last executing test programs: 28m53.882111279s ago: executing program 0 (id=3814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x50) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="1e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100"/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) 28m52.90423494s ago: executing program 0 (id=3826): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 28m52.778719424s ago: executing program 0 (id=3818): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) 28m52.727256236s ago: executing program 0 (id=3819): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8010, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2d}, 0x94) 28m51.349468599s ago: executing program 0 (id=3835): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000780)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8010, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2d}, 0x94) 28m50.401591779s ago: executing program 0 (id=3828): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x39}, 0x28) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) mkdir(0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000058000000bf0900000000000066090600000003e704000000060000001801"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, r2, 0x4002, 0x5}, 0x50) 28m35.002596876s ago: executing program 32 (id=3828): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x39}, 0x28) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) mkdir(0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000058000000bf0900000000000066090600000003e704000000060000001801"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, 0x0}, 0x20) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, r2, 0x4002, 0x5}, 0x50) 7.380672985s ago: executing program 5 (id=12335): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00002000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.97386607s ago: executing program 5 (id=12351): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000840)}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d970e", 0x2c}, {&(0x7f0000000740)}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000004000000"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937a6", 0x13}], 0x2, 0x0, 0x0, 0x900}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ed02"], 0xfe33) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2400c814) recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2e", 0x69}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r8, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x2, 0x8, 0xc, 0x7, 0x0, 0x8, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000080), 0xbe133ca444aeae05}, 0x6200, 0x1, 0x7ff, 0x9, 0x0, 0x2, 0xf801, 0x0, 0x7ff, 0x0, 0x9}, r8, 0x0, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)}, {&(0x7f0000000400)}], 0x2}, 0x40) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 4.309691583s ago: executing program 5 (id=12356): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="25a58161926931d08a4f18a3eefceb8893b11fc84c2bed4d646c5e13751a0f1b18c148555d9b6813d5b378180d97ab5d72cce8ac27c8f435f97ab16034b591d810e35749feac04205b3715cfc4baddc3502943a548ec8c8edcc62136c69ef2cae98fedca84dcf4d73e69b81664d4f935b33815be3902c42ecd2ca25d0902e507b4cb6995f9171df3feae0900030f84730b36c7b5f37d9bf4df89b044d395620578757590666ff1898cf0e3e841c48abd3fde47149d56302954fb2acf10eb673f84aa55ddef285885bea879c18550e9aa5c622a71af4d90832f71d37b0da42823abd8cf2d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x18, &(0x7f0000000400)=""/24, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x0, 0x80, 0x2}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f00000008c0)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5], &(0x7f0000000900)=[{0x0, 0x1, 0x4, 0x2}, {0x1, 0x7, 0x9, 0xa}, {0x2, 0x5, 0xe, 0x7}, {0x4, 0x3, 0xc, 0x4}, {0x0, 0x1, 0xa, 0xb}, {0x1, 0x2, 0xc, 0x1}, {0x4, 0x3, 0xc}]}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r9 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x33, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) (rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) 3.811535968s ago: executing program 5 (id=12359): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x1000000, 0x1, 0x1ff}]}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) close(r1) 3.632667204s ago: executing program 3 (id=12361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x13, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.488602539s ago: executing program 5 (id=12362): r0 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b904020208a606007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003478800036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e1d360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ccfccbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3.484738789s ago: executing program 3 (id=12363): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) 3.410385541s ago: executing program 1 (id=12364): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/134, 0x86}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f00000001c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000100)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000740)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x6, 0x9, 0x2}, 0x10, 0xdd1, r4, 0x8, 0x0, &(0x7f0000000880)=[{0x4, 0x3, 0x5, 0xb}, {0x3, 0x3, 0xf, 0xb}, {0x3, 0x4, 0x2, 0x5}, {0x4, 0x5, 0x7, 0xb}, {0x2, 0x3, 0xe, 0x9}, {0x5, 0x5, 0x2, 0x5}, {0x2, 0x5, 0xb, 0x1}, {0x5, 0x4, 0x6, 0xa}], 0x10, 0x5e94}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) write$cgroup_devices(r5, &(0x7f0000000ac0)={'b', ' *:* ', 'wm\x00'}, 0x9) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 3.217289267s ago: executing program 5 (id=12367): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f00000002c0), 0x4) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30a) 3.178853299s ago: executing program 3 (id=12368): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00002000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.868106869s ago: executing program 1 (id=12370): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0}, 0x94) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000006000000020000000000000e0200ba0000000000020000000000000c0000000000005f02"], &(0x7f0000000040)=""/203, 0x3a, 0xcb, 0x1}, 0x28) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x94) 2.636338746s ago: executing program 2 (id=12371): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r8, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="350400002f00050f37153e360c040180060410000000000000000000000000000000000000000000bc1af12468cb7f0816262926e6e344132f4dfe340b48e00bcd7302720770a1a00cac102dab82e15ff5351ce284f15d0c7f14172553fe66b542b9c69d730900280faaa95fdfcde9c90fe0c4825a00"/130, 0x82}, {&(0x7f0000000600)="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", 0x3b3}], 0x2}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1.741358434s ago: executing program 2 (id=12372): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) 1.689644166s ago: executing program 4 (id=12373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.568930539s ago: executing program 1 (id=12374): socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffc01, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x100, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$kcm(0x2, 0x2, 0x73) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.56797926s ago: executing program 3 (id=12375): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x20, &(0x7f0000000880)=[{&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000003a40)=""/4103, 0x1007}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000001d00)=""/145, 0x91}, {&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000002080)=""/207, 0xcf}, {&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000800)=""/69, 0x45}], 0xa}, 0x40000020) 1.471962673s ago: executing program 2 (id=12376): bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 1.464832703s ago: executing program 4 (id=12377): r0 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b904020208a606007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003478800036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e1d360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ccfccbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.185733252s ago: executing program 2 (id=12378): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) 1.063493206s ago: executing program 4 (id=12379): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32, 0x80fe}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000140)) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) 1.060615026s ago: executing program 1 (id=12380): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/134, 0x86}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x8, &(0x7f00000001c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000100)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000740)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x6, 0x9, 0x2}, 0x10, 0xdd1, r4, 0x8, 0x0, &(0x7f0000000880)=[{0x4, 0x3, 0x5, 0xb}, {0x3, 0x3, 0xf, 0xb}, {0x3, 0x4, 0x2, 0x5}, {0x4, 0x5, 0x7, 0xb}, {0x2, 0x3, 0xe, 0x9}, {0x5, 0x5, 0x2, 0x5}, {0x2, 0x5, 0xb, 0x1}, {0x5, 0x4, 0x6, 0xa}], 0x10, 0x5e94}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) write$cgroup_devices(r5, &(0x7f0000000ac0)={'b', ' *:* ', 'wm\x00'}, 0x9) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 960.741689ms ago: executing program 3 (id=12381): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe}, 0x2042) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008010) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 820.789264ms ago: executing program 2 (id=12382): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r8, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="350400002f00050f37153e360c040180060410000000000000000000000000000000000000000000bc1af12468cb7f0816262926e6e344132f4dfe340b48e00bcd7302720770a1a00cac102dab82e15ff5351ce284f15d0c7f14172553fe66b542b9c69d730900280faaa95fdfcde9c90fe0c4825a00"/130, 0x82}, {&(0x7f0000000600)="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", 0x3b3}], 0x2}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 755.939416ms ago: executing program 3 (id=12383): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d970e", 0x2c}, {&(0x7f0000000740)}], 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000004000000"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937a6", 0x13}], 0x2, 0x0, 0x0, 0x900}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ed02"], 0xfe33) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2400c814) recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2e", 0x69}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r8, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x2, 0x8, 0xc, 0x7, 0x0, 0x8, 0x40010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000080), 0xbe133ca444aeae05}, 0x6200, 0x1, 0x7ff, 0x9, 0x0, 0x2, 0xf801, 0x0, 0x7ff, 0x0, 0x9}, r8, 0x0, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)}, {&(0x7f0000000400)}], 0x2}, 0x40) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 580.215742ms