last executing test programs:

6.102903032s ago: executing program 2 (id=4490):
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

5.874992541s ago: executing program 2 (id=4493):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)

5.87271058s ago: executing program 0 (id=4500):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (fail_nth: 10)

5.453904643s ago: executing program 1 (id=4494):
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x7, 0x6}]}, 0x94)
close(r1)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000d40)={&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)="b628d7b8", 0x4}], 0x1}, 0x840)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32=<r7=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r8=>0xffffffffffffffff, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002e9b72ffd1744eb82dbd2278bc9c6da2395c45258632cc9e1f674e295ce21fe42c82190203af7dab948b1f51661ad54c3b67540d7e210d40afe0894c637ddd99b668505d49d5", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r7], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x73, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r6, r6], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x2}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xe, 0x4}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0xc4c1, 0x10000, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0xe, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="7353000000000000000000000000000018110000", @ANYBLOB="670fd4a6304ffe20ea8aa5ff413b96679fabac7b3304acbf0a45ca8e2945b5ffdafd4841363b598c3be094cfc3fead7ef5c5cc56268966c3962e779cdd9416b09540ee93f4cca6bf00e3372c5ac5ce05d242968537fbdba9d296c3b1ba7be8d0e26217c95cfaac8636cb0449a3790ee38b5c4184914e9681b33d0e4d286fb3444d702d6821eeee1ae292e89964c4b093fc65dba662b0f16826e2c025987b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000001800)='syzkaller\x00', 0xa}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa1284, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r9, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000010020000000000"], 0x0, 0x1a, 0x0, 0xfffffffc}, 0x28)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33)

5.450535603s ago: executing program 0 (id=4503):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c13715", 0x22}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
openat$cgroup_int(r3, &(0x7f0000000200)='memory.swap.max\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xd, 0x42, 0x40}, 0x50)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000700053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r6}, 0x38)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084)
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'veth0_to_bond\x00', @random="013100050100"})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000840)}], 0x1}, 0x814)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x10, 0x0, 0x363253ea, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, r0, 0x2e, 0x20, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r8}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r9 = socket$kcm(0x2, 0x2, 0x0)
recvmsg$kcm(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)

5.136849635s ago: executing program 1 (id=4497):
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x7, 0x6}]}, 0x94)
close(r1)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000d40)={&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)="b628d7b8", 0x4}], 0x1}, 0x840)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32=<r7=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r8=>0xffffffffffffffff, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002e9b72ffd1744eb82dbd2278bc9c6da2395c45258632cc9e1f674e295ce21fe42c82190203af7dab948b1f51661ad54c3b67540d7e210d40afe0894c637ddd99b668505d49d5", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r7], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x73, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r6, r6], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x2}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xe, 0x4}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0xc4c1, 0x10000, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0xe, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="7353000000000000000000000000000018110000", @ANYBLOB="670fd4a6304ffe20ea8aa5ff413b96679fabac7b3304acbf0a45ca8e2945b5ffdafd4841363b598c3be094cfc3fead7ef5c5cc56268966c3962e779cdd9416b09540ee93f4cca6bf00e3372c5ac5ce05d242968537fbdba9d296c3b1ba7be8d0e26217c95cfaac8636cb0449a3790ee38b5c4184914e9681b33d0e4d286fb3444d702d6821eeee1ae292e89964c4b093fc65dba662b0f16826e2c025987b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000001800)='syzkaller\x00', 0xa}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa1284, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r9, 0x1)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33)

4.887521238s ago: executing program 2 (id=4498):
socket$kcm(0x11, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x40000)
socketpair(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000008100040000"], 0x0, 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unlink(&(0x7f0000000200)='./cgroup\x00')
r4 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$kcm(r4, &(0x7f0000000300)={&(0x7f00000000c0)=@llc={0x1a, 0x304, 0x1, 0x5, 0xa, 0x9a, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f00000008c0)="b129d995099fbfc7bc39b3ea757ddcc063266d6ad41ad5ae9f45748f3167e5ec68f738b57e13b020ceceaa6d61d24709356f77ff7cb3526b2afb38e061f3ede8c0cd6e051445cc75122342dbd06b6527f6c2147a3bdf46bc1f8a879ae561b9181770fc4a7baa264e39fe52cc23f1f1afa53a7ff085acb87a81620016f2d8cdee214c7eef435a7e678a0f2cc5203095f794d620879d9c8fc8fe5be3e206875476352ca8ebd05a749ec066a880508757675c79e3c9", 0xb4}, {&(0x7f0000000140)="51908eb056ab35495a", 0x9}], 0x2, &(0x7f0000000a80)=[{0x70, 0x117, 0x7, "8fca2d9cfd66b7967b9080f70022ed7149d47c78fe28dfab5522d654f61e9da7f540432ca5be6fa0648d9c6a894ce439a6652dc05173fd70ea972153945e77639a86baae4b28b9f5a7f8c5cb750d10c2aad1922bba938ef0fa3e80c768"}, {0x60, 0x119, 0x7, "5c40646766413fb67696bfaea502584b2f841241aa3f66392ae99fd692941e9e227e97e437a182c5d2680b8acc88aa352df67b04bcf1f8eaef35fcca4679e9d840b8fa7c769fc70770315b0dad90"}, {0xd8, 0x112, 0x40, "a24e2218bd030fdac352ba2ea0226dac2e0e7e3dfcc4a9360323ae993eb8bbbaed24703276aee50189c9eaac9f75277f5d8d41b0637c3c9054a368ca383dad1a71e051b8442106ec5a0934c22cdab341c64883d5fa645aecd3407518ba375331391046151cd0229d1e0a1e7dc70ff7ac2083004b462d0b452c743cc17e6ee266214d01f13f0d39f5f06f3bce7dd0f2779a4adb81d67128ac97cac6c1e7a57305276e957ba5ac675a5c710082dd387745aeac67beb6db74c9ab38813befdefbea25f0158b"}, {0xd0, 0x111, 0x1, "5ce791f8cc416f67a8d0427fa096456c45eaee8dbec63f14c8633e8ecb48fe73a822846dc320e64b2b1e112825467e2c01c9c8e87f0d5506290a850689266679749dd00a626414952699a8e47b25fedd69f8a3559ac268a920a19be9b685d04013bc696498727ecc306f4f25b23b62704ac2813490e9b47e567717305a8a8f4c0104ca3056537cb6c3edf56171a52a69c081fff3d89e5722fac4e2a9acb3cfca98ab6cf0de51e15712576829cf843b1096631e722d0619ea9e7c005d"}], 0x278}, 0x88c0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.797743492s ago: executing program 1 (id=4501):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x9, 0x68b8934e, 0x80000000, 0x2000, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], <r2=>0x0, 0x2e, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xb8f5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=r2, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9ec}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x4, 0x1, 0x3, 0xbbe, 0xfffffffd}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffff9e5}, @alu={0x7, 0x0, 0x5, 0x7, 0x7, 0x4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0xb875, 0x6e, &(0x7f0000000500)=""/110, 0x81e00, 0x60, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000900)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r3, r3, r6], &(0x7f00000009c0)=[{0x1, 0x4, 0x0, 0x8}], 0x10, 0x5}, 0x94)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x8, r3}, 0x18)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', 0x0, 0x0, r6}, 0x18)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1b, 0x1e, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc33, 0x0, 0x0, 0x0, 0x81}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000cc0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x5, 0x8, 0x6, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000d40)=[r8, r8, r8], &(0x7f0000000d80)=[{0x2, 0x3, 0x5}, {0x3, 0x4, 0x8, 0x7}, {0x2, 0x5, 0xf}, {0x3, 0x5, 0x1, 0xc}, {0x1, 0x3, 0x6}], 0x10, 0xb}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup=<r11=>r6, 0x5, 0x1, 0x7f, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0], <r12=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)={@fallback=r6, r9, 0x2c, 0x4, r10, @void, @value=r7, @void, @void, r12}, 0x20)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001040), 0x4)
openat$cgroup_devices(r11, &(0x7f0000001080)='devices.allow\x00', 0x2, 0x0)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x0, '\x00', r4, r5, 0x5, 0x0, 0x5}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001400)={&(0x7f00000010c0)="98b3648c725f66571e9eade06fe66f353f5b65a437aec7f08eafa46098631bf6127761d6dc40c3ff8774cccec0bf94f8b2ae86d4c5dd071481819406459786706a6a71ad20b67490db555ceb0a7200411684e273d53ae07e565e1e7bb960c294c50f7a7cc45f3095f7b8b52c84931a85fb2e3472dfdc2299ee39bd494fd45d927d32703ac582", &(0x7f0000001180)=""/134, &(0x7f0000001240)="709b8e6f66e41f3c443b670c9a34526b0dc8ef641afa5eddc07ac54c0b1d2cfbca51abca6135e6ad9cb0d3ec4ab57cc5ed391ace1e5a65f31c0159f257ad2fc758501ea8d9afee3ea9496a2cd8102bb566a456f5e3c787187b11c2d4f9bac5085028771f5c126cf38b10d881b8796330e174e50cf5df7d7fb6079da24fe8806506957516947fca14e32625aab4ae78acf6733aedd9c0b281d5347b2df4aa89c6258ac7497e8249dbb314122a1a32a9", &(0x7f0000001300)="596926e06c8e6e3907ce67aeebdbffc027bc049dcefb17b59f64c0618fa5b9aa1bfb726d87c1ab337966f4410bcadb2e26bbc0b2c3fbedb95fb9289921aa1bf717921c8b3436dbf616c589161698e8bc3570c012beeca0cfadbb25fa833642616973dc1e19098c7651c0bbecea691a4bb2db528dfd7d6c6a18cbb2e713fd", 0x3, r13, 0x4}, 0x38)
unlink(&(0x7f0000001440)='./file0\x00')
r14 = gettid()
r15 = perf_event_open$cgroup(&(0x7f0000001500)={0x0, 0x80, 0x2, 0x5, 0x8, 0x5, 0x0, 0x5a32057a, 0xc0000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x32f, 0x0, @perf_config_ext={0x2, 0x9}, 0x100, 0x0, 0x5, 0x7, 0x9, 0xb6d, 0xa, 0x0, 0xab5a, 0x0, 0x8000}, r6, 0xb, r6, 0x8)
r16 = perf_event_open(&(0x7f0000001480)={0x6, 0x80, 0x2, 0xff, 0x73, 0x3, 0x0, 0x5, 0x0, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x100000000}, 0xa0b7, 0x7f, 0xfff, 0x0, 0x2, 0xfffffffc, 0x3ff, 0x0, 0x1, 0x0, 0x1}, r14, 0x7, r15, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r0, r9, 0x19, 0x10, 0x0, @void, @value=r7, @void, @void, r12}, 0x20)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002740)={&(0x7f00000015c0)="d1f8370e8486cc9f00baa4e0eb0753a917c6f7e43000e76fd2d476b31b9a7c4e609ba55b2e66f8fbfaa7590377f23a3dd2c1faf820378ecdd8748158e8233891f74ede16912f938918aa6fe444c14d43c37b635ccadcd6b95c03276d396b98cce7242811eadc8e6be8dbbad63e6b15ff239b6130196936223176cc3571", &(0x7f0000001640)=""/4096, &(0x7f0000002640)="50097d626cf8aa641377ded439a148e732db505e7887e354fdc5789ce546bdef025283083d5cf6b9e740f8961cc8d317b0eb7a90899bfdf1ba2c51191a812f71472531e030b355153d82046a132e7cc86823344151d570c02af8215c637a84012cb4015f3338e28c368483b7cdd5503c596371", &(0x7f00000026c0)="e9ba896bcc57298af87e6f84b17a54fef6a0417739be1cd3f2ed99ce0e78e2543f6781a0ccf65497b1d52d5f4068307d1d344f3920aac679888b8d4d05a032ce21e9d38d", 0xf5, r8, 0x4}, 0x38)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002780)={0xffffffffffffffff, <r17=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000028c0)={r9, 0x0, 0x4c, 0x0, &(0x7f00000027c0)="026fa451bee424c7a9982c00c315e7f500ffdf6f8a4c2173b5752c0a5da53413da68fbe106073da7562ee6019806e2bacb785f9b50ec68bd7a745fb39dd6869284443a4772b3c737f90f3d27", 0x0, 0x3, 0x0, 0x62, 0x0, &(0x7f0000002840)="bd96abd2108478021e45edb3806ab8c6e825ae705c5307dc56a19c59136d6c79aee91dc4dea441fa2221ec1d16c988aa60d9867d44bf5f6bb6f69f5817511f0676a5db2b1ee2bedf7148a559c23ddb362fcbc5a9cb02b565979de7baa7185850f135", 0x0, 0x2, 0x0, 0x401}, 0x50)
r18 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002980)={0x0, r13}, 0x8)
sendmsg$unix(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f00000029c0)=[@rights={{0x34, 0x1, 0x1, [r13, r5, r7, r6, r16, r5, r18, r11, r17]}}, @rights={{0x24, 0x1, 0x1, [r13, r0, r13, r0, r17]}}, @rights={{0x1c, 0x1, 0x1, [r3, r6, r17]}}, @cred={{0x1c, 0x1, 0x2, {r14}}}], 0xa0, 0x5}, 0x40040)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002b00)=@generic={&(0x7f0000002ac0)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c80)={r0, <r19=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002d40)={{r6, <r20=>0xffffffffffffffff}, &(0x7f0000002cc0), &(0x7f0000002d00)='%pK    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e00)={0x1d, 0x4, &(0x7f0000002b40)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}], &(0x7f0000002b80)='GPL\x00', 0x800, 0x10, &(0x7f0000002bc0)=""/16, 0x41000, 0x1c, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000002c00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002c40)={0x0, 0xf, 0x92e6, 0x241e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002d80)=[r19, r3, r13, r3, r20, r18, r0, r13, r6], &(0x7f0000002dc0)=[{0x1, 0x5, 0xe, 0x5}, {0x5, 0x2}, {0x1, 0x5, 0x4, 0x3}], 0x10, 0x1}, 0x94)

4.694690003s ago: executing program 1 (id=4502):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r3, r4, 0x2f}, 0x20)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r6=>0x0}, 0x8)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r6, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r5, 0x4, r5}, 0x10)

4.694096553s ago: executing program 3 (id=4504):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 10)

4.693249673s ago: executing program 2 (id=4505):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8002, 0x2, 0xfffffffe, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x9a, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x408, 0xca, 0xfffffffc, 0x2, 0xfffffffffffffffc, 0x8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x12)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair(0x15, 0x1, 0x9, &(0x7f0000000000))
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='{', 0x1}], 0x1}, 0x480d1)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="00000200aaaaffffff28cd4a8cbbfc2f3832dcf3ae50a15e26cf10672f2ea54f7802b70e783d309da5a8a63d66b8e4abfa466bcd6f3cd936f370c5f76c5aed08fe63c05f297a328f220fd7ef3e6d99340ec65648ab5f2399b8"])
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r9, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffd, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4535, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x566, 0x1, @perf_bp={0x0, 0x4}, 0x2000, 0x1, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

4.585729553s ago: executing program 3 (id=4506):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fddfffff000000000008000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b81f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002d3981660000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="439c", @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYBLOB="d71952cb95cbe44d5193aff5e37645ee5ab88cb976652f8708bd25daf1c3621256dc6724bb7caa114061db9441a9542274343bb8ba09bfd5c0e5ef4b03387dcfd7ada72f9c6f9424c037beb6838fec3cf2091f0fae32825daa09fcb93d944fb4124b94c7c4e2aabc42559c226a", @ANYBLOB="570f2684ad38c270bfb625f27aeca33431882d9a941476c1f67fe25269c7084482ccded95bc802ff82de7f05901da49637c805ae3600e0ac40953c5716c6ca5a440a63175e2d6a51d7c9e2d686968c5b9b0bac0f35511588d9f18641ad341f7926eebb84c5ffbea616b44343266809870280efd044c000ef3f44836ca9a1ba86ced8b16a41bcc28896b4dadd704408a369df178fb0a29624e8743c6de66ff254009e17edd7b787b6f6da5384cdd61f86d63b4bdbe9d84b99c8f5af60a908393a2fb5fccb950985576b69d6ea7a655f", @ANYRES16=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x81, 0x0, 0x1, 0x0, 0x200, 0x30025, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x800, 0x1ff}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="2f0000001800912b000004000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40009, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffffffffffc0, 0x6}, 0x4020, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x0, 0x0, 0xb, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r8, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r10 = socket$kcm(0x28, 0x5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r7, 0x8, 0x1, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0]}, 0x40)
setsockopt$sock_attach_bpf(r10, 0x28, 0x8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

4.469555722s ago: executing program 1 (id=4507):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c6700000000000000"], 0x98}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xd4, 0xa9, 0x2, 0x3, 0x0, 0x5, 0x880, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe75f, 0x2, @perf_config_ext={0x800, 0x1f5}, 0x80, 0x4, 0x200, 0x3, 0x400, 0xfe7, 0x100, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r0, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
close(0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r4, r5, 0x2f}, 0x20)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r7=>0x0}, 0x8)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r7, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r8, r6, 0x4, r6}, 0x10)

4.439162706s ago: executing program 0 (id=4508):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b96, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001500)={0xffffffffffffffff, 0x3, 0x2d, 0xfd77, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x808)
close(r3)
sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x10, 0x0, 0xc}]}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000004c0)="ac", &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.30557264s ago: executing program 3 (id=4509):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062)
recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40000142)
r4 = socket$kcm(0x29, 0x7, 0x0)
recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}, 0x10002)

1.209493093s ago: executing program 1 (id=4510):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
syz_open_procfs$namespace(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@float={0x9, 0x0, 0x0, 0x10, 0x20}, @struct={0x9, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x3, 0x0, 0x7}, {0x3, 0x1, 0x3}]}, @fwd={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0xa, 0x5, 0xfea8}}]}, {0x0, [0x0]}}, &(0x7f0000000080)=""/32, 0x6f, 0x20, 0x1, 0xffffffff, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61106000000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350602000fff0720170600002019180016060000e0e6e7ffbf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476", @ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffedf}, 0x48)

1.207881442s ago: executing program 2 (id=4511):
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0x0, 0x7, 0x6}]}, 0x94)
close(r1)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000d40)={&(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)="b628d7b8", 0x4}], 0x1}, 0x840)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32=<r7=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=<r8=>0xffffffffffffffff, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002e9b72ffd1744eb82dbd2278bc9c6da2395c45258632cc9e1f674e295ce21fe42c82190203af7dab948b1f51661ad54c3b67540d7e210d40afe0894c637ddd99b668505d49d5", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r7], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x73, 0x0, 0x0, 0x8, &(0x7f0000000280)=[r6, r6], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x2}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x4, 0xe, 0x4}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001140)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10201, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ab, 0x0, @perf_bp={&(0x7f00000001c0)}, 0xc4c1, 0x10000, 0x0, 0x4, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0xe, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="7353000000000000000000000000000018110000", @ANYBLOB="670fd4a6304ffe20ea8aa5ff413b96679fabac7b3304acbf0a45ca8e2945b5ffdafd4841363b598c3be094cfc3fead7ef5c5cc56268966c3962e779cdd9416b09540ee93f4cca6bf00e3372c5ac5ce05d242968537fbdba9d296c3b1ba7be8d0e26217c95cfaac8636cb0449a3790ee38b5c4184914e9681b33d0e4d286fb3444d702d6821eeee1ae292e89964c4b093fc65dba662b0f16826e2c025987b", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000001800)='syzkaller\x00', 0xa}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa1284, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x5, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r9, 0x1)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33)

1.148544071s ago: executing program 0 (id=4512):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000051)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1800}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.023619188s ago: executing program 3 (id=4513):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) (fail_nth: 3)

702.016009ms ago: executing program 3 (id=4514):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r1, 0xa)
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r7, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)

591.050919ms ago: executing program 0 (id=4515):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r3, r4, 0x2f}, 0x20)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r6=>0x0}, 0x8)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r6, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r5, 0x4, r5}, 0x10)

468.102187ms ago: executing program 2 (id=4516):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000010000000000000085000000880000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b0000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000414000000b7030000400100000000000057bdf9bc8500000000005509010000000000950000000000000018120000cb3bf407e3f652057d6184e79207a2618137f91507c43d294607de8240cef5ae2195a229c75fc1a1d5de81d5b2f2", @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x49, &(0x7f0000000280)=""/73, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x80000000}, 0x0, 0x1000000000010000, 0x0, 0x5, 0x8, 0x51, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @multicast})
socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40)
recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socket$kcm(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"})
socket$kcm(0x2, 0x0, 0x84)
socket$kcm(0x11, 0x200000000000002, 0x300)

106.150839ms ago: executing program 0 (id=4517):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000340)=""/4106, 0x100a}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)

0s ago: executing program 3 (id=4518):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fddfffff000000000008000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b81f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000002d3981660000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="439c", @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYBLOB="d71952cb95cbe44d5193aff5e37645ee5ab88cb976652f8708bd25daf1c3621256dc6724bb7caa114061db9441a9542274343bb8ba09bfd5c0e5ef4b03387dcfd7ada72f9c6f9424c037beb6838fec3cf2091f0fae32825daa09fcb93d944fb4124b94c7c4e2aabc42559c226a", @ANYBLOB="570f2684ad38c270bfb625f27aeca33431882d9a941476c1f67fe25269c7084482ccded95bc802ff82de7f05901da49637c805ae3600e0ac40953c5716c6ca5a440a63175e2d6a51d7c9e2d686968c5b9b0bac0f35511588d9f18641ad341f7926eebb84c5ffbea616b44343266809870280efd044c000ef3f44836ca9a1ba86ced8b16a41bcc28896b4dadd704408a369df178fb0a29624e8743c6de66ff254009e17edd7b787b6f6da5384cdd61f86d63b4bdbe9d84b99c8f5af60a908393a2fb5fccb950985576b69d6ea7a655f", @ANYRES16=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x81, 0x0, 0x1, 0x0, 0x200, 0x30025, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x800, 0x1ff}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="2f0000001800912b000004000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40009, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffffffffffc0, 0x6}, 0x4020, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x0, 0x0, 0xb, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$SIOCSIFHWADDR(r8, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r10 = socket$kcm(0x28, 0x5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r7, 0x8, 0x1, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0]}, 0x40)
setsockopt$sock_attach_bpf(r10, 0x28, 0x8, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

