007f41e8b9e159 [ 355.508091][ T9432] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 355.516082][ T9432] RBP: 00007f41e8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 355.524187][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.532843][ T9432] R13: 00007f41e8e26038 R14: 00007f41e8e25fa0 R15: 00007ffc2a090448 [ 355.541517][ T9432] [ 355.994840][ T9443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1240'. [ 356.549264][ T9454] netlink: 'syz.0.1242': attribute type 10 has an invalid length. [ 356.572217][ T9454] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1242'. [ 357.251221][ T9458] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 359.421401][ T9481] netlink: 'syz.1.1251': attribute type 13 has an invalid length. [ 361.001623][ T9498] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1258'. [ 361.104531][ T9498] netlink: 'syz.1.1258': attribute type 4 has an invalid length. [ 361.141616][ T9498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1258'. [ 362.272253][ T9526] À: port 1(vlan0) entered blocking state [ 362.279130][ T9526] À: port 1(vlan0) entered disabled state [ 362.287870][ T9526] vlan0: entered allmulticast mode [ 362.297962][ T9526] vlan0: entered promiscuous mode [ 362.413849][ T9523] pim6reg1: entered promiscuous mode [ 362.460319][ T9523] pim6reg1: entered allmulticast mode [ 362.792338][ T9535] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1271'. [ 363.288509][ T9544] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 363.423425][ T9544] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 363.454153][ T9548] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 363.516306][ T9546] netlink: 'syz.3.1274': attribute type 19 has an invalid length. [ 363.530483][ T9546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1274'. [ 363.581440][ T9544] netlink: 'syz.0.1276': attribute type 29 has an invalid length. [ 363.624530][ T9546] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1274'. [ 364.613051][ T9564] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1280'. [ 365.064368][ T9578] netlink: 'syz.0.1286': attribute type 25 has an invalid length. [ 365.109234][ T9578] netlink: 'syz.0.1286': attribute type 10 has an invalid length. [ 365.534765][ T9588] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1288'. [ 365.614385][ T9582] sit0: entered promiscuous mode [ 365.786518][ T9588] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 365.827234][ T9588] CPU: 0 PID: 9588 Comm: syz.2.1288 Not tainted syzkaller #0 [ 365.835259][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.848636][ T9588] Call Trace: [ 365.853693][ T9588] [ 365.857149][ T9588] dump_stack_lvl+0x18c/0x250 [ 365.862381][ T9588] ? show_regs_print_info+0x20/0x20 [ 365.869091][ T9588] ? load_image+0x420/0x420 [ 365.874249][ T9588] sysfs_warn_dup+0x8e/0xa0 [ 365.878864][ T9588] sysfs_do_create_link_sd+0xc0/0x110 [ 365.884689][ T9588] device_add_class_symlinks+0x1cf/0x240 [ 365.890849][ T9588] device_add+0x4f9/0xc40 [ 365.895254][ T9588] wiphy_register+0x1d99/0x2ac0 [ 365.900324][ T9588] ? cfg80211_event_work+0x40/0x40 [ 365.905745][ T9588] ? minstrel_ht_alloc+0x88a/0x990 [ 365.910947][ T9588] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 365.917193][ T9588] ieee80211_register_hw+0x2dd8/0x3b30 [ 365.922735][ T9588] ? ieee80211_register_hw+0xfb1/0x3b30 [ 365.929882][ T9588] ? ieee80211_tasklet_handler+0x20/0x20 [ 365.935694][ T9588] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 365.941677][ T9588] ? __debug_object_init+0xec/0x450 [ 365.947210][ T9588] ? __asan_memset+0x22/0x40 [ 365.951866][ T9588] ? __hrtimer_init+0x189/0x270 [ 365.957651][ T9588] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 365.963843][ T9588] ? mac80211_hwsim_free+0x220/0x220 [ 365.969526][ T9588] ? rcu_is_watching+0x15/0xb0 [ 365.974779][ T9588] ? kstrndup+0xbd/0x140 [ 365.979095][ T9588] hwsim_new_radio_nl+0xdad/0x1a70 [ 365.984457][ T9588] ? __nla_validate+0x50/0x50 [ 365.989392][ T9588] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 365.995834][ T9588] ? __nla_parse+0x40/0x50 [ 366.000417][ T9588] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 366.007012][ T9588] genl_family_rcv_msg_doit+0x21a/0x310 [ 366.012899][ T9588] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 366.018874][ T9588] ? bpf_lsm_capable+0x9/0x10 [ 366.023613][ T9588] ? security_capable+0x89/0xb0 [ 366.028804][ T9588] genl_rcv_msg+0x611/0x7a0 [ 366.033385][ T9588] ? genl_bind+0x360/0x360 [ 366.037964][ T9588] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 366.045131][ T9588] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 366.051841][ T9588] ? perf_trace_lock+0xfc/0x3b0 [ 366.057063][ T9588] netlink_rcv_skb+0x235/0x4c0 [ 366.062906][ T9588] ? genl_bind+0x360/0x360 [ 366.068037][ T9588] ? netlink_ack+0x1160/0x1160 [ 366.076817][ T9588] ? __lock_acquire+0x7d80/0x7d80 [ 366.083633][ T9588] ? down_read+0x1ac/0x2e0 [ 366.090961][ T9588] genl_rcv+0x28/0x40 [ 366.097181][ T9588] netlink_unicast+0x7b1/0x930 [ 366.107068][ T9588] netlink_sendmsg+0x8d0/0xbf0 [ 366.116126][ T9588] ? netlink_getsockopt+0x590/0x590 [ 366.125704][ T9588] ? apparmor_socket_sendmsg+0x8e/0x330 [ 366.134728][ T9588] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 366.143368][ T9588] ? security_socket_sendmsg+0x80/0xa0 [ 366.150254][ T9588] ? netlink_getsockopt+0x590/0x590 [ 366.156936][ T9588] ____sys_sendmsg+0x61b/0x980 [ 366.163499][ T9588] ? __asan_memset+0x22/0x40 [ 366.169508][ T9588] ? __sys_sendmsg_sock+0x30/0x30 [ 366.175580][ T9588] ? __import_iovec+0x5f2/0x850 [ 366.180765][ T9588] ? import_iovec+0x73/0xa0 [ 366.185797][ T9588] ___sys_sendmsg+0x2a6/0x360 [ 366.190814][ T9588] ? __sys_sendmsg+0x2b0/0x2b0 [ 366.196388][ T9588] __se_sys_sendmsg+0x1d0/0x2c0 [ 366.201299][ T9588] ? __x64_sys_sendmsg+0x80/0x80 [ 366.206612][ T9588] ? lockdep_hardirqs_on+0x98/0x150 [ 366.212262][ T9588] do_syscall_64+0x55/0xb0 [ 366.216897][ T9588] ? clear_bhb_loop+0x40/0x90 [ 366.222337][ T9588] ? clear_bhb_loop+0x40/0x90 [ 366.227553][ T9588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.234051][ T9588] RIP: 0033:0x7f566e99e159 [ 366.239333][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.261239][ T9588] RSP: 002b:00007f566f7a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.270997][ T9588] RAX: ffffffffffffffda RBX: 00007f566ec25fa0 RCX: 00007f566e99e159 [ 366.280434][ T9588] RDX: 0000000040000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 366.290421][ T9588] RBP: 00007f566ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 366.299489][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.307933][ T9588] R13: 00007f566ec26038 R14: 00007f566ec25fa0 R15: 00007ffe60e022d8 [ 366.318822][ T9588] [ 367.310939][ T9601] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1294'. [ 367.555587][ T9601] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 368.636135][ T9618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1299'. [ 369.161114][ T9622] netlink: 'syz.1.1301': attribute type 21 has an invalid length. [ 369.196470][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 373.071134][ T9661] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1312'. [ 374.266647][ T1002] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.018535][ T9645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1310'. [ 377.031711][ T9659] netlink: 'syz.0.1321': attribute type 10 has an invalid length. [ 377.042646][ T9659] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1321'. [ 377.206647][ T9661] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 377.527234][ T9672] netlink: 'syz.3.1326': attribute type 10 has an invalid length. [ 377.587595][ T9672] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1326'. [ 377.747271][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.040517][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.053565][ T9672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.364975][ T9672] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 379.973467][ T9703] can: request_module (can-proto-0) failed. [ 380.030902][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.041650][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.604131][ T9716] netlink: 'syz.2.1329': attribute type 10 has an invalid length. [ 380.636289][ T9716] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1329'. [ 381.639152][ T9720] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.641543][ T2933] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 381.689382][ T2933] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 382.213496][ T9736] netlink: 'syz.1.1333': attribute type 3 has an invalid length. [ 382.230633][ T9736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1333'. [ 382.436777][ T9739] netlink: 'syz.2.1332': attribute type 29 has an invalid length. [ 382.606072][ T9739] netlink: 'syz.2.1332': attribute type 29 has an invalid length. [ 382.654958][ T9745] netlink: 'syz.2.1332': attribute type 29 has an invalid length. [ 384.558533][ T9759] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1336'. [ 385.697247][ T9776] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 387.280287][ T9797] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 387.400337][ T9793] netlink: 'syz.2.1351': attribute type 3 has an invalid length. [ 387.420416][ T9793] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1351'. [ 388.344618][ T1002] wlan1: Trigger new scan to find an IBSS to join [ 388.701597][ T9809] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1354'. [ 388.728076][ T9809] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 388.765638][ T9809] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.1354'. [ 388.950993][ T9813] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1354'. [ 388.969895][ T9814] netlink: 'syz.1.1352': attribute type 29 has an invalid length. [ 389.109140][ T9814] netlink: 'syz.1.1352': attribute type 29 has an invalid length. [ 389.252764][ T9818] netlink: 'syz.1.1352': attribute type 29 has an invalid length. [ 391.385617][ T9837] netlink: 'syz.2.1364': attribute type 10 has an invalid length. [ 392.223111][ T9851] netlink: 'syz.2.1371': attribute type 21 has an invalid length. [ 392.232776][ T9851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1371'. [ 392.267616][ T9851] virt_wifi0: entered promiscuous mode [ 392.286451][ T9851] virt_wifi0: entered allmulticast mode [ 393.305512][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 394.276890][ T36] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 394.999510][ T9880] netlink: 'syz.0.1375': attribute type 29 has an invalid length. [ 395.162716][ T9879] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1380'. [ 395.284179][ T9880] netlink: 'syz.0.1375': attribute type 29 has an invalid length. [ 395.447327][ T9882] netlink: 'syz.0.1375': attribute type 29 has an invalid length. [ 396.588762][ T9897] netlink: 'syz.1.1384': attribute type 21 has an invalid length. [ 396.731658][ T9897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1384'. [ 396.936881][ T9903] virt_wifi0: entered promiscuous mode [ 396.964528][ T9903] virt_wifi0: entered allmulticast mode [ 398.146470][ T9923] netlink: 'syz.3.1394': attribute type 1 has an invalid length. [ 398.170689][ T9923] netlink: 'syz.3.1394': attribute type 3 has an invalid length. [ 398.184780][ T9925] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1395'. [ 398.210722][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1394'. [ 398.293474][ T9923] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 398.380561][ T9923] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1394'. [ 398.444919][ T9922] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1393'. [ 398.468499][ T9928] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 398.609910][ T9928] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 398.655768][ T9928] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 398.717649][ T9928] team0: Port device wlan1 added [ 399.672535][ T9944] virt_wifi0: entered promiscuous mode [ 399.697308][ T9944] virt_wifi0: entered allmulticast mode [ 399.717542][ T9937] netlink: 'syz.0.1399': attribute type 21 has an invalid length. [ 399.903634][ T9937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1399'. [ 400.805129][ T9951] netlink: 'syz.1.1404': attribute type 25 has an invalid length. [ 400.860344][ T9951] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 400.985636][ T9954] FAULT_INJECTION: forcing a failure. [ 400.985636][ T9954] name failslab, interval 1, probability 0, space 0, times 0 [ 401.021653][ T9954] CPU: 0 PID: 9954 Comm: syz.0.1406 Not tainted syzkaller #0 [ 401.032099][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.045844][ T9954] Call Trace: [ 401.050065][ T9954] [ 401.054698][ T9954] dump_stack_lvl+0x18c/0x250 [ 401.059897][ T9954] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 401.066688][ T9954] ? show_regs_print_info+0x20/0x20 [ 401.073845][ T9954] ? load_image+0x420/0x420 [ 401.081513][ T9954] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.088604][ T9954] should_fail_ex+0x394/0x4c0 [ 401.094936][ T9954] should_failslab+0x9/0x20 [ 401.100720][ T9954] slab_pre_alloc_hook+0x59/0x300 [ 401.107392][ T9954] ? lockdep_hardirqs_on+0x98/0x150 [ 401.115366][ T9954] kmem_cache_alloc+0x5a/0x2c0 [ 401.121771][ T9954] ? skb_clone+0x1eb/0x370 [ 401.127217][ T9954] skb_clone+0x1eb/0x370 [ 401.132653][ T9954] __netlink_deliver_tap+0x411/0x7f0 [ 401.140302][ T9954] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.146789][ T9954] netlink_deliver_tap+0x19c/0x1b0 [ 401.152625][ T9954] netlink_dump+0x95b/0xec0 [ 401.157898][ T9954] ? netlink_lookup+0x200/0x200 [ 401.162936][ T9954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.169572][ T9954] __netlink_dump_start+0x57c/0x7a0 [ 401.175845][ T9954] rtnetlink_rcv_msg+0xe19/0xf90 [ 401.181591][ T9954] ? rtnetlink_rcv_msg+0x220/0xf90 [ 401.187822][ T9954] ? nla_put_uid_range+0x200/0x200 [ 401.195795][ T9954] ? rtnetlink_bind+0x80/0x80 [ 401.201926][ T9954] ? perf_trace_preemptirq_template+0x269/0x330 [ 401.208863][ T9954] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.214973][ T9954] ? lock_chain_count+0x20/0x20 [ 401.220025][ T9954] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 401.226254][ T9954] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.232401][ T9954] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 401.240178][ T9954] ? lock_chain_count+0x20/0x20 [ 401.248307][ T9954] ? __dev_queue_xmit+0x1329/0x37e0 [ 401.253972][ T9954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.260367][ T9954] ? lockdep_hardirqs_on+0x98/0x150 [ 401.265584][ T9954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.272078][ T9954] ? nla_put_uid_range+0x200/0x200 [ 401.277413][ T9954] ? kasan_check_range+0xbe/0x290 [ 401.282594][ T9954] netlink_rcv_skb+0x235/0x4c0 [ 401.287696][ T9954] ? rtnetlink_bind+0x80/0x80 [ 401.292415][ T9954] ? netlink_ack+0x1160/0x1160 [ 401.297337][ T9954] ? __lock_acquire+0x7d80/0x7d80 [ 401.302470][ T9954] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.307879][ T9954] netlink_unicast+0x7b1/0x930 [ 401.315756][ T9954] netlink_sendmsg+0x8d0/0xbf0 [ 401.321920][ T9954] ? netlink_getsockopt+0x590/0x590 [ 401.328066][ T9954] ? apparmor_socket_sendmsg+0x8e/0x330 [ 401.334030][ T9954] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 401.341654][ T9954] ? security_socket_sendmsg+0x80/0xa0 [ 401.348149][ T9954] ? netlink_getsockopt+0x590/0x590 [ 401.353752][ T9954] ____sys_sendmsg+0x61b/0x980 [ 401.358600][ T9954] ? __asan_memset+0x22/0x40 [ 401.363514][ T9954] ? __sys_sendmsg_sock+0x30/0x30 [ 401.368743][ T9954] ? __import_iovec+0x5f2/0x850 [ 401.374538][ T9954] ? import_iovec+0x73/0xa0 [ 401.379647][ T9954] ___sys_sendmsg+0x2a6/0x360 [ 401.384759][ T9954] ? __sys_sendmsg+0x2b0/0x2b0 [ 401.391522][ T9954] __se_sys_sendmsg+0x1d0/0x2c0 [ 401.396584][ T9954] ? __x64_sys_sendmsg+0x80/0x80 [ 401.401849][ T9954] do_syscall_64+0x55/0xb0 [ 401.406390][ T9954] ? clear_bhb_loop+0x40/0x90 [ 401.411107][ T9954] ? clear_bhb_loop+0x40/0x90 [ 401.415956][ T9954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.422148][ T9954] RIP: 0033:0x7fe9c099e159 [ 401.426690][ T9954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.449594][ T9954] RSP: 002b:00007fe9c179e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.458886][ T9954] RAX: ffffffffffffffda RBX: 00007fe9c0c25fa0 RCX: 00007fe9c099e159 [ 401.469088][ T9954] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 401.477364][ T9954] RBP: 00007fe9c179e090 R08: 0000000000000000 R09: 0000000000000000 [ 401.485637][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.493834][ T9954] R13: 00007fe9c0c26038 R14: 00007fe9c0c25fa0 R15: 00007ffce994aaa8 [ 401.502901][ T9954] [ 401.527926][ T1002] wlan1: Trigger new scan to find an IBSS to join [ 402.008780][ T9965] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1410'. [ 402.079578][ T9965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.137957][ T9970] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1410'. [ 403.773773][T10002] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 403.861296][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.934303][T10002] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 403.993324][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.399941][T10012] netlink: 'syz.1.1424': attribute type 25 has an invalid length. [ 404.470475][T10012] netlink: 'syz.1.1424': attribute type 10 has an invalid length. [ 405.304565][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 406.493613][ T36] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 407.655647][T10073] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1457'. [ 408.713779][T10082] netlink: 'syz.1.1451': attribute type 2 has an invalid length. [ 408.725179][T10082] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 408.762164][T10082] netlink: 'syz.1.1451': attribute type 2 has an invalid length. [ 408.790232][T10082] netlink: 198036 bytes leftover after parsing attributes in process `syz.1.1451'. [ 409.258877][T10110] netlink: 'syz.1.1461': attribute type 3 has an invalid length. [ 409.332844][T10110] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1461'. [ 409.849338][T10120] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1466'. [ 411.586987][T10132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.677642][T10133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.492947][T10151] netlink: 'syz.3.1478': attribute type 29 has an invalid length. [ 414.915297][T10144] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 414.927266][T10148] sit0: left promiscuous mode [ 414.975306][T10151] netlink: 'syz.3.1478': attribute type 29 has an invalid length. [ 415.000055][T10155] netlink: 'syz.3.1478': attribute type 63 has an invalid length. [ 415.008841][T10155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1478'. [ 415.281494][T10159] FAULT_INJECTION: forcing a failure. [ 415.281494][T10159] name failslab, interval 1, probability 0, space 0, times 0 [ 415.312489][T10159] CPU: 0 PID: 10159 Comm: syz.0.1480 Not tainted syzkaller #0 [ 415.321986][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.333840][T10159] Call Trace: [ 