ago: executing program 4 (id=12384): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f", 0x4a}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 576.888242ms ago: executing program 1 (id=12394): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32, 0x80fe}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000140)) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x102) 402.157757ms ago: executing program 4 (id=12385): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r0, 0x1, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r0, r0, 0x26, 0x20, 0x0, @void, @void, @void, @value, r2}, 0x20) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) 400.925487ms ago: executing program 2 (id=12386): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00002000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.831608ms ago: executing program 4 (id=12387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=12388): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) (fail_nth: 4) kernel console output (not intermixed with test programs): _kmem_cache_alloc_node+0x4f/0x260 [ 2290.683390][ T6568] ? __get_vm_area_node+0x122/0x330 [ 2290.688579][ T6568] kmalloc_node_trace+0x22/0xe0 [ 2290.693428][ T6568] __get_vm_area_node+0x122/0x330 [ 2290.698449][ T6568] __vmalloc_node_range+0x357/0x13b0 [ 2290.703728][ T6568] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2290.709284][ T6568] ? free_vm_area+0x50/0x50 [ 2290.713777][ T6568] ? end_current_label_crit_section+0x170/0x170 [ 2290.720010][ T6568] ? __lock_acquire+0x7d10/0x7d10 [ 2290.725029][ T6568] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2290.730567][ T6568] __vmalloc+0x76/0x80 [ 2290.734628][ T6568] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2290.740171][ T6568] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2290.745538][ T6568] ? bpf_lsm_capable+0x5/0x10 [ 2290.750211][ T6568] bpf_prog_alloc+0x1c/0x1b0 [ 2290.754804][ T6568] bpf_prog_load+0x7c9/0x1560 [ 2290.759486][ T6568] ? map_freeze+0x390/0x390 [ 2290.763982][ T6568] ? __might_fault+0xa6/0x120 [ 2290.768662][ T6568] ? __might_fault+0xa6/0x120 [ 2290.773327][ T6568] ? __might_fault+0xc2/0x120 [ 2290.778426][ T6568] ? __might_fault+0xa6/0x120 [ 2290.783091][ T6568] ? bpf_lsm_bpf+0x5/0x10 [ 2290.787429][ T6568] ? security_bpf+0x7a/0xa0 [ 2290.791949][ T6568] __sys_bpf+0x5b8/0x780 [ 2290.796192][ T6568] ? bpf_link_show_fdinfo+0x380/0x380 [ 2290.801574][ T6568] ? lock_chain_count+0x20/0x20 [ 2290.806430][ T6568] __x64_sys_bpf+0x78/0x90 [ 2290.810849][ T6568] do_syscall_64+0x4c/0xa0 [ 2290.815262][ T6568] ? clear_bhb_loop+0x60/0xb0 [ 2290.819931][ T6568] ? clear_bhb_loop+0x60/0xb0 [ 2290.824602][ T6568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2290.830491][ T6568] RIP: 0033:0x7f1af899ce59 [ 2290.834917][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2290.854534][ T6568] RSP: 002b:00007f1af9885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2290.862946][ T6568] RAX: ffffffffffffffda RBX: 00007f1af8c15fa0 RCX: 00007f1af899ce59 [ 2290.870912][ T6568] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2290.878877][ T6568] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.886839][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.894801][ T6568] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2290.902786][ T6568] [ 2291.041814][ T6575] netlink: 'syz.5.11508': attribute type 39 has an invalid length. [ 2291.438068][ T6587] FAULT_INJECTION: forcing a failure. [ 2291.438068][ T6587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2291.555860][ T6587] CPU: 0 PID: 6587 Comm: syz.5.11516 Not tainted syzkaller #0 [ 2291.563382][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2291.573453][ T6587] Call Trace: [ 2291.576744][ T6587] [ 2291.579699][ T6587] dump_stack_lvl+0x188/0x24e [ 2291.584407][ T6587] ? show_regs_print_info+0x12/0x12 [ 2291.589634][ T6587] ? load_image+0x400/0x400 [ 2291.594160][ T6587] ? __lock_acquire+0x7d10/0x7d10 [ 2291.599212][ T6587] should_fail_ex+0x399/0x4d0 [ 2291.603914][ T6587] _copy_from_user+0x2c/0x170 [ 2291.607211][ T6576] delete_channel: no stack [ 2291.608595][ T6587] __sys_bpf+0x2ea/0x780 [ 2291.608627][ T6587] ? bpf_link_show_fdinfo+0x380/0x380 [ 2291.622634][ T6587] ? lock_chain_count+0x20/0x20 [ 2291.627493][ T6587] __x64_sys_bpf+0x78/0x90 [ 2291.631906][ T6587] do_syscall_64+0x4c/0xa0 [ 2291.636318][ T6587] ? clear_bhb_loop+0x60/0xb0 [ 2291.640993][ T6587] ? clear_bhb_loop+0x60/0xb0 [ 2291.645668][ T6587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2291.651564][ T6587] RIP: 0033:0x7f0a98f9ce59 [ 2291.655974][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2291.675584][ T6587] RSP: 002b:00007f0a99f04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2291.684007][ T6587] RAX: ffffffffffffffda RBX: 00007f0a99216090 RCX: 00007f0a98f9ce59 [ 2291.691979][ T6587] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2291.699945][ T6587] RBP: 00007f0a99f04090 R08: 0000000000000000 R09: 0000000000000000 [ 2291.707909][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2291.715871][ T6587] R13: 00007f0a99216128 R14: 00007f0a99216090 R15: 00007ffd94fdfc78 [ 2291.723854][ T6587] [ 2291.912199][ T6592] netlink: 'syz.3.11518': attribute type 13 has an invalid length. [ 2291.931153][ T6592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11518'. [ 2291.987354][ T6592] erspan0: refused to change device tx_queue_len [ 2292.026482][ T6592] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2292.220206][ T6609] netlink: 'syz.1.11525': attribute type 13 has an invalid length. [ 2292.726902][ T6615] netlink: 'syz.4.11526': attribute type 39 has an invalid length. [ 2293.152006][ T6626] netlink: 'syz.5.11528': attribute type 3 has an invalid length. [ 2293.207578][ T6626] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11528'. [ 2293.456054][ T6637] FAULT_INJECTION: forcing a failure. [ 2293.456054][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.523720][ T6637] CPU: 0 PID: 6637 Comm: syz.1.11534 Not tainted syzkaller #0 [ 2293.531269][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2293.541347][ T6637] Call Trace: [ 2293.544650][ T6637] [ 2293.547594][ T6637] dump_stack_lvl+0x188/0x24e [ 2293.552317][ T6637] ? show_regs_print_info+0x12/0x12 [ 2293.557544][ T6637] ? load_image+0x400/0x400 [ 2293.562077][ T6637] ? __might_sleep+0xd0/0xd0 [ 2293.566683][ T6637] ? __lock_acquire+0x7d10/0x7d10 [ 2293.571734][ T6637] ? __lock_acquire+0x12f4/0x7d10 [ 2293.576784][ T6637] ? verify_lock_unused+0x140/0x140 [ 2293.582011][ T6637] should_fail_ex+0x399/0x4d0 [ 2293.586711][ T6637] should_failslab+0x5/0x20 [ 2293.591234][ T6637] slab_pre_alloc_hook+0x59/0x310 [ 2293.596287][ T6637] kmem_cache_alloc_node+0x5a/0x320 [ 2293.601504][ T6637] ? __alloc_skb+0xfc/0x7e0 [ 2293.606042][ T6637] __alloc_skb+0xfc/0x7e0 [ 2293.610394][ T6637] ? __lock_acquire+0x12f4/0x7d10 [ 2293.615449][ T6637] alloc_skb_with_frags+0xa7/0x710 [ 2293.620584][ T6637] ? __lock_acquire+0x12f4/0x7d10 [ 2293.625647][ T6637] sock_alloc_send_pskb+0x87f/0x9a0 [ 2293.630863][ T6637] ? sock_kzfree_s+0x50/0x50 [ 2293.635453][ T6637] ? dev_get_by_index+0x1e/0x2d0 [ 2293.640394][ T6637] ? dev_get_by_index+0x1e/0x2d0 [ 2293.645342][ T6637] packet_sendmsg+0x32b0/0x4e60 [ 2293.650310][ T6637] ? __might_sleep+0xd0/0xd0 [ 2293.654901][ T6637] ? verify_lock_unused+0x140/0x140 [ 2293.660101][ T6637] ? mark_lock+0x94/0x320 [ 2293.664441][ T6637] ? verify_lock_unused+0x140/0x140 [ 2293.669644][ T6637] ? __lock_acquire+0x12f4/0x7d10 [ 2293.674671][ T6637] ? is_dynamic_key+0x260/0x260 [ 2293.679524][ T6637] ? aa_sk_perm+0x81f/0x950 [ 2293.684028][ T6637] ? packet_getsockopt+0x9a0/0x9a0 [ 2293.689137][ T6637] ? aa_sock_msg_perm+0x94/0x150 [ 2293.694066][ T6637] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2293.699343][ T6637] ? security_socket_sendmsg+0x7c/0xa0 [ 2293.704804][ T6637] ? packet_getsockopt+0x9a0/0x9a0 [ 2293.709910][ T6637] ____sys_sendmsg+0x5be/0x970 [ 2293.714682][ T6637] ? __sys_sendmsg_sock+0x30/0x30 [ 2293.719701][ T6637] ? __import_iovec+0x315/0x500 [ 2293.724553][ T6637] ? import_iovec+0x6f/0xa0 [ 2293.729052][ T6637] ___sys_sendmsg+0x2a2/0x360 [ 2293.733731][ T6637] ? __sys_sendmsg+0x290/0x290 [ 2293.738507][ T6637] ? __lock_acquire+0x7d10/0x7d10 [ 2293.743546][ T6637] __se_sys_sendmsg+0x1bb/0x2a0 [ 2293.748395][ T6637] ? __x64_sys_sendmsg+0x80/0x80 [ 2293.753346][ T6637] ? lockdep_hardirqs_on+0x94/0x140 [ 2293.758546][ T6637] do_syscall_64+0x4c/0xa0 [ 2293.762958][ T6637] ? clear_bhb_loop+0x60/0xb0 [ 2293.767632][ T6637] ? clear_bhb_loop+0x60/0xb0 [ 2293.772304][ T6637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2293.778540][ T6637] RIP: 0033:0x7f8b5879ce59 [ 2293.782951][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2293.802551][ T6637] RSP: 002b:00007f8b569f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2293.810964][ T6637] RAX: ffffffffffffffda RBX: 00007f8b58a15fa0 RCX: 00007f8b5879ce59 [ 2293.818929][ T6637] RDX: 0000000000000000 RSI: 0000200000001780 RDI: 0000000000000003 [ 2293.826890][ T6637] RBP: 00007f8b569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2293.834848][ T6637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2293.842828][ T6637] R13: 00007f8b58a16038 R14: 00007f8b58a15fa0 R15: 00007ffc31155138 [ 2293.850812][ T6637] [ 2293.898033][ T6648] FAULT_INJECTION: forcing a failure. [ 2293.898033][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.952947][ T6652] FAULT_INJECTION: forcing a failure. [ 2293.952947][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2293.962556][ T6648] CPU: 0 PID: 6648 Comm: syz.3.11537 Not tainted syzkaller #0 [ 2293.973490][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2293.983555][ T6648] Call Trace: [ 2293.986837][ T6648] [ 2293.989769][ T6648] dump_stack_lvl+0x188/0x24e [ 2293.994456][ T6648] ? show_regs_print_info+0x12/0x12 [ 2293.999656][ T6648] ? load_image+0x400/0x400 [ 2294.004178][ T6648] should_fail_ex+0x399/0x4d0 [ 2294.008864][ T6648] should_failslab+0x5/0x20 [ 2294.013370][ T6648] slab_pre_alloc_hook+0x59/0x310 [ 2294.018402][ T6648] ? __lock_acquire+0x7d10/0x7d10 [ 2294.023439][ T6648] ? find_exception+0x171/0xa30 [ 2294.028289][ T6648] kmem_cache_alloc+0x56/0x2f0 [ 2294.033069][ T6648] ? dst_alloc+0x101/0x160 [ 2294.037500][ T6648] dst_alloc+0x101/0x160 [ 2294.041752][ T6648] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 2294.047813][ T6648] ? ip_route_output_key_hash_rcu+0x12e1/0x23f0 [ 2294.054049][ T6648] ? ip_route_output_key_hash+0x139/0x330 [ 2294.059781][ T6648] ip_route_output_key_hash+0x1ef/0x330 [ 2294.065324][ T6648] ? ip_route_input_rcu+0x3160/0x3160 [ 2294.070702][ T6648] ? __lock_acquire+0x7d10/0x7d10 [ 2294.075729][ T6648] ip_route_output_flow+0x26/0x150 [ 2294.080830][ T6648] ? security_sk_classify_flow+0x77/0x90 [ 2294.086457][ T6648] raw_sendmsg+0x116d/0x1b20 [ 2294.091036][ T6648] ? raw_sendmsg+0x540/0x1b20 [ 2294.095705][ T6648] ? compat_raw_ioctl+0x60/0x60 [ 2294.100556][ T6648] ? verify_lock_unused+0x140/0x140 [ 2294.105750][ T6648] ? __lock_acquire+0x12f4/0x7d10 [ 2294.110782][ T6648] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2294.117194][ T6648] ? sock_rps_record_flow+0x19/0x3f0 [ 2294.122487][ T6648] ? inet_sendmsg+0x78/0x2f0 [ 2294.127073][ T6648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2294.132358][ T6648] ? security_socket_sendmsg+0x7c/0xa0 [ 2294.137822][ T6648] ? inet_send_prepare+0x260/0x260 [ 2294.142928][ T6648] ____sys_sendmsg+0x5be/0x970 [ 2294.147699][ T6648] ? __sys_sendmsg_sock+0x30/0x30 [ 2294.152718][ T6648] ? __import_iovec+0x315/0x500 [ 2294.157571][ T6648] ? import_iovec+0x6f/0xa0 [ 2294.162066][ T6648] ___sys_sendmsg+0x2a2/0x360 [ 2294.166746][ T6648] ? __sys_sendmsg+0x290/0x290 [ 2294.171517][ T6648] ? __lock_acquire+0x7d10/0x7d10 [ 2294.176561][ T6648] __se_sys_sendmsg+0x1bb/0x2a0 [ 2294.181412][ T6648] ? __x64_sys_sendmsg+0x80/0x80 [ 2294.186356][ T6648] ? lockdep_hardirqs_on+0x94/0x140 [ 2294.191552][ T6648] do_syscall_64+0x4c/0xa0 [ 2294.195963][ T6648] ? clear_bhb_loop+0x60/0xb0 [ 2294.200629][ T6648] ? clear_bhb_loop+0x60/0xb0 [ 2294.205303][ T6648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2294.211193][ T6648] RIP: 0033:0x7f1af899ce59 [ 2294.215599][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2294.235192][ T6648] RSP: 002b:00007f1af9885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2294.243596][ T6648] RAX: ffffffffffffffda RBX: 00007f1af8c15fa0 RCX: 00007f1af899ce59 [ 2294.251566][ T6648] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 2294.259529][ T6648] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2294.267492][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.275450][ T6648] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2294.283424][ T6648] [ 2294.310552][ T6652] CPU: 0 PID: 6652 Comm: syz.1.11539 Not tainted syzkaller #0 [ 2294.318091][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2294.328161][ T6652] Call Trace: [ 2294.331450][ T6652] [ 2294.334399][ T6652] dump_stack_lvl+0x188/0x24e [ 2294.339107][ T6652] ? show_regs_print_info+0x12/0x12 [ 2294.344331][ T6652] ? load_image+0x400/0x400 [ 2294.348859][ T6652] ? __lock_acquire+0x7d10/0x7d10 [ 2294.353907][ T6652] ? snprintf+0xe5/0x140 [ 2294.358172][ T6652] should_fail_ex+0x399/0x4d0 [ 2294.362870][ T6652] _copy_to_user+0x2c/0x130 [ 2294.367403][ T6652] simple_read_from_buffer+0xe3/0x150 [ 2294.372798][ T6652] proc_fail_nth_read+0x1a6/0x220 [ 2294.377843][ T6652] ? proc_fault_inject_write+0x310/0x310 [ 2294.383500][ T6652] ? fsnotify_perm+0x248/0x550 [ 2294.388291][ T6652] ? proc_fault_inject_write+0x310/0x310 [ 2294.393956][ T6652] vfs_read+0x2de/0xa00 [ 2294.398139][ T6652] ? kernel_read+0x1e0/0x1e0 [ 2294.402752][ T6652] ? __fget_files+0x28/0x4b0 [ 2294.407361][ T6652] ? __fget_files+0x28/0x4b0 [ 2294.411991][ T6652] ? __fget_files+0x43d/0x4b0 [ 2294.416702][ T6652] ? __fdget_pos+0x2ae/0x360 [ 2294.421316][ T6652] ? ksys_read+0x71/0x250 [ 2294.425673][ T6652] ksys_read+0x14c/0x250 [ 2294.429942][ T6652] ? vfs_write+0xa30/0xa30 [ 2294.434388][ T6652] ? lockdep_hardirqs_on+0x94/0x140 [ 2294.439605][ T6652] do_syscall_64+0x4c/0xa0 [ 2294.444049][ T6652] ? clear_bhb_loop+0x60/0xb0 [ 2294.448751][ T6652] ? clear_bhb_loop+0x60/0xb0 [ 2294.453462][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2294.459394][ T6652] RIP: 0033:0x7f8b5875d68e [ 2294.463831][ T6652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2294.483546][ T6652] RSP: 002b:00007f8b569f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2294.491990][ T6652] RAX: ffffffffffffffda RBX: 00007f8b569f66c0 RCX: 00007f8b5875d68e [ 2294.499988][ T6652] RDX: 000000000000000f RSI: 00007f8b569f60a0 RDI: 0000000000000005 [ 2294.507983][ T6652] RBP: 00007f8b569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2294.515976][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.523962][ T6652] R13: 00007f8b58a16038 R14: 00007f8b58a15fa0 R15: 00007ffc31155138 [ 2294.531968][ T6652] [ 2294.536521][ T6639] netlink: 'syz.5.11536': attribute type 9 has an invalid length. [ 2294.657554][T12327] Bluetooth: hci2: ISO packet for unknown connection handle 531 [ 2294.738664][ T6657] netlink: 'syz.2.11540': attribute type 39 has an invalid length. [ 2294.846873][ T6659] FAULT_INJECTION: forcing a failure. [ 2294.846873][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2294.953053][ T6659] CPU: 0 PID: 6659 Comm: syz.5.11542 Not tainted syzkaller #0 [ 2294.960566][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2294.970614][ T6659] Call Trace: [ 2294.973887][ T6659] [ 2294.976813][ T6659] dump_stack_lvl+0x188/0x24e [ 2294.981496][ T6659] ? show_regs_print_info+0x12/0x12 [ 2294.986691][ T6659] ? load_image+0x400/0x400 [ 2294.991187][ T6659] ? __lock_acquire+0x7d10/0x7d10 [ 2294.996211][ T6659] should_fail_ex+0x399/0x4d0 [ 2295.000886][ T6659] strncpy_from_user+0x32/0x350 [ 2295.005751][ T6659] bpf_prog_load+0x1f3/0x1560 [ 2295.010489][ T6659] ? map_freeze+0x390/0x390 [ 2295.015029][ T6659] ? __might_fault+0xa6/0x120 [ 2295.019716][ T6659] ? __might_fault+0xa6/0x120 [ 2295.024394][ T6659] ? __might_fault+0xc2/0x120 [ 2295.029072][ T6659] ? __might_fault+0xa6/0x120 [ 2295.033745][ T6659] ? bpf_lsm_bpf+0x5/0x10 [ 2295.038070][ T6659] ? security_bpf+0x7a/0xa0 [ 2295.042568][ T6659] __sys_bpf+0x5b8/0x780 [ 2295.046808][ T6659] ? bpf_link_show_fdinfo+0x380/0x380 [ 2295.052183][ T6659] ? lock_chain_count+0x20/0x20 [ 2295.057040][ T6659] __x64_sys_bpf+0x78/0x90 [ 2295.061464][ T6659] do_syscall_64+0x4c/0xa0 [ 2295.065876][ T6659] ? clear_bhb_loop+0x60/0xb0 [ 2295.070544][ T6659] ? clear_bhb_loop+0x60/0xb0 [ 2295.075217][ T6659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2295.081103][ T6659] RIP: 0033:0x7f0a98f9ce59 [ 2295.085508][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2295.105105][ T6659] RSP: 002b:00007f0a99f25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2295.113508][ T6659] RAX: ffffffffffffffda RBX: 00007f0a99215fa0 RCX: 00007f0a98f9ce59 [ 2295.121470][ T6659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2295.129437][ T6659] RBP: 00007f0a99f25090 R08: 0000000000000000 R09: 0000000000000000 [ 2295.137397][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.145356][ T6659] R13: 00007f0a99216038 R14: 00007f0a99215fa0 R15: 00007ffd94fdfc78 [ 2295.153328][ T6659] [ 2295.809494][ T6688] netlink: 'syz.2.11551': attribute type 10 has an invalid length. [ 2295.848534][ T6688] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11551'. [ 2296.266620][ T6697] netlink: 'syz.1.11556': attribute type 39 has an invalid length. [ 2296.410080][ T6706] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11559'. [ 2296.509755][ T6706] netlink: 'syz.4.11559': attribute type 13 has an invalid length. [ 2296.715510][ T6706] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11559'. [ 2296.778315][ T6706] syz_tun: refused to change device tx_queue_len [ 2296.784832][ T6706] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2296.821109][ T6709] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2297.216970][ T6726] FAULT_INJECTION: forcing a failure. [ 2297.216970][ T6726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2297.282724][ T6726] CPU: 0 PID: 6726 Comm: syz.3.11565 Not tainted syzkaller #0 [ 2297.290259][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2297.300338][ T6726] Call Trace: [ 2297.303634][ T6726] [ 2297.306575][ T6726] dump_stack_lvl+0x188/0x24e [ 2297.311275][ T6726] ? show_regs_print_info+0x12/0x12 [ 2297.316491][ T6726] ? load_image+0x400/0x400 [ 2297.321015][ T6726] ? __lock_acquire+0x7d10/0x7d10 [ 2297.326065][ T6726] should_fail_ex+0x399/0x4d0 [ 2297.330760][ T6726] _copy_from_user+0x2c/0x170 [ 2297.335462][ T6726] bpf_prog_test_run_flow_dissector+0x27d/0x640 [ 2297.341726][ T6726] ? xdp_convert_buff_to_md+0x200/0x200 [ 2297.347291][ T6726] ? __fget_files+0x28/0x4b0 [ 2297.351900][ T6726] ? __fget_files+0x28/0x4b0 [ 2297.356507][ T6726] ? __fget_files+0x43d/0x4b0 [ 2297.361214][ T6726] ? xdp_convert_buff_to_md+0x200/0x200 [ 2297.366780][ T6726] bpf_prog_test_run+0x31e/0x390 [ 2297.371737][ T6726] __sys_bpf+0x62b/0x780 [ 2297.376004][ T6726] ? bpf_link_show_fdinfo+0x380/0x380 [ 2297.381411][ T6726] ? lock_chain_count+0x20/0x20 [ 2297.386288][ T6726] __x64_sys_bpf+0x78/0x90 [ 2297.390719][ T6726] do_syscall_64+0x4c/0xa0 [ 2297.395150][ T6726] ? clear_bhb_loop+0x60/0xb0 [ 2297.399842][ T6726] ? clear_bhb_loop+0x60/0xb0 [ 2297.404541][ T6726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2297.410449][ T6726] RIP: 0033:0x7f1af899ce59 [ 2297.414875][ T6726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2297.434502][ T6726] RSP: 002b:00007f1af9885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2297.441978][ T6723] device syzkaller0 entered promiscuous mode [ 2297.442915][ T6726] RAX: ffffffffffffffda RBX: 00007f1af8c15fa0 RCX: 00007f1af899ce59 [ 2297.456881][ T6726] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 000000000000000a [ 2297.464871][ T6726] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2297.472863][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2297.480851][ T6726] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2297.488856][ T6726] [ 2301.676933][ T6747] netlink: 'syz.3.11572': attribute type 39 has an invalid length. [ 2302.289602][ T6755] delete_channel: no stack [ 2302.299351][ T6767] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11577'. [ 2302.415564][ T6771] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.11578'. [ 2302.431308][ T6771] netlink: 'syz.2.11578': attribute type 13 has an invalid length. [ 2302.469983][ T6771] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11578'. [ 2302.566125][ T6771] syz_tun: refused to change device tx_queue_len [ 2302.572522][ T6771] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2302.678526][ T6762] netlink: 'syz.4.11577': attribute type 13 has an invalid length. [ 2302.736223][ T6762] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11577'. [ 2302.894275][ T6762] syz_tun: refused to change device tx_queue_len [ 2302.920890][ T6762] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2303.302236][ T6784] netlink: 'syz.5.11582': attribute type 10 has an invalid length. [ 2303.343650][ T6784] netlink: 55 bytes leftover after parsing attributes in process `syz.5.11582'. [ 2303.747390][ T6791] netlink: 'syz.1.11586': attribute type 39 has an invalid length. [ 2304.012583][ T6803] delete_channel: no stack [ 2304.377462][ T6805] mac80211_hwsim hwsim573 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2305.195755][ T6819] netlink: 'syz.5.11592': attribute type 21 has an invalid length. [ 2305.613457][ T6835] netlink: 'syz.1.11600': attribute type 39 has an invalid length. [ 2309.286173][ T6846] delete_channel: no stack [ 2310.166831][ T6863] delete_channel: no stack [ 2310.542598][ T6877] FAULT_INJECTION: forcing a failure. [ 2310.542598][ T6877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2310.623361][ T6880] netlink: 'syz.2.11612': attribute type 39 has an invalid length. [ 2310.632383][ T6877] CPU: 1 PID: 6877 Comm: syz.3.11610 Not tainted syzkaller #0 [ 2310.639881][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2310.649953][ T6877] Call Trace: [ 2310.653243][ T6877] [ 2310.656183][ T6877] dump_stack_lvl+0x188/0x24e [ 2310.660885][ T6877] ? show_regs_print_info+0x12/0x12 [ 2310.666102][ T6877] ? load_image+0x400/0x400 [ 2310.670620][ T6877] ? __lock_acquire+0x7d10/0x7d10 [ 2310.675660][ T6877] ? snprintf+0xe5/0x140 [ 2310.679919][ T6877] should_fail_ex+0x399/0x4d0 [ 2310.684611][ T6877] _copy_to_user+0x2c/0x130 [ 2310.689130][ T6877] simple_read_from_buffer+0xe3/0x150 [ 2310.694521][ T6877] proc_fail_nth_read+0x1a6/0x220 [ 2310.699565][ T6877] ? proc_fault_inject_write+0x310/0x310 [ 2310.705210][ T6877] ? fsnotify_perm+0x248/0x550 [ 2310.709986][ T6877] ? proc_fault_inject_write+0x310/0x310 [ 2310.715626][ T6877] vfs_read+0x2de/0xa00 [ 2310.719805][ T6877] ? kernel_read+0x1e0/0x1e0 [ 2310.724410][ T6877] ? __fget_files+0x28/0x4b0 [ 2310.729008][ T6877] ? __fget_files+0x28/0x4b0 [ 2310.733608][ T6877] ? __fget_files+0x43d/0x4b0 [ 2310.738307][ T6877] ? __fdget_pos+0x2ae/0x360 [ 2310.742908][ T6877] ? ksys_read+0x71/0x250 [ 2310.747249][ T6877] ksys_read+0x14c/0x250 [ 2310.751503][ T6877] ? vfs_write+0xa30/0xa30 [ 2310.755933][ T6877] ? lockdep_hardirqs_on+0x94/0x140 [ 2310.761144][ T6877] do_syscall_64+0x4c/0xa0 [ 2310.765572][ T6877] ? clear_bhb_loop+0x60/0xb0 [ 2310.770256][ T6877] ? clear_bhb_loop+0x60/0xb0 [ 2310.774942][ T6877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2310.780844][ T6877] RIP: 0033:0x7f1af895d68e [ 2310.785265][ T6877] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2310.804879][ T6877] RSP: 002b:00007f1af9884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2310.813303][ T6877] RAX: ffffffffffffffda RBX: 00007f1af98856c0 RCX: 00007f1af895d68e [ 2310.821287][ T6877] RDX: 000000000000000f RSI: 00007f1af98850a0 RDI: 0000000000000006 [ 2310.829261][ T6877] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2310.837249][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.845239][ T6877] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2310.853246][ T6877] [ 2311.238150][ T6889] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2311.340778][ T6885] FAULT_INJECTION: forcing a failure. [ 2311.340778][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2311.361176][ T6885] CPU: 1 PID: 6885 Comm: syz.1.11613 Not tainted syzkaller #0 [ 2311.368673][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2311.378743][ T6885] Call Trace: [ 2311.382036][ T6885] [ 2311.384980][ T6885] dump_stack_lvl+0x188/0x24e [ 2311.389679][ T6885] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2311.395861][ T6885] ? show_regs_print_info+0x12/0x12 [ 2311.401087][ T6885] ? load_image+0x400/0x400 [ 2311.405619][ T6885] should_fail_ex+0x399/0x4d0 [ 2311.410314][ T6885] _copy_from_iter+0x1c0/0x1130 [ 2311.415189][ T6885] ? copyout_mc+0x110/0x110 [ 2311.419713][ T6885] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2311.425898][ T6885] ? lockdep_hardirqs_on+0x94/0x140 [ 2311.431119][ T6885] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2311.437297][ T6885] ? page_copy_sane+0x4e/0x390 [ 2311.442072][ T6885] copy_page_from_iter+0x77/0x100 [ 2311.447097][ T6885] pipe_write+0x87f/0x1b20 [ 2311.451528][ T6885] ? pipe_read+0x1260/0x1260 [ 2311.456115][ T6885] ? end_current_label_crit_section+0x14b/0x170 [ 2311.462352][ T6885] ? common_file_perm+0x171/0x1c0 [ 2311.467374][ T6885] vfs_write+0x4b1/0xa30 [ 2311.471621][ T6885] ? file_end_write+0x250/0x250 [ 2311.476471][ T6885] ? __fget_files+0x43d/0x4b0 [ 2311.481149][ T6885] ? __fdget_pos+0x1d4/0x360 [ 2311.485731][ T6885] ? ksys_write+0x71/0x250 [ 2311.490150][ T6885] ksys_write+0x14c/0x250 [ 2311.494474][ T6885] ? __ia32_sys_read+0x80/0x80 [ 2311.499236][ T6885] ? lockdep_hardirqs_on+0x94/0x140 [ 2311.504428][ T6885] do_syscall_64+0x4c/0xa0 [ 2311.508840][ T6885] ? clear_bhb_loop+0x60/0xb0 [ 2311.513518][ T6885] ? clear_bhb_loop+0x60/0xb0 [ 2311.518191][ T6885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2311.524077][ T6885] RIP: 0033:0x7f8b5879ce59 [ 2311.528482][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2311.548074][ T6885] RSP: 002b:00007f8b569f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2311.556478][ T6885] RAX: ffffffffffffffda RBX: 00007f8b58a15fa0 RCX: 00007f8b5879ce59 [ 2311.564439][ T6885] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 2311.572402][ T6885] RBP: 00007f8b569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2311.580361][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2311.588319][ T6885] R13: 00007f8b58a16038 R14: 00007f8b58a15fa0 R15: 00007ffc31155138 [ 2311.596293][ T6885] [ 2311.702429][ T6895] can: request_module (can-proto-0) failed. [ 2311.836174][ T6892] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11615'. [ 2313.610076][ T6932] netlink: 'syz.1.11626': attribute type 21 has an invalid length. [ 2313.777997][ T6940] netlink: 'syz.5.11627': attribute type 39 has an invalid length. [ 2314.392844][ T6947] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11630'. [ 2314.424307][ T6947] netlink: 'syz.5.11630': attribute type 13 has an invalid length. [ 2314.503718][ T6947] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11630'. [ 2314.646646][ T6947] syz_tun: refused to change device tx_queue_len [ 2314.653039][ T6947] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2315.173656][ T6961] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2316.295670][ T6976] netlink: 'syz.5.11635': attribute type 2 has an invalid length. [ 2316.303658][ T6976] netlink: 'syz.5.11635': attribute type 8 has an invalid length. [ 2316.312549][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11635'. [ 2316.834299][ T6981] netlink: 'syz.2.11640': attribute type 39 has an invalid length. [ 2317.024735][ T6983] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2317.536418][ T7001] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11645'. [ 2317.777480][T10403] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2317.784463][ T7001] netlink: 'syz.3.11645': attribute type 13 has an invalid length. [ 2318.035493][ T7001] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11645'. [ 2319.028310][ T7024] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11652'. [ 2319.259852][ T7024] team0: Port device bond0 removed [ 2319.396557][ T7024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2319.521190][ T7024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2319.611808][ T7024] bond0 (unregistering): Released all slaves [ 2319.717660][ T7034] netlink: 'syz.3.11653': attribute type 21 has an invalid length. [ 2319.804542][ T7032] netlink: 'syz.5.11654': attribute type 39 has an invalid length. [ 2319.979285][ T7036] netlink: 'syz.4.11655': attribute type 2 has an invalid length. [ 2320.056604][ T7036] netlink: 'syz.4.11655': attribute type 8 has an invalid length. [ 2320.115303][ T7036] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11655'. [ 2320.186171][T10403] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2320.676037][ T7045] mac80211_hwsim hwsim573 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2321.532821][ T7066] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11661'. [ 2321.707053][ T7069] netlink: 'syz.5.11661': attribute type 13 has an invalid length. [ 2321.808425][ T7069] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11661'. [ 2322.003829][ T7069] syz_tun: refused to change device tx_queue_len [ 2322.097081][ T7069] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2323.017047][ T7077] netlink: 'syz.3.11677': attribute type 2 has an invalid length. [ 2323.021834][ T7086] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.11668'. [ 2323.024963][ T7077] netlink: 'syz.3.11677': attribute type 8 has an invalid length. [ 2323.025038][ T7077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11677'. [ 2323.320204][ T7086] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2323.922242][ T7097] netlink: 'syz.2.11671': attribute type 2 has an invalid length. [ 2323.993739][ T7099] netlink: 'syz.1.11669': attribute type 2 has an invalid length. [ 2324.135406][ T7099] netlink: 'syz.1.11669': attribute type 8 has an invalid length. [ 2324.143284][ T7099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11669'. [ 2324.990643][ T7121] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11679'. [ 2325.033038][ T7121] netlink: 'syz.5.11679': attribute type 13 has an invalid length. [ 2325.275491][ T7121] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11679'. [ 2325.317139][ T7121] syz_tun: refused to change device tx_queue_len [ 2325.323552][ T7121] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2326.427072][ T7146] FAULT_INJECTION: forcing a failure. [ 2326.427072][ T7146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2326.533351][ T7146] CPU: 1 PID: 7146 Comm: syz.5.11686 Not tainted syzkaller #0 [ 2326.540884][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2326.550959][ T7146] Call Trace: [ 2326.554253][ T7146] [ 2326.557203][ T7146] dump_stack_lvl+0x188/0x24e [ 2326.561918][ T7146] ? show_regs_print_info+0x12/0x12 [ 2326.567142][ T7146] ? load_image+0x400/0x400 [ 2326.571676][ T7146] ? __lock_acquire+0x7d10/0x7d10 [ 2326.576729][ T7146] ? snprintf+0xe5/0x140 [ 2326.580993][ T7146] should_fail_ex+0x399/0x4d0 [ 2326.585691][ T7146] _copy_to_user+0x2c/0x130 [ 2326.590215][ T7146] simple_read_from_buffer+0xe3/0x150 [ 2326.595609][ T7146] proc_fail_nth_read+0x1a6/0x220 [ 2326.600653][ T7146] ? proc_fault_inject_write+0x310/0x310 [ 2326.606307][ T7146] ? fsnotify_perm+0x248/0x550 [ 2326.611092][ T7146] ? proc_fault_inject_write+0x310/0x310 [ 2326.616744][ T7146] vfs_read+0x2de/0xa00 [ 2326.620924][ T7146] ? kernel_read+0x1e0/0x1e0 [ 2326.625536][ T7146] ? __fget_files+0x28/0x4b0 [ 2326.630143][ T7146] ? __fget_files+0x28/0x4b0 [ 2326.634755][ T7146] ? __fget_files+0x43d/0x4b0 [ 2326.639463][ T7146] ? __fdget_pos+0x2ae/0x360 [ 2326.644080][ T7146] ? ksys_read+0x71/0x250 [ 2326.648432][ T7146] ksys_read+0x14c/0x250 [ 2326.652696][ T7146] ? vfs_write+0xa30/0xa30 [ 2326.657134][ T7146] ? lockdep_hardirqs_on+0x94/0x140 [ 2326.662357][ T7146] do_syscall_64+0x4c/0xa0 [ 2326.666792][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 2326.671485][ T7146] ? clear_bhb_loop+0x60/0xb0 [ 2326.676185][ T7146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2326.682098][ T7146] RIP: 0033:0x7f0a98f5d68e [ 2326.686527][ T7146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2326.706154][ T7146] RSP: 002b:00007f0a99f24fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2326.714597][ T7146] RAX: ffffffffffffffda RBX: 00007f0a99f256c0 RCX: 00007f0a98f5d68e [ 2326.722586][ T7146] RDX: 000000000000000f RSI: 00007f0a99f250a0 RDI: 0000000000000005 [ 2326.730579][ T7146] RBP: 00007f0a99f25090 R08: 0000000000000000 R09: 0000000000000000 [ 2326.738574][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.746561][ T7146] R13: 00007f0a99216038 R14: 00007f0a99215fa0 R15: 00007ffd94fdfc78 [ 2326.754563][ T7146] [ 2326.924592][ T7140] netlink: 'syz.1.11684': attribute type 2 has an invalid length. [ 2326.964819][ T7140] netlink: 'syz.1.11684': attribute type 8 has an invalid length. [ 2326.993317][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11684'. [ 2327.161918][ T7157] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11690'. [ 2327.442702][ T7170] netlink: 'syz.2.11694': attribute type 13 has an invalid length. [ 2327.794307][ T7175] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11696'. [ 