281022][T13636]  ? aa_sk_perm+0x83c/0x970
[ 1100.285611][T13636]  ? packet_getsockopt+0xad0/0xad0
[ 1100.290801][T13636]  ? aa_sock_msg_perm+0x94/0x150
[ 1100.295795][T13636]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1100.301122][T13636]  ? security_socket_sendmsg+0x80/0xa0
[ 1100.306620][T13636]  ? packet_getsockopt+0xad0/0xad0
[ 1100.311788][T13636]  ____sys_sendmsg+0x5ba/0x960
[ 1100.316598][T13636]  ? __lock_acquire+0x7d40/0x7d40
[ 1100.321680][T13636]  ? __asan_memset+0x22/0x40
[ 1100.326314][T13636]  ? __sys_sendmsg_sock+0x30/0x30
[ 1100.331374][T13636]  ? __import_iovec+0x3fa/0x850
[ 1100.336311][T13636]  ? import_iovec+0x73/0xa0
[ 1100.340871][T13636]  ___sys_sendmsg+0x2a6/0x360
[ 1100.345680][T13636]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1100.350587][T13636]  ? trace_call_bpf+0xc3/0x6c0
[ 1100.355495][T13636]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1100.360408][T13636]  ? __x64_sys_sendmsg+0x80/0x80
[ 1100.365454][T13636]  ? lockdep_hardirqs_on+0x98/0x150
[ 1100.370725][T13636]  do_syscall_64+0x55/0xa0
[ 1100.375196][T13636]  ? clear_bhb_loop+0x40/0x90
[ 1100.379921][T13636]  ? clear_bhb_loop+0x40/0x90
[ 1100.384662][T13636]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1100.390612][T13636] RIP: 0033:0x7f2f7459c799
[ 1100.395085][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1100.414748][T13636] RSP: 002b:00007f2f754f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1100.423229][T13636] RAX: ffffffffffffffda RBX: 00007f2f74815fa0 RCX: 00007f2f7459c799
[ 1100.431285][T13636] RDX: 0000000030040805 RSI: 0000200000000040 RDI: 0000000000000007
[ 1100.439305][T13636] RBP: 00007f2f754f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1100.447331][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1100.455369][T13636] R13: 00007f2f74816038 R14: 00007f2f74815fa0 R15: 00007ffc1b729b58
[ 1100.463436][T13636]  </TASK>
[ 1100.952642][T13647] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1100.974849][T13647] netlink: 'syz.3.2644': attribute type 6 has an invalid length.
[ 1100.988260][T13647] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2644'.
[ 1101.066994][T13651] netlink: 'syz.2.2646': attribute type 3 has an invalid length.
[ 1101.102955][T13651] netlink: 'syz.2.2646': attribute type 1 has an invalid length.
[ 1101.122339][T13651] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2646'.
[ 1103.162873][ T4798] wlan1: Trigger new scan to find an IBSS to join
[ 1103.244070][T11368] wlan1: Trigger new scan to find an IBSS to join
[ 1104.192607][T11368] wlan1: Creating new IBSS network, BSSID 52:89:77:97:05:7e
[ 1104.432619][T13676] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1104.458369][T13676] netlink: 'syz.3.2656': attribute type 6 has an invalid length.
[ 1104.471488][T13676] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2656'.
[ 1104.724662][T13688] FAULT_INJECTION: forcing a failure.
[ 1104.724662][T13688] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1104.751737][T13688] CPU: 1 PID: 13688 Comm: syz.3.2661 Not tainted syzkaller #0
[ 1104.759261][T13688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1104.769344][T13688] Call Trace:
[ 1104.772646][T13688]  <TASK>
[ 1104.775594][T13688]  dump_stack_lvl+0x18c/0x250
[ 1104.780398][T13688]  ? show_regs_print_info+0x20/0x20
[ 1104.785639][T13688]  ? load_image+0x400/0x400
[ 1104.790181][T13688]  ? __might_fault+0xaa/0x120
[ 1104.794886][T13688]  ? __lock_acquire+0x7d40/0x7d40
[ 1104.799955][T13688]  should_fail_ex+0x39d/0x4d0
[ 1104.804672][T13688]  _copy_from_user+0x2f/0xe0
[ 1104.809388][T13688]  ___sys_sendmsg+0x1c7/0x360
[ 1104.814190][T13688]  ? get_pid_task+0x20/0x1e0
[ 1104.818820][T13688]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1104.820580][T13686] netlink: 'syz.1.2660': attribute type 3 has an invalid length.
[ 1104.823616][T13688]  ? __lock_acquire+0x7d40/0x7d40
[ 1104.823659][T13688]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1104.823679][T13688]  ? __x64_sys_sendmsg+0x80/0x80
[ 1104.823712][T13688]  ? lockdep_hardirqs_on+0x98/0x150
[ 1104.823733][T13688]  do_syscall_64+0x55/0xa0
[ 1104.823752][T13688]  ? clear_bhb_loop+0x40/0x90
[ 1104.842040][T13686] netlink: 'syz.1.2660': attribute type 1 has an invalid length.
[ 1104.846256][T13688]  ? clear_bhb_loop+0x40/0x90
[ 1104.846289][T13688]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1104.846308][T13688] RIP: 0033:0x7f90def9c799
[ 1104.846323][T13688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1104.846336][T13688] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1104.846352][T13688] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1104.846363][T13688] RDX: 00000000000080d0 RSI: 0000200000001c40 RDI: 0000000000000003
[ 1104.846374][T13688] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1104.846385][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1104.846395][T13688] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1104.846418][T13688]  </TASK>
[ 1104.964430][T13686] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2660'.
[ 1107.248880][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1108.482546][T13715] netlink: 'syz.0.2670': attribute type 6 has an invalid length.
[ 1108.499168][T13715] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2670'.
[ 1108.501872][T13712] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1108.854707][T13723] netlink: 'syz.3.2676': attribute type 3 has an invalid length.
[ 1108.864810][T13723] netlink: 'syz.3.2676': attribute type 1 has an invalid length.
[ 1108.882919][T13723] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2676'.
[ 1109.523284][T13737] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2683'.
[ 1111.242889][   T42] wlan1: Trigger new scan to find an IBSS to join
[ 1112.202935][T11368] wlan1: Trigger new scan to find an IBSS to join
[ 1112.311378][T13743] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1112.357025][T13743] netlink: 'syz.0.2686': attribute type 6 has an invalid length.
[ 1112.387369][T13743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2686'.
[ 1112.419871][T13749] netlink: 'syz.2.2689': attribute type 3 has an invalid length.
[ 1112.438454][T13749] netlink: 'syz.2.2689': attribute type 1 has an invalid length.
[ 1112.473020][T13749] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2689'.
[ 1112.901070][T13760] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2694'.
[ 1112.924095][T13758] netlink: 'syz.1.2693': attribute type 3 has an invalid length.
[ 1112.942909][T13758] netlink: 'syz.1.2693': attribute type 1 has an invalid length.
[ 1112.950820][T13758] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2693'.
[ 1115.794163][   T59] wlan1: Creating new IBSS network, BSSID b6:ae:62:20:43:f4
[ 1116.033893][T13778] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1116.049948][T13779] netlink: 'syz.1.2699': attribute type 6 has an invalid length.
[ 1116.077140][T13779] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2699'.
[ 1116.205378][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.212500][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.221562][   T59] wlan1: Trigger new scan to find an IBSS to join
[ 1116.335226][T13785] netlink: 'syz.2.2702': attribute type 3 has an invalid length.
[ 1116.430408][T13785] netlink: 'syz.2.2702': attribute type 1 has an invalid length.
[ 1116.502665][T13785] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2702'.
[ 1116.691003][T13794] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2707'.
[ 1116.936851][T13796] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2708'.
[ 1118.213714][T11368] wlan1: Trigger new scan to find an IBSS to join
[ 1119.872565][ T8495] wlan1: Creating new IBSS network, BSSID 46:7b:20:cd:4c:38
[ 1120.036940][T13813] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1120.059221][T13813] netlink: 'syz.1.2713': attribute type 6 has an invalid length.
[ 1120.097937][T13813] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2713'.
[ 1120.116169][T13814] netlink: 'syz.0.2712': attribute type 3 has an invalid length.
[ 1120.137805][T13814] netlink: 'syz.0.2712': attribute type 1 has an invalid length.
[ 1120.149057][T13814] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2712'.
[ 1120.350366][T13826] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2719'.
[ 1120.433837][T13828] netlink: 'syz.2.2718': attribute type 3 has an invalid length.
[ 1120.450797][T13828] netlink: 'syz.2.2718': attribute type 1 has an invalid length.
[ 1120.458996][T13828] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2718'.
[ 1120.760285][T13832] FAULT_INJECTION: forcing a failure.
[ 1120.760285][T13832] name failslab, interval 1, probability 0, space 0, times 0
[ 1120.762777][T13831] netlink: 'syz.0.2720': attribute type 25 has an invalid length.
[ 1120.774795][T13832] CPU: 0 PID: 13832 Comm: syz.3.2722 Not tainted syzkaller #0
[ 1120.789518][T13832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1120.799605][T13832] Call Trace:
[ 1120.803017][T13832]  <TASK>
[ 1120.805980][T13832]  dump_stack_lvl+0x18c/0x250
[ 1120.810691][T13832]  ? show_regs_print_info+0x20/0x20
[ 1120.815917][T13832]  ? load_image+0x400/0x400
[ 1120.820453][T13832]  ? __might_sleep+0xe0/0xe0
[ 1120.825070][T13832]  ? __lock_acquire+0x7d40/0x7d40
[ 1120.830129][T13832]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1120.836131][T13832]  should_fail_ex+0x39d/0x4d0
[ 1120.840838][T13832]  should_failslab+0x9/0x20
[ 1120.845364][T13832]  slab_pre_alloc_hook+0x59/0x310
[ 1120.850416][T13832]  ? rebuild_sched_domains_locked+0x5d2/0x2150
[ 1120.856576][T13832]  ? rebuild_sched_domains_locked+0x5d2/0x2150
[ 1120.862739][T13832]  __kmem_cache_alloc_node+0x53/0x250
[ 1120.868120][T13832]  ? rebuild_sched_domains_locked+0x5d2/0x2150
[ 1120.874445][T13832]  __kmalloc+0xa4/0x230
[ 1120.878612][T13832]  rebuild_sched_domains_locked+0x5d2/0x2150
[ 1120.884601][T13832]  ? __lock_acquire+0x7d40/0x7d40
[ 1120.889631][T13832]  ? rebuild_sched_domains+0x40/0x40
[ 1120.894921][T13832]  ? update_cpumasks_hier+0x12c1/0x14f0
[ 1120.900465][T13832]  ? update_cpumasks_hier+0x12c1/0x14f0
[ 1120.906021][T13832]  ? update_cpumasks_hier+0x14c1/0x14f0
[ 1120.911573][T13832]  ? update_cpumasks_hier+0x12c1/0x14f0
[ 1120.917129][T13832]  cpuset_write_resmask+0x1ca7/0x2020
[ 1120.922509][T13832]  ? __mutex_trylock_common+0x159/0x260
[ 1120.928073][T13832]  ? cpuset_common_seq_show+0x250/0x250
[ 1120.933622][T13832]  ? __virt_addr_valid+0x18c/0x540
[ 1120.938765][T13832]  ? cpuset_common_seq_show+0x250/0x250
[ 1120.944310][T13832]  cgroup_file_write+0x2c9/0x690
[ 1120.949251][T13832]  ? read_lock_is_recursive+0x20/0x20
[ 1120.954633][T13832]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 1120.959759][T13832]  ? cgroup_seqfile_stop+0xd0/0xd0
[ 1120.964870][T13832]  kernfs_fop_write_iter+0x3b6/0x520
[ 1120.970175][T13832]  vfs_write+0x46c/0x990
[ 1120.974428][T13832]  ? file_end_write+0x250/0x250
[ 1120.979287][T13832]  ? __fget_files+0x43d/0x4b0
[ 1120.983973][T13832]  ? __fdget_pos+0x2a3/0x330
[ 1120.988563][T13832]  ? ksys_write+0x75/0x260
[ 1120.992982][T13832]  ksys_write+0x150/0x260
[ 1120.997314][T13832]  ? __ia32_sys_read+0x90/0x90
[ 1121.002079][T13832]  ? lockdep_hardirqs_on+0x98/0x150
[ 1121.007279][T13832]  do_syscall_64+0x55/0xa0
[ 1121.011696][T13832]  ? clear_bhb_loop+0x40/0x90
[ 1121.016373][T13832]  ? clear_bhb_loop+0x40/0x90
[ 1121.021050][T13832]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1121.026944][T13832] RIP: 0033:0x7f90def9c799
[ 1121.031360][T13832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1121.050984][T13832] RSP: 002b:00007f90dfe23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1121.059435][T13832] RAX: ffffffffffffffda RBX: 00007f90df216090 RCX: 00007f90def9c799
[ 1121.067435][T13832] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000b
[ 1121.075414][T13832] RBP: 00007f90dfe23090 R08: 0000000000000000 R09: 0000000000000000
[ 1121.083387][T13832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1121.091359][T13832] R13: 00007f90df216128 R14: 00007f90df216090 R15: 00007fffcd7ec438
[ 1121.099358][T13832]  </TASK>
[ 1121.143040][T13831] netlink: 'syz.0.2720': attribute type 9 has an invalid length.
[ 1121.338163][T13838] syzkaller0: entered promiscuous mode
[ 1121.380210][T13838] syzkaller0: entered allmulticast mode
[ 1122.203320][ T8495] wlan1: Trigger new scan to find an IBSS to join
[ 1124.628606][T13858] netlink: 'syz.1.2727': attribute type 6 has an invalid length.
[ 1124.636651][T13858] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2727'.
[ 1126.067416][T13855] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1126.336579][T13868] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2731'.
[ 1126.354369][T13869] netlink: 'syz.2.2732': attribute type 3 has an invalid length.
[ 1126.388598][T13869] netlink: 'syz.2.2732': attribute type 1 has an invalid length.
[ 1126.413783][T13869] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2732'.
[ 1127.267391][T13886] netlink: 'syz.0.2739': attribute type 6 has an invalid length.
[ 1127.295640][T13886] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2739'.
[ 1127.981305][T13885] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1128.002920][T13891] netlink: 'syz.2.2741': attribute type 25 has an invalid length.
[ 1128.026072][T13891] netlink: 'syz.2.2741': attribute type 9 has an invalid length.
[ 1128.213050][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1128.262743][T13902] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2743'.
[ 1128.306539][T13895] syzkaller0: entered promiscuous mode
[ 1128.312066][T13895] syzkaller0: entered allmulticast mode
[ 1128.886778][T13917] netlink: 'syz.3.2747': attribute type 3 has an invalid length.
[ 1128.901262][T13917] netlink: 'syz.3.2747': attribute type 1 has an invalid length.
[ 1128.912097][T13917] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2747'.
[ 1129.352266][T13924] netlink: 'syz.1.2750': attribute type 6 has an invalid length.
[ 1129.370251][T13924] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2750'.
[ 1129.456294][T13926] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2751'.
[ 1129.988200][ T8495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1130.206455][ T1126] wlan1: Trigger new scan to find an IBSS to join
[ 1130.713100][T13923] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1130.732427][T13930] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2751'.
[ 1131.048207][T13940] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2753'.
[ 1131.070747][T13943] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[ 1131.132810][T13943] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[ 1131.309741][T13947] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2756'.
[ 1131.409213][T13955] netlink: 'syz.3.2758': attribute type 3 has an invalid length.
[ 1131.578745][T13955] netlink: 'syz.3.2758': attribute type 1 has an invalid length.
[ 1131.652845][T13955] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2758'.
[ 1131.936314][T13967] netlink: 'syz.3.2763': attribute type 25 has an invalid length.
[ 1131.952920][T13967] netlink: 'syz.3.2763': attribute type 9 has an invalid length.
[ 1132.029805][T13967] syzkaller0: entered promiscuous mode
[ 1132.041807][T13967] syzkaller0: entered allmulticast mode
[ 1133.162921][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1133.244304][T11368] wlan1: Trigger new scan to find an IBSS to join
[ 1133.931166][T13997] netlink: 'syz.0.2773': attribute type 3 has an invalid length.
[ 1133.955403][T13997] netlink: 'syz.0.2773': attribute type 1 has an invalid length.
[ 1133.977916][T13997] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2773'.
[ 1134.042841][T13998] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2774'.
[ 1135.800386][T14013] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2780'.
[ 1135.853507][T14013] netlink: zone id is out of range
[ 1136.205886][ T8495] wlan1: Creating new IBSS network, BSSID 26:7e:9a:5b:aa:73
[ 1136.222827][ T1126] wlan1: Trigger new scan to find an IBSS to join
[ 1139.245456][ T4978] wlan1: Creating new IBSS network, BSSID aa:59:5f:a3:1c:82
[ 1140.390450][T14043] netlink: 'syz.1.2790': attribute type 25 has an invalid length.
[ 1140.417845][T14043] netlink: 'syz.1.2790': attribute type 9 has an invalid length.
[ 1140.759829][T14058] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2793'.
[ 1145.309400][T14092] netlink: 'syz.1.2802': attribute type 25 has an invalid length.
[ 1145.320139][T14092] netlink: 'syz.1.2802': attribute type 9 has an invalid length.
[ 1145.432362][T14092] syzkaller0: entered promiscuous mode
[ 1145.438193][T14092] syzkaller0: entered allmulticast mode
[ 1145.905803][T14106] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2808'.
[ 1153.882222][T14139] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2820'.
[ 1154.118724][T14148] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1154.124732][T12181] Bluetooth: hci1: command 0x0406 tx timeout
[ 1154.199179][T14148] netlink: 'syz.0.2823': attribute type 6 has an invalid length.
[ 1154.268990][T14148] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2823'.
[ 1156.202851][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1156.853483][T14162] netlink: 'syz.3.2825': attribute type 10 has an invalid length.
[ 1156.934913][T14162] team0: Port device geneve1 added
[ 1157.068827][T14169] netlink: 'syz.1.2829': attribute type 25 has an invalid length.
[ 1157.089117][T14169] netlink: 'syz.1.2829': attribute type 9 has an invalid length.
[ 1157.247038][T14169] syzkaller0: entered promiscuous mode
[ 1157.252571][T14169] syzkaller0: entered allmulticast mode
[ 1157.460176][T14181] netlink: 'syz.3.2832': attribute type 6 has an invalid length.
[ 1157.516060][T14181] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2832'.
[ 1157.887043][T14178] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1159.805073][T14189] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2836'.
[ 1160.042398][T14187] netlink: 'syz.3.2835': attribute type 3 has an invalid length.
[ 1160.057698][T14187] netlink: 'syz.3.2835': attribute type 1 has an invalid length.
[ 1160.066645][T14187] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2835'.
[ 1160.204417][ T1126] wlan1: Trigger new scan to find an IBSS to join
[ 1160.208468][T10418] wlan1: Trigger new scan to find an IBSS to join
[ 1161.016608][ T8495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1163.101489][T10418] wlan1: Creating new IBSS network, BSSID a2:3c:b0:1f:29:93
[ 1163.483128][T14216] netlink: 'syz.3.2845': attribute type 25 has an invalid length.
[ 1163.501321][T14216] netlink: 'syz.3.2845': attribute type 9 has an invalid length.
[ 1163.545076][T14218] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2846'.
[ 1165.163100][ T1126] wlan1: Trigger new scan to find an IBSS to join
[ 1166.423527][T10418] wlan1: Creating new IBSS network, BSSID fe:fa:a3:16:98:43
[ 1166.561232][T14216] syzkaller0: entered promiscuous mode
[ 1166.568438][T14216] syzkaller0: entered allmulticast mode
[ 1166.580275][T14218] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.2846'.
[ 1167.084437][T14233] netlink: 'syz.0.2849': attribute type 6 has an invalid length.
[ 1167.092482][T14233] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2849'.
[ 1168.669115][T14232] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1168.891818][T14239] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2852'.
[ 1171.163141][T11368] wlan1: Trigger new scan to find an IBSS to join
[ 1171.245252][ T1310] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1174.202878][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1175.508571][T14275] netlink: 'syz.0.2863': attribute type 25 has an invalid length.
[ 1175.552846][T14275] netlink: 'syz.0.2863': attribute type 9 has an invalid length.
[ 1175.973274][T14275] syzkaller0: entered promiscuous mode
[ 1175.978830][T14275] syzkaller0: entered allmulticast mode
[ 1176.808775][T14294] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2868'.
[ 1177.243065][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1177.648681][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.662815][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.092534][ T4798] wlan1: Creating new IBSS network, BSSID fe:29:39:31:5f:bd
[ 1179.383541][T14303] netlink: 'syz.1.2871': attribute type 3 has an invalid length.
[ 1179.435334][T14303] netlink: 'syz.1.2871': attribute type 1 has an invalid length.
[ 1179.488163][T14303] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2871'.
[ 1181.397292][T14284] pim6reg1: entered allmulticast mode
[ 1182.164520][T14327] netlink: 'syz.1.2879': attribute type 3 has an invalid length.
[ 1182.239447][T14327] netlink: 'syz.1.2879': attribute type 1 has an invalid length.
[ 1182.333211][T14327] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2879'.
[ 1184.996171][T14336] netlink: 'syz.1.2883': attribute type 6 has an invalid length.
[ 1185.012828][T14336] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2883'.
[ 1185.047681][T14338] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2882'.
[ 1185.060041][T14338] netlink: zone id is out of range
[ 1187.693300][T14335] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1188.818197][T14361] netlink: 'syz.1.2890': attribute type 25 has an invalid length.
[ 1188.826335][T14361] netlink: 'syz.1.2890': attribute type 9 has an invalid length.
[ 1188.911673][T14361] syzkaller0: entered promiscuous mode
[ 1189.026701][T14361] syzkaller0: entered allmulticast mode
[ 1189.041875][T14365] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2893'.
[ 1190.204264][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1193.293065][ T4978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1194.202958][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1195.123755][ T4978] wlan1: Creating new IBSS network, BSSID 76:f9:f5:8d:9a:50
[ 1195.302535][T14390] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2898'.
[ 1195.313342][T14390] netlink: zone id is out of range
[ 1196.450651][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1197.481979][T14403] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2902'.
[ 1197.841384][T14408] netlink: set zone limit has 8 unknown bytes
[ 1200.156805][T14418] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2907'.
[ 1200.195098][T14412] netlink: 'syz.2.2904': attribute type 3 has an invalid length.
[ 1200.206489][T14418] netlink: zone id is out of range
[ 1200.236528][T14412] netlink: 'syz.2.2904': attribute type 1 has an invalid length.
[ 1200.263390][T14412] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2904'.
[ 1201.679389][T14442] netlink: 'syz.1.2912': attribute type 3 has an invalid length.
[ 1201.691887][T14442] netlink: 'syz.1.2912': attribute type 1 has an invalid length.
[ 1201.699901][T14442] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2912'.
[ 1203.681777][T14431] netlink: 'syz.3.2911': attribute type 25 has an invalid length.
[ 1203.694427][T14431] netlink: 'syz.3.2911': attribute type 9 has an invalid length.
[ 1203.942265][T14444] netlink: 'syz.0.2913': attribute type 9 has an invalid length.
[ 1203.962993][T14444] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2913'.
[ 1204.156182][T14449] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2915'.
[ 1204.373227][T14445] netlink: 'syz.0.2913': attribute type 9 has an invalid length.
[ 1204.381986][T14445] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2913'.
[ 1204.550331][T14455] netlink: set zone limit has 8 unknown bytes
[ 1204.711174][T14457] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2917'.
[ 1204.721688][T14457] netlink: zone id is out of range
[ 1204.943749][T14463] netlink: 'syz.0.2920': attribute type 3 has an invalid length.
[ 1204.992970][T14463] netlink: 'syz.0.2920': attribute type 1 has an invalid length.
[ 1205.025024][T14463] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2920'.
[ 1205.798125][T14477] netlink: 'syz.0.2923': attribute type 3 has an invalid length.
[ 1205.808899][T14477] netlink: 'syz.0.2923': attribute type 1 has an invalid length.
[ 1205.822643][T14477] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2923'.
[ 1208.220442][T14476] netlink: 'syz.3.2924': attribute type 25 has an invalid length.
[ 1208.238311][T14476] netlink: 'syz.3.2924': attribute type 9 has an invalid length.
[ 1208.780888][T14496] netlink: 'syz.1.2935': attribute type 25 has an invalid length.
[ 1208.797209][T14496] netlink: 'syz.1.2935': attribute type 9 has an invalid length.
[ 1208.873032][T14496] syzkaller0: entered promiscuous mode
[ 1208.878601][T14496] syzkaller0: entered allmulticast mode
[ 1209.068466][T14494] netlink: set zone limit has 8 unknown bytes
[ 1209.147303][ T1131] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1209.347527][T14505] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2928'.
[ 1209.398449][T14505] netlink: zone id is out of range
[ 1214.239988][T14516] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2931'.
[ 1214.438351][T14528] netlink: 'syz.2.2936': attribute type 3 has an invalid length.
[ 1214.452227][T14528] netlink: 'syz.2.2936': attribute type 1 has an invalid length.
[ 1214.462229][T14528] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2936'.
[ 1214.938954][T14534] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2939'.
[ 1215.412620][T14546] netlink: 'syz.0.2944': attribute type 25 has an invalid length.
[ 1215.461438][T14546] netlink: 'syz.0.2944': attribute type 9 has an invalid length.
[ 1215.780660][T14546] syzkaller0: entered promiscuous mode
[ 1215.861482][T14546] syzkaller0: entered allmulticast mode
[ 1218.391298][T14556] netlink: 'syz.1.2947': attribute type 3 has an invalid length.
[ 1218.399440][T14556] netlink: 'syz.1.2947': attribute type 1 has an invalid length.
[ 1218.415087][T14556] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2947'.
[ 1219.718658][T14575] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2953'.
[ 1219.734680][T14575] netlink: zone id is out of range
[ 1223.046931][T14580] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2955'.
[ 1225.117972][ T1126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1226.673630][T14593] netlink: 'syz.1.2959': attribute type 3 has an invalid length.
[ 1226.681717][T14593] netlink: 'syz.1.2959': attribute type 1 has an invalid length.
[ 1226.690315][T14593] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2959'.
[ 1227.568243][T11368] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1227.890017][T14564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2951'.
[ 1227.906875][T14598] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2961'.
[ 1228.011657][T14600] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2962'.
[ 1228.050964][T14600] netlink: zone id is out of range
[ 1228.246058][T14611] netlink: 'syz.1.2964': attribute type 2 has an invalid length.
[ 1228.254615][T14611] netlink: 'syz.1.2964': attribute type 8 has an invalid length.
[ 1228.263228][T14611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2964'.
[ 1228.776422][T14620] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1228.868115][T14621] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2969'.
[ 1228.881800][T14624] netlink: 'syz.2.2967': attribute type 6 has an invalid length.
[ 1228.910576][T14624] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2967'.
[ 1229.935944][ T4978] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1232.278424][T14635] netlink: 'syz.3.2973': attribute type 25 has an invalid length.
[ 1232.287066][T14635] netlink: 'syz.3.2973': attribute type 9 has an invalid length.
[ 1232.351416][T14635] syzkaller0: entered promiscuous mode
[ 1232.358512][T14635] syzkaller0: entered allmulticast mode
[ 1232.709015][T14641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2972'.
[ 1236.700799][T14662] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2980'.
[ 1236.819244][T14664] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2981'.
[ 1237.103052][T14672] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2984'.
[ 1237.603177][T14680] netlink: 'syz.0.2986': attribute type 2 has an invalid length.
[ 1237.622901][T14680] netlink: 'syz.0.2986': attribute type 8 has an invalid length.
[ 1237.637869][T14680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2986'.
[ 1237.798106][T14685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2989'.
[ 1238.966754][T14702] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2994'.
[ 1239.089532][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.096026][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.219593][T14708] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2996'.
[ 1239.520916][T14715] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2999'.
[ 1240.264973][T14730] netlink: 'syz.2.3006': attribute type 2 has an invalid length.
