last executing test programs: 4.749206873s ago: executing program 4 (id=6995): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x5b}, 0x28) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed7f672, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff75) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500), 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x1040bb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r4, &(0x7f0000000600), &(0x7f0000000640)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000700), 0x43) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x13, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="00000000b7030000000000008500000083000000bf0900000000feff5509010000000000950000000000000018012fc2f308", @ANYRES32=r4, @ANYBLOB="000000000000000085000000680000000231060082890000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x9, 0xdb, &(0x7f00000022c0)=""/219, 0x41000, 0x40, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000002040)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002080)={0x5, 0xfffffffb, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000020c0)=[r4, r4, r4, r2, r4, r5, r4], &(0x7f0000002100)=[{0x2, 0x1, 0xc, 0x5}, {0x2, 0x2, 0x2, 0x8}, {0x4, 0x4, 0xc, 0x5}], 0x10, 0xaa1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd7"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001b40), 0x8, 0x10, &(0x7f0000001b80), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x2000000, 0x5e, 0x0, &(0x7f0000001c40)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1e, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000f400000000000000000000711213000000000095000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000740), 0x43) write$cgroup_subtree(r9, &(0x7f0000000780)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xd, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], &(0x7f0000001d80)='GPL\x00', 0x2, 0x3e0, &(0x7f0000001dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0), 0x0, 0x10, &(0x7f0000001f00), 0x76}, 0x21) sendmsg$kcm(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x1458}, 0x240480d1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="61124c000000000061133c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macvlan1\x00', @random="02000000e29b"}) 4.434231821s ago: executing program 4 (id=6998): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001200000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='A', 0x1}], 0x1}, 0x24008051) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={&(0x7f0000000980)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x301002, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x20, 0x4, 0x7, 0xe}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x94}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x94) 4.418295332s ago: executing program 2 (id=6999): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc) r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xc4, 0x7, 0x4, 0x3, 0x0, 0x30000000, 0x800, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x3a00}, 0x20, 0xffffffffffffff81, 0x9, 0x0, 0xfffffffffffffffa, 0x7, 0xb, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xc, r3, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000500)=0x7) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000003000000000000000000000000000001050000001000000400000000000000090200000000002b886ba02108a7a8801d658ab9078eb86ef6a84498b6fdd701ce3effa4948d32144636189af8a4fda7a266e8e59a8ff6bffb050049e357dd9ccc987d12bae682ed9ca169e677907a82b1be1dc9b1dc11be227fd688ac9227b0735859128da582f767bd8a957dc9da64c46660b65bb807cf2baa4553a8550d2e1f3a70ca3c4d8510d7ce716188baa7046118de870510c6"], 0x0, 0x4e}, 0x28) socketpair(0x27, 0x5, 0x10, &(0x7f0000000700)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.344356668s ago: executing program 1 (id=7004): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, 0x0, 0x406) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x0) 3.305966399s ago: executing program 2 (id=7005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f40), 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.304907519s ago: executing program 4 (id=7006): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x4, 0x80, 0x58, 0x6, 0x6, 0x4, 0x0, 0x2, 0x40c08, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc, 0x2, @perf_config_ext={0x0, 0x1ed2}, 0x128a, 0x7, 0x1e0, 0x0, 0x4, 0x6315572d, 0x83fd, 0x0, 0x5, 0x0, 0x4}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r1, &(0x7f0000001780)=ANY=[], 0xfffffeff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.175465322s ago: executing program 3 (id=7007): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55", 0x1b}], 0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x3d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x0, 0x8, 0xa31, 0x8, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x207, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x6000, &(0x7f00000006c0)=[{&(0x7f0000000700)='U', 0xa00120}], 0x20}, 0x3) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0xb5, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000d80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) 2.8359002s ago: executing program 3 (id=7008): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000240)}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f00000003c0), 0x4) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) perf_event_open(&(0x7f0000002080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1e000000ff000000080000000200000000000000fdec4d585598b8919a6456af52d8d5dac625a2da252a74ee7eadd65092e9b5c046151b18040528a569482bf61e9c17d6fee283e189e44674ce689d79739e62fdba1c35295542ea893bd10e01e870b9cd664f978c9dddb6e23c988be5c923203c5c5df90e9d86b3e3e1c01eae429f674fdf4bf7d295d93a7d060c1f0484b788fa948c5a4db8974831db6759d4240ed84460d39fff75ff2eb9b0a20481eb0ba4b957", @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYBLOB="a5a75c117c097e809b5210c6e89daaa88b9bda954d6f352bcb1754c6fac028df39e1a126311da5b88e75e72482668aca476f043f86717e5c946c6a34491329aa79847252c66d348f23546bac72065eb0fc8dde15550c7623ee9ae88a98e5810c4beb118345338cc7eb62137721127475bd3ab4729513b4c9bf86358c9f462e42ddf4eb8902dff593b622f0ca3cb206c654c2c7af52c7953b79daa53f2d08525514926a0e18ed58109f430cf63bf6343d7e8e60be7571ed45a6cbda2635e8adf0f8d5fd625df6149a4fba90fb84b39c7e1ffad61f5fbb264b41cc0af44b89dcaf496ea72ebba3dffcac", @ANYRES32=r1, @ANYBLOB="0000000001000000000000000200"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001f40)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000100feff000037153e", 0x23}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000010e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x1000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18010000000000fd000a0000000000009500000000010000"], &(0x7f0000001e00)='GPL\x00', 0x1, 0x9f, &(0x7f0000001e40)=""/159, 0x0, 0x0, '\x00', r7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x30, '\x00', r7, @fallback=0x35, r5, 0x8, &(0x7f0000001840), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r8, 0x0, 0xe80, 0xffffffffffffffd9, &(0x7f0000001900)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001940)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000002040)='./file0/../file0/../file0/file0\x00', 0x8c) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000021c0)={0x0, &(0x7f0000002200)}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000002240)) 2.756979032s ago: executing program 1 (id=7009): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x5b}, 0x28) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed7f672, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff75) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500), 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x1040bb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r4, &(0x7f0000000600), &(0x7f0000000640)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000700), 0x43) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x13, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="00000000b7030000000000008500000083000000bf0900000000feff5509010000000000950000000000000018012fc2f308", @ANYRES32=r4, @ANYBLOB="000000000000000085000000680000000231060082890000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x9, 0xdb, &(0x7f00000022c0)=""/219, 0x41000, 0x40, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000002040)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002080)={0x5, 0xfffffffb, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000020c0)=[r4, r4, r4, r2, r4, r5, r4], &(0x7f0000002100)=[{0x2, 0x1, 0xc, 0x5}, {0x2, 0x2, 0x2, 0x8}, {0x4, 0x4, 0xc, 0x5}], 0x10, 0xaa1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001b40), 0x8, 0x10, &(0x7f0000001b80), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x2000000, 0x5e, 0x0, &(0x7f0000001c40)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1e, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000f400000000000000000000711213000000000095000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000740), 0x43) write$cgroup_subtree(r9, &(0x7f0000000780)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xd, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], &(0x7f0000001d80)='GPL\x00', 0x2, 0x3e0, &(0x7f0000001dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0), 0x0, 0x10, &(0x7f0000001f00), 0x76}, 0x21) sendmsg$kcm(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x1458}, 0x240480d1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macvlan1\x00', @random="02000000e29b"}) 2.488801289s ago: executing program 0 (id=7010): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@l2tp6={0xa, 0x80fe, 0x5, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="7f", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8009, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000500)=""/119, 0x77, 0x0, &(0x7f0000000580)=""/122, 0x7a}}, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="d80000001c0081044e81f782db44b9040a1d08020a0000000e0096a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES8=r1], &(0x7f0000001380)='GPL\x00', 0x5, 0xc3, &(0x7f00000013c0)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000001540)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000001580)) (fail_nth: 1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair(0xb, 0x80000, 0x2, &(0x7f00000015c0)) socket$kcm(0x10, 0x2, 0x0) 2.4374992s ago: executing program 3 (id=7011): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x7, 0x300) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x4, 0x0, 0x40000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x824, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001fc0)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba5", 0x4d}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000002040)={&(0x7f0000002080)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000002180)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f59d3b00"/79, 0x4f}, {&(0x7f0000002200)="098d85d1f409000a3164ae4398", 0xd}, {&(0x7f0000002240)="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", 0x66d}], 0x4}, 0x40000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450ad7e31d93a967c1ed60213ad76b00000000000071118c0000000000180000000000000000000000000000009500000000000000"], &(0x7f00000029c0)='GPL\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002a80)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) r5 = socket$kcm(0x28, 0x1, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x4, &(0x7f0000000300)=r7, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x408, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2406, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x925523ac42911087, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000980)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x28, 0xfe, 0x7, 0xfffff01c}, {0x6, 0x7f, 0x22, 0x5}]}) 2.295981573s ago: executing program 2 (id=7012): mkdir(&(0x7f0000000000)='./file0\x00', 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000140)={&(0x7f0000000080), 0x6e, &(0x7f0000000100)}, 0x40000102) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x3, {0xa, 0x4e20, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="080ee2c99b180e0d697895d50bd37e04fc56a13ac7a89429617c5e1ee51aa7c90efe5efee56bfe468ba3a296266a2ae7256554b5e9e0a3e21e2adf706eec62252583554056e583361d39a6305536a6f254b5d95eec2b3dea9717ecad37f49a71d6021dd6b63ab70db383f328fa8a08c7c9adc2c30c56cfe73617b7bc2bd74ea2be665e683ac2788e3d379b1ee275c94487e9d49f3205aa8789", 0x99}, {&(0x7f0000000340)="dffd7f72487f1304a954d5f0c5c606122d5036c4180223ca836d0a39918ebbe21954b9c9fac0549bd5ad17e99342cc37a25546d73214c7664adefd80b6524bdbe0e9113e7f5beeaf6f68eafb76d4a097a5469941f598a232d6f611ce2a0131bb91dd127a29e58895e6ac25e50de56f5a27c4df891b34914ce23bb380085d8660ceef9f79d5244bef23a675330146d7e08ea21ea1367ee637bd9d2b3b27add0e34743627eb2bcd089adc3b7ab509629cc4a3257b3dc5fae3a5efc342c130375eacf", 0xc1}, {&(0x7f0000000440)="b4d2f19bc5c680425a4f069cb616dd5048cdc23ab26d1769ce0d3369b92ec0ab27decf24ef9cc08267490b9683f6599f3dfa296f9363473b4d86f8ec6860ef2f40ba1f6eaa86674a83fd083ca9bd50585c58470feb14c32bb0c8574ec7d6e118d27d3deb132a4ca766eb9b8091eea7d7b686a10a8ad98f77d80e66fbb941a38147dae2949154a2a5f192c1", 0x8b}, {&(0x7f0000000500)="47227f1d0b8abd0deee61d2766561e4a004bb8c6ebaad60ca7fab7f210977f0c38b49a50603e3eff52d8f1770df33fc2ea6ef4f5fc924944c7bd156c150c75a30d4e6bfa4b2a9faeae6518664140213bd70c856ad8c8bdadf83695a4a171081405a1162e7dea972187d44c10eb3557d2cb5fc2bf294a536c099da5a8d981be4eed19e1550db8445af0e1bfb86eebb65ddfec4fa6cba8a6b0b4a30d71a45ad4e415e5117b93b904937fdfad47b97a82e51b7f22923a805416996575f3b74e230e5244e51918", 0xc5}, {&(0x7f0000000600)="70ff6270ab4031442e275a792efe49a22177afa4f051d9d09daac594404a41e21182be1ea8c658df91663d15efdbcd0268ccae732c497183852b6a1b79159a3bdc2ca3f653a0764f3890a29321b4de93feb4ad243993a6540e194ddb916e17e046388973d529ec38d53375eeec35eb55e9e51bbeaeaf48869a1c82bc5b477146c57e0f6048f5f587e28da959a9bb9389a92439b9fee786ba7dcca5289caebecf7b2237c75f334f1b8e2f879fc46497bd0795babb6a13fa375be794530b0c8606ed11fb2b09a7715ec7c33e2d44315fb98ef2289699fc8ed5fe166a35de8846d1ecdc50dd54eb9d", 0xe7}, {&(0x7f0000000700)="a2e105417dbb3fcf75d61303acda99f7dfd1cd987c8943ac68ebde863740990717d6b5ded21b2acb4f680c61560f9476f41db4e16c610cef85e20daa809a7cc58995b830e6026579cccab42bbcb27fce606784823e143eb553a76094a960b2c6e5898a239b02866029ab32fc5dc7a795e8eaa20dc8a2beaf7c0572016a886ce1968bc7a4986388ac2424f46618940f8cba16f8760f7bccc1f381ba67f0ec07e1f76551ed9b13ebb611d0da17bb3da962aab5e466c88270c74c9f0f1c318706359390d273bb65ca", 0xc7}], 0x6, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xe8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x4, [@union={0x7, 0x7, 0x0, 0x5, 0x0, 0x1349, [{0x0, 0x1, 0xe}, {0x2, 0x1, 0x30000000}, {0x7, 0x5, 0x8}, {0x7, 0x3, 0x2}, {0x0, 0x5, 0x8}, {0xb, 0x1, 0xb5}, {0x6, 0x2}]}, @union={0x3, 0x2, 0x0, 0x5, 0x1, 0x2, [{0xa, 0x4, 0x6}, {0x6, 0x2, 0x8001}]}, @int={0x2, 0x0, 0x0, 0x1, 0x1, 0xc, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x1ff}}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x2}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000c40)=""/7, 0xd8, 0x7, 0x0, 0xe}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x12, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x1, 0xb, 0x9, 0x4, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000cc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0xb, 0x8, 0xbf4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000d40)=[{0x1, 0x2, 0xe, 0x9}, {0x3, 0x2, 0xe, 0x9}, {0x1, 0x3, 0x10, 0xc}, {0x1, 0x5, 0x3, 0x8}, {0x2, 0x2, 0x5, 0x6}], 0x10, 0x3}, 0x94) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x5, [@union={0x2, 0x5, 0x0, 0x5, 0x1, 0x6, [{0xc, 0x4, 0xefb5c29d}, {0xe, 0x4, 0x1}, {0x9, 0x2, 0x5}, {0x4, 0x4, 0x400}, {0x8, 0x0, 0x9}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x1}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x21, 0x2e]}}, &(0x7f0000000f40)=""/224, 0xa9, 0xe0, 0x1, 0x3, 0x10000, @value=r6}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@int={0xd, 0x0, 0x0, 0x1, 0x1, 0x80, 0x0, 0x4, 0x1}, @struct={0x2, 0x0, 0x0, 0x4, 0x1, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @fwd={0xc}]}, {0x0, [0x5f, 0x0, 0x5f, 0x30, 0x5f]}}, &(0x7f0000001140)=""/120, 0x53, 0x78, 0x0, 0x6, 0x10000, @value=r6}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x16, 0x4, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x2, 0x0, 0x4, 0x7, 0x6, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x33, '\x00', r3, @fallback=0x2d, r4, 0x8, &(0x7f0000001280)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x5, &(0x7f00000012c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, r1, 0xffffffffffffffff], &(0x7f0000001300)=[{0x3, 0x3, 0x6}, {0x3, 0x4, 0x10, 0x5}, {0x5, 0x4, 0x1, 0x2}, {0x1, 0x4, 0x7, 0x8}, {0x2, 0x1, 0x0, 0x4}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@fallback=r7, 0x0, 0x0, 0x9, &(0x7f0000001440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)={@cgroup, r5, 0x22, 0x7, r8, @void, @value=r5, @void, @void, r10}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000015c0)='\xdd/:\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r9) r11 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001600)={r9, r9}, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001680)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001640)={@fallback=r11, r8, 0x28, 0x11d1ee9b40c0f9a0, r9, @void, @void, @value=r12, @void, r10}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000019c0)={&(0x7f00000016c0)="ec4114c87f0ae04965e5e1901d5537c2c9337bb7f26f464c0b0189401e22eca63af9dc8cd443bf9a8c155e8e4d617b7a0f2c12848e92dacefec9b3a34a44ca60542a354766f593d154f660b3ecb003f3486b310365f0db2f03fc3a16acb83227f91ea7c408c786a5b88023c22bb001746abaaa506575b58a095b79799a0eef808c1fd2ec11143c77f14be23946644cbaf829b855127cac4c541738888607592300ff088d8900b2b711eabab0b61f7f97a080a3b8cacd291a2129b3529a6d93b70e1837c77ef31928a1aeceae9745ec2424b190aed010680a9df6c36d857ba4f6aa7f2cfe0c70ef0c6636d63f6e", &(0x7f00000017c0)=""/133, &(0x7f0000001880)="25af1b1bb8e4b5f36a927acb701bc2ca947eb2cac31234ebe8bacaadcb883228839f5387adaf1debd27c022c4928d77e346366d1be85c2fcbdd1faa8af78658ba95adca012a2c0fd", &(0x7f0000001900)="2859ee352ac4a01d08814d016bfda118947eacb8e85b680084c3042c545768ad5284ea2e5f82f2c71a3c293ede19227f64a714b296dd9ca3680256ee9437a24629738b0ab54c072ba6a3ca54d5ab94d925415338bd343cc8faba8fb0ff7d1c3cba9b17f0ba4d8dab04dcdb7b945fa848362450dbdcbc0db56ed244b0b74a1b4c632200a51e458b7c77fe23afaf7954280362cf2775567178fab2a1a27428", 0xb, 0xffffffffffffffff, 0x4}, 0x38) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x4, '\x00', 0x0, r7, 0x2, 0x3, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x5, 0x10001, 0x706, 0x6, 0x4, r9, 0x6, '\x00', 0x0, r9, 0x0, 0x0, 0x4}, 0x50) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f0000001b00)) recvmsg$unix(r0, &(0x7f0000002140)={&(0x7f0000001b40)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001bc0)=""/228, 