415.338246][T10159] [ 415.341904][T10159] dump_stack_lvl+0x18c/0x250 [ 415.349349][T10159] ? show_regs_print_info+0x20/0x20 [ 415.355702][T10159] ? load_image+0x420/0x420 [ 415.362130][T10159] ? __might_sleep+0xe0/0xe0 [ 415.367706][T10159] ? __lock_acquire+0x7d80/0x7d80 [ 415.373624][T10159] should_fail_ex+0x394/0x4c0 [ 415.378769][T10159] should_failslab+0x9/0x20 [ 415.383971][T10159] slab_pre_alloc_hook+0x59/0x300 [ 415.389298][T10159] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 415.396000][T10159] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 415.402708][T10159] __kmem_cache_alloc_node+0x53/0x250 [ 415.408812][T10159] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 415.415364][T10159] __kmalloc+0xa7/0x240 [ 415.421060][T10159] tomoyo_realpath_from_path+0xe6/0x5c0 [ 415.427449][T10159] ? tomoyo_domain+0xd6/0x120 [ 415.434760][T10159] tomoyo_path_number_perm+0x248/0x5e0 [ 415.441359][T10159] ? tomoyo_path_number_perm+0x217/0x5e0 [ 415.447488][T10159] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 415.454996][T10159] ? ksys_write+0x1d2/0x260 [ 415.460671][T10159] ? __fget_files+0x28/0x460 [ 415.465566][T10159] security_file_ioctl+0x70/0xa0 [ 415.471002][T10159] __se_sys_ioctl+0x48/0x170 [ 415.476080][T10159] do_syscall_64+0x55/0xb0 [ 415.481208][T10159] ? clear_bhb_loop+0x40/0x90 [ 415.486604][T10159] ? clear_bhb_loop+0x40/0x90 [ 415.491425][T10159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.497817][T10159] RIP: 0033:0x7fe9c099e159 [ 415.502819][T10159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.524689][T10159] RSP: 002b:00007fe9c179e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.536596][T10159] RAX: ffffffffffffffda RBX: 00007fe9c0c25fa0 RCX: 00007fe9c099e159 [ 415.545932][T10159] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000009 [ 415.554688][T10159] RBP: 00007fe9c179e090 R08: 0000000000000000 R09: 0000000000000000 [ 415.563441][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.575260][T10159] R13: 00007fe9c0c26038 R14: 00007fe9c0c25fa0 R15: 00007ffce994aaa8 [ 415.584735][T10159] [ 415.630229][T10159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 417.321784][ T1102] wlan1: Trigger new scan to find an IBSS to join [ 418.209175][T10214] netlink: 'syz.1.1499': attribute type 2 has an invalid length. [ 420.382694][T10265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.392686][T10265] IPv6: NLM_F_CREATE should be set when creating new route [ 420.758961][T10269] netlink: 'syz.2.1517': attribute type 21 has an invalid length. [ 421.311731][ T1002] wlan1: Trigger new scan to find an IBSS to join [ 424.496466][ T36] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 424.691430][T10289] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 424.727670][T10289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.767302][T10289] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 424.782954][T10289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.836146][T10314] netlink: 'syz.2.1522': attribute type 2 has an invalid length. [ 426.881467][T10316] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1522'. [ 427.423729][T10324] netlink: 'syz.2.1532': attribute type 29 has an invalid length. [ 427.471960][T10324] netlink: 'syz.2.1532': attribute type 29 has an invalid length. [ 427.520291][T10330] netlink: 'syz.2.1532': attribute type 29 has an invalid length. [ 427.676672][T10320] netlink: 'syz.2.1532': attribute type 29 has an invalid length. [ 427.723267][T10320] netlink: 'syz.2.1532': attribute type 63 has an invalid length. [ 427.740123][T10320] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1532'. [ 427.772926][T10335] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1535'. [ 427.989935][T10343] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 428.011154][T10343] netlink: 'syz.2.1538': attribute type 6 has an invalid length. [ 428.028137][T10343] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1538'. [ 428.186969][T10349] FAULT_INJECTION: forcing a failure. [ 428.186969][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 428.201347][T10349] CPU: 1 PID: 10349 Comm: syz.2.1541 Not tainted syzkaller #0 [ 428.210554][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.220751][T10349] Call Trace: [ 428.224240][T10349] [ 428.227306][T10349] dump_stack_lvl+0x18c/0x250 [ 428.232376][T10349] ? show_regs_print_info+0x20/0x20 [ 428.237744][T10349] ? load_image+0x420/0x420 [ 428.242940][T10349] ? lockdep_hardirqs_on+0x98/0x150 [ 428.248311][T10349] should_fail_ex+0x394/0x4c0 [ 428.253675][T10349] should_failslab+0x9/0x20 [ 428.259481][T10349] slab_pre_alloc_hook+0x59/0x300 [ 428.264756][T10349] ? page_pool_create+0x71/0x5c0 [ 428.270048][T10349] __kmem_cache_alloc_node+0x53/0x250 [ 428.275702][T10349] ? page_pool_create+0x71/0x5c0 [ 428.280877][T10349] kmalloc_node_trace+0x26/0xe0 [ 428.285980][T10349] page_pool_create+0x71/0x5c0 [ 428.290898][T10349] bpf_test_run_xdp_live+0x203/0x1b30 [ 428.296573][T10349] ? 0xffffffffa00044c0 [ 428.301027][T10349] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 428.307327][T10349] ? xdp_convert_md_to_buff+0x330/0x330 [ 428.314981][T10349] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 428.321744][T10349] ? xdp_convert_md_to_buff+0x5b/0x330 [ 428.327453][T10349] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 428.333071][T10349] ? __lock_acquire+0x7d80/0x7d80 [ 428.338848][T10349] ? dev_put+0x80/0x80 [ 428.342968][T10349] ? dev_put+0x80/0x80 [ 428.348474][T10349] bpf_prog_test_run+0x31f/0x390 [ 428.354081][T10349] __sys_bpf+0x49d/0x890 [ 428.358719][T10349] ? read_tsc+0x9/0x20 [ 428.363043][T10349] ? bpf_link_show_fdinfo+0x560/0x560 [ 428.369550][T10349] ? lock_chain_count+0x20/0x20 [ 428.376753][T10349] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 428.382996][T10349] __x64_sys_bpf+0x7c/0x90 [ 428.387644][T10349] do_syscall_64+0x55/0xb0 [ 428.392105][T10349] ? clear_bhb_loop+0x40/0x90 [ 428.397155][T10349] ? clear_bhb_loop+0x40/0x90 [ 428.401869][T10349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.407877][T10349] RIP: 0033:0x7f566e99e159 [ 428.412325][T10349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.433381][T10349] RSP: 002b:00007f566f7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.443606][T10349] RAX: ffffffffffffffda RBX: 00007f566ec25fa0 RCX: 00007f566e99e159 [ 428.453200][T10349] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 428.461936][T10349] RBP: 00007f566f7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 428.471009][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.481672][T10349] R13: 00007f566ec26038 R14: 00007f566ec25fa0 R15: 00007ffe60e022d8 [ 428.490232][T10349] [ 429.549036][T10384] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 430.366448][T10400] netlink: 'syz.0.1558': attribute type 17 has an invalid length. [ 430.401384][T10400] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 430.472747][T10404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1560'. [ 430.821945][T10419] netlink: 'syz.2.1566': attribute type 21 has an invalid length. [ 430.838105][T10419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1566'. [ 431.896084][T10429] netlink: 'syz.2.1572': attribute type 21 has an invalid length. [ 431.921089][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1572'. [ 432.287361][T10440] netlink: 'syz.3.1575': attribute type 6 has an invalid length. [ 432.390351][T10440] netlink: 'syz.3.1575': attribute type 1 has an invalid length. [ 432.467526][T10440] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1575'. [ 432.998121][T10459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.056394][T10458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.414100][T10455] syzkaller0: entered promiscuous mode [ 433.425751][T10455] syzkaller0: entered allmulticast mode [ 433.444310][T10465] FAULT_INJECTION: forcing a failure. [ 433.444310][T10465] name failslab, interval 1, probability 0, space 0, times 0 [ 433.476136][T10465] CPU: 1 PID: 10465 Comm: syz.1.1584 Not tainted syzkaller #0 [ 433.484421][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.495404][T10465] Call Trace: [ 433.498987][T10465] [ 433.502697][T10465] dump_stack_lvl+0x18c/0x250 [ 433.507866][T10465] ? lock_chain_count+0x20/0x20 [ 433.513920][T10465] ? show_regs_print_info+0x20/0x20 [ 433.520562][T10465] ? load_image+0x420/0x420 [ 433.525766][T10465] ? lockdep_hardirqs_on+0x98/0x150 [ 433.531436][T10465] should_fail_ex+0x394/0x4c0 [ 433.536937][T10465] should_failslab+0x9/0x20 [ 433.541704][T10465] slab_pre_alloc_hook+0x59/0x300 [ 433.547350][T10465] ? ioctl_standard_iw_point+0x52d/0xd50 [ 433.554176][T10465] ? ioctl_standard_iw_point+0x52d/0xd50 [ 433.560960][T10465] __kmem_cache_alloc_node+0x53/0x250 [ 433.567068][T10465] ? __mutex_lock+0x919/0xc80 [ 433.572717][T10465] ? ioctl_standard_iw_point+0x52d/0xd50 [ 433.578882][T10465] __kmalloc+0xa7/0x240 [ 433.585010][T10465] ioctl_standard_iw_point+0x52d/0xd50 [ 433.591049][T10465] ? cfg80211_wext_giwap+0x120/0x120 [ 433.597140][T10465] ? iw_handler_get_iwstats+0x110/0x110 [ 433.606142][T10465] ? wext_ioctl_dispatch+0x106/0x650 [ 433.612154][T10465] ? mutex_lock_nested+0x20/0x20 [ 433.617450][T10465] ioctl_standard_call+0xae/0x250 [ 433.623419][T10465] ? cfg80211_wext_giwap+0x120/0x120 [ 433.629059][T10465] ? cfg80211_wext_giwap+0x120/0x120 [ 433.635087][T10465] wext_ioctl_dispatch+0x51a/0x650 [ 433.640792][T10465] ? __lock_acquire+0x7d80/0x7d80 [ 433.646212][T10465] ? wext_ioctl_dispatch+0x650/0x650 [ 433.651627][T10465] ? iw_handler_get_private+0x1f0/0x1f0 [ 433.657420][T10465] ? wext_handle_ioctl+0x1e0/0x1e0 [ 