[ 1240.273427][T14730] netlink: 'syz.2.3006': attribute type 8 has an invalid length.
[ 1240.281306][T14730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3006'.
[ 1240.915345][T14741] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3011'.
[ 1240.936260][T14743] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3012'.
[ 1242.196789][T14758] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3017'.
[ 1245.613224][T14776] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3021'.
[ 1245.640470][T14772] netlink: 'syz.3.3022': attribute type 2 has an invalid length.
[ 1245.650105][T14772] netlink: 'syz.3.3022': attribute type 8 has an invalid length.
[ 1245.662961][T14772] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3022'.
[ 1246.073822][T14780] netlink: 'syz.2.3024': attribute type 2 has an invalid length.
[ 1246.093499][T14780] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3024'.
[ 1246.835721][T14788] netlink: 'syz.0.3026': attribute type 3 has an invalid length.
[ 1246.853471][T14788] netlink: 'syz.0.3026': attribute type 1 has an invalid length.
[ 1246.903133][T14788] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3026'.
[ 1247.068871][T14795] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1247.142082][T14795] netlink: 'syz.3.3029': attribute type 6 has an invalid length.
[ 1247.154600][T14800] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3031'.
[ 1247.196391][T14795] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3029'.
[ 1249.163231][ T1126] wlan1: Trigger new scan to find an IBSS to join
[ 1251.115363][T14832] netlink: 'syz.0.3039': attribute type 3 has an invalid length.
[ 1251.127939][T14832] netlink: 'syz.0.3039': attribute type 1 has an invalid length.
[ 1251.140012][T14832] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3039'.
[ 1251.389344][T14836] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3041'.
[ 1251.588663][T14848] netlink: 'syz.0.3044': attribute type 6 has an invalid length.
[ 1251.606900][T14848] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3044'.
[ 1252.202869][   T42] wlan1: Trigger new scan to find an IBSS to join
[ 1254.300488][ T4978] wlan1: Creating new IBSS network, BSSID 6a:e0:55:8f:09:a9
[ 1254.322795][T14845] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1255.519620][T14875] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3054'.
[ 1255.563717][T14877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3052'.
[ 1255.631165][T14880] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1255.654951][T14880] netlink: 'syz.0.3055': attribute type 6 has an invalid length.
[ 1255.663113][T14880] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3055'.
[ 1255.708387][T14882] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3056'.
[ 1256.406035][T14900] FAULT_INJECTION: forcing a failure.
[ 1256.406035][T14900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1256.420039][T14900] CPU: 0 PID: 14900 Comm: syz.1.3064 Not tainted syzkaller #0
[ 1256.427553][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1256.437809][T14900] Call Trace:
[ 1256.441103][T14900]  <TASK>
[ 1256.444058][T14900]  dump_stack_lvl+0x18c/0x250
[ 1256.448774][T14900]  ? show_regs_print_info+0x20/0x20
[ 1256.454006][T14900]  ? load_image+0x400/0x400
[ 1256.458529][T14900]  ? __lock_acquire+0x7d40/0x7d40
[ 1256.463565][T14900]  ? snprintf+0xe9/0x140
[ 1256.467822][T14900]  should_fail_ex+0x39d/0x4d0
[ 1256.472519][T14900]  _copy_to_user+0x2f/0xa0
[ 1256.476944][T14900]  simple_read_from_buffer+0xe7/0x150
[ 1256.482514][T14900]  proc_fail_nth_read+0x1e8/0x260
[ 1256.487541][T14900]  ? proc_fault_inject_write+0x360/0x360
[ 1256.493179][T14900]  ? fsnotify_perm+0x271/0x5e0
[ 1256.497948][T14900]  ? proc_fault_inject_write+0x360/0x360
[ 1256.503581][T14900]  vfs_read+0x28b/0x970
[ 1256.507751][T14900]  ? kernel_read+0x1e0/0x1e0
[ 1256.512356][T14900]  ? __fget_files+0x28/0x4b0
[ 1256.516945][T14900]  ? __fget_files+0x28/0x4b0
[ 1256.521538][T14900]  ? __fget_files+0x43d/0x4b0
[ 1256.526223][T14900]  ? __fdget_pos+0x2a3/0x330
[ 1256.530813][T14900]  ? ksys_read+0x75/0x260
[ 1256.535148][T14900]  ksys_read+0x150/0x260
[ 1256.539406][T14900]  ? vfs_write+0x990/0x990
[ 1256.543823][T14900]  ? lockdep_hardirqs_on+0x98/0x150
[ 1256.549025][T14900]  do_syscall_64+0x55/0xa0
[ 1256.553453][T14900]  ? clear_bhb_loop+0x40/0x90
[ 1256.558133][T14900]  ? clear_bhb_loop+0x40/0x90
[ 1256.562813][T14900]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1256.568706][T14900] RIP: 0033:0x7f673b55cfce
[ 1256.573123][T14900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1256.593175][T14900] RSP: 002b:00007f673c469fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1256.601597][T14900] RAX: ffffffffffffffda RBX: 00007f673c46a6c0 RCX: 00007f673b55cfce
[ 1256.609594][T14900] RDX: 000000000000000f RSI: 00007f673c46a0a0 RDI: 0000000000000004
[ 1256.617566][T14900] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1256.625535][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1256.633506][T14900] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1256.641490][T14900]  </TASK>
[ 1256.707700][T14903] C: renamed from team_slave_0 (while UP)
[ 1256.726808][T14903] netlink: 'syz.3.3065': attribute type 3 has an invalid length.
[ 1256.737667][T14903] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3065'.
[ 1256.775913][T14903] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1256.873631][T14908] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1256.902023][T14908] netlink: 'syz.1.3066': attribute type 6 has an invalid length.
[ 1256.918860][T14908] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3066'.
[ 1257.406798][T14928] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3073'.
[ 1257.885965][T14943] netlink: 'syz.0.3077': attribute type 10 has an invalid length.
[ 1257.907369][T14943] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1258.011175][T14947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3079'.
[ 1258.091708][T14949] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1258.109722][T14949] netlink: 'syz.2.3080': attribute type 6 has an invalid length.
[ 1258.123177][T14949] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3080'.
[ 1258.508931][T14963] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3086'.
[ 1258.920749][T14973] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3091'.
[ 1258.942500][T14976] netlink: 'syz.2.3092': attribute type 10 has an invalid length.
[ 1259.202139][T14980] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1259.227904][T14980] netlink: 'syz.2.3093': attribute type 6 has an invalid length.
[ 1259.256002][T14980] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3093'.
[ 1259.391668][T14985] netlink: 'syz.1.3096': attribute type 10 has an invalid length.
[ 1260.207699][T14999] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3101'.
[ 1260.226735][T15001] netlink: 'syz.1.3102': attribute type 10 has an invalid length.
[ 1260.379437][T15001] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1261.951067][T15014] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1261.971417][T15014] netlink: 'syz.1.3106': attribute type 6 has an invalid length.
[ 1261.980521][T15014] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3106'.
[ 1262.552751][T15032] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3113'.
[ 1263.013449][T15043] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1263.032509][T15043] netlink: 'syz.0.3117': attribute type 6 has an invalid length.
[ 1263.041336][T15043] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3117'.
[ 1263.075514][T15045] FAULT_INJECTION: forcing a failure.
[ 1263.075514][T15045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1263.103998][T15045] CPU: 1 PID: 15045 Comm: syz.1.3118 Not tainted syzkaller #0
[ 1263.111510][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1263.121930][T15045] Call Trace:
[ 1263.125237][T15045]  <TASK>
[ 1263.128190][T15045]  dump_stack_lvl+0x18c/0x250
[ 1263.132906][T15045]  ? show_regs_print_info+0x20/0x20
[ 1263.138148][T15045]  ? load_image+0x400/0x400
[ 1263.142772][T15045]  ? __lock_acquire+0x7d40/0x7d40
[ 1263.147824][T15045]  ? snprintf+0xe9/0x140
[ 1263.152104][T15045]  should_fail_ex+0x39d/0x4d0
[ 1263.156821][T15045]  _copy_to_user+0x2f/0xa0
[ 1263.161245][T15045]  simple_read_from_buffer+0xe7/0x150
[ 1263.166629][T15045]  proc_fail_nth_read+0x1e8/0x260
[ 1263.171660][T15045]  ? proc_fault_inject_write+0x360/0x360
[ 1263.177297][T15045]  ? fsnotify_perm+0x271/0x5e0
[ 1263.182067][T15045]  ? proc_fault_inject_write+0x360/0x360
[ 1263.187708][T15045]  vfs_read+0x28b/0x970
[ 1263.191876][T15045]  ? kernel_read+0x1e0/0x1e0
[ 1263.196499][T15045]  ? __fget_files+0x28/0x4b0
[ 1263.201096][T15045]  ? __fget_files+0x28/0x4b0
[ 1263.205706][T15045]  ? __fget_files+0x43d/0x4b0
[ 1263.210395][T15045]  ? __fdget_pos+0x2a3/0x330
[ 1263.214991][T15045]  ? ksys_read+0x75/0x260
[ 1263.219331][T15045]  ksys_read+0x150/0x260
[ 1263.223580][T15045]  ? vfs_write+0x990/0x990
[ 1263.228004][T15045]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1263.233911][T15045]  do_syscall_64+0x55/0xa0
[ 1263.238332][T15045]  ? clear_bhb_loop+0x40/0x90
[ 1263.243021][T15045]  ? clear_bhb_loop+0x40/0x90
[ 1263.247703][T15045]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1263.253598][T15045] RIP: 0033:0x7f673b55cfce
[ 1263.258015][T15045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1263.277646][T15045] RSP: 002b:00007f673c469fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1263.286067][T15045] RAX: ffffffffffffffda RBX: 00007f673c46a6c0 RCX: 00007f673b55cfce
[ 1263.294059][T15045] RDX: 000000000000000f RSI: 00007f673c46a0a0 RDI: 0000000000000007
[ 1263.302032][T15045] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1263.310004][T15045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1263.317978][T15045] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1263.325968][T15045]  </TASK>
[ 1264.001721][T15066] ref_ctr_offset mismatch. inode: 0x32e offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[ 1264.004291][T15069] FAULT_INJECTION: forcing a failure.
[ 1264.004291][T15069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1264.033346][T15069] CPU: 0 PID: 15069 Comm: syz.3.3127 Not tainted syzkaller #0
[ 1264.040866][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1264.050945][T15069] Call Trace:
[ 1264.054219][T15069]  <TASK>
[ 1264.057141][T15069]  dump_stack_lvl+0x18c/0x250
[ 1264.061823][T15069]  ? show_regs_print_info+0x20/0x20
[ 1264.067022][T15069]  ? load_image+0x400/0x400
[ 1264.071524][T15069]  ? __lock_acquire+0x7d40/0x7d40
[ 1264.076553][T15069]  ? snprintf+0xe9/0x140
[ 1264.080795][T15069]  should_fail_ex+0x39d/0x4d0
[ 1264.085475][T15069]  _copy_to_user+0x2f/0xa0
[ 1264.089893][T15069]  simple_read_from_buffer+0xe7/0x150
[ 1264.095294][T15069]  proc_fail_nth_read+0x1e8/0x260
[ 1264.100331][T15069]  ? proc_fault_inject_write+0x360/0x360
[ 1264.105972][T15069]  ? fsnotify_perm+0x271/0x5e0
[ 1264.110736][T15069]  ? proc_fault_inject_write+0x360/0x360
[ 1264.116370][T15069]  vfs_read+0x28b/0x970
[ 1264.120526][T15069]  ? kernel_read+0x1e0/0x1e0
[ 1264.125117][T15069]  ? __fget_files+0x28/0x4b0
[ 1264.129704][T15069]  ? __fget_files+0x28/0x4b0
[ 1264.134295][T15069]  ? __fget_files+0x43d/0x4b0
[ 1264.138980][T15069]  ? __fdget_pos+0x2a3/0x330
[ 1264.143569][T15069]  ? ksys_read+0x75/0x260
[ 1264.147899][T15069]  ksys_read+0x150/0x260
[ 1264.152142][T15069]  ? vfs_write+0x990/0x990
[ 1264.156559][T15069]  ? lockdep_hardirqs_on+0x98/0x150
[ 1264.161759][T15069]  do_syscall_64+0x55/0xa0
[ 1264.166174][T15069]  ? clear_bhb_loop+0x40/0x90
[ 1264.170847][T15069]  ? clear_bhb_loop+0x40/0x90
[ 1264.175525][T15069]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1264.181422][T15069] RIP: 0033:0x7f90def5cfce
[ 1264.185836][T15069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1264.205442][T15069] RSP: 002b:00007f90dfe43fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1264.213852][T15069] RAX: ffffffffffffffda RBX: 00007f90dfe446c0 RCX: 00007f90def5cfce
[ 1264.221824][T15069] RDX: 000000000000000f RSI: 00007f90dfe440a0 RDI: 0000000000000006
[ 1264.229790][T15069] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1264.237784][T15069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1264.245760][T15069] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1264.253744][T15069]  </TASK>
[ 1264.281939][T15071] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1264.299403][T15071] netlink: 'syz.1.3128': attribute type 6 has an invalid length.
[ 1264.307474][T15071] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3128'.
[ 1264.456571][T15075] netlink: 'syz.3.3129': attribute type 3 has an invalid length.
[ 1264.475890][T15075] netlink: 'syz.3.3129': attribute type 1 has an invalid length.
[ 1264.487240][T15075] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3129'.
[ 1264.574419][T15077] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3130'.
[ 1264.896422][T15091] netlink: 'syz.2.3137': attribute type 10 has an invalid length.
[ 1264.910102][T15093] bridge_slave_1: left allmulticast mode
[ 1264.920541][T15093] bridge_slave_1: left promiscuous mode
[ 1264.959611][T15093] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1265.006336][T15093] bridge_slave_0: left allmulticast mode
[ 1265.013042][T15093] bridge_slave_0: left promiscuous mode
[ 1265.021028][T15093] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1265.697507][T15104] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3142'.
[ 1265.736090][T15108] FAULT_INJECTION: forcing a failure.
[ 1265.736090][T15108] name failslab, interval 1, probability 0, space 0, times 0
[ 1265.749802][T15108] CPU: 0 PID: 15108 Comm: syz.0.3143 Not tainted syzkaller #0
[ 1265.757270][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1265.767347][T15108] Call Trace:
[ 1265.770654][T15108]  <TASK>
[ 1265.773664][T15108]  dump_stack_lvl+0x18c/0x250
[ 1265.778361][T15108]  ? show_regs_print_info+0x20/0x20
[ 1265.780559][T15109] netlink: 'syz.3.3144': attribute type 3 has an invalid length.
[ 1265.783577][T15108]  ? load_image+0x400/0x400
[ 1265.783628][T15108]  ? __might_sleep+0xe0/0xe0
[ 1265.783648][T15108]  ? __lock_acquire+0x7d40/0x7d40
[ 1265.791578][T15109] netlink: 'syz.3.3144': attribute type 1 has an invalid length.
[ 1265.795868][T15108]  should_fail_ex+0x39d/0x4d0
[ 1265.795908][T15108]  should_failslab+0x9/0x20
[ 1265.795929][T15108]  slab_pre_alloc_hook+0x59/0x310
[ 1265.795953][T15108]  ? tomoyo_encode+0x28b/0x540
[ 1265.800869][T15109] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3144'.
[ 1265.805536][T15108]  ? tomoyo_encode+0x28b/0x540
[ 1265.805561][T15108]  __kmem_cache_alloc_node+0x53/0x250
[ 1265.805594][T15108]  ? tomoyo_encode+0x28b/0x540
[ 1265.805607][T15108]  __kmalloc+0xa4/0x230
[ 1265.805631][T15108]  tomoyo_encode+0x28b/0x540
[ 1265.805652][T15108]  tomoyo_realpath_from_path+0x592/0x5d0
[ 1265.805680][T15108]  tomoyo_path_number_perm+0x248/0x620
[ 1265.805704][T15108]  ? tomoyo_path_number_perm+0x217/0x620
[ 1265.805725][T15108]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1265.805751][T15108]  ? ktime_get+0x7f/0x280
[ 1265.805803][T15108]  ? __fget_files+0x28/0x4b0
[ 1265.805823][T15108]  ? __fget_files+0x28/0x4b0
[ 1265.805855][T15108]  security_file_ioctl+0x70/0xa0
[ 1265.805882][T15108]  __se_sys_ioctl+0x48/0x170
[ 1265.805905][T15108]  do_syscall_64+0x55/0xa0
[ 1265.805927][T15108]  ? clear_bhb_loop+0x40/0x90
[ 1265.805946][T15108]  ? clear_bhb_loop+0x40/0x90
[ 1265.805965][T15108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1265.805983][T15108] RIP: 0033:0x7f2f7459c799
[ 1265.806002][T15108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1265.806017][T15108] RSP: 002b:00007f2f754f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1265.806037][T15108] RAX: ffffffffffffffda RBX: 00007f2f74815fa0 RCX: 00007f2f7459c799
[ 1265.806049][T15108] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000009
[ 1265.806061][T15108] RBP: 00007f2f754f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1265.806073][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1265.806090][T15108] R13: 00007f2f74816038 R14: 00007f2f74815fa0 R15: 00007ffc1b729b58
[ 1265.806119][T15108]  </TASK>
[ 1265.831038][T15108] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1266.359922][T15121] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3149'.
[ 1266.578094][T15125] netlink: 'syz.3.3151': attribute type 10 has an invalid length.
[ 1266.878714][T15136] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.3155'.
[ 1266.935499][T15138] bridge_slave_1: left allmulticast mode
[ 1266.941749][T15138] bridge_slave_1: left promiscuous mode
[ 1266.965136][T15138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1267.010841][T15138] bridge_slave_0: left allmulticast mode
[ 1267.027565][T15138] bridge_slave_0: left promiscuous mode
[ 1267.040844][T15138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1267.097906][T15141] netlink: 'syz.3.3157': attribute type 3 has an invalid length.
[ 1267.118565][T15141] netlink: 'syz.3.3157': attribute type 1 has an invalid length.
[ 1267.135634][T15141] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3157'.
[ 1268.058099][T15146] sit0: entered promiscuous mode
[ 1268.075192][T15146] sit0: entered allmulticast mode
[ 1268.385490][T15166] FAULT_INJECTION: forcing a failure.
[ 1268.385490][T15166] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1268.413314][T15166] CPU: 1 PID: 15166 Comm: syz.1.3165 Not tainted syzkaller #0
[ 1268.420840][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1268.430919][T15166] Call Trace:
[ 1268.434208][T15166]  <TASK>
[ 1268.437147][T15166]  dump_stack_lvl+0x18c/0x250
[ 1268.441836][T15166]  ? show_regs_print_info+0x20/0x20
[ 1268.447033][T15166]  ? load_image+0x400/0x400
[ 1268.451539][T15166]  ? __might_fault+0xaa/0x120
[ 1268.456218][T15166]  should_fail_ex+0x39d/0x4d0
[ 1268.460899][T15166]  copyout+0x1a/0x90
[ 1268.464797][T15166]  _copy_to_iter+0x432/0x1120
[ 1268.469485][T15166]  ? iov_iter_init+0x1e0/0x1e0
[ 1268.474248][T15166]  ? __virt_addr_valid+0x18c/0x540
[ 1268.479354][T15166]  ? __virt_addr_valid+0x469/0x540
[ 1268.484477][T15166]  ? __phys_addr_symbol+0x2f/0x70
[ 1268.489513][T15166]  __skb_datagram_iter+0xdb/0x780
[ 1268.494546][T15166]  ? skb_copy_datagram_iter+0x200/0x200
[ 1268.500103][T15166]  skb_copy_datagram_iter+0xb1/0x200
[ 1268.505393][T15166]  netlink_recvmsg+0x2d4/0xe60
[ 1268.510163][T15166]  ? netlink_sendmsg+0xbf0/0xbf0
[ 1268.515120][T15166]  ? aa_af_perm+0x330/0x330
[ 1268.519631][T15166]  ? __lock_acquire+0x1273/0x7d40
[ 1268.524663][T15166]  ? perf_tp_event+0x1450/0x1450
[ 1268.529603][T15166]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1268.534887][T15166]  ? security_socket_recvmsg+0x89/0xb0
[ 1268.540344][T15166]  ? netlink_sendmsg+0xbf0/0xbf0
[ 1268.545291][T15166]  ____sys_recvmsg+0x2ce/0x5e0
[ 1268.550060][T15166]  ? __sys_recvmsg_sock+0x50/0x50
[ 1268.555090][T15166]  ? import_iovec+0x73/0xa0
[ 1268.559592][T15166]  ___sys_recvmsg+0x216/0x590
[ 1268.564271][T15166]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1268.569032][T15166]  ? ktime_get+0x7f/0x280
[ 1268.573500][T15166]  ? __fget_files+0x43d/0x4b0
[ 1268.578212][T15166]  __x64_sys_recvmsg+0x20c/0x2e0
[ 1268.583159][T15166]  ? ___sys_recvmsg+0x590/0x590
[ 1268.588016][T15166]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1268.593908][T15166]  do_syscall_64+0x55/0xa0
[ 1268.598326][T15166]  ? clear_bhb_loop+0x40/0x90
[ 1268.602999][T15166]  ? clear_bhb_loop+0x40/0x90
[ 1268.607673][T15166]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1268.613578][T15166] RIP: 0033:0x7f673b59c799
[ 1268.618009][T15166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1268.637616][T15166] RSP: 002b:00007f673c46a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1268.646040][T15166] RAX: ffffffffffffffda RBX: 00007f673b815fa0 RCX: 00007f673b59c799
[ 1268.654007][T15166] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 000000000000000b
[ 1268.662064][T15166] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1268.670027][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1268.677994][T15166] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1268.685974][T15166]  </TASK>
[ 1268.802148][T15175] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.3169'.
[ 1268.830545][T15174] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3167'.
[ 1268.926070][T15178] netlink: 'syz.3.3170': attribute type 3 has an invalid length.
[ 1268.938197][T15178] netlink: 'syz.3.3170': attribute type 1 has an invalid length.
[ 1268.952838][T15178] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3170'.
[ 1269.206141][T15182] bridge_slave_1: left allmulticast mode
[ 1269.213454][T15182] bridge_slave_1: left promiscuous mode
[ 1269.223663][T15182] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1269.247909][T15182] bridge_slave_0: left allmulticast mode
[ 1269.260455][T15182] bridge_slave_0: left promiscuous mode
[ 1269.279060][T15182] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1269.988360][T15196] syzkaller0: entered promiscuous mode
[ 1270.002272][T15196] syzkaller0: entered allmulticast mode
[ 1270.100243][T15204] netlink: 'syz.3.3179': attribute type 3 has an invalid length.
[ 1270.108959][T15204] netlink: 'syz.3.3179': attribute type 1 has an invalid length.
[ 1270.117606][T15204] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3179'.
[ 1270.244735][T15206] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3180'.
[ 1270.565001][T15216] FAULT_INJECTION: forcing a failure.
[ 1270.565001][T15216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1270.578355][T15216] CPU: 0 PID: 15216 Comm: syz.1.3185 Not tainted syzkaller #0
[ 1270.585845][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1270.595924][T15216] Call Trace:
[ 1270.599209][T15216]  <TASK>
[ 1270.602143][T15216]  dump_stack_lvl+0x18c/0x250
[ 1270.606841][T15216]  ? show_regs_print_info+0x20/0x20
[ 1270.612064][T15216]  ? load_image+0x400/0x400
[ 1270.616577][T15216]  ? __lock_acquire+0x7d40/0x7d40
[ 1270.621608][T15216]  ? snprintf+0xe9/0x140
[ 1270.625854][T15216]  should_fail_ex+0x39d/0x4d0
[ 1270.630622][T15216]  _copy_to_user+0x2f/0xa0
[ 1270.635037][T15216]  simple_read_from_buffer+0xe7/0x150
[ 1270.640448][T15216]  proc_fail_nth_read+0x1e8/0x260
[ 1270.645494][T15216]  ? proc_fault_inject_write+0x360/0x360
[ 1270.651137][T15216]  ? fsnotify_perm+0x271/0x5e0
[ 1270.655915][T15216]  ? proc_fault_inject_write+0x360/0x360
[ 1270.661553][T15216]  vfs_read+0x28b/0x970
[ 1270.665717][T15216]  ? kernel_read+0x1e0/0x1e0
[ 1270.670358][T15216]  ? __fget_files+0x28/0x4b0
[ 1270.675060][T15216]  ? __fget_files+0x28/0x4b0
[ 1270.679649][T15216]  ? __fget_files+0x43d/0x4b0
[ 1270.684336][T15216]  ? __fdget_pos+0x2a3/0x330
[ 1270.688937][T15216]  ? ksys_read+0x75/0x260
[ 1270.693274][T15216]  ksys_read+0x150/0x260
[ 1270.697519][T15216]  ? vfs_write+0x990/0x990
[ 1270.701940][T15216]  ? lockdep_hardirqs_on+0x98/0x150
[ 1270.707143][T15216]  do_syscall_64+0x55/0xa0
[ 1270.711561][T15216]  ? clear_bhb_loop+0x40/0x90
[ 1270.716237][T15216]  ? clear_bhb_loop+0x40/0x90
[ 1270.720914][T15216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1270.726805][T15216] RIP: 0033:0x7f673b55cfce
[ 1270.731220][T15216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1270.750841][T15216] RSP: 002b:00007f673c469fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1270.759259][T15216] RAX: ffffffffffffffda RBX: 00007f673c46a6c0 RCX: 00007f673b55cfce
[ 1270.767231][T15216] RDX: 000000000000000f RSI: 00007f673c46a0a0 RDI: 0000000000000005
[ 1270.775303][T15216] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1270.783278][T15216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1270.791244][T15216] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1270.799231][T15216]  </TASK>
[ 1270.807618][T15211] delete_channel: no stack
[ 1270.943541][T15218] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3186'.
[ 1271.244865][T15233] netlink: 'syz.2.3190': attribute type 3 has an invalid length.
[ 1271.257744][T15233] netlink: 'syz.2.3190': attribute type 1 has an invalid length.
[ 1271.268975][T15233] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3190'.
[ 1274.200893][T15237] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3191'.
[ 1274.856557][T15252] sit0: left promiscuous mode
[ 1275.721381][T15256] syzkaller0: entered promiscuous mode
[ 1275.809786][T15256] syzkaller0: entered allmulticast mode
[ 1278.716202][T15268] netlink: 'syz.2.3201': attribute type 3 has an invalid length.
[ 1278.730050][T15268] netlink: 'syz.2.3201': attribute type 1 has an invalid length.
[ 1278.740475][T15268] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3201'.
[ 1279.107549][T15271] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3202'.
[ 1280.040015][T15276] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3204'.
[ 1280.829585][T15288] netlink: 'syz.1.3209': attribute type 3 has an invalid length.
[ 1280.853216][T15288] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3209'.
[ 1280.875110][T15293] netlink: 120492 bytes leftover after parsing attributes in process `syz.1.3209'.
[ 1280.883888][T15294] syz.0.3210 uses obsolete (PF_INET,SOCK_PACKET)
[ 1281.237249][T15300] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3214'.
[ 1281.482125][T15309] netlink: 'syz.1.3216': attribute type 3 has an invalid length.
[ 1281.506910][T15309] netlink: 'syz.1.3216': attribute type 1 has an invalid length.
[ 1281.516665][T15309] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3216'.
[ 1284.313854][ T8495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1284.936003][T15329] sit0: entered allmulticast mode
[ 1285.612990][T15332] netlink: 'syz.3.3223': attribute type 3 has an invalid length.
[ 1285.620783][T15332] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3223'.
[ 1285.741461][T15337] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.3224'.
[ 1285.749665][T15335] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3231'.
[ 1286.097515][T15343] netlink: 'syz.3.3226': attribute type 3 has an invalid length.
[ 1286.112026][T15343] netlink: 'syz.3.3226': attribute type 1 has an invalid length.
[ 1286.120805][T15343] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3226'.
[ 1286.319523][T15348] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1286.339864][T15348] netlink: 'syz.3.3228': attribute type 6 has an invalid length.
[ 1286.351682][T15348] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3228'.
[ 1287.277589][T15358] netlink: 'syz.0.3232': attribute type 25 has an invalid length.
[ 1287.292583][T15358] netlink: 'syz.0.3232': attribute type 9 has an invalid length.
[ 1287.351838][T15358] syzkaller0: entered promiscuous mode
[ 1287.360097][T15358] syzkaller0: entered allmulticast mode
[ 1287.386319][T15362] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1287.412813][T15362] netlink: 'syz.1.3234': attribute type 6 has an invalid length.
[ 1287.420902][T15362] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3234'.
[ 1287.449425][T15366] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.3235'.
[ 1289.337868][T15374] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1289.361366][T15374] netlink: 'syz.1.3245': attribute type 6 has an invalid length.
[ 1289.370168][T15374] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3245'.
[ 1289.420395][T15371] netlink: 'syz.2.3237': attribute type 3 has an invalid length.
[ 1289.445785][T15371] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3237'.
[ 1289.485352][T15379] netlink: 120492 bytes leftover after parsing attributes in process `syz.2.3237'.
[ 1289.507626][T15377] netlink: 'syz.0.3239': attribute type 3 has an invalid length.
[ 1290.218538][ T1126] wlan1: Trigger new scan to find an IBSS to join
[ 1293.366627][T15391] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1293.381688][T15391] validate_nla: 1 callbacks suppressed
[ 1293.381707][T15391] netlink: 'syz.0.3243': attribute type 6 has an invalid length.
[ 1293.424963][T15391] __nla_validate_parse: 2 callbacks suppressed
[ 1293.424981][T15391] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3243'.
[ 1294.188413][T15401] syzkaller0: entered promiscuous mode
[ 1294.262040][T15401] syzkaller0: entered allmulticast mode
[ 1294.392440][T15399] sit0: entered allmulticast mode
[ 1294.873397][T15420] netlink: 'syz.2.3252': attribute type 3 has an invalid length.
[ 1294.881424][T15420] netlink: 'syz.2.3252': attribute type 1 has an invalid length.
[ 1294.890489][T15420] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3252'.
[ 1295.242997][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1295.754440][T15427] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3254'.
[ 1296.027606][T15432] netlink: 'syz.2.3257': attribute type 6 has an invalid length.