0xe4}, {&(0x7f0000001cc0)=""/90, 0x5a}, {&(0x7f0000001d40)=""/103, 0x67}, {&(0x7f0000001dc0)=""/251, 0xfb}, {&(0x7f0000001ec0)=""/206, 0xce}, {&(0x7f0000001fc0)=""/245, 0xf5}], 0x6}, 0x43) write$cgroup_devices(r9, &(0x7f0000002180)={'b', ' *:* ', 'w\x00'}, 0x8) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000021c0)={'pim6reg0\x00', @broadcast}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002200)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002340)={@map=r13, 0x2, 0x0, 0x2bda555d, &(0x7f0000002240)=[0x0], 0x1, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0]}, 0x40) 2.284955894s ago: executing program 4 (id=7013): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x4, 0x80, 0x58, 0x6, 0x6, 0x4, 0x0, 0x2, 0x40c08, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc, 0x2, @perf_config_ext={0x0, 0x1ed2}, 0x128a, 0x7, 0x1e0, 0x0, 0x4, 0x6315572d, 0x83fd, 0x0, 0x5, 0x0, 0x4}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r1, &(0x7f0000001780)=ANY=[], 0xfffffeff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.252725245s ago: executing program 1 (id=7014): socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="0500008000000000511183a5eff9940e8a69000002000000850000f40000000000000000000000009500a505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b40)={r0, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000b80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6019, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x40, 0x4, 0x2, 0x0, 0x8, 0x8000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x1800, 0x9, 0x4c06, 0x6, 0xcbdb, 0x9, 0xcf, 0x0, 0x4fdd, 0x0, 0x3}, r3, 0xc, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.290567768s ago: executing program 2 (id=7015): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc) r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xc4, 0x7, 0x4, 0x3, 0x0, 0x30000000, 0x800, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x3a00}, 0x20, 0xffffffffffffff81, 0x9, 0x0, 0xfffffffffffffffa, 0x7, 0xb, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xc, r3, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000500)=0x7) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000003000000000000000000000000000001050000001000000400000000000000090200000000002b886ba02108a7a8801d658ab9078eb86ef6a84498b6fdd701ce3effa4948d32144636189af8a4fda7a266e8e59a8ff6bffb050049e357dd9ccc987d12bae682ed9ca169e677907a82b1be1dc9b1dc11be227fd688ac9227b0735859128da582f767bd8a957dc9da64c46660b65bb807cf2baa4553a8550d2e1f3a70ca3c4d8510d7ce716188baa7046118de870510c6"], 0x0, 0x4e}, 0x28) socketpair(0x27, 0x5, 0x10, &(0x7f0000000700)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.20979911s ago: executing program 0 (id=7016): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 1.179859971s ago: executing program 1 (id=7017): r0 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000440)=r1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000480)={r1, r1}) 1.148032892s ago: executing program 4 (id=7018): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55", 0x1b}], 0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x3d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x0, 0x8, 0xa31, 0x8, 0x0, 0xffffffffffffffff, 0xcb02}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x207, r1}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x6000, &(0x7f00000006c0)=[{&(0x7f0000000700)='U', 0xa00120}], 0x20}, 0x3) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0xb5, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xde, &(0x7f0000000d80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) 1.125129242s ago: executing program 3 (id=7019): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, 0x0, 0x406) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x0) 1.025690044s ago: executing program 2 (id=7020): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000001) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r3, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)}, 0x7000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd4", 0xd5}], 0x1}, 0x0) 1.019318625s ago: executing program 0 (id=7021): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000240)}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f00000003c0), 0x4) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) perf_event_open(&(0x7f0000002080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1e000000ff000000080000000200000000000000fdec4d585598b8919a6456af52d8d5dac625a2da252a74ee7eadd65092e9b5c046151b18040528a569482bf61e9c17d6fee283e189e44674ce689d79739e62fdba1c35295542ea893bd10e01e870b9cd664f978c9dddb6e23c988be5c923203c5c5df90e9d86b3e3e1c01eae429f674fdf4bf7d295d93a7d060c1f0484b788fa948c5a4db8974831db6759d4240ed84460d39fff75ff2eb9b0a20481eb0ba4b957", @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYBLOB="a5a75c117c097e809b5210c6e89daaa88b9bda954d6f352bcb1754c6fac028df39e1a126311da5b88e75e72482668aca476f043f86717e5c946c6a34491329aa79847252c66d348f23546bac72065eb0fc8dde15550c7623ee9ae88a98e5810c4beb118345338cc7eb62137721127475bd3ab4729513b4c9bf86358c9f462e42ddf4eb8902dff593b622f0ca3cb206c654c2c7af52c7953b79daa53f2d08525514926a0e18ed58109f430cf63bf6343d7e8e60be7571ed45a6cbda2635e8adf0f8d5fd625df6149a4fba90fb84b39c7e1ffad61f5fbb264b41cc0af44b89dcaf496ea72ebba3dffcac", @ANYRES32=r1, @ANYBLOB="0000000001000000000000000200"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001f40)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000100feff000037153e", 0x23}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000010e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x1000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r6, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18010000000000fd000a0000000000009500000000010000"], &(0x7f0000001e00)='GPL\x00', 0x1, 0x9f, &(0x7f0000001e40)=""/159, 0x0, 0x0, '\x00', r7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc45"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x30, '\x00', r7, @fallback=0x35, r5, 0x8, &(0x7f0000001840), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r8, 0x0, 0xe80, 0xffffffffffffffd9, &(0x7f0000001900)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001940)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000002040)='./file0/../file0/../file0/file0\x00', 0x8c) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000021c0)={0x0, &(0x7f0000002200)}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000002240)) 1.010286515s ago: executing program 1 (id=7022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f40), 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 970.502996ms ago: executing program 4 (id=7023): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x4, 0x80, 0x58, 0x6, 0x6, 0x4, 0x0, 0x2, 0x40c08, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc, 0x2, @perf_config_ext={0x0, 0x1ed2}, 0x128a, 0x7, 0x1e0, 0x0, 0x4, 0x6315572d, 0x83fd, 0x0, 0x5, 0x0, 0x4}) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r1, &(0x7f0000001780)=ANY=[], 0xfffffeff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 811.88716ms ago: executing program 0 (id=7024): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x5b}, 0x28) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed7f672, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff75) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500), 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x1040bb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r4, &(0x7f0000000600), &(0x7f0000000640)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000700), 0x43) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x13, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="00000000b7030000000000008500000083000000bf0900000000feff5509010000000000950000000000000018012fc2f308", @ANYRES32=r4, @ANYBLOB="000000000000000085000000680000000231060082890000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x9, 0xdb, &(0x7f00000022c0)=""/219, 0x41000, 0x40, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000002040)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002080)={0x5, 0xfffffffb, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000020c0)=[r4, r4, r4, r2, r4, r5, r4], &(0x7f0000002100)=[{0x2, 0x1, 0xc, 0x5}, {0x2, 0x2, 0x2, 0x8}, {0x4, 0x4, 0xc, 0x5}], 0x10, 0xaa1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001b40), 0x8, 0x10, &(0x7f0000001b80), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x2000000, 0x5e, 0x0, &(0x7f0000001c40)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1e, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000f400000000000000000000711213000000000095000000000000"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000740), 0x43) write$cgroup_subtree(r9, &(0x7f0000000780)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xd, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], &(0x7f0000001d80)='GPL\x00', 0x2, 0x3e0, &(0x7f0000001dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0), 0x0, 0x10, &(0x7f0000001f00), 0x76}, 0x21) sendmsg$kcm(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x1458}, 0x240480d1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macvlan1\x00', @random="02000000e29b"}) 543.452446ms ago: executing program 2 (id=7025): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001200000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='A', 0x1}], 0x1}, 0x24008051) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={&(0x7f0000000980)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x301002, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x20, 0x4, 0x7, 0xe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x94}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x94) 325.269161ms ago: executing program 0 (id=7026): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000200)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0xa010102}}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000001000000001001000001000000dc0000a7c3ae2ad8"], 0x18}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000220000000000007118faa49d5a0030e3ca009525405e7e1eafcad0f41c4dccbae0124da5913bc680f56314514dbd"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 199.055254ms ago: executing program 3 (id=7027): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000600000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r5, r6, 0x5, 0x2, 0x5}, 0x50) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000980)={&(0x7f00000009c0)=@tipc=@id, 0x80, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x20000001) 948.62µs ago: executing program 0 (id=7028): socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="0500008000000000511183a5eff9940e8a69000002000000850000f40000000000000000000000009500a505000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b40)={r0, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000b80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6019, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x0, 0xe, 0x0, &(0x7f0000000800)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x40, 0x4, 0x2, 0x0, 0x8, 0x8000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000080), 0x9}, 0x1800, 0x9, 0x4c06, 0x6, 0xcbdb, 0x9, 0xcf, 0x0, 0x4fdd, 0x0, 0x3}, r3, 0xc, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 359.41µs ago: executing program 3 (id=7029): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x7, 0x300) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000280), 0x4) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x4, 0x0, 0x40000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x824, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001ec0)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001f00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001fc0)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba5", 0x4d}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000002040)={&(0x7f0000002080)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000002180)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f59d3b00"/79, 0x4f}, {&(0x7f0000002200)="098d85d1f409000a3164ae4398", 0xd}, {&(0x7f0000002240)="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", 0x66d}], 0x4}, 0x40000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450ad7e31d93a967c1ed60213ad76b00000000000071118c0000000000180000000000000000000000000000009500000000000000"], &(0x7f00000029c0)='GPL\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002a80)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) r5 = socket$kcm(0x28, 0x1, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x4, &(0x7f0000000300)=r7, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x408, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2406, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x925523ac42911087, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000980)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x28, 0xfe, 0x7, 0xfffff01c}, {0x6, 0x7f, 0x22, 0x5}]}) 0s ago: executing program 1 (id=7030): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xc) r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xc4, 0x7, 0x4, 0x3, 0x0, 0x30000000, 0x800, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x3a00}, 0x20, 0xffffffffffffff81, 0x9, 0x0, 0xfffffffffffffffa, 0x7, 0xb, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xc, r3, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000500)=0x7) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000003000000000000000000000000000001050000001000000400000000000000090200000000002b886ba02108a7a8801d658ab9078eb86ef6a84498b6fdd701ce3effa4948d32144636189af8a4fda7a266e8e59a8ff6bffb050049e357dd9ccc987d12bae682ed9ca169e677907a82b1be1dc9b1dc11be227fd688ac9227b0735859128da582f767bd8a957dc9da64c46660b65bb807cf2baa4553a8550d2e1f3a70ca3c4d8510d7ce716188baa7046118de870510c6"], 0x0, 0x4e}, 0x28) socketpair(0x27, 0x5, 0x10, &(0x7f0000000700)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): renamed from eth3 [ 1128.716010][T23944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1128.765104][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1128.784693][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1128.846568][T23944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1128.888162][T24185] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6403'. [ 1128.911701][T24185] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1129.743448][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1129.761536][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1129.808765][T14460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.815914][T14460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.842734][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1129.873242][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1129.897874][T14460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.905085][T14460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1129.920474][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1129.938681][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1129.961560][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1130.001106][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1130.015621][T24210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1130.020798][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1130.081948][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1130.109193][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1130.124368][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1130.142965][T24210] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1130.173642][T24212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1130.204238][T23944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1130.236024][T23944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1130.289255][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1130.334201][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1130.343080][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1130.385048][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1130.411791][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1131.267133][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1131.289831][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1131.297433][T24235] netlink: 'syz.1.6413': attribute type 10 has an invalid length. [ 1131.325470][T24235] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1131.364140][T24239] netlink: 'syz.0.6412': attribute type 9 has an invalid length. [ 1131.391810][T23944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.416818][T24239] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6412'. [ 1131.528906][T24246] mac80211_hwsim hwsim223 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1131.812964][T24256] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6417'. [ 1132.779511][T24287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6423'. [ 1132.869119][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1132.897265][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1132.994566][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1133.020326][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1133.043221][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1133.066306][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1133.113632][T23944] device veth0_vlan entered promiscuous mode [ 1133.143456][T24294] netlink: 'syz.2.6426': attribute type 21 has an invalid length. [ 1133.678579][T24300] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1133.693267][T23944] device veth1_vlan entered promiscuous mode [ 1133.713653][T24303] netlink: 'syz.3.6428': attribute type 10 has an invalid length. [ 1133.724270][T24303] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1133.792578][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1133.841500][T24316] netlink: 'syz.2.6430': attribute type 14 has an invalid length. [ 1133.872565][T24316] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1133.900436][T24321] FAULT_INJECTION: forcing a failure. [ 1133.900436][T24321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.937740][T24321] CPU: 1 PID: 24321 Comm: syz.2.6430 Not tainted syzkaller #0 [ 1133.945267][T24321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1133.955346][T24321] Call Trace: [ 1133.958642][T24321] [ 1133.961594][T24321] dump_stack_lvl+0x188/0x24e [ 1133.966306][T24321] ? show_regs_print_info+0x12/0x12 [ 1133.971533][T24321] ? load_image+0x410/0x410 [ 1133.976067][T24321] ? __lock_acquire+0x7ea0/0x7ea0 [ 1133.981133][T24321] should_fail_ex+0x390/0x4c0 [ 1133.985846][T24321] _copy_from_user+0x2c/0x170 [ 1133.990567][T24321] ___sys_sendmsg+0x1c3/0x360 [ 1133.995274][T24321] ? __sys_sendmsg+0x2a0/0x2a0 [ 1134.000086][T24321] ? __lock_acquire+0x7ea0/0x7ea0 [ 1134.005165][T24321] __se_sys_sendmsg+0x1c3/0x2b0 [ 1134.010050][T24321] ? __x64_sys_sendmsg+0x80/0x80 [ 1134.015039][T24321] ? lockdep_hardirqs_on+0x94/0x140 [ 1134.020272][T24321] do_syscall_64+0x4c/0xa0 [ 1134.024716][T24321] ? clear_bhb_loop+0x60/0xb0 [ 1134.029417][T24321] ? clear_bhb_loop+0x60/0xb0 [ 1134.034121][T24321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.040048][T24321] RIP: 0033:0x7fefd5b9e559 [ 1134.044540][T24321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.064174][T24321] RSP: 002b:00007fefd6b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.072617][T24321] RAX: ffffffffffffffda RBX: 00007fefd5e26090 RCX: 00007fefd5b9e559 [ 1134.080610][T24321] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 1134.088649][T24321] RBP: 00007fefd6b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.096654][T24321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.105090][T24321] R13: 00007fefd5e26128 R14: 00007fefd5e26090 R15: 00007ffe388c7038 [ 1134.113370][T24321] [ 1134.141053][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1134.187241][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1134.239870][T24327] netlink: 'syz.0.6432': attribute type 14 has an invalid length. [ 1134.284509][T24327] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6432'. [ 1134.325489][T23944] device veth0_macvtap entered promiscuous mode [ 1134.369125][T23944] device veth1_macvtap entered promiscuous mode [ 1134.507808][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.572708][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.584168][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.606183][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.626770][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.653776][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.705396][T23944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.722910][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1134.735731][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1134.761315][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1134.784052][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1134.815847][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.851396][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.885909][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.912915][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.923560][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.934779][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.945039][T23944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.956116][T23944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.969913][T23944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.991688][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1135.014201][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.042079][T23944] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.094148][T23944] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.138255][T23944] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.147162][T23944] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.212212][T24363] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1135.273478][T24370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1135.393940][T24370] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1135.447369][T24364] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1135.511755][T14460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.545534][T14460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.597378][T11834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1135.628612][T24382] netlink: 'syz.1.6442': attribute type 10 has an invalid length. [ 1135.636715][T24382] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6442'. [ 1135.709152][T23714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.724762][T23714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.792705][T24386] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6443'. [ 1135.817815][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1137.850479][T23714] wlan1: Trigger new scan to find an IBSS to join [ 1138.918113][T24401] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6341'. [ 1138.987854][T24407] netlink: 'syz.1.6448': attribute type 1 has an invalid length. [ 1138.996091][T24399] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6341'. [ 1139.026708][T24407] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1139.033638][T24406] FAULT_INJECTION: forcing a failure. [ 1139.033638][T24406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.100455][T24406] CPU: 0 PID: 24406 Comm: syz.3.6449 Not tainted syzkaller #0 [ 1139.107980][T24406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1139.118065][T24406] Call Trace: [ 1139.121366][T24406] [ 1139.124315][T24406] dump_stack_lvl+0x188/0x24e [ 1139.129023][T24406] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1139.135201][T24406] ? show_regs_print_info+0x12/0x12 [ 1139.140440][T24406] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1139.146624][T24406] ? dump_stack+0x5/0x12 [ 1139.150896][T24406] should_fail_ex+0x390/0x4c0 [ 1139.155609][T24406] _copy_from_user+0x2c/0x170 [ 1139.160317][T24406] iovec_from_user+0x143/0x360 [ 1139.160371][T24403] netlink: 'syz.0.6447': attribute type 29 has an invalid length. [ 1139.165092][T24406] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1139.165119][T24406] __import_iovec+0x6c/0x510 [ 1139.165145][T24406] ? import_iovec+0x55/0xa0 [ 1139.188261][T24406] import_iovec+0x6f/0xa0 [ 1139.192618][T24406] ___sys_sendmsg+0x252/0x360 [ 1139.197321][T24406] ? __sys_sendmsg+0x2a0/0x2a0 [ 1139.202134][T24406] __se_sys_sendmsg+0x1c3/0x2b0 [ 1139.207010][T24406] ? __x64_sys_sendmsg+0x80/0x80 [ 1139.211981][T24406] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1139.217884][T24406] do_syscall_64+0x4c/0xa0 [ 1139.222308][T24406] ? clear_bhb_loop+0x60/0xb0 [ 1139.226988][T24406] ? clear_bhb_loop+0x60/0xb0 [ 1139.231666][T24406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.237559][T24406] RIP: 0033:0x7f1869b9e559 [ 1139.241974][T24406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.261589][T24406] RSP: 002b:00007f186a9ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.270012][T24406] RAX: ffffffffffffffda RBX: 00007f1869e25fa0 RCX: 00007f1869b9e559 [ 1139.278030][T24406] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000007 [ 1139.286026][T24406] RBP: 00007f186a9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.294001][T24406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.301976][T24406] R13: 00007f1869e26038 R14: 00007f1869e25fa0 R15: 00007ffca41e2348 [ 1139.309964][T24406] [ 1139.334748][T24403] netlink: 'syz.0.6447': attribute type 29 has an invalid length. [ 1139.378910][T24409] netlink: 'syz.0.6447': attribute type 29 has an invalid length. [ 1139.557271][T24415] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1139.696724][T24421] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6452'. [ 1139.718998][T24421] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6452'. [ 1139.874234][T22772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1139.885655][T22772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1139.893882][T22772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1139.904646][T14460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.922240][T24426] netlink: 'syz.4.6454': attribute type 10 has an invalid length. [ 1139.930540][T22772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1139.938659][T22772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1139.946129][T22772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1139.974170][T24426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.984546][T24426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.055282][T24426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.063223][T24426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.071619][T24426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.079568][T24426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.109216][T24426] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1141.852880][T23714] wlan1: Trigger new scan to find an IBSS to join [ 1142.008357][T13249] Bluetooth: hci2: command 0x0409 tx timeout [ 1142.881211][T14460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.915063][T24428] rxe_eth0 speed is unknown, defaulting to 1000 [ 1143.003798][T14460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.052343][T24439] netlink: 'syz.1.6458': attribute type 10 has an invalid length. [ 1143.097614][T24439] __nla_validate_parse: 2 callbacks suppressed [ 1143.097647][T24439] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1143.124884][T24445] FAULT_INJECTION: forcing a failure. [ 1143.124884][T24445] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.153534][T24445] CPU: 1 PID: 24445 Comm: syz.3.6461 Not tainted syzkaller #0 [ 1143.161087][T24445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1143.171216][T24445] Call Trace: [ 1143.174553][T24445] [ 1143.177539][T24445] dump_stack_lvl+0x188/0x24e [ 1143.182314][T24445] ? show_regs_print_info+0x12/0x12 [ 1143.187583][T24445] ? load_image+0x410/0x410 [ 1143.192192][T24445] ? __might_sleep+0xd0/0xd0 [ 1143.196828][T24445] ? __lock_acquire+0x7ea0/0x7ea0 [ 1143.201920][T24445] should_fail_ex+0x390/0x4c0 [ 1143.206642][T24445] should_failslab+0x5/0x20 [ 1143.211195][T24445] slab_pre_alloc_hook+0x59/0x300 [ 1143.216297][T24445] ? aa_sk_perm+0x950/0x950 [ 1143.220907][T24445] kmem_cache_alloc_node+0x5a/0x310 [ 1143.226181][T24445] ? __alloc_skb+0xf9/0x7d0 [ 1143.230782][T24445] __alloc_skb+0xf9/0x7d0 [ 1143.235214][T24445] pfkey_sendmsg+0x19e/0x1140 [ 1143.239988][T24445] ? trace_event_raw_event_lock+0x230/0x230 [ 1143.245960][T24445] ? pfkey_release+0x340/0x340 [ 1143.250765][T24445] ? aa_sk_perm+0x81f/0x950 [ 1143.255349][T24445] ? aa_af_perm+0x340/0x340 [ 1143.259899][T24445] ? __might_fault+0xa6/0x120 [ 1143.264616][T24445] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1143.271065][T24445] ? aa_sock_msg_perm+0x94/0x150 [ 1143.276045][T24445] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1143.281718][T24445] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1143.287049][T24445] ? security_socket_sendmsg+0x7c/0xa0 [ 1143.292566][T24445] ? pfkey_release+0x340/0x340 [ 1143.297384][T24445] ____sys_sendmsg+0x5ed/0x9a0 [ 1143.302231][T24445] ? __sys_sendmsg_sock+0x30/0x30 [ 1143.307290][T24445] ? __import_iovec+0x306/0x510 [ 1143.312216][T24445] ? import_iovec+0x6f/0xa0 [ 1143.316780][T24445] ___sys_sendmsg+0x2a2/0x360 [ 1143.321513][T24445] ? __sys_sendmsg+0x2a0/0x2a0 [ 1143.326384][T24445] ? __lock_acquire+0x7ea0/0x7ea0 [ 1143.331541][T24445] __se_sys_sendmsg+0x1c3/0x2b0 [ 1143.336532][T24445] ? __x64_sys_sendmsg+0x80/0x80 [ 1143.341648][T24445] ? lockdep_hardirqs_on+0x94/0x140 [ 1143.346901][T24445] do_syscall_64+0x4c/0xa0 [ 1143.351349][T24445] ? clear_bhb_loop+0x60/0xb0 [ 1143.356049][T24445] ? clear_bhb_loop+0x60/0xb0 [ 1143.360763][T24445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.366785][T24445] RIP: 0033:0x7f1869b9e559 [ 1143.371232][T24445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.390875][T24445] RSP: 002b:00007f186a9ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.399323][T24445] RAX: ffffffffffffffda RBX: 00007f1869e25fa0 RCX: 00007f1869b9e559 [ 1143.407321][T24445] RDX: 0000000024000800 RSI: 00002000000011c0 RDI: 0000000000000005 [ 1143.415314][T24445] RBP: 00007f186a9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.423308][T24445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.431301][T24445] R13: 00007f1869e26038 R14: 00007f1869e25fa0 R15: 00007ffca41e2348 [ 1143.439354][T24445] [ 1143.518932][T24449] netlink: 'syz.4.6462': attribute type 9 has an invalid length. [ 1143.526964][T24449] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6462'. [ 1143.539473][T14460] team0: Port device netdevsim0 removed [ 1143.555671][T14460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.048551][T24471] netlink: 'syz.1.6464': attribute type 29 has an invalid length. [ 1144.088946][T13249] Bluetooth: hci2: command 0x041b tx timeout [ 1144.897663][T11834] wlan1: Trigger new scan to find an IBSS to join [ 1144.916516][T24475] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6467'. [ 1145.658550][T24461] mac80211_hwsim hwsim377 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1145.682192][T24471] netlink: 'syz.1.6464': attribute type 29 has an invalid length. [ 1145.706821][T24428] chnl_net:caif_netlink_parms(): no params data found [ 1145.725146][T24475] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6467'. [ 1145.746644][T24472] netlink: 'syz.1.6464': attribute type 29 has an invalid length. [ 1146.003301][T24428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.013388][T24428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.039205][T24428] device bridge_slave_0 entered promiscuous mode [ 1146.097433][T24428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.148189][T24428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.181692][T13249] Bluetooth: hci2: command 0x040f tx timeout [ 1146.189505][T24428] device bridge_slave_1 entered promiscuous mode [ 1146.263036][T24487] netlink: 'syz.0.6469': attribute type 10 has an invalid length. [ 1146.285047][T24487] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6469'. [ 1146.472758][T24428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.660661][T24428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.710454][T24428] team0: Port device team_slave_0 added [ 1147.740441][T24428] team0: Port device team_slave_1 added [ 1147.833951][T24428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.849632][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1147.851428][ T47] wlan1: Trigger new scan to find an IBSS to join [ 1147.859768][T24428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.917140][T24428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.946436][T24496] netlink: 'syz.0.6474': attribute type 10 has an invalid length. [ 1147.956868][T24496] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1147.978271][T24501] FAULT_INJECTION: forcing a failure. [ 1147.978271][T24501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.980453][T24428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.000913][T24501] CPU: 0 PID: 24501 Comm: syz.4.6476 Not tainted syzkaller #0 [ 1148.008395][T24501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1148.018544][T24501] Call Trace: [ 1148.021820][T24501] [ 1148.024745][T24501] dump_stack_lvl+0x188/0x24e [ 1148.029430][T24501] ? show_regs_print_info+0x12/0x12 [ 1148.034626][T24501] ? load_image+0x410/0x410 [ 1148.039135][T24501] ? __lock_acquire+0x7ea0/0x7ea0 [ 1148.044193][T24501] ? snprintf+0xe5/0x140 [ 1148.048434][T24501] should_fail_ex+0x390/0x4c0 [ 1148.053116][T24501] _copy_to_user+0x2c/0x130 [ 1148.057617][T24501] simple_read_from_buffer+0xe3/0x150 [ 1148.062989][T24501] proc_fail_nth_read+0x1a6/0x220 [ 1148.068013][T24501] ? proc_fault_inject_write+0x310/0x310 [ 1148.073645][T24501] ? fsnotify_perm+0x248/0x550 [ 1148.078406][T24501] ? proc_fault_inject_write+0x310/0x310 [ 1148.084035][T24501] vfs_read+0x2db/0x960 [ 1148.088196][T24501] ? kernel_read+0x1e0/0x1e0 [ 1148.092789][T24501] ? __fget_files+0x28/0x460 [ 1148.097387][T24501] ? __fget_files+0x3fc/0x460 [ 1148.102072][T24501] ? __fdget_pos+0x2ae/0x360 [ 1148.106657][T24501] ? ksys_read+0x70/0x260 [ 1148.110996][T24501] ksys_read+0x14d/0x260 [ 1148.115255][T24501] ? vfs_write+0x9a0/0x9a0 [ 1148.119680][T24501] ? lockdep_hardirqs_on+0x94/0x140 [ 1148.124880][T24501] do_syscall_64+0x4c/0xa0 [ 1148.129297][T24501] ? clear_bhb_loop+0x60/0xb0 [ 1148.133966][T24501] ? clear_bhb_loop+0x60/0xb0 [ 1148.138643][T24501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1148.144530][T24501] RIP: 0033:0x7f8b35d5ed8e [ 1148.148942][T24501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1148.168542][T24501] RSP: 002b:00007f8b36c86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1148.176952][T24501] RAX: ffffffffffffffda RBX: 00007f8b36c876c0 RCX: 00007f8b35d5ed8e [ 1148.184916][T24501] RDX: 000000000000000f RSI: 00007f8b36c870a0 RDI: 0000000000000008 [ 1148.192882][T24501] RBP: 00007f8b36c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.200845][T24501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.208810][T24501] R13: 00007f8b36026038 R14: 00007f8b36025fa0 R15: 00007ffcd5bc5cb8 [ 1148.216791][T24501] [ 1148.250965][T24503] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1148.260397][T13249] Bluetooth: hci2: command 0x0419 tx timeout [ 1148.287259][T24428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.370897][T24428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.548265][T24505] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1148.930157][T24428] device hsr_slave_0 entered promiscuous mode [ 1148.974834][T24428] device hsr_slave_1 entered promiscuous mode [ 1148.988747][T23714] wlan1: Creating new IBSS network, BSSID 3e:b5:0c:dd:85:dd [ 1149.004513][T24428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.022418][T24428] Cannot create hsr debugfs directory [ 1149.076056][T24511] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1149.441643][T24524] netlink: 'syz.1.6482': attribute type 10 has an invalid length. [ 1149.499051][T24524] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6482'. [ 1151.848331][T23331] wlan1: Trigger new scan to find an IBSS to join [ 1152.839064][T24548] netlink: 'syz.3.6485': attribute type 10 has an invalid length. [ 1152.847473][T24548] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6485'. [ 1152.898374][ T4356] wlan1: Trigger new scan to find an IBSS to join [ 1153.257687][T24561] netlink: 'syz.3.6487': attribute type 29 has an invalid length. [ 1153.368617][T24561] netlink: 'syz.3.6487': attribute type 29 has an invalid length. [ 1154.221258][T24579] netlink: 'syz.4.6492': attribute type 9 has an invalid length. [ 1154.259628][T24579] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6492'. [ 1154.901427][T24476] wlan1: Trigger new scan to find an IBSS to join [ 1156.030721][T23714] wlan1: Creating new IBSS network, BSSID ba:e5:f5:b6:89:e1 [ 1156.106821][T24563] netlink: 'syz.1.6491': attribute type 10 has an invalid length. [ 1156.115613][T24563] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6491'. [ 1156.124897][T24564] netlink: 'syz.3.6487': attribute type 29 has an invalid length. [ 1156.206856][T24584] mac80211_hwsim hwsim373 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1156.388198][T24588] FAULT_INJECTION: forcing a failure. [ 1156.388198][T24588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.438290][T24588] CPU: 0 PID: 24588 Comm: syz.4.6494 Not tainted syzkaller #0 [ 1156.445818][T24588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1156.455894][T24588] Call Trace: [ 1156.459195][T24588] [ 1156.462148][T24588] dump_stack_lvl+0x188/0x24e [ 1156.462360][T24428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1156.466850][T24588] ? show_regs_print_info+0x12/0x12 [ 1156.466874][T24588] ? load_image+0x410/0x410 [ 1156.466893][T24588] ? __lock_acquire+0x7ea0/0x7ea0 [ 1156.488293][T24588] should_fail_ex+0x390/0x4c0 [ 1156.492984][T24588] _copy_from_user+0x2c/0x170 [ 1156.497659][T24588] bpf_prog_test_run_skb+0x263/0x18e0 [ 1156.503033][T24588] ? __fget_files+0x28/0x460 [ 1156.507624][T24588] ? __fget_files+0x3fc/0x460 [ 1156.512312][T24588] ? cpu_online+0xa0/0xa0 [ 1156.516650][T24588] bpf_prog_test_run+0x31c/0x390 [ 1156.521593][T24588] __sys_bpf+0x62b/0x780 [ 1156.525841][T24588] ? bpf_link_show_fdinfo+0x380/0x380 [ 1156.531210][T24588] ? __fget_files+0x403/0x460 [ 1156.535901][T24588] ? lock_chain_count+0x20/0x20 [ 1156.540756][T24588] __x64_sys_bpf+0x78/0x90 [ 1156.545173][T24588] do_syscall_64+0x4c/0xa0 [ 1156.549588][T24588] ? clear_bhb_loop+0x60/0xb0 [ 1156.554269][T24588] ? clear_bhb_loop+0x60/0xb0 [ 1156.558954][T24588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1156.564853][T24588] RIP: 0033:0x7f8b35d9e559 [ 1156.569271][T24588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.588876][T24588] RSP: 002b:00007f8b36c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1156.597295][T24588] RAX: ffffffffffffffda RBX: 00007f8b36025fa0 RCX: 00007f8b35d9e559 [ 1156.605264][T24588] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1156.613237][T24588] RBP: 00007f8b36c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.621210][T24588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.629207][T24588] R13: 00007f8b36026038 R14: 00007f8b36025fa0 R15: 00007ffcd5bc5cb8 [ 1156.637190][T24588] [ 1156.665497][T24428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1156.679256][T24428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1156.702808][T24596] netlink: 'syz.3.6498': attribute type 10 has an invalid length. [ 1156.718305][T24596] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1156.744210][T24428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1156.939994][T24600] FAULT_INJECTION: forcing a failure. [ 1156.939994][T24600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.989341][T24600] CPU: 1 PID: 24600 Comm: syz.4.6499 Not tainted syzkaller #0 [ 1156.996869][T24600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1157.006945][T24600] Call Trace: [ 1157.010242][T24600] [ 1157.013193][T24600] dump_stack_lvl+0x188/0x24e [ 1157.017902][T24600] ? show_regs_print_info+0x12/0x12 [ 1157.023128][T24600] ? load_image+0x410/0x410 [ 1157.027656][T24600] ? __lock_acquire+0x7ea0/0x7ea0 [ 1157.032729][T24600] ? irqentry_enter+0x33/0x50 [ 1157.037446][T24600] should_fail_ex+0x390/0x4c0 [ 1157.042164][T24600] _copy_from_user+0x2c/0x170 [ 1157.046872][T24600] iovec_from_user+0x143/0x360 [ 1157.051665][T24600] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1157.057970][T24600] __import_iovec+0x6c/0x510 [ 1157.062602][T24600] import_iovec+0x6f/0xa0 [ 1157.066958][T24600] ___sys_sendmsg+0x252/0x360 [ 1157.071645][T24600] ? __sys_sendmsg+0x2a0/0x2a0 [ 1157.076426][T24600] ? __lock_acquire+0x7ea0/0x7ea0 [ 1157.081492][T24600] __se_sys_sendmsg+0x1c3/0x2b0 [ 1157.086357][T24600] ? perf_trace_preemptirq_template+0x268/0x320 [ 1157.092613][T24600] ? __x64_sys_sendmsg+0x80/0x80 [ 1157.097559][T24600] ? lockdep_hardirqs_on+0x94/0x140 [ 1157.102762][T24600] do_syscall_64+0x4c/0xa0 [ 1157.107201][T24600] ? clear_bhb_loop+0x60/0xb0 [ 1157.111884][T24600] ? clear_bhb_loop+0x60/0xb0 [ 1157.116556][T24600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1157.122450][T24600] RIP: 0033:0x7f8b35d9e559 [ 1157.126860][T24600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.146466][T24600] RSP: 002b:00007f8b36c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1157.154883][T24600] RAX: ffffffffffffffda RBX: 00007f8b36025fa0 RCX: 00007f8b35d9e559 [ 1157.162854][T24600] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000005 [ 1157.170820][T24600] RBP: 00007f8b36c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.178797][T24600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.186865][T24600] R13: 00007f8b36026038 R14: 00007f8b36025fa0 R15: 00007ffcd5bc5cb8 [ 1157.194852][T24600] [ 1157.309770][T24428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.384069][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1157.420717][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1157.742274][T24428] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.809866][T24610] netlink: 'syz.0.6502': attribute type 22 has an invalid length. [ 1157.825670][T24610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6502'. [ 1157.848419][T24476] wlan1: Creating new IBSS network, BSSID 8a:90:cc:97:2d:0e [ 1158.011775][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.061131][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.081483][T24476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.088719][T24476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.143050][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1158.182534][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1158.219463][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.241980][T24625] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6506'. [ 1158.251877][T24476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.251994][T24476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.366190][T24623] rxe_eth0 speed is unknown, defaulting to 1000 [ 1158.385769][T24628] mac80211_hwsim hwsim377 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1158.440438][T24625] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6506'. [ 1158.888992][T23331] wlan1: Trigger new scan to find an IBSS to join [ 1159.213141][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1159.284965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1159.316937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1159.365265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1159.452257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1159.466988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1159.476622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1159.490728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1159.505056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1159.514868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1159.525842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1159.536706][T24648] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6509'. [ 1159.562817][T24428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1159.585632][T24650] netlink: 'syz.0.6511': attribute type 10 has an invalid length. [ 1159.598819][T24650] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6511'. [ 1159.626322][T14460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.650557][T14460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.518213][T14460] device veth1_macvtap left promiscuous mode [ 1160.525339][T14460] device veth0_macvtap left promiscuous mode [ 1160.536298][T14460] device veth0_vlan left promiscuous mode [ 1160.809462][T24476] wlan1: Trigger new scan to find an IBSS to join [ 1161.002616][T14460] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1161.047474][T14460] team0 (unregistering): Port device team_slave_1 removed [ 1161.093121][T14460] team0 (unregistering): Port device team_slave_0 removed [ 1161.132820][T14460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.446251][T14460] bond0 (unregistering): Released all slaves [ 1161.633081][T24673] FAULT_INJECTION: forcing a failure. [ 1161.633081][T24673] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.656136][T24673] CPU: 0 PID: 24673 Comm: syz.0.6516 Not tainted syzkaller #0 [ 1161.663666][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1161.673744][T24673] Call Trace: [ 1161.677041][T24673] [ 1161.679997][T24673] dump_stack_lvl+0x188/0x24e [ 1161.684714][T24673] ? show_regs_print_info+0x12/0x12 [ 1161.689945][T24673] ? load_image+0x410/0x410 [ 1161.694493][T24673] ? __might_sleep+0xd0/0xd0 [ 1161.699110][T24673] ? __lock_acquire+0x7ea0/0x7ea0 [ 1161.704168][T24673] should_fail_ex+0x390/0x4c0 [ 1161.708879][T24673] should_failslab+0x5/0x20 [ 1161.713406][T24673] slab_pre_alloc_hook+0x59/0x300 [ 1161.718466][T24673] kmem_cache_alloc_lru+0x49/0x2e0 [ 1161.723607][T24673] ? __d_alloc+0x2e/0x6e0 [ 1161.727964][T24673] __d_alloc+0x2e/0x6e0 [ 1161.732147][T24673] ? d_alloc_pseudo+0xe/0x70 [ 1161.736850][T24673] d_alloc_pseudo+0x19/0x70 [ 1161.741382][T24673] alloc_file_pseudo+0xe0/0x200 [ 1161.746275][T24673] ? alloc_empty_file_noaccount+0x80/0x80 [ 1161.752027][T24673] ? bpf_lsm_perf_event_open+0x5/0x10 [ 1161.757422][T24673] anon_inode_getfile+0xc1/0x1a0 [ 1161.762443][T24673] __se_sys_perf_event_open+0xc2a/0x1ec0 [ 1161.768107][T24673] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1161.773786][T24673] ? lockdep_hardirqs_on+0x94/0x140 [ 1161.779021][T24673] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1161.784678][T24673] do_syscall_64+0x4c/0xa0 [ 1161.789116][T24673] ? clear_bhb_loop+0x60/0xb0 [ 1161.793831][T24673] ? clear_bhb_loop+0x60/0xb0 [ 1161.798538][T24673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.804459][T24673] RIP: 0033:0x7ff52019e559 [ 1161.808892][T24673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.828522][T24673] RSP: 002b:00007ff521013028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1161.836954][T24673] RAX: ffffffffffffffda RBX: 00007ff520425fa0 RCX: 00007ff52019e559 [ 1161.844939][T24673] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 1161.852917][T24673] RBP: 00007ff521013090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.860894][T24673] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1161.868870][T24673] R13: 00007ff520426038 R14: 00007ff520425fa0 R15: 00007ffff0ba1188 [ 1161.876863][T24673] [ 1161.886090][T24680] mac80211_hwsim hwsim377 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1161.901838][T24679] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1162.167181][T24691] netlink: 'syz.4.6519': attribute type 22 has an invalid length. [ 1162.191174][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1162.221131][T24693] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6520'. [ 1162.367136][T24698] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6520'. [ 1162.498722][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1162.506267][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1162.578890][T24428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.636987][T24705] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6522'. [ 1162.666653][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1162.703065][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1162.898460][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1163.224817][T24715] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1163.266534][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1163.298948][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1163.326504][T24428] device veth0_vlan entered promiscuous mode [ 1163.335973][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1163.354037][T23714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1163.371607][T24428] device veth1_vlan entered promiscuous mode [ 1163.431577][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1163.451625][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1163.474394][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1163.504035][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1163.526123][T24428] device veth0_macvtap entered promiscuous mode [ 1163.567339][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1163.597189][T24428] device veth1_macvtap entered promiscuous mode [ 1163.694456][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.728008][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.737878][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.796318][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.817215][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.836317][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.847113][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.866434][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.870437][T24734] FAULT_INJECTION: forcing a failure. [ 1163.870437][T24734] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.895148][T24428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.903146][T24476] wlan1: Creating new IBSS network, BSSID 86:7a:4a:6f:02:25 [ 1163.907256][T24734] CPU: 0 PID: 24734 Comm: syz.3.6530 Not tainted syzkaller #0 [ 1163.917937][T24734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1163.928016][T24734] Call Trace: [ 1163.931315][T24734] [ 1163.934272][T24734] dump_stack_lvl+0x188/0x24e [ 1163.938983][T24734] ? show_regs_print_info+0x12/0x12 [ 1163.944209][T24734] ? load_image+0x410/0x410 [ 1163.948762][T24734] ? __might_sleep+0xd0/0xd0 [ 1163.953378][T24734] ? __lock_acquire+0x7ea0/0x7ea0 [ 1163.958440][T24734] should_fail_ex+0x390/0x4c0 [ 1163.963157][T24734] should_failslab+0x5/0x20 [ 1163.967685][T24734] slab_pre_alloc_hook+0x59/0x300 [ 1163.972755][T24734] kmem_cache_alloc_lru+0x49/0x2e0 [ 1163.977896][T24734] ? __d_alloc+0x2e/0x6e0 [ 1163.982249][T24734] __d_alloc+0x2e/0x6e0 [ 1163.986417][T24734] ? d_alloc_pseudo+0xe/0x70 [ 1163.991015][T24734] d_alloc_pseudo+0x19/0x70 [ 1163.995541][T24734] alloc_file_pseudo+0xe0/0x200 [ 1164.000418][T24734] ? alloc_empty_file_noaccount+0x80/0x80 [ 1164.006149][T24734] anon_inode_getfile+0xc1/0x1a0 [ 1164.011176][T24734] __se_sys_perf_event_open+0xc2a/0x1ec0 [ 1164.016805][T24734] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1164.022620][T24734] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1164.028260][T24734] ? lockdep_hardirqs_on+0x94/0x140 [ 1164.033462][T24734] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1164.039094][T24734] do_syscall_64+0x4c/0xa0 [ 1164.043516][T24734] ? clear_bhb_loop+0x60/0xb0 [ 1164.048194][T24734] ? clear_bhb_loop+0x60/0xb0 [ 1164.052872][T24734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1164.058785][T24734] RIP: 0033:0x7f1869b9e559 [ 1164.063199][T24734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.082804][T24734] RSP: 002b:00007f186a9ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1164.091215][T24734] RAX: ffffffffffffffda RBX: 00007f1869e25fa0 RCX: 00007f1869b9e559 [ 1164.099185][T24734] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000600 [ 1164.107154][T24734] RBP: 00007f186a9ae090 R08: 0000000000000002 R09: 0000000000000000 [ 1164.115122][T24734] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1164.123092][T24734] R13: 00007f1869e26038 R14: 00007f1869e25fa0 R15: 00007ffca41e2348 [ 1164.131077][T24734] [ 1164.140461][T24729] mac80211_hwsim hwsim377 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1164.160797][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1164.208937][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1164.250157][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1164.277903][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.305721][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.343831][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.356290][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.373357][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.385452][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.401570][T24428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.414183][T24428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.432357][T24428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.449495][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1164.454649][T24745] netlink: 'syz.0.6531': attribute type 9 has an invalid length. [ 1164.467538][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1164.482487][T24428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.509600][T24745] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1164.517986][T24428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.551524][T24428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.568177][T24428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.718960][T24750] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6532'. [ 1164.798689][T24476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.826117][T24476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.855885][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1164.883860][T14460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.903041][T24760] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6536'. [ 1164.908588][T14460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.966312][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1165.795143][T24766] FAULT_INJECTION: forcing a failure. [ 1165.795143][T24766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.858294][T24766] CPU: 0 PID: 24766 Comm: syz.2.6446 Not tainted syzkaller #0 [ 1165.865837][T24766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1165.875918][T24766] Call Trace: [ 1165.879216][T24766] [ 1165.882163][T24766] dump_stack_lvl+0x188/0x24e [ 1165.886865][T24766] ? show_regs_print_info+0x12/0x12 [ 1165.892082][T24766] ? load_image+0x410/0x410 [ 1165.896602][T24766] ? __lock_acquire+0x7ea0/0x7ea0 [ 1165.901677][T24766] should_fail_ex+0x390/0x4c0 [ 1165.906385][T24766] _copy_from_user+0x2c/0x170 [ 1165.911083][T24766] ___sys_sendmsg+0x1c3/0x360 [ 1165.915905][T24766] ? __sys_sendmsg+0x2a0/0x2a0 [ 1165.920731][T24766] ? __lock_acquire+0x7ea0/0x7ea0 [ 1165.925824][T24766] __se_sys_sendmsg+0x1c3/0x2b0 [ 1165.930692][T24766] ? __x64_sys_sendmsg+0x80/0x80 [ 1165.935682][T24766] ? lockdep_hardirqs_on+0x94/0x140 [ 1165.940906][T24766] do_syscall_64+0x4c/0xa0 [ 1165.945355][T24766] ? clear_bhb_loop+0x60/0xb0 [ 1165.950053][T24766] ? clear_bhb_loop+0x60/0xb0 [ 1165.954750][T24766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.960743][T24766] RIP: 0033:0x7fd3b6f9e559 [ 1165.965169][T24766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.984792][T24766] RSP: 002b:00007fd3b7dd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.993224][T24766] RAX: ffffffffffffffda RBX: 00007fd3b7225fa0 RCX: 00007fd3b6f9e559 [ 1166.001229][T24766] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1166.009325][T24766] RBP: 00007fd3b7dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.017333][T24766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.025525][T24766] R13: 00007fd3b7226038 R14: 00007fd3b7225fa0 R15: 00007fff340a5c38 [ 1166.033545][T24766] [ 1166.172776][T24774] netlink: 'syz.3.6537': attribute type 22 has an invalid length. [ 1166.188593][T24774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1167.473270][T24780] mac80211_hwsim hwsim377 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1167.486158][T24783] netlink: 'syz.0.6542': attribute type 10 has an invalid length. [ 1167.499724][T24783] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6542'. [ 1167.774960][T24791] netlink: 'syz.3.6547': attribute type 9 has an invalid length. [ 1167.798212][T24791] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6547'. [ 