2327.813810][ T7175] netlink: 'syz.5.11696': attribute type 13 has an invalid length. [ 2327.832729][ T7175] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11696'. [ 2327.890069][ T7175] syz_tun: refused to change device tx_queue_len [ 2327.908907][ T7175] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2328.579797][ T7177] netlink: 'syz.2.11697': attribute type 2 has an invalid length. [ 2328.615477][ T7177] netlink: 'syz.2.11697': attribute type 8 has an invalid length. [ 2328.623491][ T7177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11697'. [ 2328.994054][ T7199] FAULT_INJECTION: forcing a failure. [ 2328.994054][ T7199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2329.041478][ T7199] CPU: 0 PID: 7199 Comm: syz.3.11703 Not tainted syzkaller #0 [ 2329.049003][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2329.059093][ T7199] Call Trace: [ 2329.062389][ T7199] [ 2329.065332][ T7199] dump_stack_lvl+0x188/0x24e [ 2329.070040][ T7199] ? show_regs_print_info+0x12/0x12 [ 2329.075267][ T7199] ? load_image+0x400/0x400 [ 2329.079802][ T7199] ? __lock_acquire+0x7d10/0x7d10 [ 2329.084857][ T7199] ? __fget_files+0x28/0x4b0 [ 2329.089483][ T7199] should_fail_ex+0x399/0x4d0 [ 2329.094181][ T7199] _copy_from_user+0x2c/0x170 [ 2329.098893][ T7199] generic_map_update_batch+0x4a1/0x810 [ 2329.104485][ T7199] ? rcu_read_unlock+0xa0/0xa0 [ 2329.109278][ T7199] ? __fdget+0x17c/0x200 [ 2329.113543][ T7199] ? rcu_read_unlock+0xa0/0xa0 [ 2329.118326][ T7199] bpf_map_do_batch+0x466/0x600 [ 2329.123204][ T7199] __sys_bpf+0x6f7/0x780 [ 2329.127466][ T7199] ? bpf_link_show_fdinfo+0x380/0x380 [ 2329.132871][ T7199] ? lock_chain_count+0x20/0x20 [ 2329.137752][ T7199] __x64_sys_bpf+0x78/0x90 [ 2329.142170][ T7199] do_syscall_64+0x4c/0xa0 [ 2329.146604][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 2329.151278][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 2329.155957][ T7199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2329.161851][ T7199] RIP: 0033:0x7f1af899ce59 [ 2329.166260][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2329.185857][ T7199] RSP: 002b:00007f1af9885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2329.194264][ T7199] RAX: ffffffffffffffda RBX: 00007f1af8c15fa0 RCX: 00007f1af899ce59 [ 2329.202235][ T7199] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 2329.210201][ T7199] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2329.218168][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2329.226133][ T7199] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2329.234115][ T7199] [ 2329.489756][ T7204] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11705'. [ 2330.195486][ T7211] netlink: 'syz.3.11707': attribute type 13 has an invalid length. [ 2330.519838][ T7221] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11711'. [ 2330.704375][ T7221] netlink: 'syz.4.11711': attribute type 13 has an invalid length. [ 2330.745400][ T7221] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11711'. [ 2330.807702][ T7221] syz_tun: refused to change device tx_queue_len [ 2330.814108][ T7221] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2331.134810][ T7218] netlink: 'syz.2.11708': attribute type 2 has an invalid length. [ 2331.194349][ T7218] netlink: 'syz.2.11708': attribute type 8 has an invalid length. [ 2331.277179][ T7218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11708'. [ 2331.336208][ T7231] FAULT_INJECTION: forcing a failure. [ 2331.336208][ T7231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2331.376585][ T7231] CPU: 0 PID: 7231 Comm: syz.3.11713 Not tainted syzkaller #0 [ 2331.384114][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2331.394191][ T7231] Call Trace: [ 2331.397486][ T7231] [ 2331.400436][ T7231] dump_stack_lvl+0x188/0x24e [ 2331.405149][ T7231] ? show_regs_print_info+0x12/0x12 [ 2331.410376][ T7231] ? load_image+0x400/0x400 [ 2331.414911][ T7231] ? __lock_acquire+0x7d10/0x7d10 [ 2331.419967][ T7231] ? snprintf+0xe5/0x140 [ 2331.424239][ T7231] should_fail_ex+0x399/0x4d0 [ 2331.428949][ T7231] _copy_to_user+0x2c/0x130 [ 2331.433483][ T7231] simple_read_from_buffer+0xe3/0x150 [ 2331.438884][ T7231] proc_fail_nth_read+0x1a6/0x220 [ 2331.443944][ T7231] ? proc_fault_inject_write+0x310/0x310 [ 2331.449603][ T7231] ? fsnotify_perm+0x248/0x550 [ 2331.454392][ T7231] ? proc_fault_inject_write+0x310/0x310 [ 2331.460052][ T7231] vfs_read+0x2de/0xa00 [ 2331.464246][ T7231] ? kernel_read+0x1e0/0x1e0 [ 2331.468865][ T7231] ? __fget_files+0x28/0x4b0 [ 2331.473479][ T7231] ? __fget_files+0x28/0x4b0 [ 2331.478099][ T7231] ? __fget_files+0x43d/0x4b0 [ 2331.482808][ T7231] ? __fdget_pos+0x2ae/0x360 [ 2331.487398][ T7231] ? ksys_read+0x71/0x250 [ 2331.491736][ T7231] ksys_read+0x14c/0x250 [ 2331.495994][ T7231] ? vfs_write+0xa30/0xa30 [ 2331.500417][ T7231] ? lockdep_hardirqs_on+0x94/0x140 [ 2331.505620][ T7231] do_syscall_64+0x4c/0xa0 [ 2331.510036][ T7231] ? clear_bhb_loop+0x60/0xb0 [ 2331.514712][ T7231] ? clear_bhb_loop+0x60/0xb0 [ 2331.519393][ T7231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2331.525285][ T7231] RIP: 0033:0x7f1af895d68e [ 2331.529703][ T7231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2331.549306][ T7231] RSP: 002b:00007f1af9884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2331.557718][ T7231] RAX: ffffffffffffffda RBX: 00007f1af98856c0 RCX: 00007f1af895d68e [ 2331.565688][ T7231] RDX: 000000000000000f RSI: 00007f1af98850a0 RDI: 0000000000000006 [ 2331.573652][ T7231] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2331.581619][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2331.589587][ T7231] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2331.597575][ T7231] [ 2332.054799][ T7239] netlink: 'syz.4.11715': attribute type 2 has an invalid length. [ 2332.091379][ T7239] netlink: 'syz.4.11715': attribute type 8 has an invalid length. [ 2332.141594][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11715'. [ 2332.383890][ T7261] FAULT_INJECTION: forcing a failure. [ 2332.383890][ T7261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2332.431820][ T7261] CPU: 1 PID: 7261 Comm: syz.3.11720 Not tainted syzkaller #0 [ 2332.439349][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2332.449425][ T7261] Call Trace: [ 2332.452716][ T7261] [ 2332.455661][ T7261] dump_stack_lvl+0x188/0x24e [ 2332.460362][ T7261] ? show_regs_print_info+0x12/0x12 [ 2332.465583][ T7261] ? load_image+0x400/0x400 [ 2332.470112][ T7261] ? __lock_acquire+0x7d10/0x7d10 [ 2332.475157][ T7261] ? snprintf+0xe5/0x140 [ 2332.479424][ T7261] should_fail_ex+0x399/0x4d0 [ 2332.484129][ T7261] _copy_to_user+0x2c/0x130 [ 2332.488653][ T7261] simple_read_from_buffer+0xe3/0x150 [ 2332.494048][ T7261] proc_fail_nth_read+0x1a6/0x220 [ 2332.499094][ T7261] ? proc_fault_inject_write+0x310/0x310 [ 2332.504745][ T7261] ? fsnotify_perm+0x248/0x550 [ 2332.509529][ T7261] ? proc_fault_inject_write+0x310/0x310 [ 2332.515184][ T7261] vfs_read+0x2de/0xa00 [ 2332.519369][ T7261] ? kernel_read+0x1e0/0x1e0 [ 2332.523983][ T7261] ? __fget_files+0x28/0x4b0 [ 2332.528593][ T7261] ? __fget_files+0x28/0x4b0 [ 2332.533200][ T7261] ? __fget_files+0x43d/0x4b0 [ 2332.537908][ T7261] ? __fdget_pos+0x2ae/0x360 [ 2332.542514][ T7261] ? ksys_read+0x71/0x250 [ 2332.546863][ T7261] ksys_read+0x14c/0x250 [ 2332.551136][ T7261] ? vfs_write+0xa30/0xa30 [ 2332.555581][ T7261] ? lockdep_hardirqs_on+0x94/0x140 [ 2332.560798][ T7261] do_syscall_64+0x4c/0xa0 [ 2332.565233][ T7261] ? clear_bhb_loop+0x60/0xb0 [ 2332.569928][ T7261] ? clear_bhb_loop+0x60/0xb0 [ 2332.574624][ T7261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2332.580534][ T7261] RIP: 0033:0x7f1af895d68e [ 2332.584960][ T7261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2332.604588][ T7261] RSP: 002b:00007f1af9884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2332.613024][ T7261] RAX: ffffffffffffffda RBX: 00007f1af98856c0 RCX: 00007f1af895d68e [ 2332.621018][ T7261] RDX: 000000000000000f RSI: 00007f1af98850a0 RDI: 0000000000000005 [ 2332.629010][ T7261] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2332.637003][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2332.644993][ T7261] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2332.652999][ T7261] [ 2333.035914][ T7264] can: request_module (can-proto-0) failed. [ 2333.190864][ T7268] netlink: 'syz.5.11722': attribute type 16 has an invalid length. [ 2333.204810][ T7268] netlink: 156 bytes leftover after parsing attributes in process `syz.5.11722'. [ 2333.993462][ T7277] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11725'. [ 2334.237352][ T7289] netlink: 'syz.5.11726': attribute type 1 has an invalid length. [ 2334.265841][ T7289] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.11726'. [ 2334.275833][ T7279] netlink: 'syz.3.11725': attribute type 13 has an invalid length. [ 2334.305700][ T7279] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11725'. [ 2334.398383][ T7288] netlink: 'syz.4.11723': attribute type 2 has an invalid length. [ 2334.492708][ T7288] netlink: 'syz.4.11723': attribute type 8 has an invalid length. [ 2334.554688][ T7288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11723'. [ 2335.291275][ T7299] netlink: 'syz.1.11739': attribute type 13 has an invalid length. [ 2335.757163][ T7300] netlink: 'syz.4.11729': attribute type 2 has an invalid length. [ 2335.955531][ T7300] netlink: 'syz.4.11729': attribute type 8 has an invalid length. [ 2336.095574][ T7300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11729'. [ 2336.188324][ T7316] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11731'. [ 2336.345617][ T7319] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2337.221503][ T7330] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11738'. [ 2337.475714][ T7332] validate_nla: 2 callbacks suppressed [ 2337.475733][ T7332] netlink: 'syz.3.11738': attribute type 13 has an invalid length. [ 2337.704861][ T7332] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11738'. [ 2338.943061][ T7340] netlink: 'syz.5.11740': attribute type 2 has an invalid length. [ 2339.028464][ T7340] netlink: 'syz.5.11740': attribute type 8 has an invalid length. [ 2339.135830][ T7340] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11740'. [ 2339.832447][ T7348] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11744'. [ 2339.947897][ T7347] netlink: 'syz.4.11743': attribute type 13 has an invalid length. [ 2341.733721][ T7356] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11747'. [ 2342.915135][ T7368] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2343.876311][ T7376] netlink: 'syz.1.11748': attribute type 2 has an invalid length. [ 2344.009091][ T7376] netlink: 'syz.1.11748': attribute type 8 has an invalid length. [ 2344.089450][ T7376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11748'. [ 2345.005821][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.012168][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.350311][ T7414] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.11760'. [ 2346.364848][ T7414] netlink: 'syz.1.11760': attribute type 13 has an invalid length. [ 2346.462557][ T7414] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11760'. [ 