[ 1296.035602][T15432] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3257'.
[ 1296.248495][ T8495] wlan1: Creating new IBSS network, BSSID 0a:0f:60:8d:44:4f
[ 1296.858898][T15431] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1297.443981][T15449] netlink: 'syz.0.3263': attribute type 3 has an invalid length.
[ 1297.451878][T15449] netlink: 'syz.0.3263': attribute type 1 has an invalid length.
[ 1297.460324][T15449] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3263'.
[ 1297.780528][T15454] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3265'.
[ 1298.149012][T15463] syzkaller0: entered promiscuous mode
[ 1298.182713][T15463] syzkaller0: entered allmulticast mode
[ 1298.343216][T15475] netlink: 'syz.0.3273': attribute type 6 has an invalid length.
[ 1298.351006][T15475] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3273'.
[ 1299.975296][T15472] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1300.309786][T15495] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3277'.
[ 1300.527233][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.533685][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.827823][T15506] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1300.866517][T15506] netlink: 'syz.1.3282': attribute type 6 has an invalid length.
[ 1300.875336][T15506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3282'.
[ 1300.899465][T15509] netlink: 'syz.0.3284': attribute type 25 has an invalid length.
[ 1300.927658][T15509] netlink: 'syz.0.3284': attribute type 9 has an invalid length.
[ 1301.058631][T15515] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3286'.
[ 1301.069712][T15509] syzkaller0: entered promiscuous mode
[ 1301.086393][T15509] syzkaller0: entered allmulticast mode
[ 1301.289637][T15521] netlink: 'syz.1.3289': attribute type 3 has an invalid length.
[ 1301.309205][T15521] netlink: 'syz.1.3289': attribute type 1 has an invalid length.
[ 1301.321309][T15521] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3289'.
[ 1302.200637][T15541] netlink: 'syz.3.3295': attribute type 6 has an invalid length.
[ 1302.209958][T15541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3295'.
[ 1302.317760][T15544] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3297'.
[ 1302.327799][T15544] netlink: zone id is out of range
[ 1303.513821][T15538] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1303.688856][T15551] netlink: 'syz.3.3301': attribute type 3 has an invalid length.
[ 1303.717115][T15551] netlink: 'syz.3.3301': attribute type 1 has an invalid length.
[ 1303.742815][T15551] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3301'.
[ 1303.789672][T15558] FAULT_INJECTION: forcing a failure.
[ 1303.789672][T15558] name failslab, interval 1, probability 0, space 0, times 0
[ 1303.846685][T15558] CPU: 0 PID: 15558 Comm: syz.0.3302 Not tainted syzkaller #0
[ 1303.854247][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1303.864347][T15558] Call Trace:
[ 1303.867644][T15558]  <TASK>
[ 1303.870586][T15558]  dump_stack_lvl+0x18c/0x250
[ 1303.875300][T15558]  ? show_regs_print_info+0x20/0x20
[ 1303.880536][T15558]  ? load_image+0x400/0x400
[ 1303.885079][T15558]  ? __might_sleep+0xe0/0xe0
[ 1303.889738][T15558]  ? __lock_acquire+0x7d40/0x7d40
[ 1303.895147][T15558]  should_fail_ex+0x39d/0x4d0
[ 1303.899887][T15558]  should_failslab+0x9/0x20
[ 1303.904439][T15558]  slab_pre_alloc_hook+0x59/0x310
[ 1303.909510][T15558]  ? kernfs_fop_write_iter+0x159/0x520
[ 1303.915049][T15558]  ? kernfs_fop_write_iter+0x159/0x520
[ 1303.920544][T15558]  __kmem_cache_alloc_node+0x53/0x250
[ 1303.925948][T15558]  ? kernfs_fop_write_iter+0x159/0x520
[ 1303.931438][T15558]  __kmalloc+0xa4/0x230
[ 1303.935622][T15558]  kernfs_fop_write_iter+0x159/0x520
[ 1303.940932][T15558]  vfs_write+0x46c/0x990
[ 1303.945193][T15558]  ? file_end_write+0x250/0x250
[ 1303.950062][T15558]  ? __fget_files+0x43d/0x4b0
[ 1303.954762][T15558]  ? __fdget_pos+0x2a3/0x330
[ 1303.959355][T15558]  ? ksys_write+0x75/0x260
[ 1303.963776][T15558]  ksys_write+0x150/0x260
[ 1303.968119][T15558]  ? __ia32_sys_read+0x90/0x90
[ 1303.972890][T15558]  ? lockdep_hardirqs_on+0x98/0x150
[ 1303.978094][T15558]  do_syscall_64+0x55/0xa0
[ 1303.982522][T15558]  ? clear_bhb_loop+0x40/0x90
[ 1303.987196][T15558]  ? clear_bhb_loop+0x40/0x90
[ 1303.991883][T15558]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1303.997779][T15558] RIP: 0033:0x7f2f7459c799
[ 1304.002229][T15558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1304.021846][T15558] RSP: 002b:00007f2f754f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1304.030267][T15558] RAX: ffffffffffffffda RBX: 00007f2f74815fa0 RCX: 00007f2f7459c799
[ 1304.038239][T15558] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000005
[ 1304.046219][T15558] RBP: 00007f2f754f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1304.054207][T15558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1304.062192][T15558] R13: 00007f2f74816038 R14: 00007f2f74815fa0 R15: 00007ffc1b729b58
[ 1304.070182][T15558]  </TASK>
[ 1304.255067][T15568] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3306'.
[ 1304.543242][T15579] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1304.569905][T15579] netlink: 'syz.0.3310': attribute type 6 has an invalid length.
[ 1304.592800][T15579] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3310'.
[ 1304.620944][T15577] syzkaller0: entered promiscuous mode
[ 1304.632666][T15577] syzkaller0: entered allmulticast mode
[ 1304.669289][T15583] netlink: 'syz.2.3313': attribute type 3 has an invalid length.
[ 1304.681148][T15583] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3313'.
[ 1305.946638][T15601] __nla_validate_parse: 1 callbacks suppressed
[ 1305.946656][T15601] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3318'.
[ 1306.203083][T10418] wlan1: Trigger new scan to find an IBSS to join
[ 1308.140290][T15610] validate_nla: 2 callbacks suppressed
[ 1308.140306][T15610] netlink: 'syz.2.3330': attribute type 3 has an invalid length.
[ 1308.173426][T15610] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3330'.
[ 1309.008738][T15622] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1309.061909][T15622] netlink: 'syz.0.3324': attribute type 6 has an invalid length.
[ 1309.143997][T15622] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3324'.
[ 1309.192452][ T8495] wlan1: Trigger new scan to find an IBSS to join
[ 1310.213683][T15644] FAULT_INJECTION: forcing a failure.
[ 1310.213683][T15644] name failslab, interval 1, probability 0, space 0, times 0
[ 1310.228736][T15644] CPU: 1 PID: 15644 Comm: syz.3.3332 Not tainted syzkaller #0
[ 1310.236241][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1310.246303][T15644] Call Trace:
[ 1310.249582][T15644]  <TASK>
[ 1310.252523][T15644]  dump_stack_lvl+0x18c/0x250
[ 1310.257216][T15644]  ? show_regs_print_info+0x20/0x20
[ 1310.262566][T15644]  ? load_image+0x400/0x400
[ 1310.267077][T15644]  ? __might_sleep+0xe0/0xe0
[ 1310.271675][T15644]  ? __lock_acquire+0x7d40/0x7d40
[ 1310.276709][T15644]  should_fail_ex+0x39d/0x4d0
[ 1310.281401][T15644]  should_failslab+0x9/0x20
[ 1310.285910][T15644]  slab_pre_alloc_hook+0x59/0x310
[ 1310.290941][T15644]  ? memcg_alloc_slab_cgroups+0x87/0x130
[ 1310.296578][T15644]  ? memcg_alloc_slab_cgroups+0x87/0x130
[ 1310.302210][T15644]  __kmem_cache_alloc_node+0x53/0x250
[ 1310.307593][T15644]  ? memcg_alloc_slab_cgroups+0x87/0x130
[ 1310.313226][T15644]  __kmalloc_node+0xa4/0x230
[ 1310.317826][T15644]  memcg_alloc_slab_cgroups+0x87/0x130
[ 1310.323294][T15644]  slab_post_alloc_hook+0xf4/0x4b0
[ 1310.328419][T15644]  kmem_cache_alloc_node+0x14c/0x320
[ 1310.333713][T15644]  ? __lock_acquire+0x1273/0x7d40
[ 1310.338740][T15644]  ? __alloc_skb+0x103/0x2c0
[ 1310.343344][T15644]  __alloc_skb+0x103/0x2c0
[ 1310.347772][T15644]  alloc_skb_with_frags+0xca/0x7b0
[ 1310.352892][T15644]  ? mark_lock+0x94/0x320
[ 1310.357223][T15644]  ? aa_label_sk_perm+0x463/0x5c0
[ 1310.362255][T15644]  sock_alloc_send_pskb+0x883/0x9a0
[ 1310.367476][T15644]  ? sock_kzfree_s+0x50/0x50
[ 1310.372096][T15644]  ? __might_sleep+0xe0/0xe0
[ 1310.376707][T15644]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10
[ 1310.382797][T15644]  ? security_socket_getpeersec_dgram+0x83/0xa0
[ 1310.389051][T15644]  unix_stream_sendmsg+0x48b/0xbf0
[ 1310.394184][T15644]  ? unix_show_fdinfo+0x270/0x270
[ 1310.399217][T15644]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[ 1310.405647][T15644]  ? aa_sock_msg_perm+0x94/0x150
[ 1310.410594][T15644]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1310.415884][T15644]  ? security_socket_sendmsg+0x80/0xa0
[ 1310.421361][T15644]  sock_write_iter+0x2df/0x420
[ 1310.426129][T15644]  ? sock_read_iter+0x3e0/0x3e0
[ 1310.430986][T15644]  ? common_file_perm+0x198/0x1f0
[ 1310.436020][T15644]  vfs_write+0x46c/0x990
[ 1310.440276][T15644]  ? file_end_write+0x250/0x250
[ 1310.445135][T15644]  ? __fget_files+0x43d/0x4b0
[ 1310.449821][T15644]  ? __fdget_pos+0x1d8/0x330
[ 1310.454413][T15644]  ? ksys_write+0x75/0x260
[ 1310.458835][T15644]  ksys_write+0x150/0x260
[ 1310.463173][T15644]  ? __ia32_sys_read+0x90/0x90
[ 1310.467943][T15644]  ? lockdep_hardirqs_on+0x98/0x150
[ 1310.473146][T15644]  do_syscall_64+0x55/0xa0
[ 1310.477588][T15644]  ? clear_bhb_loop+0x40/0x90
[ 1310.482290][T15644]  ? clear_bhb_loop+0x40/0x90
[ 1310.486981][T15644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1310.492884][T15644] RIP: 0033:0x7f90def9c799
[ 1310.497303][T15644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1310.516912][T15644] RSP: 002b:00007f90dfe23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1310.525354][T15644] RAX: ffffffffffffffda RBX: 00007f90df216090 RCX: 00007f90def9c799
[ 1310.533327][T15644] RDX: 00000000fffffeff RSI: 00002000000005c0 RDI: 0000000000000003
[ 1310.541301][T15644] RBP: 00007f90dfe23090 R08: 0000000000000000 R09: 0000000000000000
[ 1310.549270][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1310.557239][T15644] R13: 00007f90df216128 R14: 00007f90df216090 R15: 00007fffcd7ec438
[ 1310.565310][T15644]  </TASK>
[ 1310.634539][T10418] wlan1: Creating new IBSS network, BSSID d2:73:16:c4:6d:24
[ 1311.048192][T15657] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1311.072317][T15657] netlink: 'syz.0.3337': attribute type 6 has an invalid length.
[ 1311.093323][T15657] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3337'.
[ 1314.361679][T15672] syzkaller0: entered promiscuous mode
[ 1314.444784][T15672] syzkaller0: entered allmulticast mode
[ 1315.180984][T15694] netlink: 'syz.2.3349': attribute type 1 has an invalid length.
[ 1315.189205][T15694] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.3349'.
[ 1315.231703][T15695] netlink: 'syz.0.3350': attribute type 6 has an invalid length.
[ 1315.239826][T15695] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3350'.
[ 1316.751133][T15693] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1317.912237][T15724] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1317.938757][T15724] netlink: 'syz.2.3360': attribute type 6 has an invalid length.
[ 1318.016603][T15726] netlink: 'syz.3.3361': attribute type 3 has an invalid length.
[ 1318.035272][T15724] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3360'.
[ 1318.065053][T15726] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3361'.
[ 1318.110937][T15730] netlink: 'syz.0.3362': attribute type 25 has an invalid length.
[ 1318.181477][T15730] netlink: 'syz.0.3362': attribute type 9 has an invalid length.
[ 1318.506570][T15730] syzkaller0: entered promiscuous mode
[ 1318.535846][T15730] syzkaller0: entered allmulticast mode
[ 1322.098859][T15763] netlink: 'syz.1.3371': attribute type 6 has an invalid length.
[ 1322.111049][T15763] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3371'.
[ 1322.725461][T15762] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1322.845446][T15767] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3373'.
[ 1322.928393][T15773] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3374'.
[ 1323.853284][T15796] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1323.905844][T15796] netlink: 'syz.3.3383': attribute type 6 has an invalid length.
[ 1323.944235][T15796] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3383'.
[ 1324.200184][T15804] netlink: 'syz.0.3384': attribute type 25 has an invalid length.
[ 1324.228939][T15804] netlink: 'syz.0.3384': attribute type 9 has an invalid length.
[ 1324.331508][T15804] syzkaller0: entered promiscuous mode
[ 1324.340730][T15804] syzkaller0: entered allmulticast mode
[ 1324.411020][T15809] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3387'.
[ 1324.610560][T15813] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3388'.
[ 1324.951936][T15819] netlink: 'syz.2.3390': attribute type 1 has an invalid length.
[ 1324.985811][T15819] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.3390'.
[ 1325.015994][T15820] FAULT_INJECTION: forcing a failure.
[ 1325.015994][T15820] name failslab, interval 1, probability 0, space 0, times 0
[ 1325.087489][T15820] CPU: 1 PID: 15820 Comm: syz.2.3390 Not tainted syzkaller #0
[ 1325.095034][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1325.105132][T15820] Call Trace:
[ 1325.108442][T15820]  <TASK>
[ 1325.111408][T15820]  dump_stack_lvl+0x18c/0x250
[ 1325.116141][T15820]  ? show_regs_print_info+0x20/0x20
[ 1325.121393][T15820]  ? load_image+0x400/0x400
[ 1325.125954][T15820]  ? __might_sleep+0xe0/0xe0
[ 1325.130606][T15820]  ? __lock_acquire+0x7d40/0x7d40
[ 1325.135701][T15820]  should_fail_ex+0x39d/0x4d0
[ 1325.140443][T15820]  should_failslab+0x9/0x20
[ 1325.145007][T15820]  slab_pre_alloc_hook+0x59/0x310
[ 1325.150079][T15820]  ? __lock_acquire+0x7d40/0x7d40
[ 1325.155157][T15820]  kmem_cache_alloc_node+0x60/0x320
[ 1325.160409][T15820]  ? __alloc_skb+0x103/0x2c0
[ 1325.165062][T15820]  __alloc_skb+0x103/0x2c0
[ 1325.169541][T15820]  netlink_sendmsg+0x66a/0xbf0
[ 1325.174383][T15820]  ? netlink_getsockopt+0x590/0x590
[ 1325.179642][T15820]  ? aa_sock_msg_perm+0x94/0x150
[ 1325.184632][T15820]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1325.190049][T15820]  ? security_socket_sendmsg+0x80/0xa0
[ 1325.195512][T15820]  ? netlink_getsockopt+0x590/0x590
[ 1325.200719][T15820]  ____sys_sendmsg+0x5ba/0x960
[ 1325.205532][T15820]  ? __asan_memset+0x22/0x40
[ 1325.210164][T15820]  ? __sys_sendmsg_sock+0x30/0x30
[ 1325.215248][T15820]  ? __import_iovec+0x5f2/0x850
[ 1325.220165][T15820]  ? import_iovec+0x73/0xa0
[ 1325.224722][T15820]  ___sys_sendmsg+0x2a6/0x360
[ 1325.229457][T15820]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1325.234323][T15820]  ? trace_call_bpf+0xc3/0x6c0
[ 1325.239221][T15820]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1325.244132][T15820]  ? __x64_sys_sendmsg+0x80/0x80
[ 1325.249160][T15820]  ? lockdep_hardirqs_on+0x98/0x150
[ 1325.254417][T15820]  do_syscall_64+0x55/0xa0
[ 1325.258971][T15820]  ? clear_bhb_loop+0x40/0x90
[ 1325.263703][T15820]  ? clear_bhb_loop+0x40/0x90
[ 1325.268434][T15820]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1325.274376][T15820] RIP: 0033:0x7fcc2c99c799
[ 1325.278840][T15820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1325.298501][T15820] RSP: 002b:00007fcc2d79b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1325.306976][T15820] RAX: ffffffffffffffda RBX: 00007fcc2cc16180 RCX: 00007fcc2c99c799
[ 1325.315004][T15820] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 000000000000000a
[ 1325.323017][T15820] RBP: 00007fcc2d79b090 R08: 0000000000000000 R09: 0000000000000000
[ 1325.331020][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1325.339011][T15820] R13: 00007fcc2cc16218 R14: 00007fcc2cc16180 R15: 00007fffa851e558
[ 1325.347073][T15820]  </TASK>
[ 1325.748843][T15834] netlink: 'syz.3.3394': attribute type 6 has an invalid length.
[ 1325.756969][T15834] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3394'.
[ 1326.217254][   T42] wlan1: Trigger new scan to find an IBSS to join
[ 1327.205459][T15832] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1327.564578][T15846] netlink: 'syz.0.3399': attribute type 3 has an invalid length.
[ 1327.575714][T15846] netlink: 'syz.0.3399': attribute type 1 has an invalid length.
[ 1327.584718][T15846] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3399'.
[ 1328.172459][T15863] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1328.269297][T15863] netlink: 'syz.1.3405': attribute type 6 has an invalid length.
[ 1328.286824][T15863] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3405'.
[ 1328.600152][T15874] syzkaller0: entered promiscuous mode
[ 1328.613946][T15874] syzkaller0: entered allmulticast mode
[ 1329.237146][T15887] netlink: 'syz.3.3412': attribute type 3 has an invalid length.
[ 1329.245563][T15887] netlink: 'syz.3.3412': attribute type 1 has an invalid length.
[ 1329.254604][T15887] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3412'.
[ 1329.678676][T15898] netlink: 'syz.0.3415': attribute type 6 has an invalid length.
[ 1329.697664][T15898] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3415'.
[ 1331.254976][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1331.787751][T15897] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1331.955029][T15916] netlink: 'syz.3.3422': attribute type 3 has an invalid length.
[ 1331.974378][T15916] netlink: 'syz.3.3422': attribute type 1 has an invalid length.
[ 1331.983199][T15916] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3422'.
[ 1332.176691][T15925] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3426'.
[ 1332.476618][T15933] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1332.522015][T15933] netlink: 'syz.0.3430': attribute type 6 has an invalid length.
[ 1332.541979][T15933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3430'.
[ 1332.787294][T15938] syzkaller0: entered promiscuous mode
[ 1332.793467][T15938] syzkaller0: entered allmulticast mode
[ 1333.415858][T15947] netlink: 'syz.1.3435': attribute type 3 has an invalid length.
[ 1333.427583][T15947] netlink: 'syz.1.3435': attribute type 1 has an invalid length.
[ 1333.438524][T15947] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3435'.
[ 1333.937993][T15957] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3439'.
[ 1334.208147][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1335.096287][ T8495] wlan1: Creating new IBSS network, BSSID f2:cc:3f:4b:09:aa
[ 1335.378660][T15963] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1335.415156][T15963] netlink: 'syz.1.3441': attribute type 6 has an invalid length.
[ 1335.442078][T15963] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3441'.
[ 1335.683430][T15973] netlink: 'syz.0.3446': attribute type 3 has an invalid length.
[ 1335.745647][T15973] netlink: 'syz.0.3446': attribute type 1 has an invalid length.
[ 1335.809357][T15973] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3446'.
[ 1336.031661][T15984] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3448'.
[ 1336.201913][T15992] syzkaller0: entered promiscuous mode
[ 1336.209612][T15992] syzkaller0: entered allmulticast mode
[ 1336.704086][T16004] netlink: 'syz.2.3455': attribute type 6 has an invalid length.
[ 1336.712177][T16004] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3455'.
[ 1337.986207][T16013] netlink: 'syz.0.3458': attribute type 3 has an invalid length.
[ 1337.994752][T16013] netlink: 'syz.0.3458': attribute type 1 has an invalid length.
[ 1338.003336][T16013] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3458'.
[ 1338.621826][T16003] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1338.745691][T16021] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3461'.
[ 1339.701070][T16046] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1339.727586][T16046] netlink: 'syz.0.3471': attribute type 6 has an invalid length.
[ 1339.746291][T16046] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3471'.
[ 1339.927340][T16050] syzkaller0: entered promiscuous mode
[ 1339.944009][T16050] syzkaller0: entered allmulticast mode
[ 1340.219562][T16057] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3475'.
[ 1342.215637][T16074] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1342.250054][T16074] netlink: 'syz.3.3482': attribute type 6 has an invalid length.
[ 1342.258760][T16074] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3482'.
[ 1342.661912][T16085] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3484'.
[ 1342.965761][T16095] netlink: 'syz.0.3488': attribute type 10 has an invalid length.
[ 1342.981054][T16095] veth1_macvtap: left promiscuous mode
[ 1343.143793][T16097] syzkaller0: entered promiscuous mode
[ 1343.150542][T16097] syzkaller0: entered allmulticast mode
[ 1343.623952][T16104] netlink: 'syz.0.3492': attribute type 3 has an invalid length.
[ 1343.631989][T16104] netlink: 'syz.0.3492': attribute type 1 has an invalid length.
[ 1343.651849][T16104] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3492'.
[ 1346.221945][T10418] wlan1: Trigger new scan to find an IBSS to join
[ 1346.304910][T16135] FAULT_INJECTION: forcing a failure.
[ 1346.304910][T16135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1346.326421][T16135] CPU: 0 PID: 16135 Comm: syz.0.3502 Not tainted syzkaller #0
[ 1346.333949][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1346.344038][T16135] Call Trace:
[ 1346.347339][T16135]  <TASK>
[ 1346.350295][T16135]  dump_stack_lvl+0x18c/0x250
[ 1346.355016][T16135]  ? show_regs_print_info+0x20/0x20
[ 1346.360248][T16135]  ? load_image+0x400/0x400
[ 1346.364783][T16135]  ? __might_fault+0xaa/0x120
[ 1346.369478][T16135]  ? __lock_acquire+0x7d40/0x7d40
[ 1346.374534][T16135]  should_fail_ex+0x39d/0x4d0
[ 1346.379258][T16135]  _copy_to_iter+0x1ce/0x1120
[ 1346.383969][T16135]  ? perf_trace_lock+0xfc/0x3b0
[ 1346.388858][T16135]  ? __virt_addr_valid+0x18c/0x540
[ 1346.394012][T16135]  ? iov_iter_init+0x1e0/0x1e0
[ 1346.398809][T16135]  ? __virt_addr_valid+0x18c/0x540
[ 1346.403949][T16135]  ? __virt_addr_valid+0x469/0x540
[ 1346.409101][T16135]  ? __phys_addr_symbol+0x2f/0x70
[ 1346.411341][T16138] netlink: 'syz.1.3503': attribute type 3 has an invalid length.
[ 1346.414135][T16135]  ? __check_object_size+0x506/0xa20
[ 1346.414203][T16135]  __skb_datagram_iter+0xdb/0x780
[ 1346.414227][T16135]  ? unix_stream_read_generic+0x1501/0x2080
[ 1346.414250][T16135]  ? unix_stream_read_generic+0x687/0x2080
[ 1346.414274][T16135]  ? skb_copy_datagram_iter+0x200/0x200
[ 1346.449510][T16135]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1346.454548][T16135]  skb_copy_datagram_iter+0xb1/0x200
[ 1346.459848][T16135]  unix_stream_read_actor+0x6c/0xa0
[ 1346.465058][T16135]  unix_stream_read_generic+0xd69/0x2080
[ 1346.470713][T16135]  ? unix_stream_read_actor+0xa0/0xa0
[ 1346.476092][T16135]  ? wake_bit_function+0x200/0x200
[ 1346.481214][T16135]  ? aa_sk_perm+0x83c/0x970
[ 1346.485721][T16135]  unix_stream_recvmsg+0x169/0x1c0
[ 1346.490866][T16135]  ? unix_stream_sendmsg+0xbf0/0xbf0
[ 1346.496189][T16135]  ? __unix_stream_recvmsg+0x150/0x150
[ 1346.501659][T16135]  ? aa_sock_msg_perm+0x94/0x150
[ 1346.506627][T16135]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1346.511924][T16135]  ? security_socket_recvmsg+0x89/0xb0
[ 1346.517392][T16135]  ? unix_stream_sendmsg+0xbf0/0xbf0
[ 1346.522684][T16135]  ____sys_recvmsg+0x2ce/0x5e0
[ 1346.527460][T16135]  ? __sys_recvmsg_sock+0x50/0x50
[ 1346.532492][T16135]  ? import_iovec+0x73/0xa0
[ 1346.537023][T16135]  ___sys_recvmsg+0x216/0x590
[ 1346.541715][T16135]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1346.546483][T16135]  ? ksys_write+0x1c4/0x260
[ 1346.550996][T16135]  ? __fget_files+0x43d/0x4b0
[ 1346.555684][T16135]  __x64_sys_recvmsg+0x20c/0x2e0
[ 1346.560622][T16135]  ? ___sys_recvmsg+0x590/0x590
[ 1346.565483][T16135]  ? lockdep_hardirqs_on+0x98/0x150
[ 1346.570681][T16135]  do_syscall_64+0x55/0xa0
[ 1346.575105][T16135]  ? clear_bhb_loop+0x40/0x90
[ 1346.579777][T16135]  ? clear_bhb_loop+0x40/0x90
[ 1346.584455][T16135]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1346.590349][T16135] RIP: 0033:0x7f2f7459c799
[ 1346.594762][T16135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1346.614372][T16135] RSP: 002b:00007f2f754f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1346.622786][T16135] RAX: ffffffffffffffda RBX: 00007f2f74815fa0 RCX: 00007f2f7459c799
[ 1346.630757][T16135] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004
[ 1346.638736][T16135] RBP: 00007f2f754f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1346.646710][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1346.654680][T16135] R13: 00007f2f74816038 R14: 00007f2f74815fa0 R15: 00007ffc1b729b58
[ 1346.662767][T16135]  </TASK>
[ 1346.691835][T16138] netlink: 'syz.1.3503': attribute type 1 has an invalid length.
[ 1346.725963][T16138] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3503'.
[ 1347.281923][T16155] netlink: 'syz.0.3509': attribute type 25 has an invalid length.
[ 1347.297229][T16155] netlink: 'syz.0.3509': attribute type 9 has an invalid length.
[ 1347.553244][T16155] syzkaller0: entered promiscuous mode
[ 1347.559312][T16155] syzkaller0: entered allmulticast mode
[ 1347.651857][T16166] netlink: 'syz.1.3512': attribute type 6 has an invalid length.
[ 1347.662476][T16166] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3512'.
[ 1347.862606][T16172] netlink: 'syz.2.3515': attribute type 3 has an invalid length.
[ 1347.878582][T16172] netlink: 'syz.2.3515': attribute type 1 has an invalid length.
[ 1347.888599][T16172] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3515'.
[ 1349.603832][T16163] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1349.872184][T16183] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1349.911428][T16183] netlink: 'syz.1.3517': attribute type 6 has an invalid length.
[ 1349.919906][T16183] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3517'.
[ 1350.205002][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1350.413023][T16195] netlink: 'syz.3.3526': attribute type 3 has an invalid length.
[ 1350.463523][T16195] netlink: 'syz.3.3526': attribute type 1 has an invalid length.
[ 1350.475311][T16195] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3526'.
[ 1350.576346][T16200] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1350.621299][T16200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3525'.
[ 1351.033666][T16206] syzkaller0: entered promiscuous mode
[ 1351.063327][T16206] syzkaller0: entered allmulticast mode
[ 1351.871419][ T1126] wlan1: Creating new IBSS network, BSSID b6:c7:69:2e:7e:5b
[ 1353.592408][T16229] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1353.636754][T16229] validate_nla: 3 callbacks suppressed
[ 1353.636773][T16229] netlink: 'syz.2.3534': attribute type 6 has an invalid length.
[ 1353.667685][T16229] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3534'.
[ 1353.866446][T16235] netlink: 'syz.1.3537': attribute type 3 has an invalid length.
[ 1353.887604][T16235] netlink: 'syz.1.3537': attribute type 1 has an invalid length.
[ 1353.907607][T16235] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3537'.
[ 1357.617210][T16259] syzkaller0: entered promiscuous mode
[ 1357.677438][T16259] syzkaller0: entered allmulticast mode
[ 1359.636573][T16267] sit0: entered allmulticast mode
[ 1359.740061][T16276] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1359.759351][T16276] netlink: 'syz.0.3552': attribute type 6 has an invalid length.
[ 1359.771598][T16276] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3552'.
[ 1359.945652][T16279] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3553'.
[ 1361.965930][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.972787][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.592374][T16300] netlink: 'syz.3.3560': attribute type 3 has an invalid length.
[ 1363.612038][T16300] netlink: 'syz.3.3560': attribute type 1 has an invalid length.
[ 1363.622930][T16300] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3560'.
[ 1363.969390][T16316] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1364.014683][T16316] netlink: 'syz.2.3565': attribute type 6 has an invalid length.
[ 1364.027273][T16316] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3565'.
[ 1365.029297][T16335] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3573'.
[ 1368.047260][T16340] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3576'.
[ 1368.625625][T16358] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3579'.
[ 1369.220630][T16368] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3582'.
[ 1369.857411][T16381] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1369.908277][T16385] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3589'.
[ 1369.923429][T16381] netlink: 'syz.3.3587': attribute type 6 has an invalid length.
[ 1369.931761][T16381] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3587'.