1167.871866][T24795] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1167.923502][T24795] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6548'. [ 1168.179645][T24810] netlink: 'syz.0.6553': attribute type 10 has an invalid length. [ 1168.220560][T24810] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6553'. [ 1168.414182][T24815] mac80211_hwsim hwsim363 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1168.831129][T24818] netlink: 'syz.3.6556': attribute type 9 has an invalid length. [ 1168.839685][T24818] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1169.342351][T24825] netlink: 'syz.4.6558': attribute type 10 has an invalid length. [ 1169.350908][T24825] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6558'. [ 1169.853548][T24476] wlan1: Trigger new scan to find an IBSS to join [ 1170.144785][T24825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.152428][T24825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.421225][T24836] FAULT_INJECTION: forcing a failure. [ 1170.421225][T24836] name failslab, interval 1, probability 0, space 0, times 0 [ 1170.465248][T24836] CPU: 0 PID: 24836 Comm: syz.2.6563 Not tainted syzkaller #0 [ 1170.472778][T24836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1170.482857][T24836] Call Trace: [ 1170.486160][T24836] [ 1170.489203][T24836] dump_stack_lvl+0x188/0x24e [ 1170.493914][T24836] ? show_regs_print_info+0x12/0x12 [ 1170.499135][T24836] ? load_image+0x410/0x410 [ 1170.503659][T24836] ? __might_sleep+0xd0/0xd0 [ 1170.508268][T24836] ? __lock_acquire+0x7ea0/0x7ea0 [ 1170.513322][T24836] should_fail_ex+0x390/0x4c0 [ 1170.518028][T24836] should_failslab+0x5/0x20 [ 1170.522547][T24836] slab_pre_alloc_hook+0x59/0x300 [ 1170.527604][T24836] kmem_cache_alloc_lru+0x49/0x2e0 [ 1170.532744][T24836] ? __d_alloc+0x2e/0x6e0 [ 1170.537093][T24836] __d_alloc+0x2e/0x6e0 [ 1170.541266][T24836] ? d_alloc_pseudo+0xe/0x70 [ 1170.545874][T24836] d_alloc_pseudo+0x19/0x70 [ 1170.550393][T24836] alloc_file_pseudo+0xe0/0x200 [ 1170.555315][T24836] ? alloc_empty_file_noaccount+0x80/0x80 [ 1170.561068][T24836] anon_inode_getfile+0xc1/0x1a0 [ 1170.566035][T24836] __se_sys_perf_event_open+0xc2a/0x1ec0 [ 1170.571782][T24836] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1170.577444][T24836] ? lockdep_hardirqs_on+0x94/0x140 [ 1170.582694][T24836] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1170.588567][T24836] do_syscall_64+0x4c/0xa0 [ 1170.593059][T24836] ? clear_bhb_loop+0x60/0xb0 [ 1170.597751][T24836] ? clear_bhb_loop+0x60/0xb0 [ 1170.602447][T24836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1170.608365][T24836] RIP: 0033:0x7fd3b6f9e559 [ 1170.612802][T24836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.632433][T24836] RSP: 002b:00007fd3b7dd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1170.640867][T24836] RAX: ffffffffffffffda RBX: 00007fd3b7225fa0 RCX: 00007fd3b6f9e559 [ 1170.648858][T24836] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 1170.656859][T24836] RBP: 00007fd3b7dd9090 R08: 0000000000000009 R09: 0000000000000000 [ 1170.664864][T24836] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1170.672858][T24836] R13: 00007fd3b7226038 R14: 00007fd3b7225fa0 R15: 00007fff340a5c38 [ 1170.680861][T24836] [ 1170.910108][ T47] wlan1: Trigger new scan to find an IBSS to join [ 1171.412672][T24859] netlink: 'syz.2.6569': attribute type 10 has an invalid length. [ 1171.458713][T24859] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6569'. [ 1172.812161][T24859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.819733][T24859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.867869][T24859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.875137][T24859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.882714][T24859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.889905][T24859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.929692][T24859] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1173.142908][T24864] netlink: 'syz.2.6571': attribute type 10 has an invalid length. [ 1173.175218][T24864] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6571'. [ 1173.192301][T24864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.200250][T24864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.849965][T24476] wlan1: Trigger new scan to find an IBSS to join [ 1174.248287][T13249] Bluetooth: hci5: command 0x0406 tx timeout [ 1174.671218][T24866] mac80211_hwsim hwsim377 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1174.934575][T24889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1176.808095][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1177.292140][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.298609][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.865205][T24476] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1177.877872][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1178.184442][T24913] netlink: 'syz.2.6585': attribute type 22 has an invalid length. [ 1178.210745][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6585'. [ 1178.337852][T24915] netlink: 'syz.4.6587': attribute type 22 has an invalid length. [ 1178.354424][T24915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6587'. [ 1179.118425][T24923] mac80211_hwsim hwsim363 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1179.197849][T24926] netlink: 'syz.0.6591': attribute type 10 has an invalid length. [ 1179.209610][T24926] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6591'. [ 1179.433186][T24936] netlink: 'syz.3.6596': attribute type 10 has an invalid length. [ 1179.515927][T24938] sock: sock_set_timeout: `syz.3.6596' (pid 24938) tries to set negative timeout [ 1179.518395][T24936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.570198][T24936] team0: Port device batadv0 added [ 1179.579916][T24941] netlink: 'syz.0.6597': attribute type 10 has an invalid length. [ 1179.598060][T24941] netlink: 'syz.0.6597': attribute type 10 has an invalid length. [ 1179.659568][T24949] sock: sock_set_timeout: `syz.0.6597' (pid 24949) tries to set negative timeout [ 1179.683675][T24938] FAULT_INJECTION: forcing a failure. [ 1179.683675][T24938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.755779][T24938] CPU: 0 PID: 24938 Comm: syz.3.6596 Not tainted syzkaller #0 [ 1179.763324][T24938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1179.773417][T24938] Call Trace: [ 1179.776725][T24938] [ 1179.779690][T24938] dump_stack_lvl+0x188/0x24e [ 1179.784418][T24938] ? show_regs_print_info+0x12/0x12 [ 1179.789660][T24938] ? load_image+0x410/0x410 [ 1179.794200][T24938] ? __lock_acquire+0x7ea0/0x7ea0 [ 1179.799270][T24938] ? snprintf+0xe5/0x140 [ 1179.803555][T24938] should_fail_ex+0x390/0x4c0 [ 1179.808284][T24938] _copy_to_user+0x2c/0x130 [ 1179.812827][T24938] simple_read_from_buffer+0xe3/0x150 [ 1179.818248][T24938] proc_fail_nth_read+0x1a6/0x220 [ 1179.823315][T24938] ? proc_fault_inject_write+0x310/0x310 [ 1179.828993][T24938] ? fsnotify_perm+0x248/0x550 [ 1179.833795][T24938] ? proc_fault_inject_write+0x310/0x310 [ 1179.839556][T24938] vfs_read+0x2db/0x960 [ 1179.843764][T24938] ? kernel_read+0x1e0/0x1e0 [ 1179.848400][T24938] ? __fget_files+0x28/0x460 [ 1179.853027][T24938] ? __fget_files+0x3fc/0x460 [ 1179.857757][T24938] ? __fdget_pos+0x2ae/0x360 [ 1179.862387][T24938] ? ksys_read+0x70/0x260 [ 1179.866759][T24938] ksys_read+0x14d/0x260 [ 1179.871132][T24938] ? vfs_write+0x9a0/0x9a0 [ 1179.875591][T24938] ? lockdep_hardirqs_on+0x94/0x140 [ 1179.880836][T24938] do_syscall_64+0x4c/0xa0 [ 1179.885288][T24938] ? clear_bhb_loop+0x60/0xb0 [ 1179.889997][T24938] ? clear_bhb_loop+0x60/0xb0 [ 1179.894712][T24938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.900641][T24938] RIP: 0033:0x7f1869b5ed8e [ 1179.905085][T24938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1179.924725][T24938] RSP: 002b:00007f186a98cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1179.933227][T24938] RAX: ffffffffffffffda RBX: 00007f186a98d6c0 RCX: 00007f1869b5ed8e [ 1179.941323][T24938] RDX: 000000000000000f RSI: 00007f186a98d0a0 RDI: 000000000000000b [ 1179.949363][T24938] RBP: 00007f186a98d090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.957366][T24938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.965372][T24938] R13: 00007f1869e26128 R14: 00007f1869e26090 R15: 00007ffca41e2348 [ 1179.973406][T24938] [ 1179.992402][ T4356] wlan1: Trigger new scan to find an IBSS to join [ 1180.582659][T24941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.614325][T24941] team0: Port device batadv0 added [ 1181.172730][T24969] netlink: 'syz.0.6603': attribute type 22 has an invalid length. [ 1181.333877][T24969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6603'. [ 1181.836487][T24981] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6604'. [ 1181.860810][T23714] wlan1: Trigger new scan to find an IBSS to join [ 1183.562083][ T4356] wlan1: Creating new IBSS network, BSSID ba:f4:1b:c4:01:be [ 1183.741604][T24985] netlink: 'syz.4.6607': attribute type 10 has an invalid length. [ 1183.756502][T24985] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1183.770013][T24986] netlink: 'syz.3.6606': attribute type 22 has an invalid length. [ 1183.861453][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6606'. [ 1184.284159][T25007] netlink: 'syz.3.6614': attribute type 22 has an invalid length. [ 1184.292549][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6614'. [ 1184.308838][T25008] FAULT_INJECTION: forcing a failure. [ 1184.308838][T25008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.331163][T25008] CPU: 0 PID: 25008 Comm: syz.2.6612 Not tainted syzkaller #0 [ 1184.338677][T25008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1184.348757][T25008] Call Trace: [ 1184.352049][T25008] [ 1184.354991][T25008] dump_stack_lvl+0x188/0x24e [ 1184.359722][T25008] ? show_regs_print_info+0x12/0x12 [ 1184.364948][T25008] ? load_image+0x410/0x410 [ 1184.369476][T25008] ? __might_fault+0xa6/0x120 [ 1184.374177][T25008] should_fail_ex+0x390/0x4c0 [ 1184.378874][T25008] copyout+0x1b/0x120 [ 1184.382897][T25008] _copy_to_iter+0x482/0x1050 [ 1184.387616][T25008] ? iov_iter_init+0x1f0/0x1f0 [ 1184.392415][T25008] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1184.398676][T25008] ? __check_object_size+0x4f6/0xa70 [ 1184.403988][T25008] __skb_datagram_iter+0xde/0x740 [ 1184.409015][T25008] ? sock_load_diag_module+0x130/0x130 [ 1184.414506][T25008] ? skb_copy_datagram_iter+0x290/0x290 [ 1184.420069][T25008] skb_copy_datagram_iter+0xd7/0x290 [ 1184.425472][T25008] netlink_recvmsg+0x2d0/0xe00 [ 1184.430243][T25008] ? netlink_sendmsg+0xbd0/0xbd0 [ 1184.435177][T25008] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1184.441329][T25008] ? lockdep_hardirqs_on+0x94/0x140 [ 1184.446537][T25008] ? netlink_sendmsg+0xbd0/0xbd0 [ 1184.451487][T25008] ____sys_recvmsg+0x2c8/0x5b0 [ 1184.456298][T25008] ? __sys_recvmsg_sock+0x40/0x40 [ 1184.461328][T25008] ? import_iovec+0x6f/0xa0 [ 1184.465835][T25008] ___sys_recvmsg+0x210/0x590 [ 1184.470506][T25008] ? perf_trace_preemptirq_template+0x268/0x320 [ 1184.476750][T25008] ? __sys_recvmsg+0x2a0/0x2a0 [ 1184.481518][T25008] ? lock_chain_count+0x20/0x20 [ 1184.486376][T25008] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1184.492542][T25008] __x64_sys_recvmsg+0x20d/0x2e0 [ 1184.497501][T25008] ? perf_trace_preemptirq_template+0x268/0x320 [ 1184.503799][T25008] ? ___sys_recvmsg+0x590/0x590 [ 1184.508698][T25008] ? lockdep_hardirqs_on+0x94/0x140 [ 1184.513941][T25008] do_syscall_64+0x4c/0xa0 [ 1184.518366][T25008] ? clear_bhb_loop+0x60/0xb0 [ 1184.523045][T25008] ? clear_bhb_loop+0x60/0xb0 [ 1184.527726][T25008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1184.533618][T25008] RIP: 0033:0x7fd3b6f9e559 [ 1184.538033][T25008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.557641][T25008] RSP: 002b:00007fd3b7db8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1184.566056][T25008] RAX: ffffffffffffffda RBX: 00007fd3b7226090 RCX: 00007fd3b6f9e559 [ 1184.574025][T25008] RDX: 0000000000012000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1184.582080][T25008] RBP: 00007fd3b7db8090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.590065][T25008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.598048][T25008] R13: 00007fd3b7226128 R14: 00007fd3b7226090 R15: 00007fff340a5c38 [ 1184.606043][T25008] [ 1185.108758][T25019] netlink: 'syz.0.6617': attribute type 9 has an invalid length. [ 1185.176071][T25019] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1185.661496][T25025] mac80211_hwsim hwsim363 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1185.811445][T25033] netlink: 463 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1186.054003][ T30] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1186.320723][T25043] netlink: 'syz.2.6622': attribute type 22 has an invalid length. [ 1186.344559][T25043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6622'. [ 1186.631462][T25045] netlink: 'syz.3.6624': attribute type 10 has an invalid length. [ 1186.658310][T25045] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1186.727146][T25049] netlink: 'syz.2.6626': attribute type 10 has an invalid length. [ 1186.737765][T25049] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6626'. [ 1186.816864][T25051] IPv6: Can't replace route, no match found [ 1186.852381][T25051] netlink: 'syz.1.6627': attribute type 1 has an invalid length. [ 1186.881368][T25051] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6627'. [ 1187.866558][T14460] wlan1: Trigger new scan to find an IBSS to join [ 1188.649906][T25072] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1189.239049][T25087] netlink: 'syz.1.6638': attribute type 10 has an invalid length. [ 1189.284274][T25087] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6638'. [ 1189.549618][T25093] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6639'. [ 1190.125159][T25100] netlink: 'syz.0.6643': attribute type 10 has an invalid length. [ 1190.203778][T25100] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6643'. [ 1190.812418][T14460] wlan1: Trigger new scan to find an IBSS to join [ 1190.889208][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1191.688459][T25117] mac80211_hwsim hwsim363 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1193.491403][T25131] netlink: 'syz.3.6652': attribute type 10 has an invalid length. [ 1193.547820][T25131] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6652'. [ 1193.632117][T25137] netlink: 'syz.1.6654': attribute type 10 has an invalid length. [ 1193.710971][T25137] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6654'. [ 1193.848541][T23331] wlan1: Trigger new scan to find an IBSS to join [ 1193.950010][ T4356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1194.728320][T22772] Bluetooth: hci3: command 0x0406 tx timeout [ 1195.649166][T25148] netlink: 'syz.3.6657': attribute type 10 has an invalid length. [ 1195.673221][T25148] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6657'. [ 1195.849137][ T47] wlan1: Trigger new scan to find an IBSS to join [ 1196.348750][T25158] mac80211_hwsim hwsim363 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1196.640105][T25172] netlink: 'syz.3.6665': attribute type 10 has an invalid length. [ 1196.701888][T25172] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6665'. [ 1197.856756][ T4356] wlan1: Trigger new scan to find an IBSS to join [ 1198.447807][T25193] FAULT_INJECTION: forcing a failure. [ 1198.447807][T25193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.517357][T25193] CPU: 1 PID: 25193 Comm: syz.3.6670 Not tainted syzkaller #0 [ 1198.524888][T25193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1198.534964][T25193] Call Trace: [ 1198.538265][T25193] [ 1198.541213][T25193] dump_stack_lvl+0x188/0x24e [ 1198.545921][T25193] ? show_regs_print_info+0x12/0x12 [ 1198.551151][T25193] ? load_image+0x410/0x410 [ 1198.555686][T25193] ? __lock_acquire+0x7ea0/0x7ea0 [ 1198.560749][T25193] should_fail_ex+0x390/0x4c0 [ 1198.565468][T25193] _copy_from_user+0x2c/0x170 [ 1198.570188][T25193] __sys_bpf+0x2ea/0x780 [ 1198.574469][T25193] ? bpf_link_show_fdinfo+0x380/0x380 [ 1198.579891][T25193] ? lock_chain_count+0x20/0x20 [ 1198.584784][T25193] __x64_sys_bpf+0x78/0x90 [ 1198.589246][T25193] do_syscall_64+0x4c/0xa0 [ 1198.593696][T25193] ? clear_bhb_loop+0x60/0xb0 [ 1198.598404][T25193] ? clear_bhb_loop+0x60/0xb0 [ 1198.603120][T25193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1198.609046][T25193] RIP: 0033:0x7f1869b9e559 [ 1198.613482][T25193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.633115][T25193] RSP: 002b:00007f186a9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1198.634861][T25201] netlink: 'syz.0.6671': attribute type 10 has an invalid length. [ 1198.641540][T25193] RAX: ffffffffffffffda RBX: 00007f1869e25fa0 RCX: 00007f1869b9e559 [ 1198.641559][T25193] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000000f [ 1198.641575][T25193] RBP: 00007f186a9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.641586][T25193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.641596][T25193] R13: 00007f1869e26038 R14: 00007f1869e25fa0 R15: 00007ffca41e2348 [ 1198.641623][T25193] [ 1198.695928][T25201] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6671'. [ 1198.818841][T25208] mac80211_hwsim hwsim363 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1199.040924][T23331] wlan1: Creating new IBSS network, BSSID c2:d3:56:20:97:ed [ 1199.323135][T25217] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6679'. [ 1199.345704][T25217] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6679'. [ 1199.377171][T25221] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1199.456605][T25222] netlink: 'syz.2.6677': attribute type 10 has an invalid length. [ 1199.496731][T25222] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6677'. [ 1200.889507][T24476] wlan1: Trigger new scan to find an IBSS to join [ 1201.545873][T25253] netlink: 'syz.0.6690': attribute type 10 has an invalid length. [ 1201.555095][T25253] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6690'. [ 1201.960243][T25255] mac80211_hwsim hwsim379 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1202.065675][T25264] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1202.086786][T25264] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6693'. [ 1202.123243][T25266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6694'. [ 1202.262603][T25269] netlink: 'syz.0.6695': attribute type 10 has an invalid length. [ 1202.287280][T25269] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6695'. [ 1202.531185][T25275] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1203.946703][T25301] FAULT_INJECTION: forcing a failure. [ 1203.946703][T25301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.960350][T25301] CPU: 1 PID: 25301 Comm: syz.1.6704 Not tainted syzkaller #0 [ 