433.662787][T10465] ? __might_fault+0xaa/0x120 [ 433.668233][T10465] ? __might_fault+0xc6/0x120 [ 433.672996][T10465] ? __might_fault+0xaa/0x120 [ 433.677902][T10465] wext_handle_ioctl+0x118/0x1e0 [ 433.683476][T10465] ? call_commit_handler+0xf0/0xf0 [ 433.689105][T10465] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 433.695777][T10465] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 433.705071][T10465] ? lock_chain_count+0x20/0x20 [ 433.711071][T10465] sock_ioctl+0x15d/0x7e0 [ 433.716148][T10465] ? sock_poll+0x3e0/0x3e0 [ 433.721158][T10465] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.728480][T10465] ? sock_poll+0x3e0/0x3e0 [ 433.734143][T10465] __se_sys_ioctl+0xfd/0x170 [ 433.739818][T10465] do_syscall_64+0x55/0xb0 [ 433.745592][T10465] ? clear_bhb_loop+0x40/0x90 [ 433.751678][T10465] ? clear_bhb_loop+0x40/0x90 [ 433.757924][T10465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.764320][T10465] RIP: 0033:0x7f7aacf9e159 [ 433.768958][T10465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.792016][T10465] RSP: 002b:00007f7aade1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.801669][T10465] RAX: ffffffffffffffda RBX: 00007f7aad225fa0 RCX: 00007f7aacf9e159 [ 433.811641][T10465] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000006 [ 433.822678][T10465] RBP: 00007f7aade1e090 R08: 0000000000000000 R09: 0000000000000000 [ 433.831778][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.843005][T10465] R13: 00007f7aad226038 R14: 00007f7aad225fa0 R15: 00007ffee4148d38 [ 433.851507][T10465] [ 438.652443][T10526] Dead loop on virtual device ip6_vti0, fix it urgently! [ 441.466109][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.473064][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.667132][T10572] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1619'. [ 443.759289][T10578] tap0: tun_chr_ioctl cmd 1074025677 [ 443.775123][T10578] tap0: linktype set to 1 [ 444.884552][T10603] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1630'. [ 445.164570][T10607] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 445.183357][T10607] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1631'. [ 446.233855][T10627] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1641'. [ 446.250328][T10627] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 447.818469][T10653] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1650'. [ 447.911125][T10653] netlink: 'syz.2.1650': attribute type 4 has an invalid length. [ 447.922037][T10653] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1650'. [ 448.214533][T10663] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1655'. [ 448.503503][T10664] syzkaller0: entered promiscuous mode [ 448.509807][T10664] syzkaller0: entered allmulticast mode [ 452.311766][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1661'. [ 452.321852][T10683] virt_wifi0: left promiscuous mode [ 452.327728][T10683] virt_wifi0: left allmulticast mode [ 452.604786][T10706] netlink: 'syz.0.1666': attribute type 21 has an invalid length. [ 452.644066][T10706] netlink: 'syz.0.1666': attribute type 1 has an invalid length. [ 452.653578][T10706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1666'. [ 452.664193][T10703] netlink: 'syz.3.1665': attribute type 21 has an invalid length. [ 452.689477][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 453.237581][T10722] netlink: 'syz.3.1672': attribute type 2 has an invalid length. [ 453.288642][T10722] netlink: 'syz.3.1672': attribute type 8 has an invalid length. [ 453.349733][T10722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1672'. [ 453.463732][T10721] netlink: 'syz.3.1672': attribute type 2 has an invalid length. [ 453.496232][T10721] netlink: 'syz.3.1672': attribute type 8 has an invalid length. [ 453.531054][T10721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1672'. [ 453.964308][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1675'. [ 453.989727][T10728] virt_wifi0: left promiscuous mode [ 454.012787][T10728] virt_wifi0: left allmulticast mode [ 454.568382][T10746] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1681'. [ 455.139786][T10759] netlink: 'syz.0.1686': attribute type 10 has an invalid length. [ 455.883259][T10767] FAULT_INJECTION: forcing a failure. [ 455.883259][T10767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.906766][T10767] CPU: 1 PID: 10767 Comm: syz.1.1689 Not tainted syzkaller #0 [ 455.914843][T10767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.926377][T10767] Call Trace: [ 455.929862][T10767] [ 455.932839][T10767] dump_stack_lvl+0x18c/0x250 [ 455.937868][T10767] ? lock_chain_count+0x20/0x20 [ 455.942828][T10767] ? show_regs_print_info+0x20/0x20 [ 455.948172][T10767] ? load_image+0x420/0x420 [ 455.952819][T10767] ? lockdep_hardirqs_on+0x98/0x150 [ 455.958285][T10767] should_fail_ex+0x394/0x4c0 [ 455.963108][T10767] _copy_to_user+0x2f/0xa0 [ 455.967781][T10767] bpf_verifier_vlog+0x2f1/0x840 [ 455.972965][T10767] __btf_verifier_log+0xe3/0x140 [ 455.978155][T10767] ? btf_check_sec_info+0x350/0x350 [ 455.983514][T10767] ? lockdep_hardirqs_on+0x98/0x150 [ 455.989136][T10767] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 455.996020][T10767] ? btf_parse_hdr+0x1f0/0x700 [ 456.001636][T10767] btf_parse_hdr+0x2cc/0x700 [ 456.006281][T10767] btf_new_fd+0x397/0x9e0 [ 456.010679][T10767] ? bpf_btf_show_fdinfo+0x80/0x80 [ 456.016005][T10767] ? capable+0x88/0xe0 [ 456.021353][T10767] __sys_bpf+0x670/0x890 [ 456.026476][T10767] ? read_tsc+0x9/0x20 [ 456.030623][T10767] ? bpf_link_show_fdinfo+0x560/0x560 [ 456.036521][T10767] ? lock_chain_count+0x20/0x20 [ 456.041683][T10767] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 456.047957][T10767] __x64_sys_bpf+0x7c/0x90 [ 456.053216][T10767] do_syscall_64+0x55/0xb0 [ 456.057739][T10767] ? clear_bhb_loop+0x40/0x90 [ 456.063188][T10767] ? clear_bhb_loop+0x40/0x90 [ 456.068017][T10767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.075284][T10767] RIP: 0033:0x7f7aacf9e159 [ 456.082224][T10767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.116323][T10767] RSP: 002b:00007f7aade1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.129560][T10767] RAX: ffffffffffffffda RBX: 00007f7aad225fa0 RCX: 00007f7aacf9e159 [ 456.141431][T10767] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 456.150515][T10767] RBP: 00007f7aade1e090 R08: 0000000000000000 R09: 0000000000000000 [ 456.160102][T10767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.169731][T10767] R13: 00007f7aad226038 R14: 00007f7aad225fa0 R15: 00007ffee4148d38 [ 456.178236][T10767] [ 456.772409][T10770] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 456.807322][T10773] netlink: 'syz.3.1692': attribute type 3 has an invalid length. [ 456.825321][T10773] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1692'. [ 457.068537][T10776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1690'. [ 457.096328][T10776] virt_wifi0: left promiscuous mode [ 457.110560][T10776] virt_wifi0: left allmulticast mode [ 460.017792][T10784] delete_channel: no stack [ 460.246877][T10798] Dead loop on virtual device ip6_vti0, fix it urgently! [ 460.297491][T10806] validate_nla: 1 callbacks suppressed [ 460.297550][T10806] netlink: 'syz.1.1702': attribute type 25 has an invalid length. [ 460.389610][T10806] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 460.451509][T10809] netlink: 'syz.0.1703': attribute type 41 has an invalid length. [ 460.556259][T10812] FAULT_INJECTION: forcing a failure. [ 460.556259][T10812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.618669][T10812] CPU: 0 PID: 10812 Comm: syz.3.1704 Not tainted syzkaller #0 [ 460.628821][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.639891][T10812] Call Trace: [ 460.643217][T10812] [ 460.646359][T10812] dump_stack_lvl+0x18c/0x250 [ 460.651712][T10812] ? show_regs_print_info+0x20/0x20 [ 460.657151][T10812] ? load_image+0x420/0x420 [ 460.662054][T10812] ? __might_fault+0xaa/0x120 [ 460.668421][T10812] ? __lock_acquire+0x7d80/0x7d80 [ 460.675161][T10812] should_fail_ex+0x394/0x4c0 [ 460.681149][T10812] _copy_from_user+0x2f/0xe0 [ 460.691953][T10812] kstrtouint_from_user+0xde/0x170 [ 460.699370][T10812] ? kstrtol_from_user+0x190/0x190 [ 460.706422][T10812] proc_fail_nth_write+0x8f/0x250 [ 460.714403][T10812] ? proc_fail_nth_read+0x260/0x260 [ 460.721212][T10812] ? proc_fail_nth_read+0x260/0x260 [ 460.730797][T10812] vfs_write+0x299/0x9a0 [ 460.736380][T10812] ? file_end_write+0x250/0x250 [ 460.741845][T10812] ? __fget_files+0x28/0x460 [ 460.746934][T10812] ? __fget_files+0x3fc/0x460 [ 460.752594][T10812] ? __fdget_pos+0x2a3/0x330 [ 460.758292][T10812] ? ksys_write+0x74/0x260 [ 460.763995][T10812] ksys_write+0x151/0x260 [ 460.769417][T10812] ? __ia32_sys_read+0x90/0x90 [ 460.775045][T10812] ? lockdep_hardirqs_on+0x98/0x150 [ 460.781368][T10812] do_syscall_64+0x55/0xb0 [ 460.786680][T10812] ? clear_bhb_loop+0x40/0x90 [ 460.792083][T10812] ? clear_bhb_loop+0x40/0x90 [ 460.800131][T10812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.806826][T10812] RIP: 0033:0x7f41e8b5e98e [ 460.813986][T10812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.838196][T10812] RSP: 002b:00007f41e9a28fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.848403][T10812] RAX: ffffffffffffffda RBX: 00007f41e9a296c0 RCX: 00007f41e8b5e98e [ 460.856598][T10812] RDX: 0000000000000001 RSI: 00007f41e9a290a0 RDI: 000000000000000b [ 460.864719][T10812] RBP: 00007f41e9a29090 R08: 0000000000000000 R09: 0000000000000000 [ 460.873330][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.882736][T10812] R13: 00007f41e8e26128 R14: 00007f41e8e26090 R15: 00007ffc2a090448 [ 460.890963][T10812] [ 461.550291][T10838] FAULT_INJECTION: forcing a failure. [ 461.550291][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.589291][T10838] CPU: 0 PID: 10838 Comm: syz.2.1714 Not tainted syzkaller #0 [ 461.596929][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.607822][T10838] Call Trace: [ 461.611149][T10838] [ 461.614313][T10838] dump_stack_lvl+0x18c/0x250 [ 461.619212][T10838] ? show_regs_print_info+0x20/0x20 [ 461.624544][T10838] ? load_image+0x420/0x420 [ 461.629701][T10838] ? __might_fault+0xaa/0x120 [ 461.634508][T10838] ? __lock_acquire+0x7d80/0x7d80 [ 461.639758][T10838] should_fail_ex+0x394/0x4c0 [ 461.644582][T10838] _copy_from_iter+0x1cd/0x1290 [ 461.649593][T10838] ? copyout_mc+0x70/0x70 [ 461.654073][T10838] ? __virt_addr_valid+0x10c/0x380 [ 461.659316][T10838] ? __virt_addr_valid+0x10c/0x380 [ 461.665005][T10838] ? __virt_addr_valid+0x10c/0x380 [ 461.670431][T10838] ? __check_object_size+0x4fc/0xa40 [ 461.675844][T10838] tipc_msg_build+0x87a/0xe60 [ 461.682463][T10838] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 461.688763][T10838] ? tipc_group_bc_cong+0x15c/0x210 [ 461.694696][T10838] tipc_send_group_bcast+0x7d8/0xad0 [ 461.700464][T10838] ? tipc_wait_for_connect+0x650/0x650 [ 461.707949][T10838] ? wait_woken+0x180/0x180 [ 461.713226][T10838] __tipc_sendmsg+0x314/0x2b20 [ 461.718387][T10838] ? trace_call_bpf+0xc3/0x6c0 [ 461.723496][T10838] ? __lock_acquire+0x7d80/0x7d80 [ 461.728744][T10838] ? rht_unlock+0x1d0/0x1d0 [ 461.733291][T10838] ? trace_call_bpf+0xc3/0x6c0 [ 461.738262][T10838] ? trace_call_bpf+0xc3/0x6c0 [ 461.743145][T10838] ? trace_call_bpf+0x5e9/0x6c0 [ 461.748048][T10838] ? trace_call_bpf+0xc3/0x6c0 [ 461.752848][T10838] ? verify_lock_unused+0x140/0x140 [ 461.758436][T10838] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 461.764993][T10838] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 461.771750][T10838] ? mark_lock+0x94/0x320 [ 461.776156][T10838] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 461.782610][T10838] ? __local_bh_enable_ip+0x13a/0x1c0 [ 461.788100][T10838] ? lockdep_hardirqs_on+0x98/0x150 [ 461.793328][T10838] ? __local_bh_enable_ip+0x13a/0x1c0 [ 461.798815][T10838] ? _local_bh_enable+0xa0/0xa0 [ 461.803685][T10838] tipc_sendmsg+0x55/0x70 [ 461.808121][T10838] sock_write_iter+0x2dc/0x420 [ 461.813008][T10838] ? sock_read_iter+0x3f0/0x3f0 [ 461.818265][T10838] ? common_file_perm+0x198/0x1f0 [ 461.823446][T10838] vfs_write+0x474/0x9a0 [ 461.827735][T10838] ? file_end_write+0x250/0x250 [ 461.832623][T10838] ? __fget_files+0x3fc/0x460 [ 461.838117][T10838] ? __fdget_pos+0x1d8/0x330 [ 461.843370][T10838] ? ksys_write+0x74/0x260 [ 461.848097][T10838] ksys_write+0x151/0x260 [ 461.852674][T10838] ? __ia32_sys_read+0x90/0x90 [ 461.857571][T10838] ? lockdep_hardirqs_on+0x98/0x150 [ 461.863254][T10838] do_syscall_64+0x55/0xb0 [ 461.867810][T10838] ? clear_bhb_loop+0x40/0x90 [ 461.872517][T10838] ? clear_bhb_loop+0x40/0x90 [ 461.877348][T10838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.883296][T10838] RIP: 0033:0x7f566e99e159 [ 461.887931][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.908534][T10838] RSP: 002b:00007f566f7a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.917431][T10838] RAX: ffffffffffffffda RBX: 00007f566ec25fa0 RCX: 00007f566e99e159 [ 461.925794][T10838] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000004 [ 461.937255][T10838] RBP: 00007f566f7a0090 R08: 0000000000000000 R09: 0000000000000000 [ 461.945763][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.956307][T10838] R13: 00007f566ec26038 R14: 00007f566ec25fa0 R15: 00007ffe60e022d8 [ 461.965390][T10838] [ 462.143323][T10842] netlink: 'syz.1.1716': attribute type 25 has an invalid length. [ 462.172448][T10842] netlink: 'syz.1.1716': attribute type 10 has an invalid length. [ 464.415277][T10851] netlink: 'syz.0.1719': attribute type 33 has an invalid length. [ 464.427421][T10851] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1719'. [ 466.291976][T10890] netlink: 'syz.0.1732': attribute type 33 has an invalid length. [ 466.326452][T10890] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1732'. [ 468.398793][T10900] ref_ctr_offset mismatch. inode: 0x88e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 468.810468][T10914] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.1739'. [ 471.899102][T10921] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.957316][T10925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1745'. [ 471.966977][T10925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1745'. [ 471.980473][T10925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1745'. [ 472.188281][T10925] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 473.239057][T10949] FAULT_INJECTION: forcing a failure. [ 473.239057][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 473.265398][T10949] CPU: 0 PID: 10949 Comm: syz.3.1749 Not tainted syzkaller #0 [ 473.275677][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.287302][T10949] Call Trace: [ 473.291737][T10949] [ 473.294836][T10949] dump_stack_lvl+0x18c/0x250 [ 473.299895][T10949] ? show_regs_print_info+0x20/0x20 [ 473.306170][T10949] ? load_image+0x420/0x420 [ 473.312245][T10949] ? __might_sleep+0xe0/0xe0 [ 473.317560][T10949] ? __lock_acquire+0x7d80/0x7d80 [ 473.323494][T10949] should_fail_ex+0x394/0x4c0 [ 473.329584][T10949] should_failslab+0x9/0x20 [ 473.334345][T10949] slab_pre_alloc_hook+0x59/0x300 [ 473.340007][T10949] ? tomoyo_encode+0x2ad/0x570 [ 473.345206][T10949] ? tomoyo_encode+0x2ad/0x570 [ 473.350161][T10949] __kmem_cache_alloc_node+0x53/0x250 [ 473.355738][T10949] ? tomoyo_encode+0x2ad/0x570 [ 473.361066][T10949] __kmalloc+0xa7/0x240 [ 473.365666][T10949] tomoyo_encode+0x2ad/0x570 [ 473.370595][T10949] tomoyo_realpath_from_path+0x57c/0x5c0 [ 473.376933][T10949] ? tomoyo_domain+0xd6/0x120 [ 473.383107][T10949] tomoyo_path_number_perm+0x248/0x5e0 [ 473.388753][T10949] ? tomoyo_path_number_perm+0x217/0x5e0 [ 473.394635][T10949] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 473.400160][T10949] ? ksys_write+0x1d2/0x260 [ 473.405374][T10949] ? __fget_files+0x28/0x460 [ 473.411632][T10949] security_file_ioctl+0x70/0xa0 [ 473.416857][T10949] __se_sys_ioctl+0x48/0x170 [ 473.421692][T10949] do_syscall_64+0x55/0xb0 [ 473.426177][T10949] ? clear_bhb_loop+0x40/0x90 [ 473.431283][T10949] ? clear_bhb_loop+0x40/0x90 [ 473.436050][T10949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.442461][T10949] RIP: 0033:0x7f41e8b9e159 [ 473.447159][T10949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.468080][T10949] RSP: 002b:00007f41e9a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.476933][T10949] RAX: ffffffffffffffda RBX: 00007f41e8e25fa0 RCX: 00007f41e8b9e159 [ 473.485507][T10949] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000009 [ 473.493901][T10949] RBP: 00007f41e9a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 473.502283][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.510497][T10949] R13: 00007f41e8e26038 R14: 00007f41e8e25fa0 R15: 00007ffc2a090448 [ 473.519750][T10949] [ 473.537008][T10949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.201541][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.216698][T10925] team0: Port device batadv0 added [ 475.227361][T10936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1745'. [ 477.145239][T10988] netlink: 'syz.1.1760': attribute type 19 has an invalid length. [ 477.165670][T10988] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1760'. [ 477.309891][T10991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 477.361785][T10991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 477.403373][T10991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 477.711258][T10994] netlink: 'syz.0.1761': attribute type 10 has an invalid length. [ 478.204207][T11002] netlink: 'syz.3.1763': attribute type 153 has an invalid length. [ 478.232967][T11002] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 478.310023][T11002] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1763'. [ 479.893645][T10994] bridge0: port 2(batadv0) entered disabled state [ 479.929197][T10994] batadv0: left allmulticast mode [ 479.938422][T10994] batadv0: left promiscuous mode [ 479.955661][T10994] bridge0: port 2(batadv0) entered disabled state [ 479.983139][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.005162][T10994] team0: Port device batadv0 added [ 480.022212][T10998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 480.253967][T11006] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1765'. [ 480.476431][T11014] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 480.554919][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.639163][T11014] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 480.710555][T11014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.582003][T11037] lo: entered promiscuous mode [ 481.614486][T11037] lo: entered allmulticast mode [ 481.686949][T11038] netlink: 'syz.3.1771': attribute type 10 has an invalid length. [ 481.738078][T11038] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 482.162163][T11038] batman_adv: batadv0: Removing interface: virt_wifi0 [ 482.207937][T11038] team0: Port device virt_wifi0 added [ 482.275962][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1774'. [ 482.317010][T11042] netlink: 'syz.0.1775': attribute type 1 has an invalid length. [ 482.347285][T11042] netlink: 'syz.0.1775': attribute type 6 has an invalid length. [ 482.368214][T11042] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1775'. [ 482.637861][T11048] FAULT_INJECTION: forcing a failure. [ 482.637861][T11048] name failslab, interval 1, probability 0, space 0, times 0 [ 482.675263][T11048] CPU: 0 PID: 11048 Comm: syz.3.1776 Not tainted syzkaller #0 [ 482.683004][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.693232][T11048] Call Trace: [ 482.696584][T11048] [ 482.699633][T11048] dump_stack_lvl+0x18c/0x250 [ 482.704585][T11048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.710825][T11048] ? show_regs_print_info+0x20/0x20 [ 482.716076][T11048] ? load_image+0x420/0x420 [ 482.720907][T11048] should_fail_ex+0x394/0x4c0 [ 482.725732][T11048] should_failslab+0x9/0x20 [ 482.730279][T11048] slab_pre_alloc_hook+0x59/0x300 [ 482.735357][T11048] ? kvmalloc_node+0x70/0x180 [ 482.740305][T11048] ? kvmalloc_node+0x70/0x180 [ 482.745138][T11048] __kmem_cache_alloc_node+0x53/0x250 [ 482.750951][T11048] ? kvmalloc_node+0x70/0x180 [ 482.755855][T11048] __kmalloc_node+0xa6/0x240 [ 482.760558][T11048] kvmalloc_node+0x70/0x180 [ 482.765104][T11048] page_pool_create+0x1eb/0x5c0 [ 482.770382][T11048] bpf_test_run_xdp_live+0x203/0x1b30 [ 482.776074][T11048] ? 