[ 1371.406459][T16414] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1371.488797][T16414] netlink: 'syz.0.3598': attribute type 6 has an invalid length.
[ 1371.509090][T16414] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3598'.
[ 1371.808618][T16424] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3603'.
[ 1372.203298][T10418] wlan1: Trigger new scan to find an IBSS to join
[ 1373.555893][T16462] netlink: 'syz.2.3615': attribute type 3 has an invalid length.
[ 1373.564726][T16462] netlink: 'syz.2.3615': attribute type 1 has an invalid length.
[ 1373.574927][T16462] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3615'.
[ 1374.206739][T16476] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3622'.
[ 1374.913961][T16495] netlink: 'syz.3.3627': attribute type 3 has an invalid length.
[ 1374.922375][T16495] netlink: 'syz.3.3627': attribute type 1 has an invalid length.
[ 1374.935978][T16495] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3627'.
[ 1375.371403][T16505] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3631'.
[ 1375.393688][T16507] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3632'.
[ 1375.705380][T16513] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3635'.
[ 1376.683558][T16532] netlink: 'syz.0.3641': attribute type 3 has an invalid length.
[ 1376.693799][T16532] netlink: 'syz.0.3641': attribute type 1 has an invalid length.
[ 1376.719423][T16532] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3641'.
[ 1377.260886][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1378.108572][T16554] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3648'.
[ 1378.198421][T16557] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3649'.
[ 1378.367773][T16561] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3650'.
[ 1378.479663][T16564] netlink: 'syz.0.3651': attribute type 3 has an invalid length.
[ 1378.488658][T16564] netlink: 'syz.0.3651': attribute type 1 has an invalid length.
[ 1378.495481][T10418] wlan1: Creating new IBSS network, BSSID 4e:25:e2:be:86:dc
[ 1378.499062][T16564] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3651'.
[ 1378.711263][T16568] FAULT_INJECTION: forcing a failure.
[ 1378.711263][T16568] name failslab, interval 1, probability 0, space 0, times 0
[ 1378.725321][T16568] CPU: 1 PID: 16568 Comm: syz.0.3652 Not tainted syzkaller #0
[ 1378.732822][T16568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1378.742888][T16568] Call Trace:
[ 1378.746174][T16568]  <TASK>
[ 1378.749116][T16568]  dump_stack_lvl+0x18c/0x250
[ 1378.753892][T16568]  ? show_regs_print_info+0x20/0x20
[ 1378.759105][T16568]  ? load_image+0x400/0x400
[ 1378.763620][T16568]  ? __might_sleep+0xe0/0xe0
[ 1378.768237][T16568]  ? __lock_acquire+0x7d40/0x7d40
[ 1378.773282][T16568]  should_fail_ex+0x39d/0x4d0
[ 1378.777974][T16568]  should_failslab+0x9/0x20
[ 1378.782481][T16568]  slab_pre_alloc_hook+0x59/0x310
[ 1378.787516][T16568]  ? kvmalloc_node+0x70/0x180
[ 1378.792197][T16568]  ? kvmalloc_node+0x70/0x180
[ 1378.796894][T16568]  __kmem_cache_alloc_node+0x53/0x250
[ 1378.802287][T16568]  ? kvmalloc_node+0x70/0x180
[ 1378.806972][T16568]  __kmalloc_node+0xa4/0x230
[ 1378.811576][T16568]  kvmalloc_node+0x70/0x180
[ 1378.816089][T16568]  page_pool_create+0x1eb/0x5c0
[ 1378.820950][T16568]  bpf_test_run_xdp_live+0x203/0x1b20
[ 1378.826332][T16568]  ? 0xffffffffa00044c0
[ 1378.830484][T16568]  ? 0xffffffffa00044c0
[ 1378.834639][T16568]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[ 1378.840542][T16568]  ? 0xffffffffa00044c0
[ 1378.844704][T16568]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1378.850371][T16568]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1378.856618][T16568]  ? _copy_from_user+0xa5/0xe0
[ 1378.861431][T16568]  ? bpf_test_init+0x119/0x140
[ 1378.866200][T16568]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1378.871665][T16568]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[ 1378.877087][T16568]  ? dev_put+0x80/0x80
[ 1378.881162][T16568]  ? dev_put+0x80/0x80
[ 1378.885229][T16568]  bpf_prog_test_run+0x321/0x390
[ 1378.890173][T16568]  __sys_bpf+0x49d/0x890
[ 1378.894419][T16568]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1378.899804][T16568]  ? lock_chain_count+0x20/0x20
[ 1378.904655][T16568]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1378.910651][T16568]  __x64_sys_bpf+0x7c/0x90
[ 1378.915071][T16568]  do_syscall_64+0x55/0xa0
[ 1378.919495][T16568]  ? clear_bhb_loop+0x40/0x90
[ 1378.924181][T16568]  ? clear_bhb_loop+0x40/0x90
[ 1378.928866][T16568]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1378.934760][T16568] RIP: 0033:0x7f2f7459c799
[ 1378.939175][T16568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1378.958792][T16568] RSP: 002b:00007f2f754d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1378.967293][T16568] RAX: ffffffffffffffda RBX: 00007f2f74816090 RCX: 00007f2f7459c799
[ 1378.975264][T16568] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[ 1378.983232][T16568] RBP: 00007f2f754d7090 R08: 0000000000000000 R09: 0000000000000000
[ 1378.991201][T16568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1378.999167][T16568] R13: 00007f2f74816128 R14: 00007f2f74816090 R15: 00007ffc1b729b58
[ 1379.007156][T16568]  </TASK>
[ 1379.063216][T16568] page_pool_create() gave up with errno -12
[ 1382.780286][T16595] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3662'.
[ 1384.047396][T16610] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3675'.
[ 1385.868686][T16653] syzkaller0: entered promiscuous mode
[ 1385.881204][T16653] syzkaller0: entered allmulticast mode
[ 1385.931238][T16658] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1385.954846][T16658] netlink: 'syz.1.3683': attribute type 6 has an invalid length.
[ 1385.974107][T16658] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3683'.
[ 1386.041951][T16660] syzkaller0: entered promiscuous mode
[ 1386.053989][T16660] syzkaller0: entered allmulticast mode
[ 1390.432900][T16696] netlink: 'syz.3.3695': attribute type 6 has an invalid length.
[ 1390.440702][T16696] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3695'.
[ 1390.727672][T16692] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1391.416585][T16718] netlink: 'syz.0.3702': attribute type 25 has an invalid length.
[ 1391.442124][T16718] netlink: 'syz.0.3702': attribute type 9 has an invalid length.
[ 1391.491733][T16716] syzkaller0: entered promiscuous mode
[ 1391.497526][T16716] syzkaller0: entered allmulticast mode
[ 1392.386300][T16738] netlink: 'syz.1.3709': attribute type 6 has an invalid length.
[ 1392.403166][T16738] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3709'.
[ 1393.167273][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1393.667599][T16718] syzkaller0: entered promiscuous mode
[ 1393.673486][T16718] syzkaller0: entered allmulticast mode
[ 1395.232733][T16735] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1396.205303][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1396.234230][T16772] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1396.251281][T16772] netlink: 'syz.1.3721': attribute type 6 has an invalid length.
[ 1396.269084][T16772] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3721'.
[ 1396.393435][T16776] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1396.429241][T16776] netlink: 'syz.0.3730': attribute type 6 has an invalid length.
[ 1396.458583][T16776] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3730'.
[ 1396.780121][T16783] syzkaller0: entered promiscuous mode
[ 1396.788157][T16785] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3727'.
[ 1396.793810][T16783] syzkaller0: entered allmulticast mode
[ 1396.834123][T16788] netlink: 'syz.0.3726': attribute type 25 has an invalid length.
[ 1396.842322][T16788] netlink: 'syz.0.3726': attribute type 9 has an invalid length.
[ 1396.919903][T16788] syzkaller0: entered promiscuous mode
[ 1396.925600][T16788] syzkaller0: entered allmulticast mode
[ 1398.540278][T16810] netlink: 'syz.1.3733': attribute type 6 has an invalid length.
[ 1398.572740][T16810] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3733'.
[ 1399.242982][   T59] wlan1: Trigger new scan to find an IBSS to join
[ 1400.158669][ T1126] wlan1: Creating new IBSS network, BSSID da:6e:09:7b:65:b6
[ 1401.152473][T16808] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1401.633814][T16830] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3741'.
[ 1402.334936][T16839] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1402.501620][T16839] netlink: 'syz.2.3745': attribute type 6 has an invalid length.
[ 1402.801956][T16839] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3745'.
[ 1403.219626][T16848] netlink: 'syz.2.3747': attribute type 3 has an invalid length.
[ 1403.275246][T16848] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3747'.
[ 1403.279881][T16846] syzkaller0: entered promiscuous mode
[ 1403.313292][T16846] syzkaller0: entered allmulticast mode
[ 1403.340806][T16852] macsec0: entered promiscuous mode
[ 1403.349337][T16852] macsec0: entered allmulticast mode
[ 1403.355279][T16852] veth1_macvtap: entered allmulticast mode
[ 1403.562721][T16858] netlink: 'syz.1.3750': attribute type 6 has an invalid length.
[ 1403.570718][T16858] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3750'.
[ 1405.537425][T16857] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1405.595413][T16873] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1405.609513][T16873] netlink: 'syz.0.3755': attribute type 6 has an invalid length.
[ 1405.617661][T16873] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3755'.
[ 1405.661297][T16875] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3756'.
[ 1405.836195][T16879] FAULT_INJECTION: forcing a failure.
[ 1405.836195][T16879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1405.850075][T16879] CPU: 0 PID: 16879 Comm: syz.0.3758 Not tainted syzkaller #0
[ 1405.857564][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1405.867646][T16879] Call Trace:
[ 1405.870938][T16879]  <TASK>
[ 1405.873888][T16879]  dump_stack_lvl+0x18c/0x250
[ 1405.878592][T16879]  ? show_regs_print_info+0x20/0x20
[ 1405.883815][T16879]  ? load_image+0x400/0x400
[ 1405.888344][T16879]  ? __might_fault+0xaa/0x120
[ 1405.893038][T16879]  ? __lock_acquire+0x7d40/0x7d40
[ 1405.898083][T16879]  should_fail_ex+0x39d/0x4d0
[ 1405.902773][T16879]  _copy_to_iter+0x1ce/0x1120
[ 1405.907466][T16879]  ? perf_trace_lock+0xfc/0x3b0
[ 1405.912325][T16879]  ? __virt_addr_valid+0x18c/0x540
[ 1405.917444][T16879]  ? iov_iter_init+0x1e0/0x1e0
[ 1405.922207][T16879]  ? __virt_addr_valid+0x18c/0x540
[ 1405.927350][T16879]  ? __virt_addr_valid+0x469/0x540
[ 1405.932487][T16879]  ? __phys_addr_symbol+0x2f/0x70
[ 1405.937525][T16879]  ? __check_object_size+0x506/0xa20
[ 1405.942824][T16879]  __skb_datagram_iter+0xdb/0x780
[ 1405.947859][T16879]  ? unix_stream_read_generic+0x1501/0x2080
[ 1405.953756][T16879]  ? unix_stream_read_generic+0x687/0x2080
[ 1405.959573][T16879]  ? skb_copy_datagram_iter+0x200/0x200
[ 1405.965122][T16879]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1405.970155][T16879]  skb_copy_datagram_iter+0xb1/0x200
[ 1405.975454][T16879]  unix_stream_read_actor+0x6c/0xa0
[ 1405.980665][T16879]  unix_stream_read_generic+0xd69/0x2080
[ 1405.986331][T16879]  ? unix_stream_read_actor+0xa0/0xa0
[ 1405.991710][T16879]  ? wake_bit_function+0x200/0x200
[ 1405.996838][T16879]  ? aa_sk_perm+0x83c/0x970
[ 1406.001376][T16879]  unix_stream_recvmsg+0x169/0x1c0
[ 1406.006514][T16879]  ? unix_stream_sendmsg+0xbf0/0xbf0
[ 1406.011817][T16879]  ? __unix_stream_recvmsg+0x150/0x150
[ 1406.017306][T16879]  ? aa_sock_msg_perm+0x94/0x150
[ 1406.022263][T16879]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1406.027561][T16879]  ? security_socket_recvmsg+0x89/0xb0
[ 1406.033024][T16879]  ? unix_stream_sendmsg+0xbf0/0xbf0
[ 1406.038319][T16879]  ____sys_recvmsg+0x2ce/0x5e0
[ 1406.043099][T16879]  ? __sys_recvmsg_sock+0x50/0x50
[ 1406.048140][T16879]  ? import_iovec+0x73/0xa0
[ 1406.052656][T16879]  ___sys_recvmsg+0x216/0x590
[ 1406.057353][T16879]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1406.062217][T16879]  ? ksys_write+0x1c4/0x260
[ 1406.066737][T16879]  ? __fget_files+0x43d/0x4b0
[ 1406.071442][T16879]  __x64_sys_recvmsg+0x20c/0x2e0
[ 1406.076383][T16879]  ? ___sys_recvmsg+0x590/0x590
[ 1406.081252][T16879]  ? lockdep_hardirqs_on+0x98/0x150
[ 1406.086465][T16879]  do_syscall_64+0x55/0xa0
[ 1406.090899][T16879]  ? clear_bhb_loop+0x40/0x90
[ 1406.095585][T16879]  ? clear_bhb_loop+0x40/0x90
[ 1406.100270][T16879]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1406.106167][T16879] RIP: 0033:0x7f2f7459c799
[ 1406.110588][T16879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1406.130209][T16879] RSP: 002b:00007f2f754f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1406.138630][T16879] RAX: ffffffffffffffda RBX: 00007f2f74815fa0 RCX: 00007f2f7459c799
[ 1406.146612][T16879] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000006
[ 1406.154588][T16879] RBP: 00007f2f754f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1406.162564][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.170545][T16879] R13: 00007f2f74816038 R14: 00007f2f74815fa0 R15: 00007ffc1b729b58
[ 1406.178534][T16879]  </TASK>
[ 1407.017615][T16893] FAULT_INJECTION: forcing a failure.
[ 1407.017615][T16893] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1407.046411][T16893] CPU: 1 PID: 16893 Comm: syz.1.3763 Not tainted syzkaller #0
[ 1407.053934][T16893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1407.064012][T16893] Call Trace:
[ 1407.067308][T16893]  <TASK>
[ 1407.070252][T16893]  dump_stack_lvl+0x18c/0x250
[ 1407.074964][T16893]  ? show_regs_print_info+0x20/0x20
[ 1407.080201][T16893]  ? load_image+0x400/0x400
[ 1407.084742][T16893]  ? __lock_acquire+0x7d40/0x7d40
[ 1407.086115][T16903] netlink: 'syz.2.3765': attribute type 12 has an invalid length.
[ 1407.089779][T16893]  ? snprintf+0xe9/0x140
[ 1407.089821][T16893]  should_fail_ex+0x39d/0x4d0
[ 1407.106554][T16893]  _copy_to_user+0x2f/0xa0
[ 1407.107124][T16903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3765'.
[ 1407.110980][T16893]  simple_read_from_buffer+0xe7/0x150
[ 1407.111015][T16893]  proc_fail_nth_read+0x1e8/0x260
[ 1407.111039][T16893]  ? proc_fault_inject_write+0x360/0x360
[ 1407.136188][T16893]  ? fsnotify_perm+0x271/0x5e0
[ 1407.140974][T16893]  ? proc_fault_inject_write+0x360/0x360
[ 1407.146610][T16893]  vfs_read+0x28b/0x970
[ 1407.150773][T16893]  ? kernel_read+0x1e0/0x1e0
[ 1407.155368][T16893]  ? __fget_files+0x28/0x4b0
[ 1407.159963][T16893]  ? __fget_files+0x28/0x4b0
[ 1407.164558][T16893]  ? __fget_files+0x43d/0x4b0
[ 1407.169255][T16893]  ? __fdget_pos+0x2a3/0x330
[ 1407.173841][T16893]  ? ksys_read+0x75/0x260
[ 1407.178173][T16893]  ksys_read+0x150/0x260
[ 1407.182410][T16893]  ? vfs_write+0x990/0x990
[ 1407.186832][T16893]  ? lockdep_hardirqs_on+0x98/0x150
[ 1407.192032][T16893]  do_syscall_64+0x55/0xa0
[ 1407.196448][T16893]  ? clear_bhb_loop+0x40/0x90
[ 1407.201121][T16893]  ? clear_bhb_loop+0x40/0x90
[ 1407.205814][T16893]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1407.211719][T16893] RIP: 0033:0x7f673b55cfce
[ 1407.216130][T16893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1407.235735][T16893] RSP: 002b:00007f673c469fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1407.244159][T16893] RAX: ffffffffffffffda RBX: 00007f673c46a6c0 RCX: 00007f673b55cfce
[ 1407.252139][T16893] RDX: 000000000000000f RSI: 00007f673c46a0a0 RDI: 0000000000000004
[ 1407.260106][T16893] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1407.268117][T16893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1407.276092][T16893] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1407.284262][T16893]  </TASK>
[ 1407.449606][T16913] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3769'.
[ 1407.462476][T16907] syzkaller0: entered promiscuous mode
[ 1407.468243][T16907] syzkaller0: entered allmulticast mode
[ 1407.478015][T16910] netlink: 'syz.0.3767': attribute type 13 has an invalid length.
[ 1407.486824][T16910] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3767'.
[ 1407.497614][T16910] syz_tun: refused to change device tx_queue_len
[ 1409.307357][T16917] macsec0: entered promiscuous mode
[ 1409.313004][T16917] macsec0: entered allmulticast mode
[ 1409.318491][T16917] veth1_macvtap: entered allmulticast mode
[ 1409.706151][T16943] wg2: entered promiscuous mode
[ 1409.733466][T16943] wg2: entered allmulticast mode
[ 1409.785766][T16947] netlink: 'syz.0.3789': attribute type 25 has an invalid length.
[ 1409.798652][T16947] netlink: 'syz.0.3789': attribute type 9 has an invalid length.
[ 1409.819167][T16949] netlink: 'syz.3.3781': attribute type 13 has an invalid length.
[ 1409.842849][T16949] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3781'.
[ 1409.852332][T16949] syz_tun: refused to change device tx_queue_len
[ 1409.938269][T16947] syzkaller0: entered promiscuous mode
[ 1409.943999][T16947] syzkaller0: entered allmulticast mode
[ 1410.035726][T16952] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3782'.
[ 1410.841508][T16979] FAULT_INJECTION: forcing a failure.
[ 1410.841508][T16979] name failslab, interval 1, probability 0, space 0, times 0
[ 1410.854491][T16979] CPU: 0 PID: 16979 Comm: syz.2.3792 Not tainted syzkaller #0
[ 1410.861998][T16979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1410.872052][T16979] Call Trace:
[ 1410.875326][T16979]  <TASK>
[ 1410.878251][T16979]  dump_stack_lvl+0x18c/0x250
[ 1410.882933][T16979]  ? show_regs_print_info+0x20/0x20
[ 1410.888146][T16979]  ? load_image+0x400/0x400
[ 1410.892661][T16979]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1410.898642][T16979]  should_fail_ex+0x39d/0x4d0
[ 1410.903331][T16979]  should_failslab+0x9/0x20
[ 1410.907856][T16979]  slab_pre_alloc_hook+0x59/0x310
[ 1410.912897][T16979]  kmem_cache_alloc+0x5a/0x2d0
[ 1410.917664][T16979]  ? batadv_tt_local_event+0x53/0x6f0
[ 1410.923040][T16979]  batadv_tt_local_event+0x53/0x6f0
[ 1410.928252][T16979]  batadv_tt_local_add+0x3cb/0x1ac0
[ 1410.933467][T16979]  ? batadv_tt_global_entry_put+0x140/0x140
[ 1410.939366][T16979]  ? batadv_get_vid+0x163/0x280
[ 1410.944219][T16979]  batadv_interface_tx+0x7e1/0x1470
[ 1410.949427][T16979]  ? batadv_softif_is_valid+0x70/0x70
[ 1410.954805][T16979]  dev_hard_start_xmit+0x246/0x740
[ 1410.959926][T16979]  __dev_queue_xmit+0x19a3/0x3660
[ 1410.964983][T16979]  ? __dev_queue_xmit+0x265/0x3660
[ 1410.970116][T16979]  ? __kasan_slab_alloc+0x6c/0x80
[ 1410.975154][T16979]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1410.980443][T16979]  ? netdev_core_pick_tx+0x340/0x340
[ 1410.985736][T16979]  ? skb_release_data+0x1cf/0x800
[ 1410.990771][T16979]  ? pskb_expand_head+0xbfe/0x1230
[ 1410.995892][T16979]  __bpf_tx_skb+0x189/0x250
[ 1411.000423][T16979]  bpf_clone_redirect+0x30f/0x4a0
[ 1411.005462][T16979]  bpf_prog_dde6c29962cc7727+0x5e/0x63
[ 1411.010929][T16979]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1411.016913][T16979]  ? lock_chain_count+0x20/0x20
[ 1411.021772][T16979]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[ 1411.028031][T16979]  ? lockdep_softirqs_on+0x580/0x580
[ 1411.033316][T16979]  ? ktime_get+0x7f/0x280
[ 1411.037644][T16979]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[ 1411.043892][T16979]  ? ktime_get_real_ts64+0x440/0x440
[ 1411.049189][T16979]  ? __x64_sys_bpf+0x7c/0x90
[ 1411.053805][T16979]  ? __local_bh_disable_ip+0x108/0x1a0
[ 1411.059261][T16979]  ? __cant_sleep+0x220/0x220
[ 1411.063945][T16979]  ? read_tsc+0x9/0x20
[ 1411.068013][T16979]  ? ktime_get+0x24b/0x280
[ 1411.072426][T16979]  ? bpf_test_run+0x174/0x870
[ 1411.077110][T16979]  bpf_test_run+0x2df/0x870
[ 1411.081632][T16979]  ? bpf_test_run+0x174/0x870
[ 1411.086313][T16979]  ? convert___skb_to_skb+0x590/0x590
[ 1411.091684][T16979]  ? eth_get_headlen+0x210/0x210
[ 1411.096623][T16979]  ? slab_build_skb+0x25f/0x3f0
[ 1411.101480][T16979]  ? convert___skb_to_skb+0x3d/0x590
[ 1411.106765][T16979]  bpf_prog_test_run_skb+0xad2/0x12b0
[ 1411.112147][T16979]  ? cpu_online+0x60/0x60
[ 1411.116486][T16979]  bpf_prog_test_run+0x321/0x390
[ 1411.121436][T16979]  __sys_bpf+0x49d/0x890
[ 1411.125708][T16979]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1411.131098][T16979]  ? lock_chain_count+0x20/0x20
[ 1411.135955][T16979]  __x64_sys_bpf+0x7c/0x90
[ 1411.140379][T16979]  do_syscall_64+0x55/0xa0
[ 1411.144805][T16979]  ? clear_bhb_loop+0x40/0x90
[ 1411.149480][T16979]  ? clear_bhb_loop+0x40/0x90
[ 1411.154156][T16979]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1411.160054][T16979] RIP: 0033:0x7fcc2c99c799
[ 1411.164476][T16979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1411.184087][T16979] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1411.192514][T16979] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1411.200500][T16979] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 1411.208474][T16979] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1411.216441][T16979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1411.224416][T16979] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1411.232396][T16979]  </TASK>
[ 1411.350268][T16981] FAULT_INJECTION: forcing a failure.
[ 1411.350268][T16981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1411.366102][T16981] CPU: 1 PID: 16981 Comm: syz.2.3793 Not tainted syzkaller #0
[ 1411.373607][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1411.383695][T16981] Call Trace:
[ 1411.386981][T16981]  <TASK>
[ 1411.389907][T16981]  dump_stack_lvl+0x18c/0x250
[ 1411.394584][T16981]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1411.400744][T16981]  ? show_regs_print_info+0x20/0x20
[ 1411.405956][T16981]  ? load_image+0x400/0x400
[ 1411.410472][T16981]  should_fail_ex+0x39d/0x4d0
[ 1411.415160][T16981]  _copy_from_user+0x2f/0xe0
[ 1411.419754][T16981]  __sys_bpf+0x23e/0x890
[ 1411.424000][T16981]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1411.429382][T16981]  ? lock_chain_count+0x20/0x20
[ 1411.434246][T16981]  __x64_sys_bpf+0x7c/0x90
[ 1411.438679][T16981]  do_syscall_64+0x55/0xa0
[ 1411.443117][T16981]  ? clear_bhb_loop+0x40/0x90
[ 1411.447808][T16981]  ? clear_bhb_loop+0x40/0x90
[ 1411.452504][T16981]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1411.458421][T16981] RIP: 0033:0x7fcc2c99c799
[ 1411.462846][T16981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1411.482466][T16981] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1411.490903][T16981] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1411.498878][T16981] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1411.506863][T16981] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1411.514844][T16981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1411.522818][T16981] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1411.530807][T16981]  </TASK>
[ 1412.972400][T16992] netlink: 'syz.2.3796': attribute type 13 has an invalid length.
[ 1412.984680][T16992] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3796'.
[ 1412.996758][T16992] syz_tun: refused to change device tx_queue_len
[ 1413.304851][T16999] netlink: 'syz.3.3797': attribute type 3 has an invalid length.
[ 1413.354908][T16999] netlink: 'syz.3.3797': attribute type 1 has an invalid length.
[ 1413.414955][T16999] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3797'.
[ 1413.505861][T17008] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1413.529575][T17008] netlink: 'syz.0.3801': attribute type 6 has an invalid length.
[ 1413.538607][T17008] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3801'.
[ 1413.608649][T17012] FAULT_INJECTION: forcing a failure.
[ 1413.608649][T17012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1413.621804][T17012] CPU: 1 PID: 17012 Comm: syz.3.3803 Not tainted syzkaller #0
[ 1413.629294][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1413.639369][T17012] Call Trace:
[ 1413.642667][T17012]  <TASK>
[ 1413.645610][T17012]  dump_stack_lvl+0x18c/0x250
[ 1413.650315][T17012]  ? show_regs_print_info+0x20/0x20
[ 1413.655535][T17012]  ? load_image+0x400/0x400
[ 1413.660068][T17012]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1413.666267][T17012]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1413.672298][T17012]  should_fail_ex+0x39d/0x4d0
[ 1413.677015][T17012]  strncpy_from_user+0x36/0x2d0
[ 1413.681901][T17012]  strncpy_from_user_nofault+0x71/0x140
[ 1413.687497][T17012]  bpf_probe_read_user_str+0x2a/0x70
[ 1413.692829][T17012]  bpf_prog_06f22831d6c68d16+0x45/0x47
[ 1413.698330][T17012]  bpf_test_run+0x3a8/0x870
[ 1413.702889][T17012]  ? bpf_test_run+0x174/0x870
[ 1413.707605][T17012]  ? convert___skb_to_skb+0x590/0x590
[ 1413.713013][T17012]  ? rcuref_put_slowpath+0xe1/0x150
[ 1413.718244][T17012]  ? rep_movs_alternative+0x4a/0x90
[ 1413.723481][T17012]  bpf_prog_test_run_xdp+0x79f/0x10e0
[ 1413.728897][T17012]  ? dev_put+0x80/0x80
[ 1413.733262][T17012]  ? dev_put+0x80/0x80
[ 1413.737355][T17012]  bpf_prog_test_run+0x321/0x390
[ 1413.742327][T17012]  __sys_bpf+0x49d/0x890
[ 1413.746696][T17012]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1413.752105][T17012]  ? lock_chain_count+0x20/0x20
[ 1413.756992][T17012]  __x64_sys_bpf+0x7c/0x90
[ 1413.761445][T17012]  do_syscall_64+0x55/0xa0
[ 1413.765890][T17012]  ? clear_bhb_loop+0x40/0x90
[ 1413.770598][T17012]  ? clear_bhb_loop+0x40/0x90
[ 1413.775305][T17012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1413.781234][T17012] RIP: 0033:0x7f90def9c799
[ 1413.785673][T17012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1413.805310][T17012] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1413.813755][T17012] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1413.821753][T17012] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1413.829849][T17012] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1413.837858][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1413.845865][T17012] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1413.853883][T17012]  </TASK>
[ 1414.108933][T17020] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3805'.
[ 1414.467623][T17027] syzkaller0: entered promiscuous mode
[ 1414.482892][T17027] syzkaller0: entered allmulticast mode
[ 1414.910037][T17036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3811'.
[ 1416.482461][T17036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3811'.
[ 1416.570640][T17040] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1416.597102][T17040] netlink: 'syz.2.3813': attribute type 6 has an invalid length.
[ 1416.622739][T17040] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3813'.
[ 1416.694307][T17041] netlink: 'syz.0.3812': attribute type 3 has an invalid length.
[ 1416.713920][T17041] netlink: 'syz.0.3812': attribute type 1 has an invalid length.
[ 1416.725206][T17041] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3812'.
[ 1416.824029][T17048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3816'.
[ 1417.237065][T17054] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3817'.
[ 1417.828546][T17067] netlink: 'syz.1.3822': attribute type 9 has an invalid length.
[ 1417.935712][T17069] syzkaller0: entered promiscuous mode
[ 1417.952017][T17069] syzkaller0: entered allmulticast mode
[ 1417.981323][T17077] netlink: 'syz.3.3824': attribute type 6 has an invalid length.
[ 1417.995988][T17071] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1418.011782][T17077] __nla_validate_parse: 2 callbacks suppressed
[ 1418.011799][T17077] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3824'.
[ 1418.228645][T17081] netlink: 'syz.1.3826': attribute type 3 has an invalid length.
[ 1418.250652][T17081] netlink: 'syz.1.3826': attribute type 1 has an invalid length.
[ 1418.278122][T17081] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3826'.
[ 1419.057638][T17091] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3830'.
[ 1420.223855][ T1126] wlan1: Trigger new scan to find an IBSS to join
[ 1420.543132][T17083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3828'.
[ 1420.803680][T17109] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1420.836937][T17109] netlink: 'syz.0.3837': attribute type 6 has an invalid length.
[ 1420.846115][T17109] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3837'.
[ 1421.045725][T17115] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3840'.
[ 1421.197570][T17123] netlink: 'syz.2.3842': attribute type 10 has an invalid length.
[ 1421.212042][T17123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3842'.
[ 1421.222652][T17123] batman_adv: batadv0: Adding interface: vlan1
[ 1421.228858][T17123] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1421.256682][T17123] batman_adv: batadv0: Interface activated: vlan1
[ 1421.448690][T17125] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3843'.
[ 1421.615985][T17128] netlink: 'syz.0.3844': attribute type 1 has an invalid length.