1203.967842][T25301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1203.977913][T25301] Call Trace: [ 1203.981198][T25301] [ 1203.984128][T25301] dump_stack_lvl+0x188/0x24e [ 1203.988808][T25301] ? show_regs_print_info+0x12/0x12 [ 1203.994008][T25301] ? load_image+0x410/0x410 [ 1203.998504][T25301] ? __lock_acquire+0x7ea0/0x7ea0 [ 1204.003530][T25301] should_fail_ex+0x390/0x4c0 [ 1204.008211][T25301] _copy_from_user+0x2c/0x170 [ 1204.012883][T25301] __sys_bpf+0x2ea/0x780 [ 1204.017135][T25301] ? bpf_link_show_fdinfo+0x380/0x380 [ 1204.022522][T25301] ? lock_chain_count+0x20/0x20 [ 1204.027388][T25301] __x64_sys_bpf+0x78/0x90 [ 1204.031804][T25301] do_syscall_64+0x4c/0xa0 [ 1204.036219][T25301] ? clear_bhb_loop+0x60/0xb0 [ 1204.040898][T25301] ? clear_bhb_loop+0x60/0xb0 [ 1204.045577][T25301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1204.051471][T25301] RIP: 0033:0x7f117cd9e559 [ 1204.055888][T25301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.075493][T25301] RSP: 002b:00007f117dcbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1204.083926][T25301] RAX: ffffffffffffffda RBX: 00007f117d025fa0 RCX: 00007f117cd9e559 [ 1204.091909][T25301] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1204.099881][T25301] RBP: 00007f117dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.107845][T25301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.115813][T25301] R13: 00007f117d026038 R14: 00007f117d025fa0 R15: 00007ffc4b254a08 [ 1204.123816][T25301] [ 1204.389518][T25309] netlink: 'syz.3.6708': attribute type 10 has an invalid length. [ 1204.398826][T25309] team0: Device veth0_to_bond is up. Set it down before adding it as a team port [ 1204.408846][T25304] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6706'. [ 1204.437467][T25315] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6706'. [ 1204.500594][T25317] netlink: 'syz.3.6710': attribute type 10 has an invalid length. [ 1204.509122][T25317] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6710'. [ 1205.526773][T25342] netlink: 'syz.1.6717': attribute type 10 has an invalid length. [ 1205.575986][T25342] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1205.849336][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1205.855940][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1205.876543][T25349] FAULT_INJECTION: forcing a failure. [ 1205.876543][T25349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.998071][T25349] CPU: 0 PID: 25349 Comm: syz.1.6720 Not tainted syzkaller #0 [ 1206.005686][T25349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1206.015766][T25349] Call Trace: [ 1206.019063][T25349] [ 1206.022010][T25349] dump_stack_lvl+0x188/0x24e [ 1206.026893][T25349] ? show_regs_print_info+0x12/0x12 [ 1206.032121][T25349] ? load_image+0x410/0x410 [ 1206.036646][T25349] ? __lock_acquire+0x7ea0/0x7ea0 [ 1206.041699][T25349] ? snprintf+0xe5/0x140 [ 1206.045975][T25349] should_fail_ex+0x390/0x4c0 [ 1206.050684][T25349] _copy_to_user+0x2c/0x130 [ 1206.055211][T25349] simple_read_from_buffer+0xe3/0x150 [ 1206.060609][T25349] proc_fail_nth_read+0x1a6/0x220 [ 1206.065679][T25349] ? proc_fault_inject_write+0x310/0x310 [ 1206.071348][T25349] ? fsnotify_perm+0x248/0x550 [ 1206.076150][T25349] ? proc_fault_inject_write+0x310/0x310 [ 1206.081812][T25349] vfs_read+0x2db/0x960 [ 1206.086010][T25349] ? kernel_read+0x1e0/0x1e0 [ 1206.090630][T25349] ? __fget_files+0x28/0x460 [ 1206.095249][T25349] ? __fget_files+0x3fc/0x460 [ 1206.099962][T25349] ? __fdget_pos+0x2ae/0x360 [ 1206.104575][T25349] ? ksys_read+0x70/0x260 [ 1206.108931][T25349] ksys_read+0x14d/0x260 [ 1206.113202][T25349] ? vfs_write+0x9a0/0x9a0 [ 1206.117647][T25349] ? lockdep_hardirqs_on+0x94/0x140 [ 1206.122884][T25349] do_syscall_64+0x4c/0xa0 [ 1206.127328][T25349] ? clear_bhb_loop+0x60/0xb0 [ 1206.132023][T25349] ? clear_bhb_loop+0x60/0xb0 [ 1206.136723][T25349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1206.142641][T25349] RIP: 0033:0x7f117cd5ed8e [ 1206.147071][T25349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1206.166715][T25349] RSP: 002b:00007f117dcbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1206.175159][T25349] RAX: ffffffffffffffda RBX: 00007f117dcbf6c0 RCX: 00007f117cd5ed8e [ 1206.183154][T25349] RDX: 000000000000000f RSI: 00007f117dcbf0a0 RDI: 0000000000000005 [ 1206.191145][T25349] RBP: 00007f117dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.199138][T25349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.207133][T25349] R13: 00007f117d026038 R14: 00007f117d025fa0 R15: 00007ffc4b254a08 [ 1206.215141][T25349] [ 1206.276226][T25355] netlink: 'syz.3.6722': attribute type 10 has an invalid length. [ 1206.291179][T25355] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6722'. [ 1206.746159][T25369] netlink: 'syz.4.6727': attribute type 22 has an invalid length. [ 1206.765780][T25369] __nla_validate_parse: 2 callbacks suppressed [ 1206.765816][T25369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6727'. [ 1206.961236][T25379] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6731'. [ 1207.149031][T25383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6732'. [ 1207.165450][T25385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6733'. [ 1207.191522][T25385] FAULT_INJECTION: forcing a failure. [ 1207.191522][T25385] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.209443][T25385] CPU: 0 PID: 25385 Comm: syz.0.6733 Not tainted syzkaller #0 [ 1207.216952][T25385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1207.227028][T25385] Call Trace: [ 1207.230317][T25385] [ 1207.233278][T25385] dump_stack_lvl+0x188/0x24e [ 1207.237981][T25385] ? show_regs_print_info+0x12/0x12 [ 1207.243194][T25385] ? load_image+0x410/0x410 [ 1207.247715][T25385] ? __might_sleep+0xd0/0xd0 [ 1207.252325][T25385] ? __lock_acquire+0x7ea0/0x7ea0 [ 1207.257382][T25385] should_fail_ex+0x390/0x4c0 [ 1207.262097][T25385] should_failslab+0x5/0x20 [ 1207.266612][T25385] slab_pre_alloc_hook+0x59/0x300 [ 1207.271657][T25385] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1207.277420][T25385] __kmem_cache_alloc_node+0x4f/0x270 [ 1207.282822][T25385] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1207.288566][T25385] __kmalloc+0xa3/0x240 [ 1207.292749][T25385] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1207.298321][T25385] ? tomoyo_domain+0xd2/0x120 [ 1207.303032][T25385] ? tomoyo_path_number_perm+0x205/0x650 [ 1207.308689][T25385] tomoyo_path_number_perm+0x22f/0x650 [ 1207.314173][T25385] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1207.319662][T25385] ? common_file_perm+0x171/0x1c0 [ 1207.324743][T25385] ? __fget_files+0x28/0x460 [ 1207.329361][T25385] security_file_ioctl+0x6c/0xa0 [ 1207.334323][T25385] __se_sys_ioctl+0x48/0x170 [ 1207.338940][T25385] do_syscall_64+0x4c/0xa0 [ 1207.343380][T25385] ? clear_bhb_loop+0x60/0xb0 [ 1207.348083][T25385] ? clear_bhb_loop+0x60/0xb0 [ 1207.352779][T25385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1207.358687][T25385] RIP: 0033:0x7ff52019e559 [ 1207.363116][T25385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.382744][T25385] RSP: 002b:00007ff521013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.391182][T25385] RAX: ffffffffffffffda RBX: 00007ff520425fa0 RCX: 00007ff52019e559 [ 1207.399180][T25385] RDX: 0000200000001540 RSI: 000000000000890b RDI: 000000000000000b [ 1207.407180][T25385] RBP: 00007ff521013090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.415178][T25385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.423250][T25385] R13: 00007ff520426038 R14: 00007ff520425fa0 R15: 00007ffff0ba1188 [ 1207.431256][T25385] [ 1207.654257][T25391] netlink: 'syz.4.6734': attribute type 10 has an invalid length. [ 1207.665681][T25391] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1207.712932][T25385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1207.753125][ T47] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1208.446932][T25407] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6738'. [ 1208.492807][T25409] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6738'. [ 1209.419771][T25422] mac80211_hwsim hwsim379 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1209.594473][T25425] netlink: 'syz.3.6745': attribute type 22 has an invalid length. [ 1209.610797][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6745'. [ 1209.730828][T25431] netlink: 'syz.4.6747': attribute type 10 has an invalid length. [ 1209.771646][T25431] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6747'. [ 1209.879719][T25434] tap0: tun_chr_ioctl cmd 1074025677 [ 1209.893392][T25434] tap0: linktype set to 768 [ 1210.439394][T25429] tap0: tun_chr_ioctl cmd 1074025684 [ 1211.477457][T25462] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1211.860825][T14460] wlan1: Trigger new scan to find an IBSS to join [ 1211.909503][T25470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6760'. [ 1212.242587][T25474] netlink: 'syz.1.6762': attribute type 10 has an invalid length. [ 1212.275159][T25474] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6762'. [ 1212.330574][T25478] netlink: 'syz.0.6764': attribute type 22 has an invalid length. [ 1212.401274][T25478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1212.528183][T25477] netlink: 'syz.2.6763': attribute type 10 has an invalid length. [ 1212.566925][T25477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6763'. [ 1212.597554][T25477] bridge0: port 3(veth0_vlan) entered blocking state [ 1212.619085][T25477] bridge0: port 3(veth0_vlan) entered disabled state [ 1212.644067][T25477] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1212.924039][T25499] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6770'. [ 1213.425518][T25505] mac80211_hwsim hwsim377 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1213.858623][ T47] wlan1: Trigger new scan to find an IBSS to join [ 1214.225669][T25517] netlink: 'syz.2.6776': attribute type 10 has an invalid length. [ 1214.233937][T25517] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6776'. [ 1214.309893][T25520] netlink: 22 bytes leftover after parsing attributes in process `syz.3.6777'. [ 1214.412016][T25527] netlink: 'syz.4.6778': attribute type 22 has an invalid length. [ 1214.442144][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6778'. [ 1215.309366][T25539] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6783'. [ 1215.479015][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6786'. [ 1215.862268][T24476] wlan1: Trigger new scan to find an IBSS to join [ 1215.880980][T25553] mac80211_hwsim hwsim363 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1216.246438][T25556] netlink: 'syz.1.6789': attribute type 10 has an invalid length. [ 1216.300959][T25556] bridge0: port 3(veth0_vlan) entered blocking state [ 1216.316733][T25556] bridge0: port 3(veth0_vlan) entered disabled state [ 1216.371874][T25556] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1216.423691][T25566] netlink: 'syz.2.6790': attribute type 10 has an invalid length. [ 1216.711762][T25584] netlink: 'syz.1.6798': attribute type 22 has an invalid length. [ 1217.088140][T25588] __nla_validate_parse: 4 callbacks suppressed [ 1217.088161][T25588] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6799'. [ 1217.644102][T25603] mac80211_hwsim hwsim379 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1217.946384][T25611] netlink: 'syz.1.6806': attribute type 10 has an invalid length. [ 1217.959393][T25611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6806'. [ 1217.969938][T25611] device team0 entered promiscuous mode [ 1217.975656][T25611] device team_slave_0 entered promiscuous mode [ 1217.982666][T25611] device team_slave_1 entered promiscuous mode [ 1217.991206][T25611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.000424][T25611] bridge0: port 3(team0) entered blocking state [ 1218.006984][T25611] bridge0: port 3(team0) entered disabled state [ 1218.227831][T25613] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6807'. [ 1218.347765][T25617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6811'. [ 1218.365053][T25621] netlink: 'syz.2.6810': attribute type 10 has an invalid length. [ 1218.374263][T25621] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1218.404564][T25617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6811'. [ 1218.422711][T25620] netlink: 'syz.3.6808': attribute type 10 has an invalid length. [ 1218.431786][T25620] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1218.492438][T25624] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6812'. [ 1218.513971][T25623] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6811'. [ 1218.540175][T25627] netlink: 'syz.0.6809': attribute type 10 has an invalid length. [ 1218.568364][T25627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6809'. [ 1218.590587][T25627] bridge0: port 3(veth0_vlan) entered blocking state [ 1218.598592][T25627] bridge0: port 3(veth0_vlan) entered disabled state [ 1218.641051][T25632] FAULT_INJECTION: forcing a failure. [ 1218.641051][T25632] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.655412][T25632] CPU: 1 PID: 25632 Comm: syz.4.6814 Not tainted syzkaller #0 [ 1218.656096][T25627] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1218.662892][T25632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1218.662907][T25632] Call Trace: [ 1218.662915][T25632] [ 1218.662923][T25632] dump_stack_lvl+0x188/0x24e [ 1218.662953][T25632] ? show_regs_print_info+0x12/0x12 [ 1218.662982][T25632] ? load_image+0x410/0x410 [ 1218.663003][T25632] ? __might_sleep+0xd0/0xd0 [ 1218.663021][T25632] ? __lock_acquire+0x7ea0/0x7ea0 [ 1218.663050][T25632] should_fail_ex+0x390/0x4c0 [ 1218.663080][T25632] should_failslab+0x5/0x20 [ 1218.663098][T25632] slab_pre_alloc_hook+0x59/0x300 [ 1218.663124][T25632] kmem_cache_alloc_node+0x5a/0x310 [ 1218.663142][T25632] ? __alloc_skb+0xf9/0x7d0 [ 1218.663162][T25632] __alloc_skb+0xf9/0x7d0 [ 1218.663182][T25632] netlink_sendmsg+0x654/0xbd0 [ 1218.663211][T25632] ? netlink_getsockopt+0x550/0x550 [ 1218.663233][T25632] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1218.663260][T25632] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1218.663279][T25632] ? security_socket_sendmsg+0x7c/0xa0 [ 1218.663301][T25632] ? netlink_getsockopt+0x550/0x550 [ 1218.663323][T25632] ____sys_sendmsg+0x5ed/0x9a0 [ 1218.663349][T25632] ? __sys_sendmsg_sock+0x30/0x30 [ 1218.663366][T25632] ? __import_iovec+0x306/0x510 [ 1218.663399][T25632] ? import_iovec+0x6f/0xa0 [ 1218.663426][T25632] ___sys_sendmsg+0x2a2/0x360 [ 1218.663450][T25632] ? __sys_sendmsg+0x2a0/0x2a0 [ 1218.663487][T25632] ? __lock_acquire+0x7ea0/0x7ea0 [ 1218.663533][T25632] __se_sys_sendmsg+0x1c3/0x2b0 [ 1218.663555][T25632] ? __x64_sys_sendmsg+0x80/0x80 [ 1218.663588][T25632] ? lockdep_hardirqs_on+0x94/0x140 [ 1218.663613][T25632] do_syscall_64+0x4c/0xa0 [ 1218.663633][T25632] ? clear_bhb_loop+0x60/0xb0 [ 1218.663653][T25632] ? clear_bhb_loop+0x60/0xb0 [ 1218.663674][T25632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.663694][T25632] RIP: 0033:0x7f8b35d9e559 [ 1218.663711][T25632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.663727][T25632] RSP: 002b:00007f8b36c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.663750][T25632] RAX: ffffffffffffffda RBX: 00007f8b36025fa0 RCX: 00007f8b35d9e559 [ 1218.663763][T25632] RDX: 0000000000040000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1218.663776][T25632] RBP: 00007f8b36c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.663788][T25632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.663800][T25632] R13: 00007f8b36026038 R14: 00007f8b36025fa0 R15: 00007ffcd5bc5cb8 [ 1218.663828][T25632] [ 1219.855153][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1219.855733][T23331] wlan1: Trigger new scan to find an IBSS to join [ 1219.861744][ T47] wlan1: Trigger new scan to find an IBSS to join [ 1220.127129][T25656] netlink: 'syz.1.6821': attribute type 22 has an invalid length. [ 1220.332854][T13249] Bluetooth: hci0: command 0x0406 tx timeout [ 1220.473772][T25664] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.546731][T25664] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.582773][T25664] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.628792][T25664] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.666274][T25664] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.700601][T25664] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.726878][T25664] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1220.964792][T23331] wlan1: Creating new IBSS network, BSSID b2:3c:39:f5:a6:5a [ 1221.122015][T25681] netlink: 'syz.2.6829': attribute type 10 has an invalid length. [ 1221.161076][T25683] netlink: 'syz.0.6830': attribute type 22 has an invalid length. [ 1221.262679][T25690] netlink: 'syz.3.6832': attribute type 10 has an invalid length. [ 1221.284679][T25690] device veth0_vlan left promiscuous mode [ 1221.320392][T25690] device veth0_vlan entered promiscuous mode [ 1221.391284][T25690] bridge0: port 3(veth0_vlan) entered blocking state [ 1221.419637][T25690] bridge0: port 3(veth0_vlan) entered disabled state [ 1221.463357][T25690] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1221.556072][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1221.596581][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 1221.634633][T24476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1221.813951][T25697] netlink: 'syz.0.6836': attribute type 10 has an invalid length. [ 1221.837872][T25697] device team0 entered promiscuous mode [ 1221.879941][T25697] device team_slave_0 entered promiscuous mode [ 1221.905034][T25697] device team_slave_1 entered promiscuous mode [ 1221.925920][T25697] device wlan1 entered promiscuous mode [ 1221.954472][T25697] device batadv0 entered promiscuous mode [ 1221.984580][T25697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.011802][T25697] bridge0: port 3(team0) entered blocking state [ 1222.029800][T25697] bridge0: port 3(team0) entered disabled state [ 1222.109629][T25708] netlink: 'syz.1.6839': attribute type 10 has an invalid length. [ 1222.123461][T25708] __nla_validate_parse: 9 callbacks suppressed [ 1222.123493][T25708] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6839'. [ 1222.178292][T25710] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6840'. [ 1222.345295][T25720] FAULT_INJECTION: forcing a failure. [ 1222.345295][T25720] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.363270][T25720] CPU: 1 PID: 25720 Comm: syz.3.6843 Not tainted syzkaller #0 [ 1222.370876][T25720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1222.380944][T25720] Call Trace: [ 1222.384226][T25720] [ 1222.387196][T25720] dump_stack_lvl+0x188/0x24e [ 1222.391890][T25720] ? show_regs_print_info+0x12/0x12 [ 1222.397089][T25720] ? load_image+0x410/0x410 [ 1222.401596][T25720] ? __might_sleep+0xd0/0xd0 [ 1222.406188][T25720] ? __lock_acquire+0x7ea0/0x7ea0 [ 1222.411222][T25720] should_fail_ex+0x390/0x4c0 [ 1222.415914][T25720] should_failslab+0x5/0x20 [ 1222.420421][T25720] slab_pre_alloc_hook+0x59/0x300 [ 1222.425456][T25720] kmem_cache_alloc_node+0x5a/0x310 [ 1222.430666][T25720] ? __alloc_skb+0xf9/0x7d0 [ 1222.435258][T25720] __alloc_skb+0xf9/0x7d0 [ 1222.439590][T25720] netlink_sendmsg+0x654/0xbd0 [ 1222.444365][T25720] ? netlink_getsockopt+0x550/0x550 [ 1222.449743][T25720] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1222.455385][T25720] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1222.460672][T25720] ? security_socket_sendmsg+0x7c/0xa0 [ 1222.466157][T25720] ? netlink_getsockopt+0x550/0x550 [ 1222.471357][T25720] ____sys_sendmsg+0x5ed/0x9a0 [ 1222.476130][T25720] ? __sys_sendmsg_sock+0x30/0x30 [ 1222.481157][T25720] ? __import_iovec+0x306/0x510 [ 1222.486016][T25720] ? import_iovec+0x6f/0xa0 [ 1222.490526][T25720] ___sys_sendmsg+0x2a2/0x360 [ 1222.495208][T25720] ? __sys_sendmsg+0x2a0/0x2a0 [ 1222.499982][T25720] ? __lock_acquire+0x7ea0/0x7ea0 [ 1222.505023][T25720] __se_sys_sendmsg+0x1c3/0x2b0 [ 1222.509872][T25720] ? __x64_sys_sendmsg+0x80/0x80 [ 1222.514834][T25720] ? lockdep_hardirqs_on+0x94/0x140 [ 1222.520050][T25720] do_syscall_64+0x4c/0xa0 [ 1222.524480][T25720] ? clear_bhb_loop+0x60/0xb0 [ 1222.529340][T25720] ? clear_bhb_loop+0x60/0xb0 [ 1222.534022][T25720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1222.539917][T25720] RIP: 0033:0x7f1869b9e559 [ 1222.544330][T25720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.563940][T25720] RSP: 002b:00007f186a9ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.572359][T25720] RAX: ffffffffffffffda RBX: 00007f1869e25fa0 RCX: 00007f1869b9e559 [ 1222.580338][T25720] RDX: 0000000024000044 RSI: 0000200000003ec0 RDI: 0000000000000003 [ 1222.588352][T25720] RBP: 00007f186a9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.596347][T25720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.604323][T25720] R13: 00007f1869e26038 R14: 00007f1869e25fa0 R15: 00007ffca41e2348 [ 1222.612306][T25720] [ 1222.704161][T24476] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1222.713946][T24476] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1222.768371][T25725] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1222.776906][T25726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1222.805500][T25726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1222.832694][T25727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1222.873057][T25726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6846'. [ 1222.933156][T25730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1222.953724][T25731] validate_nla: 2 callbacks suppressed [ 1222.953764][T25731] netlink: 'syz.1.6857': attribute type 10 has an invalid length. [ 1222.996071][T25731] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6857'. [ 1223.435412][T25751] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1223.481805][T25750] netlink: 'syz.1.6853': attribute type 10 has an invalid length. [ 1224.121979][T25750] bond0: (slave bridge0): Releasing backup interface [ 1224.132829][T25750] team0: Device bridge0 is already an upper device of the team interface [ 1224.144403][T25763] netlink: 'syz.3.6859': attribute type 10 has an invalid length. [ 1224.304500][T25767] FAULT_INJECTION: forcing a failure. [ 1224.304500][T25767] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.375236][T25767] CPU: 1 PID: 25767 Comm: syz.1.6860 Not tainted syzkaller #0 [ 1224.382761][T25767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1224.392846][T25767] Call Trace: [ 1224.396149][T25767] [ 1224.399102][T25767] dump_stack_lvl+0x188/0x24e [ 1224.403816][T25767] ? show_regs_print_info+0x12/0x12 [ 1224.409075][T25767] ? load_image+0x410/0x410 [ 1224.413615][T25767] ? __might_sleep+0xd0/0xd0 [ 1224.418234][T25767] ? __lock_acquire+0x7ea0/0x7ea0 [ 1224.423311][T25777] netlink: 'syz.2.6865': attribute type 10 has an invalid length. [ 1224.423306][T25767] should_fail_ex+0x390/0x4c0 [ 1224.431141][T25767] should_failslab+0x5/0x20 [ 1224.431168][T25767] slab_pre_alloc_hook+0x59/0x300 [ 1224.431188][T25767] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1224.431211][T25767] __kmem_cache_alloc_node+0x4f/0x270 [ 1224.431232][T25767] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 1224.431252][T25767] __kmalloc_node+0xa2/0x240 [ 1224.431272][T25767] memcg_alloc_slab_cgroups+0x81/0x120 [ 1224.431295][T25767] slab_post_alloc_hook+0xba/0x490 [ 1224.431321][T25767] kmem_cache_alloc_node+0x1ad/0x310 [ 1224.431339][T25767] ? __alloc_skb+0xf9/0x7d0 [ 1224.431363][T25767] __alloc_skb+0xf9/0x7d0 [ 1224.431384][T25767] alloc_skb_with_frags+0xa7/0x710 [ 1224.431406][T25767] ? verify_lock_unused+0x140/0x140 [ 1224.431430][T25767] ? __kmem_cache_free+0xb6/0x200 [ 1224.431451][T25767] ? verify_lock_unused+0x140/0x140 [ 1224.431478][T25767] sock_alloc_send_pskb+0x87f/0x9a0 [ 1224.431517][T25767] ? sock_kzfree_s+0x50/0x50 [ 1224.431538][T25767] ? do_raw_spin_lock+0x128/0x2f0 [ 1224.431559][T25767] ? __rwlock_init+0x140/0x140 [ 1224.431579][T25767] ? do_raw_spin_unlock+0x11d/0x230 [ 1224.431600][T25767] unix_dgram_sendmsg+0x5c1/0x16f0 [ 1224.431682][T25767] ? aa_sk_perm+0x81f/0x950 [ 1224.431714][T25767] ? aa_af_perm+0x340/0x340 [ 1224.431737][T25767] ? unix_dgram_poll+0x680/0x680 [ 1224.431754][T25767] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1224.431783][T25767] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1224.431809][T25767] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1224.431828][T25767] ? security_socket_sendmsg+0x7c/0xa0 [ 1224.431850][T25767] ? unix_dgram_poll+0x680/0x680 [ 1224.431868][T25767] ____sys_sendmsg+0x5ed/0x9a0 [ 1224.431888][T25767] ? __might_fault+0xa6/0x120 [ 1224.431912][T25767] ? __sys_sendmsg_sock+0x30/0x30 [ 1224.431930][T25767] ? __import_iovec+0x306/0x510 [ 1224.431976][T25767] ? import_iovec+0x6f/0xa0 [ 1224.432004][T25767] ___sys_sendmsg+0x2a2/0x360 [ 1224.432028][T25767] ? __sys_sendmsg+0x2a0/0x2a0 [ 1224.432066][T25767] ? __lock_acquire+0x7ea0/0x7ea0 [ 1224.432112][T25767] __se_sys_sendmsg+0x1c3/0x2b0 [ 1224.432134][T25767] ? __x64_sys_sendmsg+0x80/0x80 [ 1224.432166][T25767] ? lockdep_hardirqs_on+0x94/0x140 [ 1224.432197][T25767] do_syscall_64+0x4c/0xa0 [ 1224.432216][T25767] ? clear_bhb_loop+0x60/0xb0 [ 1224.432236][T25767] ? clear_bhb_loop+0x60/0xb0 [ 1224.432258][T25767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1224.432277][T25767] RIP: 0033:0x7f117cd9e559 [ 1224.432295][T25767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.432311][T25767] RSP: 002b:00007f117dcbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1224.432332][T25767] RAX: ffffffffffffffda RBX: 00007f117d025fa0 RCX: 00007f117cd9e559 [ 1224.432346][T25767] RDX: 0000000000000000 RSI: 0000200000002280 RDI: 0000000000000004 [ 1224.432359][T25767] RBP: 00007f117dcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.432371][T25767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.432383][T25767] R13: 00007f117d026038 R14: 00007f117d025fa0 R15: 00007ffc4b254a08 [ 1224.432411][T25767] [ 1224.809571][ T47] wlan1: Trigger new scan to find an IBSS to join [ 1225.274278][T25800] netlink: 'syz.1.6873': attribute type 10 has an invalid length. [ 1225.361336][T25800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.369341][T25800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.378296][T25800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.386102][T25800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.697510][T25800] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1225.858556][T23714] wlan1: Creating new IBSS network, BSSID e6:6e:e1:a1:ce:09 [ 1226.467492][T25824] device geneve0 entered promiscuous mode [ 1226.522270][T25826] netlink: 'syz.3.6881': attribute type 10 has an invalid length. [ 1226.906845][T25841] netlink: 'syz.1.6886': attribute type 10 has an invalid length. [ 1227.746476][T25841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.753771][T25841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.338376][T25857] FAULT_INJECTION: forcing a failure. [ 1228.338376][T25857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.398887][T25857] CPU: 1 PID: 25857 Comm: syz.4.6892 Not tainted syzkaller #0 [ 1228.406507][T25857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1228.416626][T25857] Call Trace: [ 1228.419932][T25857] [ 1228.422885][T25857] dump_stack_lvl+0x188/0x24e [ 1228.427593][T25857] ? show_regs_print_info+0x12/0x12 [ 1228.432829][T25857] ? load_image+0x410/0x410 [ 1228.437443][T25857] ? __lock_acquire+0x7ea0/0x7ea0 [ 1228.442501][T25857] should_fail_ex+0x390/0x4c0 [ 1228.447207][T25857] _copy_from_user+0x2c/0x170 [ 1228.451908][T25857] bpf_test_init+0xde/0x140 [ 1228.456443][T25857] bpf_prog_test_run_xdp+0x488/0xf80 [ 1228.461759][T25857] ? __lock_acquire+0x7ea0/0x7ea0 [ 1228.466832][T25857] ? dev_put+0x80/0x80 [ 1228.470939][T25857] ? dev_put+0x80/0x80 [ 1228.475028][T25857] bpf_prog_test_run+0x31c/0x390 [ 1228.479990][T25857] __sys_bpf+0x62b/0x780 [ 1228.484259][T25857] ? bpf_link_show_fdinfo+0x380/0x380 [ 1228.489671][T25857] ? lock_chain_count+0x20/0x20 [ 1228.494562][T25857] __x64_sys_bpf+0x78/0x90 [ 1228.499002][T25857] do_syscall_64+0x4c/0xa0 [ 1228.503444][T25857] ? clear_bhb_loop+0x60/0xb0 [ 1228.508138][T25857] ? clear_bhb_loop+0x60/0xb0 [ 1228.512838][T25857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1228.518855][T25857] RIP: 0033:0x7f8b35d9e559 [ 1228.523290][T25857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.542997][T25857] RSP: 002b:00007f8b36c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1228.551439][T25857] RAX: ffffffffffffffda RBX: 00007f8b36025fa0 RCX: 00007f8b35d9e559 [ 1228.559442][T25857] RDX: 0000000000000050 RSI: 0000200000001ac0 RDI: 000000000000000a [ 1228.567438][T25857] RBP: 00007f8b36c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.575441][T25857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.583436][T25857] R13: 00007f8b36026038 R14: 00007f8b36025fa0 R15: 00007ffcd5bc5cb8 [ 1228.591453][T25857] [ 1228.627800][T25859] netlink: 'syz.0.6893': attribute type 22 has an invalid length. [ 1228.663330][T25859] __nla_validate_parse: 11 callbacks suppressed [ 1228.663368][T25859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6893'. [ 1228.684186][T25861] netlink: 'syz.1.6894': attribute type 10 has an invalid length. [ 1228.700014][T25861] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1229.060032][T25869] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6896'. [ 1229.452452][T25888] netlink: 'syz.4.6904': attribute type 10 has an invalid length. [ 1229.472395][T25888] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6904'. [ 1229.587716][T25891] netlink: 'syz.2.6905': attribute type 10 has an invalid length. [ 1229.624224][T25891] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1230.167279][T25902] netlink: 'syz.4.6907': attribute type 22 has an invalid length. [ 1230.193257][T25902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6907'. [ 1230.518226][T25911] netlink: 'syz.2.6910': attribute type 10 has an invalid length. [ 1230.561254][T25911] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6910'. [ 1230.625447][T25913] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6911'. [ 1230.992711][T25922] FAULT_INJECTION: forcing a failure. [ 1230.992711][T25922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.035353][T25922] CPU: 1 PID: 25922 Comm: syz.4.6913 Not tainted syzkaller #0 [ 1231.042878][T25922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1231.052951][T25922] Call Trace: [ 1231.056268][T25922] [ 1231.059213][T25922] dump_stack_lvl+0x188/0x24e [ 1231.063920][T25922] ? show_regs_print_info+0x12/0x12 [ 1231.069139][T25922] ? load_image+0x410/0x410 [ 1231.073658][T25922] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1231.079839][T25922] should_fail_ex+0x390/0x4c0 [ 1231.084628][T25922] _copy_from_user+0x2c/0x170 [ 1231.089329][T25922] get_user_ifreq+0x67/0x170 [ 1231.093940][T25922] sock_ioctl+0x61f/0x700 [ 1231.098292][T25922] ? sock_poll+0x420/0x420 [ 1231.102769][T25922] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1231.107734][T25922] ? security_file_ioctl+0x7c/0xa0 [ 1231.112868][T25922] ? sock_poll+0x420/0x420 [ 1231.117309][T25922] __se_sys_ioctl+0xfa/0x170 [ 1231.121923][T25922] do_syscall_64+0x4c/0xa0 [ 1231.126355][T25922] ? clear_bhb_loop+0x60/0xb0 [ 1231.131044][T25922] ? clear_bhb_loop+0x60/0xb0 [ 1231.135742][T25922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1231.141650][T25922] RIP: 0033:0x7f8b35d9e559 [ 1231.146077][T25922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.165702][T25922] RSP: 002b:00007f8b36c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1231.174139][T25922] RAX: ffffffffffffffda RBX: 00007f8b36025fa0 RCX: 00007f8b35d9e559 [ 1231.182128][T25922] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000a [ 1231.190118][T25922] RBP: 00007f8b36c87090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.198109][T25922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.206089][T25922] R13: 00007f8b36026038 R14: 00007f8b36025fa0 R15: 00007ffcd5bc5cb8 [ 1231.214094][T25922] [ 1231.506735][T25926] rxe_eth0 speed is unknown, defaulting to 1000 [ 1231.556933][T25932] netlink: 'syz.1.6916': attribute type 22 has an invalid length. [ 1231.578187][T25932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6916'. [ 1231.802499][T25938] rxe_eth0 speed is unknown, defaulting to 1000 [ 1231.986381][T25951] netlink: 'syz.0.6922': attribute type 10 has an invalid length. [ 1231.998344][T25951] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6922'. [ 1232.403598][T25958] netlink: 'syz.0.6925': attribute type 1 has an invalid length. [ 1232.915364][T25974] netlink: 'syz.3.6930': attribute type 10 has an invalid length. [ 1233.521940][T25986] FAULT_INJECTION: forcing a failure. [ 1233.521940][T25986] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.545935][T25986] CPU: 1 PID: 25986 Comm: syz.3.6935 Not tainted syzkaller #0 [ 1233.553452][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1233.563535][T25986] Call Trace: [ 1233.566834][T25986] [ 1233.569785][T25986] dump_stack_lvl+0x188/0x24e [ 1233.574502][T25986] ? show_regs_print_info+0x12/0x12 [ 1233.579728][T25986] ? load_image+0x410/0x410 [ 1233.584257][T25986] ? __might_sleep+0xd0/0xd0 [ 1233.588870][T25986] ? __lock_acquire+0x7ea0/0x7ea0 [ 1233.593918][T25986] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1233.599926][T25986] should_fail_ex+0x390/0x4c0 [ 1233.604628][T25986] should_failslab+0x5/0x20 [ 1233.609170][T25986] slab_pre_alloc_hook+0x59/0x300 [ 1233.614199][T25986] ? lockdep_hardirqs_on+0x94/0x140 [ 1233.619411][T25986] ? __get_vm_area_node+0x122/0x330 [ 1233.624607][T25986] __kmem_cache_alloc_node+0x4f/0x270 [ 1233.629975][T25986] ? __get_vm_area_node+0x122/0x330 [ 1233.635173][T25986] kmalloc_node_trace+0x22/0xe0 [ 1233.640017][T25986] __get_vm_area_node+0x122/0x330 [ 1233.645041][T25986] __vmalloc_node_range+0x357/0x1380 [ 1233.650330][T25986] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1233.655899][T25986] ? aa_get_newest_label+0xf9/0x5b0 [ 1233.661097][T25986] ? free_vm_area+0x50/0x50 [ 1233.665595][T25986] ? end_current_label_crit_section+0x170/0x170 [ 1233.671838][T25986] ? __lock_acquire+0x7ea0/0x7ea0 [ 1233.676857][T25986] ? lock_chain_count+0x20/0x20 [ 1233.681705][T25986] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1233.687247][T25986] __vmalloc+0x76/0x80 [ 1233.691313][T25986] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1233.696855][T25986] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1233.702240][T25986] ? bpf_prog_alloc+0x13/0x1b0 [ 1233.707016][T25986] bpf_prog_alloc+0x1c/0x1b0 [ 1233.711612][T25986] bpf_prog_load+0x7d4/0x1530 [ 1233.716296][T25986] ? map_freeze+0x390/0x390 [ 1233.720799][T25986] ? __might_fault+0xa6/0x120 [ 1233.725478][T25986] ? __might_fault+0xa6/0x120 [ 1233.730147][T25986] ? __might_fault+0xc2/0x120 [ 1233.734813][T25986] ? __might_fault+0xa6/0x120 [ 1233.739488][T25986] ? bpf_lsm_bpf+0x5/0x10 [ 1233.743832][T25986] ? security_bpf+0x7a/0xa0 [ 1233.748330][T25986] __sys_bpf+0x5b8/0x780 [ 1233.752586][T25986] ? bpf_link_show_fdinfo+0x380/0x380 [ 1233.757965][T25986] ? lock_chain_count+0x20/0x20 [ 1233.762817][T25986] __x64_sys_bpf+0x78/0x90 [ 1233.767244][T25986] do_syscall_64+0x4c/0xa0 [ 1233.771656][T25986] ? clear_bhb_loop+0x60/0xb0 [ 1233.776326][T25986] ? clear_bhb_loop+0x60/0xb0 [ 1233.780998][T25986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1233.786888][T25986] RIP: 0033:0x7f1869b9e559 [ 1233.791299][T25986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.810908][T25986] RSP: 002b:00007f186a9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1233.819317][T25986] RAX: ffffffffffffffda RBX: 00007f1869e25fa0 RCX: 00007f1869b9e559 [ 1233.827365][T25986] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1233.835328][T25986] RBP: 00007f186a9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.843308][T25986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.851274][T25986] R13: 00007f1869e26038 R14: 00007f1869e25fa0 R15: 00007ffca41e2348 [ 1233.859250][T25986] [ 1233.933250][T25986] warn_alloc: 1 callbacks suppressed [ 1233.933365][T25986] syz.3.6935: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1233.981747][T25986] CPU: 1 PID: 25986 Comm: syz.3.6935 Not tainted syzkaller #0 [ 1233.989272][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1233.999608][T25986] Call Trace: [ 1234.002915][T25986] [ 1234.005866][T25986] dump_stack_lvl+0x188/0x24e [ 1234.010582][T25986] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1234.017027][T25986] ? show_regs_print_info+0x12/0x12 [ 1234.022248][T25986] ? load_image+0x410/0x410 [ 1234.026772][T25986] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1234.033236][T25986] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1234.039765][T25986] warn_alloc+0x242/0x330 [ 1234.044130][T25986] ? __get_vm_area_node+0x122/0x330 [ 1234.049352][T25986] ? zone_watermark_ok_safe+0x270/0x270 [ 1234.054922][T25986] ? rcu_is_watching+0x11/0xa0 [ 1234.059717][T25986] ? __get_vm_area_node+0x318/0x330 [ 1234.064946][T25986] __vmalloc_node_range+0x37c/0x1380 [ 1234.070279][T25986] ? aa_get_newest_label+0xf9/0x5b0 [ 1234.075510][T25986] ? free_vm_area+0x50/0x50 [ 1234.080044][T25986] ? end_current_label_crit_section+0x170/0x170 [ 1234.086315][T25986] ? __lock_acquire+0x7ea0/0x7ea0 [ 1234.091367][T25986] ? lock_chain_count+0x20/0x20 [ 1234.096235][T25986] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1234.101813][T25986] __vmalloc+0x76/0x80 [ 1234.105901][T25986] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1234.111477][T25986] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 1234.116870][T25986] ? bpf_prog_alloc+0x13/0x1b0 [ 1234.121649][T25986] bpf_prog_alloc+0x1c/0x1b0 [ 1234.126281][T25986] bpf_prog_load+0x7d4/0x1530 [ 1234.131000][T25986] ? map_freeze+0x390/0x390 [ 1234.135525][T25986] ? __might_fault+0xa6/0x120 [ 1234.140240][T25986] ? __might_fault+0xa6/0x120 [ 1234.144939][T25986] ? __might_fault+0xc2/0x120 [ 1234.149640][T25986] ? __might_fault+0xa6/0x120 [ 1234.154351][T25986] ? bpf_lsm_bpf+0x5/0x10 [ 1234.158709][T25986] ? security_bpf+0x7a/0xa0 [ 1234.163238][T25986] __sys_bpf+0x5b8/0x780 [ 1234.167515][T25986] ? bpf_link_show_fdinfo+0x380/0x380 [ 1234.172932][T25986] ? lock_chain_count+0x20/0x20 [ 1234.177823][T25986] __x64_sys_bpf+0x78/0x90 [ 1234.182357][T25986] do_syscall_64+0x4c/0xa0 [ 1234.186806][T25986] ? clear_bhb_loop+0x60/0xb0 [ 1234.191508][T25986] ? clear_bhb_loop+0x60/0xb0 [ 1234.196210][T25986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1234.202125][T25986] RIP: 0033:0x7f1869b9e559 [ 1234.206558][T25986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.226629][T25986] RSP: 002b:00007f186a9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1234.235085][T25986] RAX: ffffffffffffffda RBX: 00007f1869e25fa0 RCX: 00007f1869b9e559 [ 1234.243090][T25986] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1234.251116][T25986] RBP: 00007f186a9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.259235][T25986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.267256][T25986] R13: 00007f1869e26038 R14: 00007f1869e25fa0 R15: 00007ffca41e2348 [ 1234.275271][T25986] [ 1234.335150][T25997] __nla_validate_parse: 13 callbacks suppressed [ 1234.335187][T25997] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6938'. [ 1234.364901][T25986] Mem-Info: [ 1234.378100][T25986] active_anon:32283 inactive_anon:0 isolated_anon:0 [ 1234.378100][T25986] active_file:19670 inactive_file:40429 isolated_file:0 [ 1234.378100][T25986] unevictable:768 dirty:462 writeback:0 [ 1234.378100][T25986] slab_reclaimable:21703 slab_unreclaimable:98635 [ 1234.378100][T25986] mapped:30687 shmem:1364 pagetables:676 [ 1234.378100][T25986] sec_pagetables:0 bounce:0 [ 1234.378100][T25986] kernel_misc_reclaimable:0 [ 1234.378100][T25986] free:1282100 free_pcp:11897 free_cma:0 [ 1234.436222][T25986] Node 0 active_anon:129232kB inactive_anon:0kB active_file:78680kB inactive_file:161512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122748kB dirty:1848kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10260kB pagetables:2804kB sec_pagetables:0kB all_unreclaimable? no [ 1234.472016][T26001] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1234.494460][T26002] validate_nla: 1 callbacks suppressed [ 1234.494494][T26002] netlink: 'syz.4.6941': attribute type 22 has an invalid length. [ 1234.509187][T25986] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1234.568520][T26002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6941'. [ 1234.710319][T26008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1234.722501][T25986] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1234.892333][T25986] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 1234.899220][T25986] Node 0 DMA32 free:1223868kB boost:0kB min:34556kB low:43192kB high:51828kB reserved_highatomic:0KB active_anon:129096kB inactive_anon:0kB active_file:78680kB inactive_file:161512kB unevictable:1536kB writepending:2180kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:24728kB local_pcp:12800kB free_cma:0kB [ 1234.980233][T25986] lowmem_reserve[]: 0 0 1 1 1 [ 1234.985017][T25986] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1235.057449][T25986] lowmem_reserve[]: 0 0 0 0 0 [ 1235.074696][T25986] Node 1 Normal free:3889404kB boost:0kB min:55324kB low:69152kB high:82980kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:23020kB local_pcp:8352kB free_cma:0kB [ 1235.154471][T25986] lowmem_reserve[]: 0 0 0 0 0 [ 1235.174188][T25986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1235.193849][T25986] Node 0 DMA32: 779*4kB (UM) 1134*8kB (UM) 1274*16kB (UME) 972*32kB (UME) 910*64kB (UME) 424*128kB (UME) 251*256kB (UM) 85*512kB (UM) 18*1024kB (UME) 4*2048kB (UM) 223*4096kB (UM) = 1223996kB [ 1235.222711][T25986] Node 0 Normal: 4*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 1235.243864][T25986] Node 1 Normal: 277*4kB (UME) 67*8kB (UME) 29*16kB (UME) 44*32kB (UE) 27*64kB (UME) 13*128kB (UME) 2*256kB (ME) 2*512kB (ME) 0*1024kB 1*2048kB (E) 947*4096kB (UM) = 3889404kB [ 1235.274900][T25986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.302950][T25986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1235.319623][T25986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1235.355679][T25986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1235.402314][T25986] 61463 total pagecache pages [ 1235.426622][T25986] 0 pages in swap cache [ 1235.466605][T25986] Free swap = 124996kB [ 1235.478804][T25986] Total swap = 124996kB [ 1235.483014][T25986] 2097051 pages RAM [ 1235.486838][T25986] 0 pages HighMem/MovableOnly [ 1235.497820][T25986] 419192 pages reserved [ 1235.502211][T25986] 0 pages cma reserved [ 1235.521408][T26014] netlink: 'syz.4.6945': attribute type 10 has an invalid length. [ 1235.543303][T26014] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6945'. [ 1235.981829][T26034] netlink: 'syz.2.6950': attribute type 22 has an invalid length. [ 1235.991910][T26034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6950'. [ 1236.116259][T26038] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1236.270623][T26044] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6955'. [ 1236.357134][T26047] netlink: 'syz.2.6956': attribute type 22 has an invalid length. [ 1236.378587][T26047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6956'. [ 1237.999920][T26065] netlink: 'syz.0.6962': attribute type 10 has an invalid length. [ 1238.018742][T26065] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6962'. [ 1238.159141][T26073] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1238.280060][T26081] netlink: 'syz.0.6966': attribute type 22 has an invalid length. [ 1238.731847][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.746977][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.931126][T26092] mac80211_hwsim hwsim379 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1239.067175][T26095] netlink: 'syz.1.6972': attribute type 1 has an invalid length. [ 1239.207125][T26104] netlink: 'syz.3.6976': attribute type 10 has an invalid length. [ 1239.363493][T26106] netlink: 'syz.4.6977': attribute type 10 has an invalid length. [ 1239.426207][T26106] __nla_validate_parse: 12 callbacks suppressed [ 1239.426242][T26106] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6977'. [ 1240.181088][T26120] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6980'. [ 1240.219152][T26121] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6981'. [ 1240.478924][T26129] FAULT_INJECTION: forcing a failure. [ 1240.478924][T26129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.507634][T26129] CPU: 1 PID: 26129 Comm: syz.0.6984 Not tainted syzkaller #0 [ 1240.515166][T26129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1240.525248][T26129] Call Trace: [ 1240.528551][T26129] [ 1240.531507][T26129] dump_stack_lvl+0x188/0x24e [ 1240.536225][T26129] ? show_regs_print_info+0x12/0x12 [ 1240.541462][T26129] ? load_image+0x410/0x410 [ 1240.546030][T26129] ? __lock_acquire+0x7ea0/0x7ea0 [ 1240.551095][T26129] should_fail_ex+0x390/0x4c0 [ 1240.555822][T26129] _copy_from_user+0x2c/0x170 [ 1240.560614][T26129] get_user_ifreq+0x67/0x170 [ 1240.565235][T26129] sock_ioctl+0x61f/0x700 [ 1240.569582][T26129] ? sock_poll+0x420/0x420 [ 1240.574005][T26129] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1240.578945][T26129] ? security_file_ioctl+0x7c/0xa0 [ 1240.584056][T26129] ? sock_poll+0x420/0x420 [ 1240.588484][T26129] __se_sys_ioctl+0xfa/0x170 [ 1240.593078][T26129] do_syscall_64+0x4c/0xa0 [ 1240.597492][T26129] ? clear_bhb_loop+0x60/0xb0 [ 1240.602163][T26129] ? clear_bhb_loop+0x60/0xb0 [ 1240.606845][T26129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1240.612743][T26129] RIP: 0033:0x7ff52019e559 [ 1240.617179][T26129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.636786][T26129] RSP: 002b:00007ff521013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.645199][T26129] RAX: ffffffffffffffda RBX: 00007ff520425fa0 RCX: 00007ff52019e559 [ 1240.653185][T26129] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 1240.661155][T26129] RBP: 00007ff521013090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.669121][T26129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.677083][T26129] R13: 00007ff520426038 R14: 00007ff520425fa0 R15: 00007ffff0ba1188 [ 1240.685078][T26129] [ 1240.808585][T22772] Bluetooth: hci1: command 0x0406 tx timeout [ 1240.903896][T23714] wlan1: Trigger new scan to find an IBSS to join [ 1240.982860][T26136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1241.034860][T26140] mac80211_hwsim hwsim379 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1241.181315][T26147] netlink: 'syz.0.6990': attribute type 22 has an invalid length. [ 1241.204382][T26147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6990'. [ 1241.721249][T26152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1241.737180][T26152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1241.753578][T26152] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1241.795257][T26152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1241.832752][T26152] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1242.025223][T26152] netlink: 'syz.2.6991': attribute type 1 has an invalid length. [ 1242.083110][T26158] netlink: 'syz.1.6992': attribute type 10 has an invalid length. [ 1242.464831][T26174] mac80211_hwsim hwsim379 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1243.523961][T26187] mac80211_hwsim hwsim373 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1244.436705][T26204] netlink: 'syz.3.7011': attribute type 10 has an invalid length. [ 1244.445584][T26204] __nla_validate_parse: 8 callbacks suppressed [ 1244.445613][T26204] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7011'. [ 1244.536396][T26205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7010'. [ 1244.619056][T26205] FAULT_INJECTION: forcing a failure. [ 1244.619056][T26205] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.647205][T26205] CPU: 0 PID: 26205 Comm: syz.0.7010 Not tainted syzkaller #0 [ 1244.654733][T26205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1244.664808][T26205] Call Trace: [ 1244.668125][T26205] [ 1244.671088][T26205] dump_stack_lvl+0x188/0x24e [ 1244.675862][T26205] ? show_regs_print_info+0x12/0x12 [ 1244.681102][T26205] ? load_image+0x410/0x410 [ 1244.685631][T26205] ? __might_sleep+0xd0/0xd0 [ 1244.690248][T26205] ? __lock_acquire+0x7ea0/0x7ea0 [ 1244.695302][T26205] should_fail_ex+0x390/0x4c0 [ 1244.700022][T26205] should_failslab+0x5/0x20 [ 1244.704729][T26205] slab_pre_alloc_hook+0x59/0x300 [ 1244.709777][T26205] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1244.715542][T26205] __kmem_cache_alloc_node+0x4f/0x270 [ 1244.720944][T26205] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1244.726694][T26205] __kmalloc+0xa3/0x240 [ 1244.730884][T26205] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1244.736459][T26205] ? tomoyo_domain+0xd2/0x120 [ 1244.741166][T26205] ? tomoyo_path_number_perm+0x205/0x650 [ 1244.746828][T26205] tomoyo_path_number_perm+0x22f/0x650 [ 1244.752326][T26205] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1244.757814][T26205] ? common_file_perm+0x171/0x1c0 [ 1244.763424][T26205] ? __fget_files+0x28/0x460 [ 1244.768061][T26205] security_file_ioctl+0x6c/0xa0 [ 1244.773054][T26205] __se_sys_ioctl+0x48/0x170 [ 1244.777682][T26205] do_syscall_64+0x4c/0xa0 [ 1244.782118][T26205] ? clear_bhb_loop+0x60/0xb0 [ 1244.786815][T26205] ? clear_bhb_loop+0x60/0xb0 [ 1244.791517][T26205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.797435][T26205] RIP: 0033:0x7ff52019e559 [ 1244.801872][T26205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.821504][T26205] RSP: 002b:00007ff521013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.829955][T26205] RAX: ffffffffffffffda RBX: 00007ff520425fa0 RCX: 00007ff52019e559 [ 1244.838048][T26205] RDX: 0000200000001580 RSI: 000000000000890c RDI: 000000000000000a [ 1244.846052][T26205] RBP: 00007ff521013090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.854085][T26205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.862081][T26205] R13: 00007ff520426038 R14: 00007ff520425fa0 R15: 00007ffff0ba1188 [ 1244.870096][T26205] [ 1244.884278][ T4356] wlan1: Trigger new scan to find an IBSS to join [ 1244.900182][T26205] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1245.560102][T26219] mac80211_hwsim hwsim379 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1245.743760][T26225] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7018'. [ 1245.830488][T26229] netlink: 'syz.2.7020': attribute type 22 has an invalid length. [ 1245.851312][ T4356] wlan1: Trigger new scan to find an IBSS to join [ 1245.851324][ T47] wlan1: Trigger new scan to find an IBSS to join [ 1245.869552][T26229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1245.897824][T26232] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7021'. [ 1246.935292][T23331] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1247.193814][T26250] mac80211_hwsim hwsim375 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1247.203748][ T4356] ------------[ cut here ]------------ [ 1247.209942][ T4356] WARNING: CPU: 0 PID: 4356 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1247.219970][ T4356] Modules linked in: [ 1247.223898][ T4356] CPU: 0 PID: 4356 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1247.231548][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1247.241670][ T4356] Workqueue: cfg80211 cfg80211_event_work [ 1247.247592][ T4356] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1247.253931][ T4356] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 85 e7 f7 0f 0b eb bf e8 07 85 e7 f7 <0f> 0b eb b6 e8 fe 84 e7 f7 0f 0b e9 82 fd ff ff e8 f2 84 e7 f7 0f [ 1247.273738][ T4356] RSP: 0018:ffffc90004897ac0 EFLAGS: 00010293 [ 1247.279919][ T4356] RAX: ffffffff899ac179 RBX: 1ffff92000912f5c RCX: ffff8880249fbc00 [ 1247.288372][ T4356] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf7160 [ 1247.296390][ T4356] RBP: ffffc90004897b70 R08: ffffffff919342af R09: 1ffffffff2326855 [ 1247.304454][ T4356] R10: dffffc0000000000 R11: fffffbfff2326856 R12: ffff888057d335b8 [ 1247.312494][ T4356] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88804ced8c90 [ 1247.320526][ T4356] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1247.329519][ T4356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1247.336184][ T4356] CR2: 00007ff5201ebc40 CR3: 00000000602e3000 CR4: 00000000003506f0 [ 1247.341857][T26257] netlink: 'syz.3.7029': attribute type 10 has an invalid length. [ 1247.344209][ T4356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1247.360188][ T4356] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1247.368221][ T4356] Call Trace: [ 1247.371617][ T4356] [ 1247.374579][ T4356] ? trace_rdev_return_void+0x240/0x240 [ 1247.374774][T26257] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1247.380213][ T4356] cfg80211_process_wdev_events+0x359/0x4d0 [ 1247.380258][ T4356] ? process_one_work+0x7b4/0x1160 [ 1247.380396][ T4356] cfg80211_process_rdev_events+0x9d/0x110 [ 1247.380423][ T4356] cfg80211_event_work+0x2b/0x40 [ 1247.380446][ T4356] process_one_work+0x8ab/0x1160 [ 1247.380486][ T4356] ? worker_detach_from_pool+0x240/0x240 [ 1247.380507][ T4356] ? _raw_spin_lock_irq+0x86/0xf0 [ 1247.380532][ T4356] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1247.380552][ T4356] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1247.437558][ T4356] ? wq_worker_running+0x97/0x190 [ 1247.442655][ T4356] worker_thread+0xaf5/0x12a0 [ 1247.447393][ T4356] kthread+0x29d/0x330 [ 1247.451855][ T4356] ? worker_clr_flags+0x1a0/0x1a0 [ 1247.457013][ T4356] ? kthread_blkcg+0xd0/0xd0 [ 1247.461692][ T4356] ret_from_fork+0x1f/0x30 [ 1247.466197][ T4356] [ 1247.469305][ T4356] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1247.476609][ T4356] CPU: 0 PID: 4356 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1247.484176][ T4356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1247.494240][ T4356] Workqueue: cfg80211 cfg80211_event_work [ 1247.500156][ T4356] Call Trace: [ 1247.503433][ T4356] [ 1247.506359][ T4356] dump_stack_lvl+0x188/0x24e [ 1247.511054][ T4356] ? memcpy+0x3c/0x60 [ 1247.515038][ T4356] ? show_regs_print_info+0x12/0x12 [ 1247.520233][ T4356] ? load_image+0x410/0x410 [ 1247.524744][ T4356] panic+0x2d3/0x710 [ 1247.528644][ T4356] ? bpf_jit_dump+0xd0/0xd0 [ 1247.533181][ T4356] ? ret_from_fork+0x1f/0x30 [ 1247.537773][ T4356] __warn+0x2f8/0x4f0 [ 1247.541772][ T4356] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1247.547323][ T4356] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1247.552866][ T4356] report_bug+0x2ba/0x4f0 [ 1247.557266][ T4356] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1247.562818][ T4356] handle_bug+0x3a/0x70 [ 1247.566971][ T4356] exc_invalid_op+0x16/0x40 [ 1247.571574][ T4356] asm_exc_invalid_op+0x16/0x20 [ 1247.576439][ T4356] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1247.582602][ T4356] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 85 e7 f7 0f 0b eb bf e8 07 85 e7 f7 <0f> 0b eb b6 e8 fe 84 e7 f7 0f 0b e9 82 fd ff ff e8 f2 84 e7 f7 0f [ 1247.603002][ T4356] RSP: 0018:ffffc90004897ac0 EFLAGS: 00010293 [ 1247.609248][ T4356] RAX: ffffffff899ac179 RBX: 1ffff92000912f5c RCX: ffff8880249fbc00 [ 1247.617225][ T4356] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf7160 [ 1247.625210][ T4356] RBP: ffffc90004897b70 R08: ffffffff919342af R09: 1ffffffff2326855 [ 1247.633179][ T4356] R10: dffffc0000000000 R11: fffffbfff2326856 R12: ffff888057d335b8 [ 1247.641144][ T4356] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88804ced8c90 [ 1247.649137][ T4356] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1247.654706][ T4356] ? trace_rdev_return_void+0x240/0x240 [ 1247.660263][ T4356] cfg80211_process_wdev_events+0x359/0x4d0 [ 1247.666168][ T4356] ? process_one_work+0x7b4/0x1160 [ 1247.671286][ T4356] cfg80211_process_rdev_events+0x9d/0x110 [ 1247.677118][ T4356] cfg80211_event_work+0x2b/0x40 [ 1247.682097][ T4356] process_one_work+0x8ab/0x1160 [ 1247.687073][ T4356] ? worker_detach_from_pool+0x240/0x240 [ 1247.692714][ T4356] ? _raw_spin_lock_irq+0x86/0xf0 [ 1247.697749][ T4356] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1247.702776][ T4356] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1247.708322][ T4356] ? wq_worker_running+0x97/0x190 [ 1247.713374][ T4356] worker_thread+0xaf5/0x12a0 [ 1247.718092][ T4356] kthread+0x29d/0x330 [ 1247.722159][ T4356] ? worker_clr_flags+0x1a0/0x1a0 [ 1247.727182][ T4356] ? kthread_blkcg+0xd0/0xd0 [ 1247.731768][ T4356] ret_from_fork+0x1f/0x30 [ 1247.736199][ T4356] [ 1247.739380][ T4356] Kernel Offset: disabled [ 1247.743760][ T4356] Rebooting in 86400 seconds..