0xffffffffa00044c0 [ 482.780349][T11048] ? 0xffffffffa00044c0 [ 482.784750][T11048] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 482.790691][T11048] ? xdp_convert_md_to_buff+0x330/0x330 [ 482.796547][T11048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.803177][T11048] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 482.809451][T11048] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 482.814846][T11048] ? __lock_acquire+0x7d80/0x7d80 [ 482.819995][T11048] ? dev_put+0x80/0x80 [ 482.824103][T11048] ? dev_put+0x80/0x80 [ 482.828450][T11048] bpf_prog_test_run+0x31f/0x390 [ 482.833583][T11048] __sys_bpf+0x49d/0x890 [ 482.838023][T11048] ? bpf_link_show_fdinfo+0x560/0x560 [ 482.843859][T11048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 482.851589][T11048] __x64_sys_bpf+0x7c/0x90 [ 482.856188][T11048] do_syscall_64+0x55/0xb0 [ 482.860849][T11048] ? clear_bhb_loop+0x40/0x90 [ 482.865870][T11048] ? clear_bhb_loop+0x40/0x90 [ 482.870863][T11048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.877248][T11048] RIP: 0033:0x7f41e8b9e159 [ 482.881791][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.902146][T11048] RSP: 002b:00007f41e9a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.911854][T11048] RAX: ffffffffffffffda RBX: 00007f41e8e25fa0 RCX: 00007f41e8b9e159 [ 482.920225][T11048] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 482.929733][T11048] RBP: 00007f41e9a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 482.938393][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.948011][T11048] R13: 00007f41e8e26038 R14: 00007f41e8e25fa0 R15: 00007ffc2a090448 [ 482.956326][T11048] [ 483.107294][T11048] page_pool_create() gave up with errno -12 [ 485.439392][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1774'. [ 485.451337][T11044] netlink: 'syz.1.1774': attribute type 10 has an invalid length. [ 485.505439][T11044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.519225][T11044] team0: Port device batadv0 added [ 485.565512][T11061] netlink: 'syz.0.1778': attribute type 1 has an invalid length. [ 485.580416][T11061] netlink: 'syz.0.1778': attribute type 3 has an invalid length. [ 485.588421][T11061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1778'. [ 485.901710][T11071] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 486.148487][T11073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1784'. [ 486.443378][T11090] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1790'. [ 486.466335][T11090] openvswitch: netlink: Key type 29 is not supported [ 487.033264][T11098] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 487.045577][T11098] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1794'. [ 487.056782][T11098] hsr0: entered promiscuous mode [ 487.073568][T11098] bridge0: port 2(hsr0) entered blocking state [ 487.091871][T11098] bridge0: port 2(hsr0) entered disabled state [ 487.104639][T11098] hsr0: entered allmulticast mode [ 487.151541][T11098] hsr_slave_0: entered allmulticast mode [ 487.220530][T11098] hsr_slave_1: entered allmulticast mode [ 487.443629][T11098] bridge0: port 2(hsr0) entered blocking state [ 487.453163][T11098] bridge0: port 2(hsr0) entered forwarding state [ 487.498721][T11097] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 487.510263][T11097] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1794'. [ 487.629321][T11119] netlink: 'syz.2.1802': attribute type 16 has an invalid length. [ 487.649890][T11119] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1802'. [ 489.584981][T11158] syzkaller0: entered promiscuous mode [ 489.604898][T11158] syzkaller0: entered allmulticast mode [ 489.653835][T11164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1819'. [ 489.701777][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.968795][T11189] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1828'. [ 492.989198][T11190] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 496.838172][T11224] syzkaller0: entered promiscuous mode [ 496.844334][T11224] syzkaller0: entered allmulticast mode [ 496.875956][T11232] netlink: 'syz.3.1841': attribute type 39 has an invalid length. [ 500.044712][T11248] netlink: 'syz.1.1848': attribute type 17 has an invalid length. [ 500.055169][T11248] netlink: 'syz.1.1848': attribute type 16 has an invalid length. [ 500.066938][T11248] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1848'. [ 500.495806][T11261] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 500.508172][T11261] syzkaller1: linktype set to 773 [ 501.237127][T11290] netlink: 'syz.1.1864': attribute type 29 has an invalid length. [ 501.246028][T11290] netlink: 'syz.1.1864': attribute type 29 has an invalid length. [ 501.255935][T11290] netlink: 'syz.1.1864': attribute type 29 has an invalid length. [ 501.265908][T11290] netlink: 'syz.1.1864': attribute type 29 has an invalid length. [ 502.918067][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.927898][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.253157][T11334] netlink: 'syz.1.1882': attribute type 25 has an invalid length. [ 503.264971][T11334] netlink: 'syz.1.1882': attribute type 10 has an invalid length. [ 503.520946][T11343] netlink: 'syz.3.1883': attribute type 39 has an invalid length. [ 503.892247][T11341] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1885'. [ 504.111487][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.597242][T11353] netlink: 'syz.2.1891': attribute type 6 has an invalid length. [ 504.605896][T11353] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1891'. [ 505.256391][T11368] netlink: 'syz.0.1900': attribute type 39 has an invalid length. [ 505.591716][T11370] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1896'. [ 505.648844][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.666934][T11372] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1897'. [ 505.682206][T11372] netlink: 'syz.1.1897': attribute type 1 has an invalid length. [ 505.691558][T11372] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1897'. [ 505.705280][T11374] netlink: 'syz.3.1898': attribute type 33 has an invalid length. [ 505.721369][T11374] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1898'. [ 506.185471][T11384] netlink: 'syz.3.1902': attribute type 21 has an invalid length. [ 506.275951][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 507.085696][T11398] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1906'. [ 508.929564][T11395] netlink: 'syz.1.1906': attribute type 10 has an invalid length. [ 508.941188][T11395] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 508.967240][T11395] veth0_vlan: entered allmulticast mode [ 509.080294][T11395] batman_adv: batadv0: Removing interface: veth0_vlan [ 509.097932][T11395] veth0_vlan: left promiscuous mode [ 509.108090][T11395] veth0_vlan: entered promiscuous mode [ 509.117675][T11395] team0: Device veth0_vlan failed to register rx_handler [ 509.200438][T11391] netlink: 'syz.1.1906': attribute type 5 has an invalid length. [ 509.208471][T11391] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1906'. [ 509.301857][T11404] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1908'. [ 510.032630][T11418] netlink: 'syz.1.1912': attribute type 39 has an invalid length. [ 510.552437][T11436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1918'. [ 510.965405][T11441] netlink: 'syz.2.1920': attribute type 10 has an invalid length. [ 510.975852][T11441] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1920'. [ 511.741077][T11455] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 513.856403][T11455] team0: Port device wlan1 added [ 513.870332][ T1077] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 513.878522][ T1077] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 513.995841][T11461] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1928'. [ 514.372543][T11469] delete_channel: no stack [ 517.297780][T11512] netlink: 'syz.0.1947': attribute type 21 has an invalid length. [ 517.324401][T11512] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.774133][T11529] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.1953'. [ 520.971551][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1960'. [ 521.100262][T11553] netlink: 'syz.2.1961': attribute type 3 has an invalid length. [ 521.119711][T11553] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1961'. [ 524.785018][T11582] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 524.814607][ T1102] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 524.884581][ T1102] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 526.249497][T11610] netlink: 'syz.2.1981': attribute type 39 has an invalid length. [ 529.327765][T11617] netlink: 'syz.1.1987': attribute type 9 has an invalid length. [ 529.453009][T11617] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1987'. [ 529.716639][T11624] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.727876][ T12] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 529.760040][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 530.562372][T11634] netlink: 'syz.2.1993': attribute type 4 has an invalid length. [ 530.579109][T11634] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.1993'. [ 531.970315][T11649] netlink: 'syz.0.1998': attribute type 6 has an invalid length. [ 532.334072][T11658] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.622611][T11664] netlink: 'syz.0.2004': attribute type 4 has an invalid length. [ 532.639291][T11664] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.2004'. [ 533.793401][T11684] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 533.887625][T11684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.914467][T11688] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2014'. [ 533.955327][T11684] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 534.040717][T11684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.135366][T11684] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 534.150651][T11684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.498457][T11698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2019'. [ 534.607994][T11699] netlink: 'syz.3.2017': attribute type 4 has an invalid length. [ 534.643354][T11699] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.2017'. [ 536.004413][T11720] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2028'. [ 536.521698][T11738] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 537.878897][T11761] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2043'. [ 537.962031][T11766] netlink: 105940 bytes leftover after parsing attributes in process `syz.1.2046'. [ 538.154948][T11766] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2046'. [ 538.624991][T11782] netlink: 'syz.0.2052': attribute type 15 has an invalid length. [ 538.634693][T11782] netlink: 'syz.0.2052': attribute type 7 has an invalid length. [ 538.648130][T11782] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2052'. [ 539.100651][T11781] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 539.677681][T11790] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2056'. [ 539.764401][T11794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2057'. [ 540.077916][T11798] netlink: 'syz.2.2059': attribute type 9 has an invalid length. [ 540.099584][T11798] netlink: 'syz.2.2059': attribute type 23 has an invalid length. [ 540.131046][T11798] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.2059'. [ 541.199298][T11823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2069'. [ 541.272187][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.979439][T11890] FAULT_INJECTION: forcing a failure. [ 544.979439][T11890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 545.020553][T11890] CPU: 1 PID: 11890 Comm: syz.1.2094 Not tainted syzkaller #0 [ 545.029450][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.040007][T11890] Call Trace: [ 545.043349][T11890] [ 545.046404][T11890] dump_stack_lvl+0x18c/0x250 [ 545.051313][T11890] ? show_regs_print_info+0x20/0x20 [ 545.056572][T11890] ? load_image+0x420/0x420 [ 545.061267][T11890] ? __lock_acquire+0x7d80/0x7d80 [ 545.066721][T11890] should_fail_ex+0x394/0x4c0 [ 545.072031][T11890] prepare_alloc_pages+0x1e1/0x5b0 [ 545.077330][T11890] __alloc_pages+0x134/0x460 [ 545.082081][T11890] ? zone_statistics+0x170/0x170 [ 545.087152][T11890] ? mark_lock+0x94/0x320 [ 545.091714][T11890] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 545.098248][T11890] __pmd_alloc+0x9a/0x8c0 [ 545.102894][T11890] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.109209][T11890] ? lockdep_hardirqs_on+0x98/0x150 [ 545.114514][T11890] ? __pud_alloc+0x200/0x200 [ 545.119264][T11890] ? handle_mm_fault+0x9f0/0x4a50 [ 545.124988][T11890] handle_mm_fault+0xb75/0x4a50 [ 545.130213][T11890] ? handle_mm_fault+0xe6/0x4a50 [ 545.135585][T11890] ? numa_migrate_prep+0x350/0x350 [ 545.141078][T11890] ? lock_mm_and_find_vma+0x79/0x2f0 [ 545.147585][T11890] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 545.153018][T11890] do_user_addr_fault+0x736/0x12d0 [ 545.158485][T11890] exc_page_fault+0x64/0x100 [ 545.163893][T11890] asm_exc_page_fault+0x26/0x30 [ 545.169192][T11890] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 545.175187][T11890] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 545.197566][T11890] RSP: 0018:ffffc9000b69fa10 EFLAGS: 00050216 [ 545.203875][T11890] RAX: ffffffff84342b01 RBX: 0000000000000020 RCX: 0000000000000020 [ 545.212442][T11890] RDX: 0000000000000001 RSI: 000000110c230000 RDI: ffff88805de71d80 [ 545.220724][T11890] RBP: ffffc9000b69fba8 R08: ffff88805de71d9f R09: 1ffff1100bbce3b3 [ 545.229525][T11890] R10: dffffc0000000000 R11: ffffed100bbce3b4 R12: 000000110c230020 [ 545.237911][T11890] R13: ffff88805de71d80 R14: ffff88805de71d80 R15: 000000110c230000 [ 545.246300][T11890] ? rcuref_put_slowpath+0x101/0x150 [ 545.251740][T11890] _copy_from_user+0x8b/0xe0 [ 545.256379][T11890] ioctl_standard_iw_point+0x5f8/0xd50 [ 545.262029][T11890] ? cfg80211_wext_giwap+0x120/0x120 [ 545.267728][T11890] ? iw_handler_get_iwstats+0x110/0x110 [ 545.273709][T11890] ? strnlen+0x36/0x90 [ 545.278018][T11890] ioctl_standard_call+0xae/0x250 [ 545.283987][T11890] ? cfg80211_wext_giwap+0x120/0x120 [ 545.289899][T11890] ? cfg80211_wext_giwap+0x120/0x120 [ 545.295267][T11890] wext_ioctl_dispatch+0x51a/0x650 [ 545.300592][T11890] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.306971][T11890] ? wext_ioctl_dispatch+0x650/0x650 [ 545.312655][T11890] ? iw_handler_get_private+0x1f0/0x1f0 [ 545.318328][T11890] ? wext_handle_ioctl+0x1e0/0x1e0 [ 545.324416][T11890] ? rep_movs_alternative+0x33/0x90 [ 545.330197][T11890] wext_handle_ioctl+0x118/0x1e0 [ 545.335276][T11890] ? call_commit_handler+0xf0/0xf0 [ 545.340797][T11890] ? perf_trace_preemptirq_template+0xac/0x330 [ 545.347054][T11890] sock_ioctl+0x15d/0x7e0 [ 545.351473][T11890] ? sock_poll+0x3e0/0x3e0 [ 545.355941][T11890] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.362330][T11890] ? bpf_lsm_file_ioctl+0x9/0x10 [ 545.367299][T11890] ? security_file_ioctl+0x80/0xa0 [ 545.372727][T11890] ? sock_poll+0x3e0/0x3e0 [ 545.377446][T11890] __se_sys_ioctl+0xfd/0x170 [ 545.382520][T11890] do_syscall_64+0x55/0xb0 [ 545.387083][T11890] ? clear_bhb_loop+0x40/0x90 [ 545.392876][T11890] ? clear_bhb_loop+0x40/0x90 [ 545.397746][T11890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.404621][T11890] RIP: 0033:0x7f7aacf9e159 [ 545.410173][T11890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.435484][T11890] RSP: 002b:00007f7aade1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.449898][T11890] RAX: ffffffffffffffda RBX: 00007f7aad225fa0 RCX: 00007f7aacf9e159 [ 545.460128][T11890] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000006 [ 545.470612][T11890] RBP: 00007f7aade1e090 R08: 0000000000000000 R09: 0000000000000000 [ 545.482193][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.494121][T11890] R13: 00007f7aad226038 R14: 00007f7aad225fa0 R15: 00007ffee4148d38 [ 545.503853][T11890] [ 545.604212][T11890] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 545.963784][T11902] syzkaller0: entered promiscuous mode [ 545.969498][T11902] syzkaller0: entered allmulticast mode [ 546.280605][T11910] netlink: 539 bytes leftover after parsing attributes in process `syz.1.2100'. [ 546.882312][T11922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 554.456904][T11990] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2123'. [ 555.454804][T11994] syzkaller0: entered promiscuous mode [ 555.492102][T11994] syzkaller0: entered allmulticast mode [ 559.032295][T12019] netlink: 'syz.2.2135': attribute type 10 has an invalid length. [ 559.044644][T12019] team0: Device hsr_slave_0 failed to register rx_handler [ 559.071846][T12029] netlink: 'syz.1.2138': attribute type 25 has an invalid length. [ 559.092580][T12029] netlink: 'syz.1.2138': attribute type 10 has an invalid length. [ 559.830404][T12043] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2144'. [ 561.856062][T12095] netlink: 'syz.0.2164': attribute type 29 has an invalid length. [ 561.879273][T12099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2166'. [ 561.894171][T12099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2166'. [ 561.904568][T12095] netlink: 'syz.0.2164': attribute type 29 has an invalid length. [ 561.927447][T12100] netlink: 'syz.0.2164': attribute type 29 has an invalid length. [ 561.945371][T12095] netlink: 'syz.0.2164': attribute type 29 has an invalid length. [ 561.992410][T12095] netlink: 'syz.0.2164': attribute type 29 has an invalid length. [ 562.032310][T12099] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2166'. [ 562.803718][T12103] netlink: 'syz.2.2166': attribute type 5 has an invalid length. [ 562.876227][T12101] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2166'. [ 563.269434][T12123] syz.1.2175[12123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.914486][T12131] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.2178'. [ 564.344431][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.351362][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.644178][T12154] netlink: 'syz.1.2184': attribute