[ 1421.631872][T17128] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3844'.
[ 1421.643634][T17129] netlink: 'syz.0.3844': attribute type 1 has an invalid length.
[ 1421.651503][T17129] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3844'.
[ 1421.839700][T17133] syzkaller0: entered promiscuous mode
[ 1421.841264][T17136] FAULT_INJECTION: forcing a failure.
[ 1421.841264][T17136] name failslab, interval 1, probability 0, space 0, times 0
[ 1421.866801][T17136] CPU: 0 PID: 17136 Comm: syz.1.3847 Not tainted syzkaller #0
[ 1421.873039][T17133] syzkaller0: entered allmulticast mode
[ 1421.874301][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1421.874314][T17136] Call Trace:
[ 1421.893207][T17136]  <TASK>
[ 1421.896151][T17136]  dump_stack_lvl+0x18c/0x250
[ 1421.900857][T17136]  ? show_regs_print_info+0x20/0x20
[ 1421.903454][T17138] syzkaller0: mtu greater than device maximum
[ 1421.906065][T17136]  ? load_image+0x400/0x400
[ 1421.906092][T17136]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1421.906117][T17136]  ? __asan_memset+0x22/0x40
[ 1421.927251][T17136]  should_fail_ex+0x39d/0x4d0
[ 1421.931971][T17136]  should_failslab+0x9/0x20
[ 1421.936495][T17136]  slab_pre_alloc_hook+0x59/0x310
[ 1421.941541][T17136]  ? __debug_object_init+0xec/0x450
[ 1421.946790][T17136]  kmem_cache_alloc+0x5a/0x2d0
[ 1421.951596][T17136]  ? slab_build_skb+0x2b/0x3f0
[ 1421.956386][T17136]  slab_build_skb+0x2b/0x3f0
[ 1421.961000][T17136]  bpf_prog_test_run_skb+0x3c8/0x12b0
[ 1421.966390][T17136]  ? __fget_files+0x28/0x4b0
[ 1421.970998][T17136]  ? __fget_files+0x28/0x4b0
[ 1421.975612][T17136]  ? __fget_files+0x43d/0x4b0
[ 1421.980491][T17136]  ? cpu_online+0x60/0x60
[ 1421.984843][T17136]  bpf_prog_test_run+0x321/0x390
[ 1421.989801][T17136]  __sys_bpf+0x49d/0x890
[ 1421.994232][T17136]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1421.999632][T17136]  ? lock_chain_count+0x20/0x20
[ 1422.004499][T17136]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1422.010508][T17136]  __x64_sys_bpf+0x7c/0x90
[ 1422.014949][T17136]  do_syscall_64+0x55/0xa0
[ 1422.019388][T17136]  ? clear_bhb_loop+0x40/0x90
[ 1422.024088][T17136]  ? clear_bhb_loop+0x40/0x90
[ 1422.028811][T17136]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1422.034722][T17136] RIP: 0033:0x7f673b59c799
[ 1422.039155][T17136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1422.058873][T17136] RSP: 002b:00007f673c46a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1422.067313][T17136] RAX: ffffffffffffffda RBX: 00007f673b815fa0 RCX: 00007f673b59c799
[ 1422.075306][T17136] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 1422.083305][T17136] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1422.091295][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1422.099284][T17136] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1422.107289][T17136]  </TASK>
[ 1422.357319][T17143] netlink: 'syz.2.3849': attribute type 6 has an invalid length.
[ 1423.407381][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.413985][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.209647][T17140] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1424.219302][T17148] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1424.233983][T17151] __nla_validate_parse: 2 callbacks suppressed
[ 1424.234000][T17151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3851'.
[ 1424.514051][T17157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3855'.
[ 1424.577153][T17162] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3856'.
[ 1424.933683][T17168] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3858'.
[ 1424.948064][T17170] netlink: 'syz.2.3859': attribute type 10 has an invalid length.
[ 1424.970992][T17170] team0: Device veth1_vlan failed to register rx_handler
[ 1425.093179][T17175] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1425.108744][T17175] netlink: 'syz.2.3861': attribute type 6 has an invalid length.
[ 1425.119049][T17175] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3861'.
[ 1425.162954][   T42] wlan1: Trigger new scan to find an IBSS to join
[ 1425.626059][T17183] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3865'.
[ 1425.639442][T17184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3864'.
[ 1425.663237][T17184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3864'.
[ 1426.083891][   T42] wlan1: Creating new IBSS network, BSSID c6:d2:d4:cc:55:26
[ 1426.239757][T17190] syzkaller0: entered promiscuous mode
[ 1426.245613][T17190] syzkaller0: entered allmulticast mode
[ 1428.116571][T17203] netlink: 'syz.3.3871': attribute type 6 has an invalid length.
[ 1428.133006][T17203] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3871'.
[ 1428.509974][T17208] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3873'.
[ 1430.058485][T17195] netlink: 'syz.1.3869': attribute type 10 has an invalid length.
[ 1430.066991][T17195] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3869'.
[ 1430.076239][T17195] bond0: entered promiscuous mode
[ 1430.081315][T17195] bond_slave_0: entered promiscuous mode
[ 1430.088560][T17195] bond_slave_1: entered promiscuous mode
[ 1430.094566][T17195] dummy0: entered promiscuous mode
[ 1430.100498][T17202] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1430.349045][T17224] netlink: 'syz.3.3877': attribute type 3 has an invalid length.
[ 1430.447068][T17224] netlink: 'syz.3.3877': attribute type 1 has an invalid length.
[ 1430.526471][T17224] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3877'.
[ 1430.751344][T17232] netlink: 'syz.2.3879': attribute type 21 has an invalid length.
[ 1430.924803][T17232] tap0: tun_chr_ioctl cmd 1074025677
[ 1430.931654][T17232] tap0: linktype set to 805
[ 1430.974183][T17242] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3883'.
[ 1431.029684][T17238] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3882'.
[ 1431.153207][T17244] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1431.170347][T17244] netlink: 'syz.2.3885': attribute type 6 has an invalid length.
[ 1431.178847][T17244] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3885'.
[ 1431.376433][T17250] FAULT_INJECTION: forcing a failure.
[ 1431.376433][T17250] name failslab, interval 1, probability 0, space 0, times 0
[ 1431.402779][T17250] CPU: 1 PID: 17250 Comm: syz.3.3888 Not tainted syzkaller #0
[ 1431.410301][T17250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1431.420390][T17250] Call Trace:
[ 1431.423689][T17250]  <TASK>
[ 1431.426634][T17250]  dump_stack_lvl+0x18c/0x250
[ 1431.431340][T17250]  ? show_regs_print_info+0x20/0x20
[ 1431.436664][T17250]  ? load_image+0x400/0x400
[ 1431.441194][T17250]  ? __might_sleep+0xe0/0xe0
[ 1431.445811][T17250]  ? __lock_acquire+0x7d40/0x7d40
[ 1431.450865][T17250]  should_fail_ex+0x39d/0x4d0
[ 1431.455581][T17250]  should_failslab+0x9/0x20
[ 1431.460108][T17250]  slab_pre_alloc_hook+0x59/0x310
[ 1431.465336][T17250]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1431.471091][T17250]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1431.476837][T17250]  __kmem_cache_alloc_node+0x53/0x250
[ 1431.482249][T17250]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1431.488005][T17250]  __kmalloc+0xa4/0x230
[ 1431.492203][T17250]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1431.497790][T17250]  tomoyo_path_number_perm+0x248/0x620
[ 1431.503284][T17250]  ? tomoyo_path_number_perm+0x217/0x620
[ 1431.508951][T17250]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1431.514447][T17250]  ? ksys_write+0x1c4/0x260
[ 1431.519016][T17250]  ? __fget_files+0x28/0x4b0
[ 1431.523630][T17250]  ? __fget_files+0x28/0x4b0
[ 1431.528262][T17250]  security_file_ioctl+0x70/0xa0
[ 1431.533237][T17250]  __se_sys_ioctl+0x48/0x170
[ 1431.537856][T17250]  do_syscall_64+0x55/0xa0
[ 1431.542299][T17250]  ? clear_bhb_loop+0x40/0x90
[ 1431.547009][T17250]  ? clear_bhb_loop+0x40/0x90
[ 1431.551716][T17250]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1431.557635][T17250] RIP: 0033:0x7f90def9c799
[ 1431.562075][T17250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1431.581710][T17250] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1431.590156][T17250] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1431.598155][T17250] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000003
[ 1431.606155][T17250] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1431.614152][T17250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1431.622149][T17250] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1431.630160][T17250]  </TASK>
[ 1431.649054][T17250] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1432.205759][T10418] wlan1: Trigger new scan to find an IBSS to join
[ 1432.324459][T17270] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1432.348108][T17270] netlink: 'syz.3.3895': attribute type 6 has an invalid length.
[ 1432.356722][T17270] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3895'.
[ 1432.863707][T17273] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3896'.
[ 1432.987353][T17279] netlink: 'syz.3.3899': attribute type 10 has an invalid length.
[ 1433.072407][T17279] team0: Device veth1_vlan failed to register rx_handler
[ 1433.362674][T17286] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3901'.
[ 1433.439288][T17291] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1433.524159][T17296] netlink: 'syz.1.3904': attribute type 6 has an invalid length.
[ 1433.562494][T17296] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3904'.
[ 1434.895352][T17313] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3919'.
[ 1435.337137][T17326] netlink: 'syz.3.3916': attribute type 21 has an invalid length.
[ 1435.349827][T17324] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1435.397188][T17324] netlink: 'syz.2.3915': attribute type 6 has an invalid length.
[ 1435.429128][T17324] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3915'.
[ 1435.898140][T17342] netlink: 'syz.0.3922': attribute type 29 has an invalid length.
[ 1435.915515][T17342] netlink: 'syz.0.3922': attribute type 29 has an invalid length.
[ 1436.003940][T17345] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3922'.
[ 1436.025842][T17345] netlink: 'syz.0.3922': attribute type 29 has an invalid length.
[ 1436.528296][T17354] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3924'.
[ 1436.712882][T17353] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3924'.
[ 1437.064871][T17364] netlink: 'syz.0.3927': attribute type 29 has an invalid length.
[ 1437.090653][T17364] netlink: 'syz.0.3927': attribute type 29 has an invalid length.
[ 1437.114237][T17367] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1437.134332][T17364] netlink: 'syz.0.3927': attribute type 29 has an invalid length.
[ 1437.136570][T17367] netlink: 'syz.3.3929': attribute type 6 has an invalid length.
[ 1437.154649][T17367] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3929'.
[ 1437.327257][T17370] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3930'.
[ 1438.041306][T17390] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3936'.
[ 1438.155958][T17392] FAULT_INJECTION: forcing a failure.
[ 1438.155958][T17392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1438.178144][T17392] CPU: 1 PID: 17392 Comm: syz.2.3938 Not tainted syzkaller #0
[ 1438.185679][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1438.195760][T17392] Call Trace:
[ 1438.199059][T17392]  <TASK>
[ 1438.202004][T17392]  dump_stack_lvl+0x18c/0x250
[ 1438.206719][T17392]  ? show_regs_print_info+0x20/0x20
[ 1438.211972][T17392]  ? load_image+0x400/0x400
[ 1438.216503][T17392]  ? __might_fault+0xaa/0x120
[ 1438.221209][T17392]  ? __lock_acquire+0x7d40/0x7d40
[ 1438.226262][T17392]  should_fail_ex+0x39d/0x4d0
[ 1438.230981][T17392]  _copy_from_iter+0x1d9/0x12e0
[ 1438.235873][T17392]  ? rep_movs_alternative+0x4a/0x90
[ 1438.241108][T17392]  ? _copy_from_iter+0x24e/0x12e0
[ 1438.246167][T17392]  ? __virt_addr_valid+0x18c/0x540
[ 1438.251316][T17392]  ? __lock_acquire+0x7d40/0x7d40
[ 1438.256367][T17392]  ? copyout_mc+0x70/0x70
[ 1438.260729][T17392]  ? copyout_mc+0x70/0x70
[ 1438.265085][T17392]  ? __virt_addr_valid+0x18c/0x540
[ 1438.270234][T17392]  ? page_copy_sane+0x16a/0x270
[ 1438.275184][T17392]  copy_page_from_iter+0x7b/0x100
[ 1438.280226][T17392]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[ 1438.286048][T17392]  tun_get_user+0x15db/0x3ca0
[ 1438.290747][T17392]  ? aa_file_perm+0x11b/0xee0
[ 1438.295444][T17392]  ? rcu_read_unlock+0xa0/0xa0
[ 1438.300221][T17392]  ? tun_get+0x1c/0x2e0
[ 1438.304379][T17392]  ? __lock_acquire+0x7d40/0x7d40
[ 1438.309413][T17392]  ? tun_get+0x1c/0x2e0
[ 1438.313583][T17392]  tun_chr_write_iter+0x119/0x200
[ 1438.318649][T17392]  vfs_write+0x46c/0x990
[ 1438.322924][T17392]  ? file_end_write+0x250/0x250
[ 1438.327806][T17392]  ? __fget_files+0x43d/0x4b0
[ 1438.332510][T17392]  ? __fdget_pos+0x1d8/0x330
[ 1438.337108][T17392]  ? ksys_write+0x75/0x260
[ 1438.341529][T17392]  ksys_write+0x150/0x260
[ 1438.345870][T17392]  ? __ia32_sys_read+0x90/0x90
[ 1438.350640][T17392]  ? lockdep_hardirqs_on+0x98/0x150
[ 1438.355931][T17392]  do_syscall_64+0x55/0xa0
[ 1438.360351][T17392]  ? clear_bhb_loop+0x40/0x90
[ 1438.365040][T17392]  ? clear_bhb_loop+0x40/0x90
[ 1438.369723][T17392]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1438.375625][T17392] RIP: 0033:0x7fcc2c99c799
[ 1438.380039][T17392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1438.399658][T17392] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1438.408167][T17392] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1438.416142][T17392] RDX: 000000000000fdef RSI: 0000200000000640 RDI: 00000000000000c8
[ 1438.424116][T17392] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1438.432087][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1438.440059][T17392] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1438.448054][T17392]  </TASK>
[ 1438.461077][T17394] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3937'.
[ 1438.701478][   T51] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[ 1438.773597][T17404] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1438.817994][T17404] netlink: 'syz.3.3941': attribute type 6 has an invalid length.
[ 1438.865298][T17404] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3941'.
[ 1438.949920][T17413] netlink: 'syz.1.3942': attribute type 3 has an invalid length.
[ 1438.960754][T17413] netlink: 'syz.1.3942': attribute type 1 has an invalid length.
[ 1439.011504][T17413] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3942'.
[ 1439.346537][T17427] FAULT_INJECTION: forcing a failure.
[ 1439.346537][T17427] name failslab, interval 1, probability 0, space 0, times 0
[ 1439.364695][T17427] CPU: 0 PID: 17427 Comm: syz.2.3948 Not tainted syzkaller #0
[ 1439.372209][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1439.382285][T17427] Call Trace:
[ 1439.385646][T17427]  <TASK>
[ 1439.388644][T17427]  dump_stack_lvl+0x18c/0x250
[ 1439.393366][T17427]  ? show_regs_print_info+0x20/0x20
[ 1439.398603][T17427]  ? load_image+0x400/0x400
[ 1439.403175][T17427]  ? __might_sleep+0xe0/0xe0
[ 1439.407799][T17427]  ? __lock_acquire+0x7d40/0x7d40
[ 1439.412854][T17427]  ? __lock_acquire+0x1273/0x7d40
[ 1439.417911][T17427]  should_fail_ex+0x39d/0x4d0
[ 1439.422633][T17427]  should_failslab+0x9/0x20
[ 1439.427166][T17427]  slab_pre_alloc_hook+0x59/0x310
[ 1439.432313][T17427]  kmem_cache_alloc_node+0x60/0x320
[ 1439.437548][T17427]  ? __alloc_skb+0x103/0x2c0
[ 1439.442188][T17427]  __alloc_skb+0x103/0x2c0
[ 1439.446634][T17427]  alloc_skb_with_frags+0xca/0x7b0
[ 1439.451752][T17427]  ? aa_get_newest_label+0xfd/0x5c0
[ 1439.456986][T17427]  ? __lock_acquire+0x1273/0x7d40
[ 1439.462012][T17427]  sock_alloc_send_pskb+0x883/0x9a0
[ 1439.467216][T17427]  ? apparmor_capable+0x137/0x1a0
[ 1439.472265][T17427]  ? sock_kzfree_s+0x50/0x50
[ 1439.476869][T17427]  ? __sock_cmsg_send+0x279/0x460
[ 1439.481914][T17427]  ? sock_cmsg_send+0x24a/0x270
[ 1439.486780][T17427]  packet_sendmsg+0x316e/0x4d70
[ 1439.491657][T17427]  ? sugov_update_single_freq+0x3d2/0x6a0
[ 1439.497389][T17427]  ? __might_sleep+0xe0/0xe0
[ 1439.501980][T17427]  ? trace_event_raw_event_lock+0x250/0x250
[ 1439.507888][T17427]  ? aa_sk_perm+0x83c/0x970
[ 1439.512399][T17427]  ? packet_getsockopt+0xad0/0xad0
[ 1439.517520][T17427]  ? __might_fault+0xaa/0x120
[ 1439.522279][T17427]  ? aa_sock_msg_perm+0x94/0x150
[ 1439.527228][T17427]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1439.532518][T17427]  ? security_socket_sendmsg+0x80/0xa0
[ 1439.537976][T17427]  ? packet_getsockopt+0xad0/0xad0
[ 1439.543089][T17427]  ____sys_sendmsg+0x5ba/0x960
[ 1439.547851][T17427]  ? __lock_acquire+0x7d40/0x7d40
[ 1439.552881][T17427]  ? __sys_sendmsg_sock+0x30/0x30
[ 1439.557899][T17427]  ? __import_iovec+0x3fa/0x850
[ 1439.562759][T17427]  ? import_iovec+0x73/0xa0
[ 1439.567260][T17427]  ___sys_sendmsg+0x2a6/0x360
[ 1439.571937][T17427]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1439.576715][T17427]  ? __lock_acquire+0x7d40/0x7d40
[ 1439.581759][T17427]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1439.586610][T17427]  ? __x64_sys_sendmsg+0x80/0x80
[ 1439.591559][T17427]  ? lockdep_hardirqs_on+0x98/0x150
[ 1439.596760][T17427]  do_syscall_64+0x55/0xa0
[ 1439.601178][T17427]  ? clear_bhb_loop+0x40/0x90
[ 1439.605866][T17427]  ? clear_bhb_loop+0x40/0x90
[ 1439.610570][T17427]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1439.616463][T17427] RIP: 0033:0x7fcc2c99c799
[ 1439.620883][T17427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1439.640532][T17427] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1439.648955][T17427] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1439.656923][T17427] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1439.664898][T17427] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1439.672869][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1439.680839][T17427] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1439.688827][T17427]  </TASK>
[ 1440.273165][T17440] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1440.293949][T17440] netlink: 'syz.2.3953': attribute type 6 has an invalid length.
[ 1440.651338][T17450] netlink: 'syz.2.3956': attribute type 3 has an invalid length.
[ 1440.666203][T17450] netlink: 'syz.2.3956': attribute type 1 has an invalid length.
[ 1440.681057][T17450] __nla_validate_parse: 2 callbacks suppressed
[ 1440.681076][T17450] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3956'.
[ 1440.782962][T17406] Bluetooth: hci4: command 0x0406 tx timeout
[ 1441.161994][T17461] netlink: 'syz.2.3966': attribute type 3 has an invalid length.
[ 1441.185886][T17461] netlink: 'syz.2.3966': attribute type 1 has an invalid length.
[ 1441.201695][T17461] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3966'.
[ 1441.228059][T17406] Bluetooth: hci0: unknown advertising packet type: 0x20
[ 1441.230631][T17462] netlink: 'syz.0.3959': attribute type 1 has an invalid length.
[ 1441.260019][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1441.273700][T17462] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3959'.
[ 1441.529667][T17406] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 1441.948661][T17485] netlink: 'syz.3.3964': attribute type 6 has an invalid length.
[ 1441.974085][T17485] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3964'.
[ 1442.009906][T17482] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1442.506839][T17493] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3970'.
[ 1446.202962][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1446.845223][T17524] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1446.888566][T17524] validate_nla: 3 callbacks suppressed
[ 1446.888582][T17524] netlink: 'syz.3.3978': attribute type 6 has an invalid length.
[ 1446.964670][T17524] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3978'.
[ 1447.232248][T17527] netlink: 'syz.0.3981': attribute type 3 has an invalid length.
[ 1447.276292][T17527] netlink: 'syz.0.3981': attribute type 1 has an invalid length.
[ 1447.350138][T17527] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3981'.
[ 1447.531867][T17537] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3984'.
[ 1447.593958][T17541] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1447.645288][T17541] netlink: 'syz.2.3991': attribute type 6 has an invalid length.
[ 1447.658660][T17541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3991'.
[ 1448.718227][T17560] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3988'.
[ 1449.242956][   T42] wlan1: Trigger new scan to find an IBSS to join
[ 1450.810037][T17586] netlink: 'syz.1.3995': attribute type 6 has an invalid length.
[ 1450.822466][T17586] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3995'.
[ 1451.838203][T17585] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1452.430654][T17591] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3997'.
[ 1452.451827][T17590] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3996'.
[ 1452.868688][T17605] netlink: 'syz.1.4001': attribute type 39 has an invalid length.
[ 1453.543683][T17614] netlink: 'syz.1.4003': attribute type 3 has an invalid length.
[ 1453.566337][T17614] netlink: 'syz.1.4003': attribute type 1 has an invalid length.
[ 1453.576242][T17614] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4003'.
[ 1453.918177][T17624] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4006'.
[ 1454.095460][T17625] netlink: 'syz.2.4004': attribute type 3 has an invalid length.
[ 1454.158869][T17625] netlink: 'syz.2.4004': attribute type 1 has an invalid length.
[ 1454.204593][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1454.242812][T17625] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4004'.
[ 1456.689969][T11368] wlan1: Creating new IBSS network, BSSID d2:31:57:e2:75:d7
[ 1457.539974][T17642] netlink: 'syz.3.4012': attribute type 39 has an invalid length.
[ 1458.307481][T17664] FAULT_INJECTION: forcing a failure.
[ 1458.307481][T17664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1458.342657][T17664] CPU: 0 PID: 17664 Comm: syz.1.4017 Not tainted syzkaller #0
[ 1458.350183][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1458.360266][T17664] Call Trace:
[ 1458.363564][T17664]  <TASK>
[ 1458.366512][T17664]  dump_stack_lvl+0x18c/0x250
[ 1458.371235][T17664]  ? show_regs_print_info+0x20/0x20
[ 1458.376474][T17664]  ? load_image+0x400/0x400
[ 1458.381013][T17664]  ? __might_fault+0xaa/0x120
[ 1458.385717][T17664]  ? __lock_acquire+0x7d40/0x7d40
[ 1458.390774][T17664]  should_fail_ex+0x39d/0x4d0
[ 1458.395490][T17664]  _copy_from_iter+0x1d9/0x12e0
[ 1458.400376][T17664]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1458.405689][T17664]  ? __virt_addr_valid+0x18c/0x540
[ 1458.410837][T17664]  ? __lock_acquire+0x7d40/0x7d40
[ 1458.415888][T17664]  ? rcu_is_watching+0x15/0xb0
[ 1458.420685][T17664]  ? copyout_mc+0x70/0x70
[ 1458.425044][T17664]  ? __virt_addr_valid+0x18c/0x540
[ 1458.430178][T17664]  ? __virt_addr_valid+0x18c/0x540
[ 1458.435311][T17664]  ? __virt_addr_valid+0x469/0x540
[ 1458.440453][T17664]  ? __check_object_size+0x506/0xa20
[ 1458.445789][T17664]  netlink_sendmsg+0x76b/0xbf0
[ 1458.450602][T17664]  ? netlink_getsockopt+0x590/0x590
[ 1458.455834][T17664]  ? aa_sock_msg_perm+0x94/0x150
[ 1458.460881][T17664]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1458.466209][T17664]  ? security_socket_sendmsg+0x80/0xa0
[ 1458.471703][T17664]  ? netlink_getsockopt+0x590/0x590
[ 1458.476933][T17664]  ____sys_sendmsg+0x5ba/0x960
[ 1458.481737][T17664]  ? __asan_memset+0x22/0x40
[ 1458.486347][T17664]  ? __sys_sendmsg_sock+0x30/0x30
[ 1458.491396][T17664]  ? __import_iovec+0x5f2/0x850
[ 1458.496284][T17664]  ? import_iovec+0x73/0xa0
[ 1458.500809][T17664]  ___sys_sendmsg+0x2a6/0x360
[ 1458.505505][T17664]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1458.510305][T17664]  ? __lock_acquire+0x7d40/0x7d40
[ 1458.515369][T17664]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1458.520236][T17664]  ? __x64_sys_sendmsg+0x80/0x80
[ 1458.525205][T17664]  ? lockdep_hardirqs_on+0x98/0x150
[ 1458.530428][T17664]  do_syscall_64+0x55/0xa0
[ 1458.534865][T17664]  ? clear_bhb_loop+0x40/0x90
[ 1458.539567][T17664]  ? clear_bhb_loop+0x40/0x90
[ 1458.544266][T17664]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1458.550184][T17664] RIP: 0033:0x7f673b59c799
[ 1458.554615][T17664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1458.574252][T17664] RSP: 002b:00007f673c449028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1458.582691][T17664] RAX: ffffffffffffffda RBX: 00007f673b816090 RCX: 00007f673b59c799
[ 1458.590683][T17664] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1458.598692][T17664] RBP: 00007f673c449090 R08: 0000000000000000 R09: 0000000000000000
[ 1458.606696][T17664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1458.614702][T17664] R13: 00007f673b816128 R14: 00007f673b816090 R15: 00007fffa66643b8
[ 1458.622714][T17664]  </TASK>
[ 1462.239527][T17685] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4023'.
[ 1462.642238][T17695] netlink: 'syz.2.4027': attribute type 39 has an invalid length.
[ 1462.718847][T17696] netlink: 'syz.0.4035': attribute type 3 has an invalid length.
[ 1462.763578][T17696] netlink: 'syz.0.4035': attribute type 1 has an invalid length.
[ 1462.808157][T17696] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4035'.
[ 1463.864100][T17710] netlink: 'syz.0.4031': attribute type 3 has an invalid length.
[ 1463.872380][T17710] netlink: 'syz.0.4031': attribute type 1 has an invalid length.
[ 1463.880793][T17710] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4031'.
[ 1467.786690][T17736] FAULT_INJECTION: forcing a failure.
[ 1467.786690][T17736] name failslab, interval 1, probability 0, space 0, times 0
[ 1467.799789][T17736] CPU: 1 PID: 17736 Comm: syz.2.4040 Not tainted syzkaller #0
[ 1467.807282][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1467.817359][T17736] Call Trace:
[ 1467.820671][T17736]  <TASK>
[ 1467.823615][T17736]  dump_stack_lvl+0x18c/0x250
[ 1467.828323][T17736]  ? show_regs_print_info+0x20/0x20
[ 1467.833554][T17736]  ? load_image+0x400/0x400
[ 1467.838122][T17736]  should_fail_ex+0x39d/0x4d0
[ 1467.842828][T17736]  should_failslab+0x9/0x20
[ 1467.847363][T17736]  slab_pre_alloc_hook+0x59/0x310
[ 1467.852415][T17736]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1467.857469][T17736]  ? tipc_nametbl_lookup_mcast_sockets+0x620/0xd30
[ 1467.864004][T17736]  __kmem_cache_alloc_node+0x53/0x250
[ 1467.869411][T17736]  ? tipc_nametbl_lookup_mcast_sockets+0x620/0xd30
[ 1467.875946][T17736]  kmalloc_trace+0x2a/0xe0
[ 1467.880394][T17736]  tipc_nametbl_lookup_mcast_sockets+0x620/0xd30
[ 1467.886733][T17736]  ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd30
[ 1467.893162][T17736]  tipc_sk_mcast_rcv+0x595/0xf20
[ 1467.898126][T17736]  ? kmem_cache_alloc_node+0x17b/0x320
[ 1467.903639][T17736]  ? tipc_sk_bind+0x2f0/0x2f0
[ 1467.908340][T17736]  tipc_mcast_xmit+0x122f/0x18a0
[ 1467.913289][T17736]  ? __might_fault+0xc6/0x120
[ 1467.917970][T17736]  ? tipc_bcbase_xmit+0x9b0/0x9b0
[ 1467.922997][T17736]  ? _copy_from_iter+0x2fe/0x12e0
[ 1467.928030][T17736]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1467.933337][T17736]  ? rcu_is_watching+0x15/0xb0
[ 1467.938106][T17736]  ? kmem_cache_alloc_node+0x17b/0x320
[ 1467.943572][T17736]  ? copyout_mc+0x70/0x70
[ 1467.947915][T17736]  ? __build_skb_around+0x255/0x3d0
[ 1467.953123][T17736]  ? tipc_msg_build+0x3f7/0xee0
[ 1467.957974][T17736]  ? __check_object_size+0x97/0xa20
[ 1467.963286][T17736]  ? tipc_msg_build+0x477/0xee0
[ 1467.968156][T17736]  ? __lock_acquire+0x7d40/0x7d40
[ 1467.973180][T17736]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1467.979254][T17736]  ? net_generic+0x1e/0x240
[ 1467.983763][T17736]  ? tipc_group_bc_cong+0x15c/0x210
[ 1467.988962][T17736]  tipc_send_group_bcast+0x80a/0xad0
[ 1467.994697][T17736]  ? tipc_wait_for_connect+0x650/0x650
[ 1468.000169][T17736]  ? wait_woken+0x180/0x180
[ 1468.004679][T17736]  ? tipc_dest_list_purge+0x167/0x180
[ 1468.010060][T17736]  __tipc_sendmsg+0x1f2b/0x2bb0
[ 1468.014927][T17736]  ? rht_unlock+0x1d0/0x1d0
[ 1468.019431][T17736]  ? mark_lock+0x94/0x320
[ 1468.023765][T17736]  ? __lock_acquire+0x1273/0x7d40
[ 1468.028792][T17736]  ? mark_lock+0x94/0x320
[ 1468.033123][T17736]  ? __lock_acquire+0x1273/0x7d40
[ 1468.038412][T17736]  ? mark_lock+0x94/0x320
[ 1468.042743][T17736]  ? __lock_acquire+0x1347/0x7d40
[ 1468.047795][T17736]  ? verify_lock_unused+0x140/0x140
[ 1468.052994][T17736]  ? verify_lock_unused+0x140/0x140
[ 1468.058201][T17736]  __tipc_sendstream+0x1039/0x1270
[ 1468.063329][T17736]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1468.069315][T17736]  ? lock_chain_count+0x20/0x20
[ 1468.074174][T17736]  ? tsk_advance_rx_queue+0x310/0x310
[ 1468.079545][T17736]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1468.084953][T17736]  ? _local_bh_enable+0xa0/0xa0
[ 1468.089830][T17736]  tipc_send_packet+0x7c/0x90
[ 1468.094517][T17736]  ? tipc_sk_send_ack+0x580/0x580
[ 1468.099542][T17736]  ____sys_sendmsg+0x5ba/0x960
[ 1468.104750][T17736]  ? __lock_acquire+0x7d40/0x7d40
[ 1468.109779][T17736]  ? __asan_memset+0x22/0x40
[ 1468.114373][T17736]  ? __sys_sendmsg_sock+0x30/0x30
[ 1468.119393][T17736]  ? __import_iovec+0x3fa/0x850
[ 1468.124256][T17736]  ? import_iovec+0x73/0xa0
[ 1468.128763][T17736]  ___sys_sendmsg+0x2a6/0x360
[ 1468.133532][T17736]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1468.138311][T17736]  ? __lock_acquire+0x7d40/0x7d40
[ 1468.143357][T17736]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1468.148211][T17736]  ? __x64_sys_sendmsg+0x80/0x80
[ 1468.153160][T17736]  ? lockdep_hardirqs_on+0x98/0x150
[ 1468.158361][T17736]  do_syscall_64+0x55/0xa0
[ 1468.162777][T17736]  ? clear_bhb_loop+0x40/0x90
[ 1468.167453][T17736]  ? clear_bhb_loop+0x40/0x90
[ 1468.172133][T17736]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1468.178030][T17736] RIP: 0033:0x7fcc2c99c799
[ 1468.182535][T17736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1468.202324][T17736] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1468.210750][T17736] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1468.218727][T17736] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1468.226697][T17736] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1468.234675][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1468.242647][T17736] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1468.250643][T17736]  </TASK>
[ 1468.592268][T17739] netlink: 'syz.0.4041': attribute type 3 has an invalid length.
[ 1468.711702][T17739] netlink: 'syz.0.4041': attribute type 1 has an invalid length.
[ 1468.713208][T17748] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4044'.
[ 1468.719728][T17739] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4041'.
[ 1468.747974][T17747] netlink: 'syz.3.4043': attribute type 13 has an invalid length.
[ 1468.757419][T17747] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4043'.
[ 1468.809989][T17747] erspan0: refused to change device tx_queue_len
[ 1468.827994][T17748] TCP: TCP_TX_DELAY enabled
[ 1468.832852][T17747] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1468.916264][T17751] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1469.100633][T17757] netlink: 'syz.3.4046': attribute type 39 has an invalid length.
[ 1470.054571][T17778] netlink: 'syz.3.4054': attribute type 3 has an invalid length.
[ 1470.064320][T17778] netlink: 'syz.3.4054': attribute type 1 has an invalid length.
[ 1470.072427][T17778] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4054'.
[ 1470.216624][T17786] netlink: 'syz.2.4057': attribute type 39 has an invalid length.
[ 1470.293751][T17788] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4058'.
[ 1471.043693][T17808] netlink: 'syz.0.4064': attribute type 1 has an invalid length.
[ 1471.061333][T17808] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4064'.
[ 1471.388324][T17816] netlink: 'syz.0.4067': attribute type 3 has an invalid length.
[ 1471.398116][T17816] netlink: 'syz.0.4067': attribute type 1 has an invalid length.
[ 1471.418685][T17816] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4067'.
[ 1471.855487][T17824] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4077'.
[ 1472.980212][T17854] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4079'.
[ 1473.897448][T17870] validate_nla: 3 callbacks suppressed
[ 1473.897487][T17870] netlink: 'syz.0.4086': attribute type 39 has an invalid length.
[ 1474.103163][T17876] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4088'.
[ 1474.614282][T17886] netlink: 'syz.3.4092': attribute type 27 has an invalid length.
[ 1474.816500][T17893] netlink: 'syz.0.4093': attribute type 3 has an invalid length.
[ 1474.990892][T17893] netlink: 'syz.0.4093': attribute type 1 has an invalid length.
[ 1475.036649][T17893] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4093'.
[ 1475.652441][T17906] netlink: 'syz.2.4098': attribute type 10 has an invalid length.
[ 1475.826159][T17912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4100'.
[ 1475.844792][T17914] netlink: 'syz.3.4102': attribute type 1 has an invalid length.
[ 1475.853037][T17914] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4102'.
[ 1476.500197][T17923] netlink: 'syz.1.4106': attribute type 3 has an invalid length.
[ 1476.531839][T17923] netlink: 'syz.1.4106': attribute type 1 has an invalid length.
[ 1476.553293][T17923] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4106'.
[ 1477.168068][T17946] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1477.183105][T17946] netlink: 'syz.3.4113': attribute type 6 has an invalid length.
[ 1477.196203][T17946] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4113'.
[ 1477.517528][T17958] netlink: 'syz.0.4117': attribute type 3 has an invalid length.
[ 1477.682179][T17958] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4117'.
[ 1478.103798][T17973] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.4123'.
[ 1478.117494][T17975] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1478.138225][T17975] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4124'.
[ 1478.310806][T17980] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4126'.
[ 1479.209937][T18000] validate_nla: 2 callbacks suppressed
[ 1479.209972][T18000] netlink: 'syz.2.4132': attribute type 39 has an invalid length.
[ 1479.279604][T18002] netlink: 'syz.3.4133': attribute type 39 has an invalid length.
[ 1479.532335][T18013] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1479.549597][T18013] netlink: 'syz.2.4135': attribute type 6 has an invalid length.
[ 1479.575749][T18013] __nla_validate_parse: 1 callbacks suppressed
[ 1479.575764][T18013] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4135'.
[ 1479.728410][T18019] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.4138'.
[ 1480.305869][T18033] netlink: 'syz.3.4144': attribute type 39 has an invalid length.
[ 1480.560338][T18039] netlink: 'syz.3.4146': attribute type 3 has an invalid length.
[ 1480.572758][T18039] netlink: 'syz.3.4146': attribute type 1 has an invalid length.
[ 1480.580597][T18039] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4146'.
[ 1480.664024][T18045] FAULT_INJECTION: forcing a failure.
[ 1480.664024][T18045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1480.679768][T18045] CPU: 1 PID: 18045 Comm: syz.2.4148 Not tainted syzkaller #0
[ 1480.687294][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1480.697370][T18045] Call Trace:
[ 1480.700669][T18045]  <TASK>
[ 1480.703618][T18045]  dump_stack_lvl+0x18c/0x250
[ 1480.708343][T18045]  ? show_regs_print_info+0x20/0x20
[ 1480.713580][T18045]  ? load_image+0x400/0x400
[ 1480.718119][T18045]  ? __might_fault+0xaa/0x120
[ 1480.722828][T18045]  ? __lock_acquire+0x7d40/0x7d40
[ 1480.727886][T18045]  should_fail_ex+0x39d/0x4d0
[ 1480.732610][T18045]  _copy_from_user+0x2f/0xe0
[ 1480.737227][T18045]  generic_map_update_batch+0x59a/0x810
[ 1480.742793][T18045]  ? rcu_read_unlock+0xa0/0xa0
[ 1480.747563][T18045]  ? __fdget+0x180/0x210
[ 1480.751810][T18045]  ? rcu_read_unlock+0xa0/0xa0
[ 1480.756572][T18045]  bpf_map_do_batch+0x3d7/0x610
[ 1480.761446][T18045]  __sys_bpf+0x381/0x890
[ 1480.765690][T18045]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1480.771076][T18045]  ? lock_chain_count+0x20/0x20
[ 1480.775934][T18045]  __x64_sys_bpf+0x7c/0x90
[ 1480.780346][T18045]  do_syscall_64+0x55/0xa0
[ 1480.784790][T18045]  ? clear_bhb_loop+0x40/0x90
[ 1480.789481][T18045]  ? clear_bhb_loop+0x40/0x90
[ 1480.794158][T18045]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1480.800057][T18045] RIP: 0033:0x7fcc2c99c799
[ 1480.804470][T18045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1480.824082][T18045] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1480.832498][T18045] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1480.840509][T18045] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[ 1480.848495][T18045] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1480.856475][T18045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1480.864443][T18045] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1480.872432][T18045]  </TASK>
[ 1481.242854][ T4978] wlan1: Trigger new scan to find an IBSS to join
[ 1481.390211][T18063] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.4156'.
[ 1481.492023][T18061] netlink: 'syz.2.4154': attribute type 39 has an invalid length.
[ 1481.942223][T18075] netlink: 'syz.0.4158': attribute type 3 has an invalid length.
[ 1482.055121][T18075] netlink: 'syz.0.4158': attribute type 1 has an invalid length.
[ 1482.101623][T18075] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4158'.
[ 1482.386133][T18090] FAULT_INJECTION: forcing a failure.
[ 1482.386133][T18090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1482.399628][T18090] CPU: 1 PID: 18090 Comm: syz.2.4165 Not tainted syzkaller #0
[ 1482.407114][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1482.417177][T18090] Call Trace:
[ 1482.420457][T18090]  <TASK>
[ 1482.423391][T18090]  dump_stack_lvl+0x18c/0x250
[ 1482.428083][T18090]  ? show_regs_print_info+0x20/0x20
[ 1482.433288][T18090]  ? load_image+0x400/0x400
[ 1482.437801][T18090]  ? __might_fault+0xaa/0x120
[ 1482.442485][T18090]  ? __lock_acquire+0x7d40/0x7d40
[ 1482.447528][T18090]  should_fail_ex+0x39d/0x4d0
[ 1482.452223][T18090]  _copy_from_user+0x2f/0xe0
[ 1482.456831][T18090]  __sys_bpf+0x23e/0x890
[ 1482.461091][T18090]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1482.466480][T18090]  ? lock_chain_count+0x20/0x20
[ 1482.471428][T18090]  __x64_sys_bpf+0x7c/0x90
[ 1482.475884][T18090]  do_syscall_64+0x55/0xa0
[ 1482.480338][T18090]  ? clear_bhb_loop+0x40/0x90
[ 1482.485024][T18090]  ? clear_bhb_loop+0x40/0x90
[ 1482.489725][T18090]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1482.495619][T18090] RIP: 0033:0x7fcc2c99c799
[ 1482.500035][T18090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1482.519649][T18090] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1482.528064][T18090] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1482.536034][T18090] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 000000000000000f
[ 1482.544010][T18090] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1482.551978][T18090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1482.559957][T18090] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1482.567949][T18090]  </TASK>
[ 1482.724893][T18094] netlink: 'syz.1.4166': attribute type 1 has an invalid length.
[ 1482.768261][T18094] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4166'.
[ 1482.824666][T18097] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4166'.
[ 1483.001171][T18104] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.4170'.
[ 1483.114310][T18112] FAULT_INJECTION: forcing a failure.
[ 1483.114310][T18112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1483.134158][T18112] CPU: 0 PID: 18112 Comm: syz.3.4172 Not tainted syzkaller #0
[ 1483.141684][T18112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1483.151764][T18112] Call Trace:
[ 1483.155070][T18112]  <TASK>
[ 1483.158028][T18112]  dump_stack_lvl+0x18c/0x250
[ 1483.162744][T18112]  ? show_regs_print_info+0x20/0x20
[ 1483.167982][T18112]  ? load_image+0x400/0x400
[ 1483.172527][T18112]  ? __lock_acquire+0x7d40/0x7d40
[ 1483.177588][T18112]  should_fail_ex+0x39d/0x4d0
[ 1483.182284][T18112]  _copy_from_user+0x2f/0xe0
[ 1483.186885][T18112]  __copy_msghdr+0x3bb/0x580
[ 1483.191488][T18112]  ___sys_sendmsg+0x214/0x360
[ 1483.196184][T18112]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1483.200977][T18112]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[ 1483.207250][T18112]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1483.212111][T18112]  ? __x64_sys_sendmsg+0x80/0x80
[ 1483.217065][T18112]  ? lockdep_hardirqs_on+0x98/0x150
[ 1483.222268][T18112]  do_syscall_64+0x55/0xa0
[ 1483.226690][T18112]  ? clear_bhb_loop+0x40/0x90
[ 1483.231378][T18112]  ? clear_bhb_loop+0x40/0x90
[ 1483.236066][T18112]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1483.241971][T18112] RIP: 0033:0x7f90def9c799
[ 1483.246411][T18112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1483.266031][T18112] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1483.274456][T18112] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1483.282444][T18112] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000008
[ 1483.290426][T18112] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1483.298400][T18112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1483.306374][T18112] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1483.314381][T18112]  </TASK>
[ 1484.009193][T18137] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4184'.
[ 1484.045285][T18137] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4184'.
[ 1484.203117][ T4978] wlan1: Creating new IBSS network, BSSID b6:93:dd:88:68:06
[ 1484.726448][T18156] __nla_validate_parse: 3 callbacks suppressed
[ 1484.726573][T18156] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4189'.
[ 1484.800807][T18147] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4187'.
[ 1484.810774][T18151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4187'.
[ 1484.857580][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.866169][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.934352][T18159] validate_nla: 3 callbacks suppressed
[ 1484.934378][T18159] netlink: 'syz.1.4190': attribute type 39 has an invalid length.
[ 1485.181177][T18165] netlink: 'syz.1.4192': attribute type 4 has an invalid length.
[ 1485.194164][T18165] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4192'.
[ 1488.699378][T18183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4198'.
[ 1489.053134][T18190] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4200'.
[ 1489.325673][T18199] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4203'.
[ 1489.818956][T18205] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1489.834761][T18205] netlink: 'syz.1.4205': attribute type 6 has an invalid length.
[ 1489.843269][T18205] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4205'.
[ 1491.066556][T18231] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1491.123831][T18231] netlink: 'syz.1.4214': attribute type 6 has an invalid length.
[ 1491.131928][T18231] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4214'.
[ 1491.266089][T18234] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4213'.
[ 1491.423523][T18240] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4216'.
[ 1492.170879][T18250] netlink: 'syz.3.4219': attribute type 4 has an invalid length.
[ 1492.192702][T18250] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4219'.
[ 1492.573582][T18261] netlink: 'syz.3.4223': attribute type 10 has an invalid length.
[ 1492.595456][T18261] syz_tun: entered promiscuous mode
[ 1492.601087][T18261] FAULT_INJECTION: forcing a failure.
[ 1492.601087][T18261] name failslab, interval 1, probability 0, space 0, times 0
[ 1492.616330][T18261] CPU: 0 PID: 18261 Comm: syz.3.4223 Not tainted syzkaller #0
[ 1492.623828][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1492.633905][T18261] Call Trace:
[ 1492.637207][T18261]  <TASK>
[ 1492.640155][T18261]  dump_stack_lvl+0x18c/0x250
[ 1492.644865][T18261]  ? show_regs_print_info+0x20/0x20
[ 1492.650095][T18261]  ? load_image+0x400/0x400
[ 1492.654633][T18261]  ? verify_lock_unused+0x140/0x140
[ 1492.659866][T18261]  should_fail_ex+0x39d/0x4d0
[ 1492.664578][T18261]  should_failslab+0x9/0x20
[ 1492.669109][T18261]  slab_pre_alloc_hook+0x59/0x310
[ 1492.674169][T18261]  ? nsim_fib_event_nb+0x187/0x1080
[ 1492.679397][T18261]  __kmem_cache_alloc_node+0x53/0x250
[ 1492.684804][T18261]  ? nsim_fib_event_nb+0x187/0x1080
[ 1492.690019][T18261]  kmalloc_trace+0x2a/0xe0
[ 1492.694450][T18261]  nsim_fib_event_nb+0x187/0x1080
[ 1492.699488][T18261]  ? read_lock_is_recursive+0x20/0x20
[ 1492.704873][T18261]  notifier_call_chain+0x197/0x380
[ 1492.710001][T18261]  ? atomic_notifier_call_chain+0x26/0x180
[ 1492.715829][T18261]  atomic_notifier_call_chain+0xda/0x180
[ 1492.721483][T18261]  call_fib_notifiers+0x31/0x60
[ 1492.726356][T18261]  fib_table_flush+0xad9/0x12d0
[ 1492.731230][T18261]  ? __node_free_rcu+0x80/0x80
[ 1492.736029][T18261]  fib_disable_ip+0xfd/0x170
[ 1492.740665][T18261]  fib_netdev_event+0x31f/0x490
[ 1492.745522][T18261]  notifier_call_chain+0x197/0x380
[ 1492.750636][T18261]  __dev_notify_flags+0x16e/0x310
[ 1492.755682][T18261]  ? __dev_change_flags+0x6a0/0x6a0
[ 1492.760891][T18261]  ? __dev_change_flags+0x4d4/0x6a0
[ 1492.766098][T18261]  ? dev_get_flags+0x1c0/0x1c0
[ 1492.770859][T18261]  ? printk_sprint+0x460/0x460
[ 1492.775630][T18261]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1492.781545][T18261]  ? _raw_spin_unlock+0x40/0x40
[ 1492.786412][T18261]  dev_change_flags+0xe8/0x1a0
[ 1492.791200][T18261]  do_setlink+0xc58/0x4130
[ 1492.795817][T18261]  ? arch_stack_walk+0x160/0x190
[ 1492.800771][T18261]  ? load_image+0x400/0x400
[ 1492.805275][T18261]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[ 1492.811427][T18261]  ? stack_trace_save+0xaa/0x100
[ 1492.816368][T18261]  ? __nla_validate_parse+0x2522/0x2ea0
[ 1492.821940][T18261]  ? __nla_validate+0x50/0x50
[ 1492.826639][T18261]  ? validate_linkmsg+0x719/0x910
[ 1492.831666][T18261]  rtnl_newlink+0x17da/0x20a0
[ 1492.836366][T18261]  ? rtnl_newlink+0x501/0x20a0
[ 1492.841160][T18261]  ? rtnl_setlink+0x4e0/0x4e0
[ 1492.845835][T18261]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1492.852009][T18261]  ? rcu_is_watching+0x15/0xb0
[ 1492.856806][T18261]  ? trace_contention_end+0x39/0xe0
[ 1492.860824][T18266] netlink: 'syz.1.4224': attribute type 6 has an invalid length.
[ 1492.862010][T18261]  ? __mutex_lock+0x315/0xcc0
[ 1492.871243][T18266] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4224'.
[ 1492.874455][T18261]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1492.874482][T18261]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1492.874498][T18261]  ? rtnl_setlink+0x4e0/0x4e0
[ 1492.874513][T18261]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1492.874540][T18261]  ? rtnetlink_bind+0x80/0x80
[ 1492.874558][T18261]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1492.874585][T18261]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1492.874609][T18261]  ? lock_chain_count+0x20/0x20
[ 1492.874633][T18261]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1492.874648][T18261]  ? lockdep_hardirqs_on+0x98/0x150
[ 1492.874667][T18261]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1492.874683][T18261]  ? _local_bh_enable+0xa0/0xa0
[ 1492.874705][T18261]  ? __dev_queue_xmit+0x265/0x3660
[ 1492.874724][T18261]  ? __dev_queue_xmit+0x265/0x3660
[ 1492.874742][T18261]  ? __dev_queue_xmit+0x1b2c/0x3660
[ 1492.874766][T18261]  ? __dev_queue_xmit+0x265/0x3660
[ 1492.874791][T18261]  ? perf_trace_lock+0xfc/0x3b0
[ 1492.874823][T18261]  netlink_rcv_skb+0x241/0x4d0
[ 1492.874846][T18261]  ? rtnetlink_bind+0x80/0x80
[ 1492.874863][T18261]  ? netlink_ack+0x1180/0x1180
[ 1492.874893][T18261]  ? __lock_acquire+0x7d40/0x7d40
[ 1492.874920][T18261]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1492.874945][T18261]  netlink_unicast+0x751/0x8d0
[ 1492.874977][T18261]  netlink_sendmsg+0x8d0/0xbf0
[ 1492.875006][T18261]  ? netlink_getsockopt+0x590/0x590
[ 1492.875027][T18261]  ? aa_sock_msg_perm+0x94/0x150
[ 1492.875048][T18261]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1493.021235][T18261]  ? security_socket_sendmsg+0x80/0xa0
[ 1493.026707][T18261]  ? netlink_getsockopt+0x590/0x590
[ 1493.031922][T18261]  ____sys_sendmsg+0x5ba/0x960
[ 1493.036688][T18261]  ? __asan_memset+0x22/0x40
[ 1493.041281][T18261]  ? __sys_sendmsg_sock+0x30/0x30
[ 1493.046309][T18261]  ? __import_iovec+0x5f2/0x850
[ 1493.051182][T18261]  ? import_iovec+0x73/0xa0
[ 1493.055774][T18261]  ___sys_sendmsg+0x2a6/0x360
[ 1493.060454][T18261]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1493.065248][T18261]  ? __lock_acquire+0x7d40/0x7d40
[ 1493.070313][T18261]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1493.075159][T18261]  ? __x64_sys_sendmsg+0x80/0x80
[ 1493.080097][T18261]  ? lockdep_hardirqs_on+0x98/0x150
[ 1493.085314][T18261]  do_syscall_64+0x55/0xa0
[ 1493.089749][T18261]  ? clear_bhb_loop+0x40/0x90
[ 1493.094435][T18261]  ? clear_bhb_loop+0x40/0x90
[ 1493.099122][T18261]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1493.105024][T18261] RIP: 0033:0x7f90def9c799
[ 1493.109449][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1493.129062][T18261] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1493.137477][T18261] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1493.145475][T18261] RDX: 0000000004004800 RSI: 0000200000000600 RDI: 0000000000000005
[ 1493.153476][T18261] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1493.161534][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1493.169518][T18261] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1493.177528][T18261]  </TASK>
[ 1493.214311][T18261] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1493.231207][T18265] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1493.366354][T18273] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4226'.
[ 1493.375872][T18273] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.4226'.
[ 1493.392122][T18273] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4226'.
[ 1493.411826][T18273] tc_dump_action: action bad kind
[ 1493.619389][T18279] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4229'.
[ 1494.126134][T18292] FAULT_INJECTION: forcing a failure.
[ 1494.126134][T18292] name failslab, interval 1, probability 0, space 0, times 0
[ 1494.140199][T18292] CPU: 1 PID: 18292 Comm: syz.2.4234 Not tainted syzkaller #0
[ 1494.147700][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1494.157753][T18292] Call Trace:
[ 1494.161028][T18292]  <TASK>
[ 1494.163957][T18292]  dump_stack_lvl+0x18c/0x250
[ 1494.168647][T18292]  ? show_regs_print_info+0x20/0x20
[ 1494.173850][T18292]  ? load_image+0x400/0x400
[ 1494.178893][T18292]  ? __might_sleep+0xe0/0xe0
[ 1494.183479][T18292]  ? __lock_acquire+0x7d40/0x7d40
[ 1494.188502][T18292]  ? stack_trace_save+0xaa/0x100
[ 1494.193624][T18292]  ? stack_trace_snprint+0xf0/0xf0
[ 1494.198754][T18292]  should_fail_ex+0x39d/0x4d0
[ 1494.203447][T18292]  should_failslab+0x9/0x20
[ 1494.207954][T18292]  slab_pre_alloc_hook+0x59/0x310
[ 1494.212984][T18292]  ? kasan_set_track+0x5f/0x70
[ 1494.217741][T18292]  ? kasan_set_track+0x4e/0x70
[ 1494.222506][T18292]  ? __kasan_kmalloc+0x8f/0xa0
[ 1494.227286][T18292]  kmem_cache_alloc_node+0x60/0x320
[ 1494.232513][T18292]  ? netlink_sendmsg+0x8d0/0xbf0
[ 1494.237458][T18292]  ? __alloc_skb+0x103/0x2c0
[ 1494.242114][T18292]  __alloc_skb+0x103/0x2c0
[ 1494.246547][T18292]  netlink_dump+0x1ec/0xe50
[ 1494.251055][T18292]  ? end_current_label_crit_section+0x170/0x170
[ 1494.257300][T18292]  ? end_current_label_crit_section+0x170/0x170
[ 1494.263546][T18292]  ? netlink_lookup+0x200/0x200
[ 1494.268409][T18292]  ? ns_capable+0x89/0xe0
[ 1494.272742][T18292]  ? __inet_diag_dump_start+0x886/0x9f0
[ 1494.278306][T18292]  __netlink_dump_start+0x5f1/0x810
[ 1494.283515][T18292]  inet_diag_rcv_msg_compat+0x215/0x440
[ 1494.289071][T18292]  ? __inet_diag_dump+0x380/0x380
[ 1494.294107][T18292]  ? sock_diag_rcv_msg+0xd1/0x600
[ 1494.299132][T18292]  ? inet_diag_rcv_msg_compat+0x440/0x440
[ 1494.304855][T18292]  ? inet_diag_dump_start_compat+0x20/0x20
[ 1494.310666][T18292]  ? inet_diag_dump+0x50/0x50
[ 1494.315362][T18292]  ? __inet_diag_dump+0x380/0x380
[ 1494.320399][T18292]  sock_diag_rcv_msg+0x3d8/0x600
[ 1494.325345][T18292]  netlink_rcv_skb+0x241/0x4d0
[ 1494.330121][T18292]  ? sock_diag_bind+0xb0/0xb0
[ 1494.334825][T18292]  ? netlink_ack+0x1180/0x1180
[ 1494.339624][T18292]  ? __lock_acquire+0x7d40/0x7d40
[ 1494.344662][T18292]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1494.349866][T18292]  sock_diag_rcv+0x2a/0x40
[ 1494.354284][T18292]  netlink_unicast+0x751/0x8d0
[ 1494.359060][T18292]  netlink_sendmsg+0x8d0/0xbf0
[ 1494.363855][T18292]  ? netlink_getsockopt+0x590/0x590
[ 1494.369079][T18292]  ? aa_sock_msg_perm+0x94/0x150
[ 1494.374036][T18292]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1494.379322][T18292]  ? security_socket_sendmsg+0x80/0xa0
[ 1494.384782][T18292]  ? netlink_getsockopt+0x590/0x590
[ 1494.389990][T18292]  ____sys_sendmsg+0x5ba/0x960
[ 1494.394766][T18292]  ? __asan_memset+0x22/0x40
[ 1494.399368][T18292]  ? __sys_sendmsg_sock+0x30/0x30
[ 1494.404393][T18292]  ? __import_iovec+0x5f2/0x850
[ 1494.409291][T18292]  ? import_iovec+0x73/0xa0
[ 1494.413801][T18292]  ___sys_sendmsg+0x2a6/0x360
[ 1494.418482][T18292]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1494.423262][T18292]  ? __lock_acquire+0x7d40/0x7d40
[ 1494.428321][T18292]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1494.433178][T18292]  ? __x64_sys_sendmsg+0x80/0x80
[ 1494.438132][T18292]  ? lockdep_hardirqs_on+0x98/0x150
[ 1494.443339][T18292]  do_syscall_64+0x55/0xa0
[ 1494.447765][T18292]  ? clear_bhb_loop+0x40/0x90
[ 1494.452443][T18292]  ? clear_bhb_loop+0x40/0x90
[ 1494.457299][T18292]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1494.463230][T18292] RIP: 0033:0x7fcc2c99c799
[ 1494.467653][T18292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1494.487268][T18292] RSP: 002b:00007fcc2d7dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1494.495698][T18292] RAX: ffffffffffffffda RBX: 00007fcc2cc15fa0 RCX: 00007fcc2c99c799
[ 1494.503671][T18292] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1494.511662][T18292] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1494.519642][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1494.527641][T18292] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1494.535635][T18292]  </TASK>
[ 1494.745853][T18302] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1494.760590][T18302] netlink: 'syz.2.4237': attribute type 6 has an invalid length.
[ 1494.978839][T18306] FAULT_INJECTION: forcing a failure.
[ 1494.978839][T18306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1495.004538][T18306] CPU: 1 PID: 18306 Comm: syz.2.4239 Not tainted syzkaller #0
[ 1495.012091][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1495.022176][T18306] Call Trace:
[ 1495.025468][T18306]  <TASK>
[ 1495.028420][T18306]  dump_stack_lvl+0x18c/0x250
[ 1495.033132][T18306]  ? show_regs_print_info+0x20/0x20
[ 1495.038372][T18306]  ? load_image+0x400/0x400
[ 1495.042915][T18306]  ? __lock_acquire+0x7d40/0x7d40
[ 1495.047961][T18306]  ? snprintf+0xe9/0x140
[ 1495.052231][T18306]  should_fail_ex+0x39d/0x4d0
[ 1495.056947][T18306]  _copy_to_user+0x2f/0xa0
[ 1495.061403][T18306]  simple_read_from_buffer+0xe7/0x150
[ 1495.066812][T18306]  proc_fail_nth_read+0x1e8/0x260
[ 1495.071849][T18306]  ? proc_fault_inject_write+0x360/0x360
[ 1495.077501][T18306]  ? fsnotify_perm+0x271/0x5e0
[ 1495.082286][T18306]  ? proc_fault_inject_write+0x360/0x360
[ 1495.087945][T18306]  vfs_read+0x28b/0x970
[ 1495.092115][T18306]  ? kernel_read+0x1e0/0x1e0
[ 1495.096708][T18306]  ? __fget_files+0x28/0x4b0
[ 1495.101298][T18306]  ? __fget_files+0x28/0x4b0
[ 1495.105887][T18306]  ? __fget_files+0x43d/0x4b0
[ 1495.110652][T18306]  ? __fdget_pos+0x2a3/0x330
[ 1495.115256][T18306]  ? ksys_read+0x75/0x260
[ 1495.119694][T18306]  ksys_read+0x150/0x260
[ 1495.123963][T18306]  ? vfs_write+0x990/0x990
[ 1495.128390][T18306]  ? lockdep_hardirqs_on+0x98/0x150
[ 1495.133588][T18306]  do_syscall_64+0x55/0xa0
[ 1495.138004][T18306]  ? clear_bhb_loop+0x40/0x90
[ 1495.142677][T18306]  ? clear_bhb_loop+0x40/0x90
[ 1495.147363][T18306]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1495.153262][T18306] RIP: 0033:0x7fcc2c95cfce
[ 1495.157678][T18306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1495.177291][T18306] RSP: 002b:00007fcc2d7dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1495.185703][T18306] RAX: ffffffffffffffda RBX: 00007fcc2d7dd6c0 RCX: 00007fcc2c95cfce
[ 1495.193709][T18306] RDX: 000000000000000f RSI: 00007fcc2d7dd0a0 RDI: 0000000000000004
[ 1495.201704][T18306] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1495.209777][T18306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1495.217753][T18306] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1495.225743][T18306]  </TASK>
[ 1495.389965][T18315] __nla_validate_parse: 1 callbacks suppressed
[ 1495.389997][T18315] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4243'.
[ 1495.604798][T18323] netlink: 'syz.3.4245': attribute type 21 has an invalid length.
[ 1496.305396][T18327] netlink: 'syz.0.4246': attribute type 4 has an invalid length.