type 10 has an invalid length. [ 566.660886][T12154] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2184'. [ 566.769184][T12159] netlink: 'syz.0.2185': attribute type 10 has an invalid length. [ 566.800170][T12159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2185'. [ 566.863673][T12156] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2183'. [ 566.883500][T12159] bridge0: port 2(ipvlan1) entered blocking state [ 566.923071][T12159] bridge0: port 2(ipvlan1) entered disabled state [ 566.927897][T12156] openvswitch: netlink: Key type 29 is not supported [ 566.981693][T12159] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 567.408470][T12176] Dead loop on virtual device ip6_vti0, fix it urgently! [ 570.666039][T12190] netlink: 'syz.0.2194': attribute type 10 has an invalid length. [ 570.773481][T12191] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2196'. [ 570.795072][T12191] netlink: zone id is out of range [ 570.804053][T12191] netlink: zone id is out of range [ 570.811050][T12191] netlink: zone id is out of range [ 570.827098][T12191] netlink: zone id is out of range [ 570.841080][T12191] netlink: zone id is out of range [ 570.848500][T12191] netlink: zone id is out of range [ 570.856193][T12191] netlink: zone id is out of range [ 571.218200][T12206] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 571.278135][T12206] netlink: 'syz.0.2198': attribute type 3 has an invalid length. [ 571.310630][T12206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2198'. [ 574.149425][T12210] netlink: 'syz.2.2203': attribute type 25 has an invalid length. [ 574.160327][T12210] netlink: 'syz.2.2203': attribute type 10 has an invalid length. [ 574.186543][T12208] netlink: 'syz.0.2198': attribute type 10 has an invalid length. [ 574.200347][T12208] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2198'. [ 574.846789][T12228] netlink: 'syz.2.2208': attribute type 4 has an invalid length. [ 574.865182][T12228] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2208'. [ 575.453053][T12242] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 575.466257][T12242] netlink: 'syz.2.2214': attribute type 3 has an invalid length. [ 575.476173][T12242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2214'. [ 575.571122][T12242] netlink: 'syz.2.2214': attribute type 10 has an invalid length. [ 575.599727][T12242] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2214'. [ 576.405332][T12249] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2217'. [ 576.418173][T12249] net_ratelimit: 334 callbacks suppressed [ 576.418407][T12249] netlink: zone id is out of range [ 576.437310][T12249] netlink: zone id is out of range [ 576.443395][T12249] netlink: zone id is out of range [ 576.449144][T12249] netlink: zone id is out of range [ 576.457241][T12249] netlink: zone id is out of range [ 576.463572][T12249] netlink: zone id is out of range [ 576.469381][T12249] netlink: zone id is out of range [ 576.480268][T12249] netlink: zone id is out of range [ 576.486148][T12249] netlink: zone id is out of range [ 576.493712][T12249] netlink: zone id is out of range [ 578.144461][T12257] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2222'. [ 579.258481][T12258] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2222'. [ 580.154140][T12276] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 580.169169][T12276] netlink: 'syz.3.2228': attribute type 3 has an invalid length. [ 580.178221][T12276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2228'. [ 580.216413][T12276] netlink: 'syz.3.2228': attribute type 10 has an invalid length. [ 580.232662][T12276] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2228'. [ 582.736336][T12290] veth0_macvtap: left promiscuous mode [ 583.371496][T12299] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2235'. [ 584.302889][T12314] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 584.315348][ T12] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 584.338497][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 584.373091][ T1002] ------------[ cut here ]------------ [ 584.379167][ T1002] WARNING: CPU: 0 PID: 1002 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 584.389336][ T1002] Modules linked in: [ 584.393711][ T1002] CPU: 0 PID: 1002 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 584.401956][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.412526][ T1002] Workqueue: cfg80211 cfg80211_event_work [ 584.418531][ T1002] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 584.425145][ T1002] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9e 4a 96 f7 0f 0b eb bf e8 95 4a 96 f7 <0f> 0b eb b6 e8 8c 4a 96 f7 0f 0b e9 e2 fd ff ff e8 80 4a 96 f7 0f [ 584.445955][ T1002] RSP: 0018:ffffc900043afa40 EFLAGS: 00010293 [ 584.452813][ T1002] RAX: ffffffff89f140bb RBX: dffffc0000000000 RCX: ffff888022868000 [ 584.461115][ T1002] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 584.469228][ T1002] RBP: ffffc900043afaf8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 584.477526][ T1002] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff88805d0f8d10 [ 584.486026][ T1002] R13: ffff888020fa3658 R14: 1ffff92000875f4c R15: 000000000000001f [ 584.494598][ T1002] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 584.503768][ T1002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.510821][ T1002] CR2: 0000001b2e31bff8 CR3: 0000000076780000 CR4: 00000000003506f0 [ 584.519040][ T1002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 584.527398][ T1002] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 584.535564][ T1002] Call Trace: [ 584.538979][ T1002] [ 584.542591][ T1002] ? trace_rdev_return_void+0x1c0/0x1c0 [ 584.548788][ T1002] cfg80211_process_wdev_events+0x396/0x500 [ 584.554843][ T1002] cfg80211_process_rdev_events+0xa1/0x110 [ 584.560776][ T1002] cfg80211_event_work+0x2f/0x40 [ 584.565989][ T1002] ? process_scheduled_works+0x975/0x1600 [ 584.571906][ T1002] process_scheduled_works+0xa60/0x1600 [ 584.577836][ T1002] ? worker_attach_to_pool+0x370/0x370 [ 584.583512][ T1002] ? assign_work+0x3cc/0x5d0 [ 584.588246][ T1002] worker_thread+0xa5e/0xfe0 [ 584.593059][ T1002] ? _raw_spin_unlock+0x40/0x40 [ 584.598082][ T1002] ? __kthread_parkme+0x71/0x1c0 [ 584.603496][ T1002] kthread+0x2fa/0x390 [ 584.607854][ T1002] ? pr_cont_work+0x550/0x550 [ 584.612734][ T1002] ? kthread_blkcg+0xd0/0xd0 [ 584.617639][ T1002] ret_from_fork+0x48/0x80 [ 584.622177][ T1002] ? kthread_blkcg+0xd0/0xd0 [ 584.626836][ T1002] ret_from_fork_asm+0x11/0x20 [ 584.631969][ T1002] [ 584.635133][ T1002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 584.642714][ T1002] CPU: 0 PID: 1002 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 584.650379][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.660560][ T1002] Workqueue: cfg80211 cfg80211_event_work [ 584.666355][ T1002] Call Trace: [ 584.669835][ T1002] [ 584.672804][ T1002] dump_stack_lvl+0x18c/0x250 [ 584.677796][ T1002] ? show_regs_print_info+0x20/0x20 [ 584.683549][ T1002] ? load_image+0x420/0x420 [ 584.688160][ T1002] panic+0x2ca/0x720 [ 584.692109][ T1002] ? bpf_jit_dump+0xd0/0xd0 [ 584.696723][ T1002] ? ret_from_fork_asm+0x11/0x20 [ 584.701705][ T1002] __warn+0x2e0/0x470 [ 584.705726][ T1002] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 584.711331][ T1002] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 584.717041][ T1002] report_bug+0x2be/0x4f0 [ 584.721559][ T1002] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 584.727178][ T1002] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 584.732788][ T1002] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 584.738640][ T1002] handle_bug+0xcf/0x120 [ 584.743225][ T1002] exc_invalid_op+0x1a/0x50 [ 584.747803][ T1002] asm_exc_invalid_op+0x1a/0x20 [ 584.752973][ T1002] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 584.759195][ T1002] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9e 4a 96 f7 0f 0b eb bf e8 95 4a 96 f7 <0f> 0b eb b6 e8 8c 4a 96 f7 0f 0b e9 e2 fd ff ff e8 80 4a 96 f7 0f [ 584.779469][ T1002] RSP: 0018:ffffc900043afa40 EFLAGS: 00010293 [ 584.785665][ T1002] RAX: ffffffff89f140bb RBX: dffffc0000000000 RCX: ffff888022868000 [ 584.793755][ T1002] RDX: 0000000000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 584.801775][ T1002] RBP: ffffc900043afaf8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 584.809949][ T1002] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff88805d0f8d10 [ 584.818551][ T1002] R13: ffff888020fa3658 R14: 1ffff92000875f4c R15: 000000000000001f [ 584.827017][ T1002] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 584.832975][ T1002] ? trace_rdev_return_void+0x1c0/0x1c0 [ 584.839377][ T1002] cfg80211_process_wdev_events+0x396/0x500 [ 584.845618][ T1002] cfg80211_process_rdev_events+0xa1/0x110 [ 584.851927][ T1002] cfg80211_event_work+0x2f/0x40 [ 584.857019][ T1002] ? process_scheduled_works+0x975/0x1600 [ 584.862770][ T1002] process_scheduled_works+0xa60/0x1600 [ 584.868397][ T1002] ? worker_attach_to_pool+0x370/0x370 [ 584.873903][ T1002] ? assign_work+0x3cc/0x5d0 [ 584.878525][ T1002] worker_thread+0xa5e/0xfe0 [ 584.883401][ T1002] ? _raw_spin_unlock+0x40/0x40 [ 584.888339][ T1002] ? __kthread_parkme+0x71/0x1c0 [ 584.893512][ T1002] kthread+0x2fa/0x390 [ 584.897632][ T1002] ? pr_cont_work+0x550/0x550 [ 584.902711][ T1002] ? kthread_blkcg+0xd0/0xd0 [ 584.908073][ T1002] ret_from_fork+0x48/0x80 [ 584.913082][ T1002] ? kthread_blkcg+0xd0/0xd0 [ 584.917760][ T1002] ret_from_fork_asm+0x11/0x20 [ 584.922631][ T1002] [ 584.926078][ T1002] Kernel Offset: disabled [ 584.930605][ T1002] Rebooting in 86400 seconds..