[ 1496.314313][T18327] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4246'.
[ 1496.351404][T18329] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1496.381785][T18329] netlink: 'syz.3.4247': attribute type 6 has an invalid length.
[ 1496.391292][T18329] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4247'.
[ 1496.576809][T18337] FAULT_INJECTION: forcing a failure.
[ 1496.576809][T18337] name failslab, interval 1, probability 0, space 0, times 0
[ 1496.649247][T18337] CPU: 1 PID: 18337 Comm: syz.3.4251 Not tainted syzkaller #0
[ 1496.656767][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1496.666838][T18337] Call Trace:
[ 1496.670129][T18337]  <TASK>
[ 1496.673081][T18337]  dump_stack_lvl+0x18c/0x250
[ 1496.677807][T18337]  ? show_regs_print_info+0x20/0x20
[ 1496.683032][T18337]  ? load_image+0x400/0x400
[ 1496.687560][T18337]  ? __might_sleep+0xe0/0xe0
[ 1496.692170][T18337]  ? __lock_acquire+0x7d40/0x7d40
[ 1496.697232][T18337]  should_fail_ex+0x39d/0x4d0
[ 1496.701938][T18337]  should_failslab+0x9/0x20
[ 1496.706456][T18337]  slab_pre_alloc_hook+0x59/0x310
[ 1496.711502][T18337]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1496.717675][T18337]  ? __get_vm_area_node+0x125/0x370
[ 1496.722887][T18337]  __kmem_cache_alloc_node+0x53/0x250
[ 1496.728262][T18337]  ? __get_vm_area_node+0x125/0x370
[ 1496.733457][T18337]  kmalloc_node_trace+0x26/0xe0
[ 1496.738341][T18337]  __get_vm_area_node+0x125/0x370
[ 1496.743398][T18337]  __vmalloc_node_range+0x36e/0x1330
[ 1496.748696][T18337]  ? netlink_sendmsg+0x602/0xbf0
[ 1496.753635][T18337]  ? netlink_insert+0x109f/0x13a0
[ 1496.758698][T18337]  ? netlink_data_ready+0x10/0x10
[ 1496.763740][T18337]  ? free_vm_area+0x50/0x50
[ 1496.768257][T18337]  ? netlink_sendmsg+0x602/0xbf0
[ 1496.773198][T18337]  vmalloc+0x79/0x90
[ 1496.777092][T18337]  ? netlink_sendmsg+0x602/0xbf0
[ 1496.782027][T18337]  netlink_sendmsg+0x602/0xbf0
[ 1496.786809][T18337]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 1496.792636][T18337]  ? netlink_getsockopt+0x590/0x590
[ 1496.797848][T18337]  ? aa_sock_msg_perm+0x94/0x150
[ 1496.802801][T18337]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1496.808099][T18337]  ? security_socket_sendmsg+0x80/0xa0
[ 1496.813565][T18337]  ? netlink_getsockopt+0x590/0x590
[ 1496.818769][T18337]  ____sys_sendmsg+0x5ba/0x960
[ 1496.823534][T18337]  ? __asan_memset+0x22/0x40
[ 1496.828128][T18337]  ? __sys_sendmsg_sock+0x30/0x30
[ 1496.833150][T18337]  ? __import_iovec+0x5f2/0x850
[ 1496.838012][T18337]  ? import_iovec+0x73/0xa0
[ 1496.842519][T18337]  ___sys_sendmsg+0x2a6/0x360
[ 1496.847198][T18337]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1496.851972][T18337]  ? trace_call_bpf+0xc3/0x6c0
[ 1496.856740][T18337]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[ 1496.862997][T18337]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1496.867870][T18337]  ? __x64_sys_sendmsg+0x80/0x80
[ 1496.872830][T18337]  ? lockdep_hardirqs_on+0x98/0x150
[ 1496.878042][T18337]  do_syscall_64+0x55/0xa0
[ 1496.882486][T18337]  ? clear_bhb_loop+0x40/0x90
[ 1496.887174][T18337]  ? clear_bhb_loop+0x40/0x90
[ 1496.891858][T18337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1496.897773][T18337] RIP: 0033:0x7f90def9c799
[ 1496.902200][T18337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1496.921826][T18337] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1496.930333][T18337] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1496.938301][T18337] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000008
[ 1496.946276][T18337] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1496.954246][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1496.962213][T18337] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1496.970197][T18337]  </TASK>
[ 1497.013913][T18337] syz.3.4251: vmalloc error: size 60672, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1497.043986][T18337] CPU: 0 PID: 18337 Comm: syz.3.4251 Not tainted syzkaller #0
[ 1497.051506][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1497.061590][T18337] Call Trace:
[ 1497.064887][T18337]  <TASK>
[ 1497.067828][T18337]  dump_stack_lvl+0x18c/0x250
[ 1497.072535][T18337]  ? show_regs_print_info+0x20/0x20
[ 1497.077772][T18337]  ? load_image+0x400/0x400
[ 1497.082315][T18337]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1497.088771][T18337]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1497.095307][T18337]  warn_alloc+0x246/0x340
[ 1497.099666][T18337]  ? __get_vm_area_node+0x125/0x370
[ 1497.104893][T18337]  ? zone_watermark_ok_safe+0x230/0x230
[ 1497.110466][T18337]  ? rcu_is_watching+0x15/0xb0
[ 1497.115274][T18337]  ? __get_vm_area_node+0x356/0x370
[ 1497.120520][T18337]  __vmalloc_node_range+0x393/0x1330
[ 1497.125850][T18337]  ? netlink_insert+0x109f/0x13a0
[ 1497.130930][T18337]  ? netlink_data_ready+0x10/0x10
[ 1497.135984][T18337]  ? free_vm_area+0x50/0x50
[ 1497.140519][T18337]  ? netlink_sendmsg+0x602/0xbf0
[ 1497.145494][T18337]  vmalloc+0x79/0x90
[ 1497.149423][T18337]  ? netlink_sendmsg+0x602/0xbf0
[ 1497.154387][T18337]  netlink_sendmsg+0x602/0xbf0
[ 1497.159172][T18337]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 1497.165015][T18337]  ? netlink_getsockopt+0x590/0x590
[ 1497.170236][T18337]  ? aa_sock_msg_perm+0x94/0x150
[ 1497.175191][T18337]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1497.180522][T18337]  ? security_socket_sendmsg+0x80/0xa0
[ 1497.186006][T18337]  ? netlink_getsockopt+0x590/0x590
[ 1497.191238][T18337]  ____sys_sendmsg+0x5ba/0x960
[ 1497.196030][T18337]  ? __asan_memset+0x22/0x40
[ 1497.200645][T18337]  ? __sys_sendmsg_sock+0x30/0x30
[ 1497.205684][T18337]  ? __import_iovec+0x5f2/0x850
[ 1497.210553][T18337]  ? import_iovec+0x73/0xa0
[ 1497.215059][T18337]  ___sys_sendmsg+0x2a6/0x360
[ 1497.219746][T18337]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1497.224526][T18337]  ? trace_call_bpf+0xc3/0x6c0
[ 1497.229290][T18337]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[ 1497.235549][T18337]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1497.240407][T18337]  ? __x64_sys_sendmsg+0x80/0x80
[ 1497.245356][T18337]  ? lockdep_hardirqs_on+0x98/0x150
[ 1497.250554][T18337]  do_syscall_64+0x55/0xa0
[ 1497.254973][T18337]  ? clear_bhb_loop+0x40/0x90
[ 1497.259649][T18337]  ? clear_bhb_loop+0x40/0x90
[ 1497.264326][T18337]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1497.270224][T18337] RIP: 0033:0x7f90def9c799
[ 1497.274644][T18337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1497.294256][T18337] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1497.302672][T18337] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1497.310647][T18337] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000008
[ 1497.318623][T18337] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1497.326611][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1497.334603][T18337] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1497.342591][T18337]  </TASK>
[ 1497.373438][T18337] Mem-Info:
[ 1497.376834][T18337] active_anon:5416 inactive_anon:0 isolated_anon:0
[ 1497.376834][T18337]  active_file:16601 inactive_file:40447 isolated_file:0
[ 1497.376834][T18337]  unevictable:768 dirty:11 writeback:7
[ 1497.376834][T18337]  slab_reclaimable:10378 slab_unreclaimable:92260
[ 1497.376834][T18337]  mapped:24941 shmem:1361 pagetables:524
[ 1497.376834][T18337]  sec_pagetables:0 bounce:0
[ 1497.376834][T18337]  kernel_misc_reclaimable:0
[ 1497.376834][T18337]  free:1347622 free_pcp:8505 free_cma:0
[ 1497.472821][T18337] Node 0 active_anon:21664kB inactive_anon:0kB active_file:66404kB inactive_file:161584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99764kB dirty:44kB writeback:28kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10096kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no
[ 1497.513152][T18337] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1497.552416][T18337] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1497.588321][T18337] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1497.594827][T18337] Node 0 DMA32 free:1475512kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21624kB inactive_anon:0kB active_file:66404kB inactive_file:160752kB unevictable:1536kB writepending:72kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:23468kB local_pcp:7908kB free_cma:0kB
[ 1497.630480][T18337] lowmem_reserve[]: 0 0 0 0 0
[ 1497.635727][T18337] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1497.677843][T18337] lowmem_reserve[]: 0 0 0 0 0
[ 1497.700350][T18337] Node 1 Normal free:3899616kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11360kB local_pcp:4000kB free_cma:0kB
[ 1497.736394][T18337] lowmem_reserve[]: 0 0 0 0 0
[ 1497.762594][T18337] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1497.775891][T18337] Node 0 DMA32: 2310*4kB (UME) 1424*8kB (UME) 1798*16kB (UME) 632*32kB (UME) 391*64kB (UME) 390*128kB (UME) 259*256kB (UME) 146*512kB (UM) 92*1024kB (UM) 27*2048kB (UME) 254*4096kB (UM) = 1475512kB
[ 1497.796225][T18337] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1497.808424][T18337] Node 1 Normal: 278*4kB (UME) 53*8kB (UME) 44*16kB (UME) 217*32kB (UME) 66*64kB (UE) 11*128kB (UME) 3*256kB (UE) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3899616kB
[ 1497.826362][T18337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1497.862790][T18337] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1497.872153][T18337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1497.927585][T18337] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1497.946909][T18337] 58409 total pagecache pages
[ 1497.955376][T18337] 0 pages in swap cache
[ 1497.968032][T18337] Free swap  = 124996kB
[ 1497.972240][T18337] Total swap = 124996kB
[ 1498.049534][T18349] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4254'.
[ 1498.059192][T18337] 2097051 pages RAM
[ 1498.063177][T18337] 0 pages HighMem/MovableOnly
[ 1498.067868][T18337] 416924 pages reserved
[ 1498.072033][T18337] 0 pages cma reserved
[ 1498.291909][T18361] netlink: 'syz.1.4258': attribute type 4 has an invalid length.
[ 1498.309309][T18361] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4258'.
[ 1498.504395][T18368] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1498.525644][T18368] netlink: 'syz.1.4260': attribute type 6 has an invalid length.
[ 1498.542765][T18368] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4260'.
[ 1498.867773][T18373] FAULT_INJECTION: forcing a failure.
[ 1498.867773][T18373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1498.883110][T18373] CPU: 0 PID: 18373 Comm: syz.2.4262 Not tainted syzkaller #0
[ 1498.890638][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1498.900694][T18373] Call Trace:
[ 1498.904157][T18373]  <TASK>
[ 1498.907105][T18373]  dump_stack_lvl+0x18c/0x250
[ 1498.911833][T18373]  ? show_regs_print_info+0x20/0x20
[ 1498.917042][T18373]  ? load_image+0x400/0x400
[ 1498.921538][T18373]  ? __might_fault+0xaa/0x120
[ 1498.926238][T18373]  ? __lock_acquire+0x7d40/0x7d40
[ 1498.931288][T18373]  should_fail_ex+0x39d/0x4d0
[ 1498.935971][T18373]  _copy_from_user+0x2f/0xe0
[ 1498.940558][T18373]  kstrtouint_from_user+0xde/0x170
[ 1498.945689][T18373]  ? kstrtol_from_user+0x190/0x190
[ 1498.950827][T18373]  proc_fail_nth_write+0x8f/0x250
[ 1498.955849][T18373]  ? proc_fail_nth_read+0x260/0x260
[ 1498.961054][T18373]  ? proc_fail_nth_read+0x260/0x260
[ 1498.966263][T18373]  vfs_write+0x296/0x990
[ 1498.970520][T18373]  ? file_end_write+0x250/0x250
[ 1498.975372][T18373]  ? __fget_files+0x28/0x4b0
[ 1498.979967][T18373]  ? __fget_files+0x28/0x4b0
[ 1498.984560][T18373]  ? __fget_files+0x43d/0x4b0
[ 1498.989266][T18373]  ? __fdget_pos+0x2a3/0x330
[ 1498.993870][T18373]  ? ksys_write+0x75/0x260
[ 1498.998304][T18373]  ksys_write+0x150/0x260
[ 1499.002647][T18373]  ? __ia32_sys_read+0x90/0x90
[ 1499.007425][T18373]  ? lockdep_hardirqs_on+0x98/0x150
[ 1499.012632][T18373]  do_syscall_64+0x55/0xa0
[ 1499.017051][T18373]  ? clear_bhb_loop+0x40/0x90
[ 1499.021739][T18373]  ? clear_bhb_loop+0x40/0x90
[ 1499.026420][T18373]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1499.032313][T18373] RIP: 0033:0x7fcc2c95cfce
[ 1499.036736][T18373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1499.056445][T18373] RSP: 002b:00007fcc2d7dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1499.064863][T18373] RAX: ffffffffffffffda RBX: 00007fcc2d7dd6c0 RCX: 00007fcc2c95cfce
[ 1499.072834][T18373] RDX: 0000000000000001 RSI: 00007fcc2d7dd0a0 RDI: 0000000000000004
[ 1499.080807][T18373] RBP: 00007fcc2d7dd090 R08: 0000000000000000 R09: 0000000000000000
[ 1499.088779][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1499.096747][T18373] R13: 00007fcc2cc16038 R14: 00007fcc2cc15fa0 R15: 00007fffa851e558
[ 1499.104744][T18373]  </TASK>
[ 1499.298587][T18381] FAULT_INJECTION: forcing a failure.
[ 1499.298587][T18381] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1499.322325][T18381] CPU: 1 PID: 18381 Comm: syz.3.4266 Not tainted syzkaller #0
[ 1499.329862][T18381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1499.339956][T18381] Call Trace:
[ 1499.343257][T18381]  <TASK>
[ 1499.346211][T18381]  dump_stack_lvl+0x18c/0x250
[ 1499.350932][T18381]  ? show_regs_print_info+0x20/0x20
[ 1499.356166][T18381]  ? load_image+0x400/0x400
[ 1499.360714][T18381]  ? __might_fault+0xaa/0x120
[ 1499.365439][T18381]  ? __lock_acquire+0x7d40/0x7d40
[ 1499.370524][T18381]  should_fail_ex+0x39d/0x4d0
[ 1499.375252][T18381]  _copy_from_user+0x2f/0xe0
[ 1499.379877][T18381]  __sys_bpf+0x23e/0x890
[ 1499.384162][T18381]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1499.389584][T18381]  ? lock_chain_count+0x20/0x20
[ 1499.394463][T18381]  __x64_sys_bpf+0x7c/0x90
[ 1499.398896][T18381]  do_syscall_64+0x55/0xa0
[ 1499.403320][T18381]  ? clear_bhb_loop+0x40/0x90
[ 1499.408001][T18381]  ? clear_bhb_loop+0x40/0x90
[ 1499.412691][T18381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1499.418595][T18381] RIP: 0033:0x7f90def9c799
[ 1499.423024][T18381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1499.442646][T18381] RSP: 002b:00007f90dfe44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1499.451075][T18381] RAX: ffffffffffffffda RBX: 00007f90df215fa0 RCX: 00007f90def9c799
[ 1499.459054][T18381] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000011
[ 1499.467041][T18381] RBP: 00007f90dfe44090 R08: 0000000000000000 R09: 0000000000000000
[ 1499.475020][T18381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1499.482996][T18381] R13: 00007f90df216038 R14: 00007f90df215fa0 R15: 00007fffcd7ec438
[ 1499.490999][T18381]  </TASK>
[ 1499.913280][T18392] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4270'.
[ 1500.148543][T18400] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1500.170936][T18400] netlink: 'syz.2.4271': attribute type 6 has an invalid length.
[ 1500.179022][T18400] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4271'.
[ 1500.205022][T10418] wlan1: Trigger new scan to find an IBSS to join
[ 1500.735313][T18416] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4277'.
[ 1500.802477][T18423] FAULT_INJECTION: forcing a failure.
[ 1500.802477][T18423] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1500.816709][T18423] CPU: 1 PID: 18423 Comm: syz.1.4279 Not tainted syzkaller #0
[ 1500.824223][T18423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1500.834295][T18423] Call Trace:
[ 1500.837613][T18423]  <TASK>
[ 1500.840539][T18423]  dump_stack_lvl+0x18c/0x250
[ 1500.845221][T18423]  ? show_regs_print_info+0x20/0x20
[ 1500.850420][T18423]  ? load_image+0x400/0x400
[ 1500.854939][T18423]  ? __lock_acquire+0x7d40/0x7d40
[ 1500.859983][T18423]  ? snprintf+0xe9/0x140
[ 1500.864236][T18423]  should_fail_ex+0x39d/0x4d0
[ 1500.868947][T18423]  _copy_to_user+0x2f/0xa0
[ 1500.873379][T18423]  simple_read_from_buffer+0xe7/0x150
[ 1500.878780][T18423]  proc_fail_nth_read+0x1e8/0x260
[ 1500.883819][T18423]  ? proc_fault_inject_write+0x360/0x360
[ 1500.889468][T18423]  ? fsnotify_perm+0x271/0x5e0
[ 1500.894244][T18423]  ? proc_fault_inject_write+0x360/0x360
[ 1500.899893][T18423]  vfs_read+0x28b/0x970
[ 1500.904104][T18423]  ? kernel_read+0x1e0/0x1e0
[ 1500.908724][T18423]  ? __fget_files+0x28/0x4b0
[ 1500.909808][T18424] netlink: 'syz.3.4278': attribute type 10 has an invalid length.
[ 1500.913320][T18423]  ? __fget_files+0x28/0x4b0
[ 1500.913349][T18423]  ? __fget_files+0x43d/0x4b0
[ 1500.913380][T18423]  ? __fdget_pos+0x2a3/0x330
[ 1500.913399][T18423]  ? ksys_read+0x75/0x260
[ 1500.913421][T18423]  ksys_read+0x150/0x260
[ 1500.913445][T18423]  ? vfs_write+0x990/0x990
[ 1500.948151][T18423]  ? lockdep_hardirqs_on+0x98/0x150
[ 1500.953386][T18423]  do_syscall_64+0x55/0xa0
[ 1500.957834][T18423]  ? clear_bhb_loop+0x40/0x90
[ 1500.962543][T18423]  ? clear_bhb_loop+0x40/0x90
[ 1500.967255][T18423]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1500.973191][T18423] RIP: 0033:0x7f673b55cfce
[ 1500.977636][T18423] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1500.997275][T18423] RSP: 002b:00007f673c469fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1501.005751][T18423] RAX: ffffffffffffffda RBX: 00007f673c46a6c0 RCX: 00007f673b55cfce
[ 1501.013754][T18423] RDX: 000000000000000f RSI: 00007f673c46a0a0 RDI: 0000000000000004
[ 1501.021753][T18423] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1501.029755][T18423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1501.037759][T18423] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1501.045765][T18423]  </TASK>
[ 1501.583214][T18439] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4284'.
[ 1501.864942][T18451] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.4289'.
[ 1501.962236][T18449] syzkaller0: entered promiscuous mode
[ 1501.968423][T18449] syzkaller0: entered allmulticast mode
[ 1504.555374][T18463] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4292'.
[ 1505.253935][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1505.632131][T18486] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4301'.
[ 1505.727311][T18486] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.4301'.
[ 1505.847770][T18486] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4301'.
[ 1505.866680][T18486] tc_dump_action: action bad kind
[ 1506.141693][T18491] netlink: 'syz.2.4302': attribute type 3 has an invalid length.
[ 1506.150119][T18491] netlink: 'syz.2.4302': attribute type 1 has an invalid length.
[ 1506.158217][T18491] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4302'.
[ 1506.343049][ T1126] wlan1: Creating new IBSS network, BSSID a6:97:20:19:44:09
[ 1506.369795][T18500] netlink: 'syz.3.4306': attribute type 10 has an invalid length.
[ 1506.384701][T18500] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4306'.
[ 1506.395329][T18500] bond0: entered promiscuous mode
[ 1506.400483][T18500] bond_slave_0: entered promiscuous mode
[ 1506.406707][T18500] bond_slave_1: entered promiscuous mode
[ 1506.546539][T18508] netlink: 'syz.1.4311': attribute type 10 has an invalid length.
[ 1506.560720][T18508] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4311'.
[ 1507.462056][T18522] FAULT_INJECTION: forcing a failure.
[ 1507.462056][T18522] name failslab, interval 1, probability 0, space 0, times 0
[ 1507.471411][T18523] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4313'.
[ 1507.480316][T18522] CPU: 1 PID: 18522 Comm: syz.1.4314 Not tainted syzkaller #0
[ 1507.485122][T18523] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.4313'.
[ 1507.491985][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1507.492003][T18522] Call Trace:
[ 1507.492012][T18522]  <TASK>
[ 1507.492020][T18522]  dump_stack_lvl+0x18c/0x250
[ 1507.501526][T18523] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4313'.
[ 1507.511215][T18522]  ? show_regs_print_info+0x20/0x20
[ 1507.511252][T18522]  ? load_image+0x400/0x400
[ 1507.511273][T18522]  ? __might_sleep+0xe0/0xe0
[ 1507.511292][T18522]  ? __lock_acquire+0x7d40/0x7d40
[ 1507.514769][T18523] tc_dump_action: action bad kind
[ 1507.517499][T18522]  should_fail_ex+0x39d/0x4d0
[ 1507.517534][T18522]  should_failslab+0x9/0x20
[ 1507.564541][T18522]  slab_pre_alloc_hook+0x59/0x310
[ 1507.569587][T18522]  ? lockdep_softirqs_off+0x430/0x430
[ 1507.574970][T18522]  kmem_cache_alloc+0x5a/0x2d0
[ 1507.579785][T18522]  ? security_inode_alloc+0x34/0x110
[ 1507.585095][T18522]  security_inode_alloc+0x34/0x110
[ 1507.590222][T18522]  inode_init_always+0x8fc/0xc90
[ 1507.595164][T18522]  ? __asan_memset+0x22/0x40
[ 1507.599761][T18522]  new_inode_pseudo+0x95/0x1d0
[ 1507.604533][T18522]  new_inode+0x22/0x1b0
[ 1507.608696][T18522]  proc_pid_make_inode+0x24/0x190
[ 1507.613733][T18522]  proc_pident_instantiate+0x6d/0x2b0
[ 1507.619131][T18522]  proc_pident_lookup+0x1b3/0x290
[ 1507.624166][T18522]  ? proc_task_instantiate+0x2c0/0x2c0
[ 1507.629647][T18522]  path_openat+0x10e4/0x3230
[ 1507.634271][T18522]  ? do_filp_open+0x430/0x430
[ 1507.638961][T18522]  ? trace_event_raw_event_lock+0x250/0x250
[ 1507.644875][T18522]  do_filp_open+0x1f5/0x430
[ 1507.649383][T18522]  ? alloc_fd+0x58f/0x630
[ 1507.653727][T18522]  ? vfs_tmpfile+0x490/0x490
[ 1507.658336][T18522]  ? noop_direct_IO+0x20/0x20
[ 1507.663030][T18522]  ? _raw_spin_unlock+0x28/0x40
[ 1507.667887][T18522]  ? alloc_fd+0x58f/0x630
[ 1507.672229][T18522]  do_sys_openat2+0x134/0x1d0
[ 1507.676918][T18522]  ? do_sys_open+0xe0/0xe0
[ 1507.681344][T18522]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1507.687333][T18522]  ? lock_chain_count+0x20/0x20
[ 1507.692196][T18522]  __x64_sys_openat+0x139/0x160
[ 1507.697060][T18522]  do_syscall_64+0x55/0xa0
[ 1507.701497][T18522]  ? clear_bhb_loop+0x40/0x90
[ 1507.706174][T18522]  ? clear_bhb_loop+0x40/0x90
[ 1507.710856][T18522]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1507.716754][T18522] RIP: 0033:0x7f673b55cfce
[ 1507.721173][T18522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1507.740819][T18522] RSP: 002b:00007f673c469ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1507.749259][T18522] RAX: ffffffffffffffda RBX: 00007f673c46a6c0 RCX: 00007f673b55cfce
[ 1507.757242][T18522] RDX: 0000000000000002 RSI: 00007f673c469f90 RDI: ffffffffffffff9c
[ 1507.765220][T18522] RBP: 00007f673c46a090 R08: 0000000000000000 R09: 0000000000000000
[ 1507.773204][T18522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1507.781188][T18522] R13: 00007f673b816038 R14: 00007f673b815fa0 R15: 00007fffa66643b8
[ 1507.789186][T18522]  </TASK>
[ 1511.862238][T18554] netlink: 'syz.0.4323': attribute type 3 has an invalid length.
[ 1511.960359][T18554] netlink: 'syz.0.4323': attribute type 1 has an invalid length.
[ 1512.221586][T18554] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4323'.
[ 1512.395398][T18564] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4324'.
[ 1512.662946][T18572] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4326'.
[ 1512.682641][T18568] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.4333'.
[ 1512.958657][T18579] netlink: 'syz.1.4329': attribute type 10 has an invalid length.
[ 1515.968438][T18585] netlink: 'syz.1.4332': attribute type 39 has an invalid length.
[ 1516.633492][T18603] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4339'.
[ 1516.661315][T18603] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[ 1520.343163][T18626] netlink: 'syz.3.4345': attribute type 39 has an invalid length.
[ 1520.351202][T18628] netlink: 'syz.0.4343': attribute type 10 has an invalid length.
[ 1520.426159][T18628] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4343'.
[ 1520.487480][T18628] bond0: entered promiscuous mode
[ 1520.505768][T18628] bond_slave_0: entered promiscuous mode
[ 1520.526715][T18628] bond_slave_1: entered promiscuous mode
[ 1520.540138][T18628] dummy0: entered promiscuous mode
[ 1520.546623][T18628] bridge0: port 3(bond0) entered blocking state
[ 1520.566561][T18628] bridge0: port 3(bond0) entered disabled state
[ 1520.590549][T18628] bond0: entered allmulticast mode
[ 1520.605226][T18628] bond_slave_0: entered allmulticast mode
[ 1520.623547][T18628] bond_slave_1: entered allmulticast mode
[ 1520.637078][T18628] dummy0: entered allmulticast mode
[ 1520.659736][T18628] bridge0: port 3(bond0) entered blocking state
[ 1520.666371][T18628] bridge0: port 3(bond0) entered forwarding state
[ 1521.524291][T18652] netlink: 'syz.3.4352': attribute type 4 has an invalid length.
[ 1521.532171][T18652] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4352'.
[ 1521.546187][T18652] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1521.929075][T18660] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4354'.
[ 1522.346982][T18668] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4356'.
[ 1526.148750][T18692] netlink: 'syz.1.4361': attribute type 3 has an invalid length.
[ 1526.338664][T18692] netlink: 'syz.1.4361': attribute type 1 has an invalid length.
[ 1526.354462][T18692] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4361'.
[ 1526.818644][T18705] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4366'.
[ 1527.167042][T18719] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1527.184065][T18719] netlink: 'syz.3.4369': attribute type 6 has an invalid length.
[ 1527.192064][T18719] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4369'.
[ 1529.253809][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1530.549569][T18729] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4372'.
[ 1531.109443][T18741] C: renamed from team_slave_0 (while UP)
[ 1531.147244][T18741] netlink: 'syz.2.4378': attribute type 4 has an invalid length.
[ 1531.165703][T18741] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4378'.
[ 1531.186054][T18741] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1531.369120][T18739] netlink: 'syz.0.4376': attribute type 3 has an invalid length.
[ 1531.381854][T18739] netlink: 'syz.0.4376': attribute type 1 has an invalid length.
[ 1531.391529][T18739] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4376'.
[ 1534.202963][ T1131] wlan1: Trigger new scan to find an IBSS to join
[ 1535.619063][ T1131] wlan1: Creating new IBSS network, BSSID a6:76:d0:b4:e4:cb
[ 1535.785374][T18772] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4388'.
[ 1536.091870][T18786] netlink: 'syz.1.4389': attribute type 3 has an invalid length.
[ 1536.148514][T18786] netlink: 'syz.1.4389': attribute type 1 has an invalid length.
[ 1536.156511][T18786] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4389'.
[ 1536.697501][T18792] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.4392'.
[ 1536.880636][T18796] netlink: 'syz.0.4393': attribute type 39 has an invalid length.
[ 1538.254894][T18819] netlink: 'syz.2.4400': attribute type 3 has an invalid length.
[ 1538.273001][T18819] netlink: 'syz.2.4400': attribute type 1 has an invalid length.
[ 1538.280990][T18819] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4400'.
[ 1540.656349][T18832] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.4403'.
[ 1541.115592][T18837] netlink: 'syz.1.4404': attribute type 39 has an invalid length.
[ 1543.116624][T18870] netlink: 209560 bytes leftover after parsing attributes in process `syz.0.4412'.
[ 1543.636896][T18878] netlink: 'syz.1.4416': attribute type 3 has an invalid length.
[ 1543.669074][T18878] netlink: 'syz.1.4416': attribute type 1 has an invalid length.
[ 1543.692956][T18878] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4416'.
[ 1544.065047][T18881] netlink: 'syz.3.4417': attribute type 39 has an invalid length.
[ 1544.683542][T18888] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.4418'.
[ 1545.383604][T18900] À: port 1(vlan0) entered blocking state
[ 1545.400855][T18900] À: port 1(vlan0) entered disabled state
[ 1545.423111][T18900] vlan0: entered allmulticast mode
[ 1545.447624][T18900] veth0_vlan: entered allmulticast mode
[ 1545.472411][T18900] vlan0: entered promiscuous mode
[ 1545.663931][T18902] À: port 1(vlan0) entered blocking state
[ 1545.680372][T18902] À: port 1(vlan0) entered disabled state
[ 1545.703055][T18902] vlan0: entered allmulticast mode
[ 1545.723497][T18902] veth0_vlan: entered allmulticast mode
[ 1545.753281][T18902] vlan0: entered promiscuous mode
[ 1545.767160][T18902] À: port 1(vlan0) entered blocking state
[ 1545.773687][T18902] À: port 1(vlan0) entered forwarding state
[ 1545.866734][T18911] netlink: 209560 bytes leftover after parsing attributes in process `syz.2.4426'.
[ 1546.386401][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.394281][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1550.692191][T18951] netlink: 209560 bytes leftover after parsing attributes in process `syz.0.4443'.
[ 1551.212713][T18962] netlink: 'syz.3.4439': attribute type 6 has an invalid length.
[ 1551.220541][T18962] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4439'.
[ 1551.316945][T18956] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.4435'.
Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.