2346.489440][ T7413] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2347.593851][ T7430] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.11763'. [ 2348.648645][ T7445] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.11769'. [ 2348.947394][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2349.189873][ T7449] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11772'. [ 2349.368508][ T7453] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2349.429449][ T7455] netlink: 'syz.3.11772': attribute type 13 has an invalid length. [ 2349.445778][ T7455] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11772'. [ 2350.976878][ T7483] netlink: 'syz.5.11779': attribute type 6 has an invalid length. [ 2351.672720][ T7494] netlink: 'syz.2.11783': attribute type 6 has an invalid length. [ 2351.709067][ T7491] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.11781'. [ 2352.185970][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2352.202095][ T7501] FAULT_INJECTION: forcing a failure. [ 2352.202095][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2352.228088][ T7501] CPU: 0 PID: 7501 Comm: syz.2.11784 Not tainted syzkaller #0 [ 2352.235587][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2352.245655][ T7501] Call Trace: [ 2352.248948][ T7501] [ 2352.251895][ T7501] dump_stack_lvl+0x188/0x24e [ 2352.256597][ T7501] ? show_regs_print_info+0x12/0x12 [ 2352.261819][ T7501] ? load_image+0x400/0x400 [ 2352.266344][ T7501] ? __lock_acquire+0x7d10/0x7d10 [ 2352.271391][ T7501] ? __rcu_read_unlock+0x78/0xd0 [ 2352.276352][ T7501] should_fail_ex+0x399/0x4d0 [ 2352.281052][ T7501] _copy_to_user+0x2c/0x130 [ 2352.285576][ T7501] bpf_test_finish+0x198/0x600 [ 2352.290358][ T7501] ? convert___skb_to_skb+0x580/0x580 [ 2352.295742][ T7501] ? convert_skb_to___skb+0x420/0x420 [ 2352.301124][ T7501] ? bpf_test_init+0x119/0x140 [ 2352.305879][ T7501] bpf_prog_test_run_xdp+0x80a/0xf10 [ 2352.311162][ T7501] ? dev_put+0x80/0x80 [ 2352.315225][ T7501] ? dev_put+0x80/0x80 [ 2352.319285][ T7501] bpf_prog_test_run+0x31e/0x390 [ 2352.324214][ T7501] __sys_bpf+0x62b/0x780 [ 2352.328464][ T7501] ? bpf_link_show_fdinfo+0x380/0x380 [ 2352.333856][ T7501] ? lock_chain_count+0x20/0x20 [ 2352.338706][ T7501] __x64_sys_bpf+0x78/0x90 [ 2352.343114][ T7501] do_syscall_64+0x4c/0xa0 [ 2352.347518][ T7501] ? clear_bhb_loop+0x60/0xb0 [ 2352.352181][ T7501] ? clear_bhb_loop+0x60/0xb0 [ 2352.356844][ T7501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2352.362737][ T7501] RIP: 0033:0x7f16dc59ce59 [ 2352.367137][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2352.386735][ T7501] RSP: 002b:00007f16dd44f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2352.395141][ T7501] RAX: ffffffffffffffda RBX: 00007f16dc815fa0 RCX: 00007f16dc59ce59 [ 2352.403102][ T7501] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 2352.411063][ T7501] RBP: 00007f16dd44f090 R08: 0000000000000000 R09: 0000000000000000 [ 2352.419024][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2352.426983][ T7501] R13: 00007f16dc816038 R14: 00007f16dc815fa0 R15: 00007ffcc26a77f8 [ 2352.434959][ T7501] [ 2353.086975][ T7513] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2353.578607][ T7520] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11788'. [ 2353.650139][ T7522] netlink: 'syz.4.11791': attribute type 2 has an invalid length. [ 2353.733065][ T7520] netlink: 'syz.3.11788': attribute type 13 has an invalid length. [ 2353.780922][ T7520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11788'. [ 2354.026918][ T7522] device 0 entered promiscuous mode [ 2354.663659][ T7540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11795'. [ 2354.982756][ T7553] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2355.107093][ T7554] netlink: 'syz.1.11798': attribute type 1 has an invalid length. [ 2355.134639][ T7554] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.11798'. [ 2356.249976][ T7573] netlink: 'syz.5.11804': attribute type 13 has an invalid length. [ 2356.271675][ T7573] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11804'. [ 2356.282788][ T7573] syz_tun: refused to change device tx_queue_len [ 2356.289414][ T7573] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2357.637353][ T7602] mac80211_hwsim hwsim578 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2357.703490][ T7607] netlink: 'syz.4.11814': attribute type 2 has an invalid length. [ 2357.719367][ T7607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11814'. [ 2357.995966][ T7609] netlink: 'syz.4.11815': attribute type 2 has an invalid length. [ 2358.009843][ T7609] netlink: 'syz.4.11815': attribute type 8 has an invalid length. [ 2358.020902][ T7609] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11815'. [ 2358.291538][ T7617] netlink: 'syz.4.11817': attribute type 13 has an invalid length. [ 2358.598578][ T7623] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.11819'. [ 2358.627934][ T7625] raw_sendmsg: syz.3.11820 forgot to set AF_INET. Fix it! [ 2358.948054][ T7630] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11822'. [ 2359.095608][ T7631] netlink: 'syz.3.11822': attribute type 13 has an invalid length. [ 2359.140542][ T7631] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11822'. [ 2359.294675][ T7633] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11823'. [ 2359.363455][ T7636] FAULT_INJECTION: forcing a failure. [ 2359.363455][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2359.413133][ T7636] CPU: 0 PID: 7636 Comm: syz.2.11824 Not tainted syzkaller #0 [ 2359.420677][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2359.430749][ T7636] Call Trace: [ 2359.434040][ T7636] [ 2359.436986][ T7636] dump_stack_lvl+0x188/0x24e [ 2359.441696][ T7636] ? show_regs_print_info+0x12/0x12 [ 2359.446917][ T7636] ? load_image+0x400/0x400 [ 2359.451444][ T7636] ? __lock_acquire+0x7d10/0x7d10 [ 2359.456495][ T7636] should_fail_ex+0x399/0x4d0 [ 2359.461192][ T7636] _copy_from_user+0x2c/0x170 [ 2359.465902][ T7636] __copy_msghdr+0x3b7/0x580 [ 2359.470520][ T7636] ___sys_sendmsg+0x210/0x360 [ 2359.475231][ T7636] ? __sys_sendmsg+0x290/0x290 [ 2359.480044][ T7636] ? trace_call_bpf+0xbf/0x6b0 [ 2359.484850][ T7636] __se_sys_sendmsg+0x1bb/0x2a0 [ 2359.489725][ T7636] ? __x64_sys_sendmsg+0x80/0x80 [ 2359.494701][ T7636] ? lockdep_hardirqs_on+0x94/0x140 [ 2359.499918][ T7636] do_syscall_64+0x4c/0xa0 [ 2359.504352][ T7636] ? clear_bhb_loop+0x60/0xb0 [ 2359.509046][ T7636] ? clear_bhb_loop+0x60/0xb0 [ 2359.513742][ T7636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2359.519652][ T7636] RIP: 0033:0x7f16dc59ce59 [ 2359.524077][ T7636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2359.543696][ T7636] RSP: 002b:00007f16dd44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2359.552114][ T7636] RAX: ffffffffffffffda RBX: 00007f16dc815fa0 RCX: 00007f16dc59ce59 [ 2359.560080][ T7636] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2359.568042][ T7636] RBP: 00007f16dd44f090 R08: 0000000000000000 R09: 0000000000000000 [ 2359.576006][ T7636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2359.583966][ T7636] R13: 00007f16dc816038 R14: 00007f16dc815fa0 R15: 00007ffcc26a77f8 [ 2359.591941][ T7636] [ 2359.602878][ T7638] netlink: 'syz.5.11825': attribute type 2 has an invalid length. [ 2359.625479][ T7638] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11825'. [ 2359.705686][ T4152] wlan1: Trigger new scan to find an IBSS to join [ 2359.942781][ T7649] netlink: 'syz.3.11831': attribute type 13 has an invalid length. [ 2360.041998][ T7644] netlink: 'syz.2.11827': attribute type 2 has an invalid length. [ 2360.092546][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11827'. [ 2360.196714][ T7662] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.11833'. [ 2360.604943][ T7668] validate_nla: 1 callbacks suppressed [ 2360.604960][ T7668] netlink: 'syz.3.11836': attribute type 13 has an invalid length. [ 2360.714343][ T7670] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2360.754142][ T7668] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11836'. [ 2361.863914][ T7680] netlink: 'syz.4.11838': attribute type 2 has an invalid length. [ 2362.344664][ T7687] mac80211_hwsim hwsim576 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2362.490067][ T7692] netlink: 'syz.5.11842': attribute type 13 has an invalid length. [ 2363.037935][ T7698] netlink: 'syz.5.11845': attribute type 2 has an invalid length. [ 2363.095709][ T7698] netlink: 'syz.5.11845': attribute type 8 has an invalid length. [ 2363.115413][ T7698] __nla_validate_parse: 3 callbacks suppressed [ 2363.115430][ T7698] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11845'. [ 2363.202763][ T7714] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2363.256858][ T7715] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11849'. [ 2363.755865][ T7715] netlink: 'syz.2.11849': attribute type 13 has an invalid length. [ 2363.805731][ T75] wlan1: Trigger new scan to find an IBSS to join [ 2363.897804][ T7715] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11849'. [ 2363.936760][ T7715] syz_tun: refused to change device tx_queue_len [ 2363.943269][ T7715] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2364.144875][ T7726] mac80211_hwsim hwsim573 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2364.229058][ T7728] netlink: 'syz.3.11855': attribute type 13 has an invalid length. [ 2364.751986][T10105] wlan1: Trigger new scan to find an IBSS to join [ 2364.937742][ T75] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2366.201887][ T7741] netlink: 'syz.3.11869': attribute type 1 has an invalid length. [ 2366.257539][ T7743] FAULT_INJECTION: forcing a failure. [ 2366.257539][ T7743] name failslab, interval 1, probability 0, space 0, times 0 [ 2366.270563][ T7743] CPU: 0 PID: 7743 Comm: syz.1.11868 Not tainted syzkaller #0 [ 2366.278046][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2366.288116][ T7743] Call Trace: [ 2366.291405][ T7743] [ 2366.294351][ T7743] dump_stack_lvl+0x188/0x24e [ 2366.299056][ T7743] ? show_regs_print_info+0x12/0x12 [ 2366.304270][ T7743] ? load_image+0x400/0x400 [ 2366.308806][ T7743] should_fail_ex+0x399/0x4d0 [ 2366.313502][ T7743] should_failslab+0x5/0x20 [ 2366.318014][ T7743] slab_pre_alloc_hook+0x59/0x310 [ 2366.323051][ T7743] ? ref_tracker_alloc+0x14e/0x4b0 [ 2366.328181][ T7743] __kmem_cache_alloc_node+0x4f/0x260 [ 2366.333562][ T7743] ? mod_objcg_state+0x50d/0x8a0 [ 2366.338520][ T7743] ? ref_tracker_alloc+0x14e/0x4b0 [ 2366.343672][ T7743] kmalloc_trace+0x26/0xe0 [ 2366.348111][ T7743] ref_tracker_alloc+0x14e/0x4b0 [ 2366.353070][ T7743] ? ref_tracker_dir_print+0x150/0x150 [ 2366.358553][ T7743] ? percpu_ref_put+0x12/0x100 [ 2366.363339][ T7743] ? __lock_acquire+0x7d10/0x7d10 [ 2366.368401][ T7743] dst_init+0xda/0x410 [ 2366.372485][ T7743] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 2366.378126][ T7743] dst_alloc+0x12a/0x160 [ 2366.382400][ T7743] ip6_pol_route+0x98d/0x12a0 [ 2366.387096][ T7743] ? ip6_pol_route+0x16d/0x12a0 [ 2366.391963][ T7743] ? trace_fib6_table_lookup+0x250/0x250 [ 2366.397615][ T7743] ? mark_lock+0x94/0x320 [ 2366.401973][ T7743] fib6_rule_lookup+0x208/0x5d0 [ 2366.406836][ T7743] ? ip6_route_output_flags_noref+0x390/0x390 [ 2366.412919][ T7743] ? fib6_lookup+0x2d0/0x2d0 [ 2366.417540][ T7743] ? __ipv6_addr_type+0x150/0x2f0 [ 2366.422584][ T7743] ? ip6_route_output_flags_noref+0x230/0x390 [ 2366.428679][ T7743] ip6_route_output_flags+0xe3/0x330 [ 2366.433980][ T7743] ? ip6_route_output_flags+0x27/0x330 [ 2366.439461][ T7743] ip6_dst_lookup_tail+0x1aa/0x1510 [ 2366.444691][ T7743] ? ip6_dst_lookup+0x60/0x60 [ 2366.449399][ T7743] ? sk_dst_check+0x25/0x460 [ 2366.454002][ T7743] ? sk_dst_check+0x30f/0x460 [ 2366.458696][ T7743] ip6_sk_dst_lookup_flow+0x711/0x9b0 [ 2366.464098][ T7743] udpv6_sendmsg+0x18de/0x2420 [ 2366.468898][ T7743] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 2366.473768][ T7743] ? udp_v6_early_demux+0xf80/0xf80 [ 2366.478983][ T7743] ? ct_irq_exit_irqson+0x113/0x170 [ 2366.484205][ T7743] ? lock_chain_count+0x20/0x20 [ 2366.489088][ T7743] ? _local_bh_enable+0xa0/0xa0 [ 2366.493958][ T7743] ? inet_send_prepare+0x1af/0x260 [ 2366.499086][ T7743] ? inet_send_prepare+0x1af/0x260 [ 2366.504211][ T7743] ? inet6_sendmsg+0x5b/0xd0 [ 2366.508816][ T7743] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 2366.514027][ T7743] ____sys_sendmsg+0x5be/0x970 [ 2366.518820][ T7743] ? __sys_sendmsg_sock+0x30/0x30 [ 2366.523858][ T7743] ? __import_iovec+0x315/0x500 [ 2366.528732][ T7743] ? import_iovec+0x6f/0xa0 [ 2366.533256][ T7743] ___sys_sendmsg+0x2a2/0x360 [ 2366.537969][ T7743] ? __sys_sendmsg+0x290/0x290 [ 2366.542786][ T7743] ? __lock_acquire+0x7d10/0x7d10 [ 2366.547865][ T7743] __se_sys_sendmsg+0x1bb/0x2a0 [ 2366.552744][ T7743] ? __x64_sys_sendmsg+0x80/0x80 [ 2366.557721][ T7743] ? lockdep_hardirqs_on+0x94/0x140 [ 2366.562939][ T7743] do_syscall_64+0x4c/0xa0 [ 2366.567370][ T7743] ? clear_bhb_loop+0x60/0xb0 [ 2366.572411][ T7743] ? clear_bhb_loop+0x60/0xb0 [ 2366.577104][ T7743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2366.583019][ T7743] RIP: 0033:0x7f8b5879ce59 [ 2366.587446][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2366.607064][ T7743] RSP: 002b:00007f8b569f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2366.615494][ T7743] RAX: ffffffffffffffda RBX: 00007f8b58a15fa0 RCX: 00007f8b5879ce59 [ 2366.623474][ T7743] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 2366.631454][ T7743] RBP: 00007f8b569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2366.639434][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2366.647414][ T7743] R13: 00007f8b58a16038 R14: 00007f8b58a15fa0 R15: 00007ffc31155138 [ 2366.655421][ T7743] [ 2366.658625][ T7743] memory allocation failure, unreliable refcount tracker. [ 2366.806915][ T7741] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.11869'. [ 2368.162032][ T7754] FAULT_INJECTION: forcing a failure. [ 2368.162032][ T7754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2368.244210][ T7754] CPU: 0 PID: 7754 Comm: syz.2.11862 Not tainted syzkaller #0 [ 2368.251732][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2368.261810][ T7754] Call Trace: [ 2368.265119][ T7754] [ 2368.268057][ T7754] dump_stack_lvl+0x188/0x24e [ 2368.272744][ T7754] ? show_regs_print_info+0x12/0x12 [ 2368.277941][ T7754] ? load_image+0x400/0x400 [ 2368.282442][ T7754] ? __lock_acquire+0x7d10/0x7d10 [ 2368.287471][ T7754] should_fail_ex+0x399/0x4d0 [ 2368.292171][ T7754] _copy_from_user+0x2c/0x170 [ 2368.296852][ T7754] __copy_msghdr+0x3b7/0x580 [ 2368.301450][ T7754] ___sys_sendmsg+0x210/0x360 [ 2368.306134][ T7754] ? __sys_sendmsg+0x290/0x290 [ 2368.310917][ T7754] ? __lock_acquire+0x7d10/0x7d10 [ 2368.315963][ T7754] __se_sys_sendmsg+0x1bb/0x2a0 [ 2368.320816][ T7754] ? __x64_sys_sendmsg+0x80/0x80 [ 2368.325768][ T7754] ? lockdep_hardirqs_on+0x94/0x140 [ 2368.330960][ T7754] do_syscall_64+0x4c/0xa0 [ 2368.335371][ T7754] ? clear_bhb_loop+0x60/0xb0 [ 2368.340040][ T7754] ? clear_bhb_loop+0x60/0xb0 [ 2368.344712][ T7754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2368.350602][ T7754] RIP: 0033:0x7f16dc59ce59 [ 2368.355011][ T7754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2368.374607][ T7754] RSP: 002b:00007f16dd44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2368.383013][ T7754] RAX: ffffffffffffffda RBX: 00007f16dc815fa0 RCX: 00007f16dc59ce59 [ 2368.390975][ T7754] RDX: 0000000024000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 2368.398938][ T7754] RBP: 00007f16dd44f090 R08: 0000000000000000 R09: 0000000000000000 [ 2368.406900][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2368.414862][ T7754] R13: 00007f16dc816038 R14: 00007f16dc815fa0 R15: 00007ffcc26a77f8 [ 2368.422844][ T7754] [ 2368.585741][ T7749] netlink: 'syz.1.11859': attribute type 13 has an invalid length. [ 2368.594091][ T7749] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11859'. [ 2368.745713][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2368.892636][ T7767] netlink: 'syz.1.11866': attribute type 13 has an invalid length. [ 2368.956382][ T7769] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2369.402603][ T7780] FAULT_INJECTION: forcing a failure. [ 2369.402603][ T7780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2369.441820][ T7779] netlink: 'syz.4.11874': attribute type 21 has an invalid length. [ 2369.474324][ T7780] CPU: 1 PID: 7780 Comm: syz.3.11875 Not tainted syzkaller #0 [ 2369.481851][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2369.491923][ T7780] Call Trace: [ 2369.495210][ T7780] [ 2369.498150][ T7780] dump_stack_lvl+0x188/0x24e [ 2369.502853][ T7780] ? show_regs_print_info+0x12/0x12 [ 2369.508080][ T7780] ? load_image+0x400/0x400 [ 2369.512604][ T7780] ? __lock_acquire+0x7d10/0x7d10 [ 2369.517656][ T7780] should_fail_ex+0x399/0x4d0 [ 2369.522361][ T7780] _copy_from_user+0x2c/0x170 [ 2369.527068][ T7780] __copy_msghdr+0x3b7/0x580 [ 2369.531697][ T7780] ___sys_sendmsg+0x210/0x360 [ 2369.536404][ T7780] ? __sys_sendmsg+0x290/0x290 [ 2369.541211][ T7780] ? __lock_acquire+0x7d10/0x7d10 [ 2369.546286][ T7780] __se_sys_sendmsg+0x1bb/0x2a0 [ 2369.551164][ T7780] ? __x64_sys_sendmsg+0x80/0x80 [ 2369.556139][ T7780] ? lockdep_hardirqs_on+0x94/0x140 [ 2369.561360][ T7780] do_syscall_64+0x4c/0xa0 [ 2369.565798][ T7780] ? clear_bhb_loop+0x60/0xb0 [ 2369.570753][ T7780] ? clear_bhb_loop+0x60/0xb0 [ 2369.575447][ T7780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2369.581363][ T7780] RIP: 0033:0x7f1af899ce59 [ 2369.585796][ T7780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2369.605436][ T7780] RSP: 002b:00007f1af9885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2369.613885][ T7780] RAX: ffffffffffffffda RBX: 00007f1af8c15fa0 RCX: 00007f1af899ce59 [ 2369.621883][ T7780] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2369.629875][ T7780] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2369.637872][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2369.645864][ T7780] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2369.653871][ T7780] [ 2369.655500][ T7779] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11874'. [ 2370.492296][ T4152] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2371.197562][ T7800] FAULT_INJECTION: forcing a failure. [ 2371.197562][ T7800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2371.255491][ T7797] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11879'. [ 2371.276379][ T7800] CPU: 1 PID: 7800 Comm: syz.4.11880 Not tainted syzkaller #0 [ 2371.283906][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2371.293981][ T7800] Call Trace: [ 2371.297272][ T7800] [ 2371.300210][ T7800] dump_stack_lvl+0x188/0x24e [ 2371.304910][ T7800] ? show_regs_print_info+0x12/0x12 [ 2371.308605][ T7798] netlink: 'syz.2.11879': attribute type 13 has an invalid length. [ 2371.310113][ T7800] ? load_image+0x400/0x400 [ 2371.310143][ T7800] ? __lock_acquire+0x7d10/0x7d10 [ 2371.327554][ T7800] ? perf_trace_lock+0xf8/0x390 [ 2371.332425][ T7800] should_fail_ex+0x399/0x4d0 [ 2371.337124][ T7800] _copy_from_user+0x2c/0x170 [ 2371.341809][ T7800] dev_ethtool+0xc2/0x12f0 [ 2371.346236][ T7800] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2371.352478][ T7800] ? __lock_acquire+0x7d10/0x7d10 [ 2371.357507][ T7800] ? __kmem_cache_free+0xb6/0x1f0 [ 2371.362536][ T7800] ? full_name_hash+0x8e/0xe0 [ 2371.367211][ T7800] ? dev_load+0x1d/0x1e0 [ 2371.371447][ T7800] ? dev_load+0x1d/0x1e0 [ 2371.375684][ T7800] dev_ioctl+0x474/0xe80 [ 2371.379925][ T7800] sock_do_ioctl+0x245/0x320 [ 2371.384506][ T7800] ? sock_show_fdinfo+0xb0/0xb0 [ 2371.389358][ T7800] sock_ioctl+0x4d2/0x710 [ 2371.393677][ T7800] ? sock_poll+0x410/0x410 [ 2371.398091][ T7800] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2371.403021][ T7800] ? security_file_ioctl+0x7c/0xa0 [ 2371.408133][ T7800] ? sock_poll+0x410/0x410 [ 2371.412541][ T7800] __se_sys_ioctl+0xfa/0x170 [ 2371.417138][ T7800] do_syscall_64+0x4c/0xa0 [ 2371.421560][ T7800] ? clear_bhb_loop+0x60/0xb0 [ 2371.426232][ T7800] ? clear_bhb_loop+0x60/0xb0 [ 2371.430904][ T7800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2371.436789][ T7800] RIP: 0033:0x7f02d179ce59 [ 2371.441197][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2371.460794][ T7800] RSP: 002b:00007f02d25ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2371.469201][ T7800] RAX: ffffffffffffffda RBX: 00007f02d1a15fa0 RCX: 00007f02d179ce59 [ 2371.477164][ T7800] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000010 [ 2371.485125][ T7800] RBP: 00007f02d25ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2371.493087][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2371.501047][ T7800] R13: 00007f02d1a16038 R14: 00007f02d1a15fa0 R15: 00007ffff641e578 [ 2371.509024][ T7800] [ 2371.546722][ T7798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11879'. [ 2371.612809][ T7798] syz_tun: refused to change device tx_queue_len [ 2371.637662][ T7798] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2371.925132][ T7810] netlink: 'syz.3.11883': attribute type 13 has an invalid length. [ 2372.740640][ T7815] mac80211_hwsim hwsim576 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2372.853586][ T7821] FAULT_INJECTION: forcing a failure. [ 2372.853586][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2372.867411][ T7821] CPU: 1 PID: 7821 Comm: syz.3.11888 Not tainted syzkaller #0 [ 2372.874903][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2372.884973][ T7821] Call Trace: [ 2372.888264][ T7821] [ 2372.891200][ T7821] dump_stack_lvl+0x188/0x24e [ 2372.895889][ T7821] ? show_regs_print_info+0x12/0x12 [ 2372.901106][ T7821] ? load_image+0x400/0x400 [ 2372.905618][ T7821] ? __lock_acquire+0x7d10/0x7d10 [ 2372.910674][ T7821] should_fail_ex+0x399/0x4d0 [ 2372.915399][ T7821] _copy_from_user+0x2c/0x170 [ 2372.920088][ T7821] ip_tunnel_siocdevprivate+0xbe/0x1e0 [ 2372.925553][ T7821] ? ip_tunnel_update+0xaa0/0xaa0 [ 2372.930602][ T7821] ? __schedule+0x11d9/0x40e0 [ 2372.935286][ T7821] ipip6_tunnel_siocdevprivate+0x1de/0x1630 [ 2372.941175][ T7821] ? sit_tunnel_xmit+0x2010/0x2010 [ 2372.946287][ T7821] ? __mutex_lock+0x806/0xaf0 [ 2372.950981][ T7821] ? __lock_acquire+0x7d10/0x7d10 [ 2372.956003][ T7821] ? do_raw_spin_lock+0x128/0x2f0 [ 2372.961023][ T7821] ? __rwlock_init+0x140/0x140 [ 2372.965788][ T7821] ? do_raw_spin_unlock+0x11d/0x230 [ 2372.970987][ T7821] ? full_name_hash+0x8e/0xe0 [ 2372.975668][ T7821] dev_ifsioc+0xa4a/0xd40 [ 2372.980003][ T7821] ? dev_ioctl+0xe80/0xe80 [ 2372.984418][ T7821] ? full_name_hash+0x8e/0xe0 [ 2372.989090][ T7821] ? dev_load+0x1d/0x1e0 [ 2372.993326][ T7821] ? dev_load+0x1d/0x1e0 [ 2372.997563][ T7821] dev_ioctl+0x5f8/0xe80 [ 2373.001796][ T7821] ? get_user_ifreq+0xc7/0x170 [ 2373.006553][ T7821] sock_ioctl+0x691/0x710 [ 2373.010874][ T7821] ? sock_poll+0x410/0x410 [ 2373.015287][ T7821] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2373.020222][ T7821] ? security_file_ioctl+0x7c/0xa0 [ 2373.025333][ T7821] ? sock_poll+0x410/0x410 [ 2373.029746][ T7821] __se_sys_ioctl+0xfa/0x170 [ 2373.034333][ T7821] do_syscall_64+0x4c/0xa0 [ 2373.038744][ T7821] ? clear_bhb_loop+0x60/0xb0 [ 2373.043418][ T7821] ? clear_bhb_loop+0x60/0xb0 [ 2373.048087][ T7821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2373.053978][ T7821] RIP: 0033:0x7f1af899ce59 [ 2373.058387][ T7821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2373.077987][ T7821] RSP: 002b:00007f1af9885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2373.086393][ T7821] RAX: ffffffffffffffda RBX: 00007f1af8c15fa0 RCX: 00007f1af899ce59 [ 2373.094353][ T7821] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 2373.102314][ T7821] RBP: 00007f1af9885090 R08: 0000000000000000 R09: 0000000000000000 [ 2373.110272][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2373.118228][ T7821] R13: 00007f1af8c16038 R14: 00007f1af8c15fa0 R15: 00007ffc950c2ce8 [ 2373.126201][ T7821] [ 2373.392929][ T7824] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2373.592721][ T7828] FAULT_INJECTION: forcing a failure. [ 2373.592721][ T7828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2373.646325][ T7828] CPU: 1 PID: 7828 Comm: syz.4.11891 Not tainted syzkaller #0 [ 2373.653852][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2373.663937][ T7828] Call Trace: [ 2373.667229][ T7828] [ 2373.670173][ T7828] dump_stack_lvl+0x188/0x24e [ 2373.674880][ T7828] ? show_regs_print_info+0x12/0x12 [ 2373.680109][ T7828] ? load_image+0x400/0x400 [ 2373.684629][ T7828] ? __lock_acquire+0x7d10/0x7d10 [ 2373.689672][ T7828] ? snprintf+0xe5/0x140 [ 2373.693934][ T7828] should_fail_ex+0x399/0x4d0 [ 2373.698628][ T7828] _copy_to_user+0x2c/0x130 [ 2373.703150][ T7828] simple_read_from_buffer+0xe3/0x150 [ 2373.708543][ T7828] proc_fail_nth_read+0x1a6/0x220 [ 2373.713588][ T7828] ? proc_fault_inject_write+0x310/0x310 [ 2373.719233][ T7828] ? fsnotify_perm+0x248/0x550 [ 2373.724013][ T7828] ? proc_fault_inject_write+0x310/0x310 [ 2373.729665][ T7828] vfs_read+0x2de/0xa00 [ 2373.733851][ T7828] ? kernel_read+0x1e0/0x1e0 [ 2373.738465][ T7828] ? __fget_files+0x28/0x4b0 [ 2373.743071][ T7828] ? __fget_files+0x28/0x4b0 [ 2373.747683][ T7828] ? __fget_files+0x43d/0x4b0 [ 2373.752382][ T7828] ? __fdget_pos+0x2ae/0x360 [ 2373.756978][ T7828] ? ksys_read+0x71/0x250 [ 2373.761314][ T7828] ksys_read+0x14c/0x250 [ 2373.765564][ T7828] ? vfs_write+0xa30/0xa30 [ 2373.769981][ T7828] ? lockdep_hardirqs_on+0x94/0x140 [ 2373.775178][ T7828] do_syscall_64+0x4c/0xa0 [ 2373.779595][ T7828] ? clear_bhb_loop+0x60/0xb0 [ 2373.784268][ T7828] ? clear_bhb_loop+0x60/0xb0 [ 2373.788949][ T7828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2373.794838][ T7828] RIP: 0033:0x7f02d175d68e [ 2373.799243][ T7828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2373.818842][ T7828] RSP: 002b:00007f02d25ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2373.827248][ T7828] RAX: ffffffffffffffda RBX: 00007f02d25ed6c0 RCX: 00007f02d175d68e [ 2373.835228][ T7828] RDX: 000000000000000f RSI: 00007f02d25ed0a0 RDI: 0000000000000005 [ 2373.843211][ T7828] RBP: 00007f02d25ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2373.851182][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2373.859145][ T7828] R13: 00007f02d1a16038 R14: 00007f02d1a15fa0 R15: 00007ffff641e578 [ 2373.867123][ T7828] [ 2374.746479][ T4155] wlan1: Trigger new scan to find an IBSS to join [ 2374.774440][ T7841] netlink: 'syz.4.11895': attribute type 13 has an invalid length. [ 2375.427730][ T7854] netlink: 'syz.2.11901': attribute type 6 has an invalid length. [ 2375.480828][ T7852] mac80211_hwsim hwsim573 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2375.671280][ T7857] mac80211_hwsim hwsim578 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2376.053095][ T7867] device syzkaller0 entered promiscuous mode [ 2376.062338][ T7870] netlink: 'syz.3.11907': attribute type 13 has an invalid length. [ 2377.708002][ T4152] wlan1: Trigger new scan to find an IBSS to join [ 2378.771173][ T7881] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11911'. [ 2378.842482][ T7878] netlink: 'syz.2.11911': attribute type 13 has an invalid length. [ 2378.858565][ T7878] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11911'. [ 2378.870751][ T7878] syz_tun: refused to change device tx_queue_len [ 2378.892575][ T7878] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2379.151236][ T7898] mac80211_hwsim hwsim576 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2379.500565][ T7908] netlink: 'syz.4.11919': attribute type 13 has an invalid length. [ 2379.878600][ T7919] netlink: 'syz.1.11922': attribute type 39 has an invalid length. [ 2380.690660][T31924] wlan1: Trigger new scan to find an IBSS to join [ 2380.995788][ T7930] device syzkaller0 entered promiscuous mode [ 2381.116917][ T7936] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11928'. [ 2381.705627][T10105] wlan1: Trigger new scan to find an IBSS to join [ 2382.028256][ T7947] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.11932'. [ 2383.582749][ T7935] netlink: 'syz.4.11928': attribute type 13 has an invalid length. [ 2383.590761][ T7935] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11928'. [ 2383.600755][ T7935] syz_tun: refused to change device tx_queue_len [ 2383.607327][ T7935] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2383.626815][ T7942] netlink: 'syz.1.11931': attribute type 13 has an invalid length. [ 2383.706380][T10105] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2383.764561][ T7951] netlink: 'syz.2.11934': attribute type 39 has an invalid length. [ 2384.502525][ T7971] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11940'. [ 2384.665113][ T7975] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2384.675084][ T75] wlan1: Trigger new scan to find an IBSS to join [ 2384.725656][ T7972] netlink: 'syz.5.11940': attribute type 13 has an invalid length. [ 2384.757903][ T7972] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11940'. [ 2384.810815][ T7972] syz_tun: refused to change device tx_queue_len [ 2384.869631][ T7972] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2385.378074][ T7989] sctp: [Deprecated]: syz.5.11945 (pid 7989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2385.378074][ T7989] Use struct sctp_sack_info instead [ 2385.404532][ T7986] netlink: 'syz.3.11944': attribute type 13 has an invalid length. [ 2385.445534][ T7986] netlink: 172 bytes leftover after parsing attributes in process `syz.3.11944'. [ 2385.521243][ T7986] erspan0: refused to change device tx_queue_len [ 2385.681770][ T7991] device syzkaller0 entered promiscuous mode [ 2387.709357][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2387.883593][ T7995] netlink: 'syz.5.11947': attribute type 13 has an invalid length. [ 2387.891790][ T7995] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11947'. [ 2387.902201][ T7995] syz_tun: refused to change device tx_queue_len [ 2387.909112][ T7995] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2387.973078][ T7994] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.11947'. [ 2387.982566][ T8005] netlink: 'syz.1.11950': attribute type 39 has an invalid length. [ 2388.594328][ T8022] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11956'. [ 2388.782652][ T75] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2389.115286][ T8019] netlink: 'syz.2.11956': attribute type 13 has an invalid length. [ 2389.167291][ T8019] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11956'. [ 2389.511325][ T8019] syz_tun: refused to change device tx_queue_len [ 2389.518544][ T8019] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2391.035742][ T8055] netlink: 'syz.3.11965': attribute type 39 has an invalid length. [ 2391.264568][ T8062] ÿ: port 1(gretap0) entered blocking state [ 2391.277092][ T8062] ÿ: port 1(gretap0) entered disabled state [ 2391.293390][ T8062] device gretap0 entered promiscuous mode [ 2391.516578][ T8074] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11975'. [ 2391.696228][ T8074] netlink: 'syz.4.11975': attribute type 13 has an invalid length. [ 2391.704379][ T8074] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11975'. [ 2391.723774][ T8074] syz_tun: refused to change device tx_queue_len [ 2391.744305][ T8074] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2391.964607][ T8067] netlink: 'syz.1.11974': attribute type 2 has an invalid length. [ 2392.014488][ T8067] netlink: 'syz.1.11974': attribute type 8 has an invalid length. [ 2392.092603][ T8067] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11974'. [ 2392.732351][ T8096] netlink: 'syz.5.11983': attribute type 39 has an invalid length. [ 2394.865712][ T8115] FAULT_INJECTION: forcing a failure. [ 2394.865712][ T8115] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.046479][ T8115] CPU: 1 PID: 8115 Comm: syz.5.11988 Not tainted syzkaller #0 [ 2395.054018][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2395.064090][ T8115] Call Trace: [ 2395.067380][ T8115] [ 2395.070318][ T8115] dump_stack_lvl+0x188/0x24e [ 2395.075016][ T8115] ? show_regs_print_info+0x12/0x12 [ 2395.080231][ T8115] ? load_image+0x400/0x400 [ 2395.084758][ T8115] ? perf_trace_lock+0xf8/0x390 [ 2395.089629][ T8115] should_fail_ex+0x399/0x4d0 [ 2395.094328][ T8115] should_failslab+0x5/0x20 [ 2395.098842][ T8115] slab_pre_alloc_hook+0x59/0x310 [ 2395.103889][ T8115] kmem_cache_alloc+0x56/0x2f0 [ 2395.108664][ T8115] ? skb_clone+0x1e7/0x370 [ 2395.113100][ T8115] skb_clone+0x1e7/0x370 [ 2395.117361][ T8115] __netlink_deliver_tap+0x3ed/0x800 [ 2395.122673][ T8115] ? netlink_deliver_tap+0x2e/0x1b0 [ 2395.127892][ T8115] netlink_deliver_tap+0x19c/0x1b0 [ 2395.133023][ T8115] netlink_dump+0x832/0xd00 [ 2395.137557][ T8115] ? netlink_lookup+0x200/0x200 [ 2395.142434][ T8115] ? refcount_dec_and_test+0x4f/0x70 [ 2395.147746][ T8115] netlink_recvmsg+0x68f/0xe00 [ 2395.152553][ T8115] ? netlink_sendmsg+0xbd0/0xbd0 [ 2395.157517][ T8115] ? mark_lock+0x94/0x320 [ 2395.161870][ T8115] ? aa_af_perm+0x340/0x340 [ 2395.166394][ T8115] ? perf_trace_lock+0xf8/0x390 [ 2395.171265][ T8115] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2395.176568][ T8115] ? security_socket_recvmsg+0x85/0xb0 [ 2395.182054][ T8115] ? netlink_sendmsg+0xbd0/0xbd0 [ 2395.187009][ T8115] ____sys_recvmsg+0x2cb/0x5e0 [ 2395.191805][ T8115] ? __sys_recvmsg_sock+0x40/0x40 [ 2395.196876][ T8115] ? import_iovec+0x6f/0xa0 [ 2395.201396][ T8115] ___sys_recvmsg+0x212/0x590 [ 2395.206102][ T8115] ? __sys_recvmsg+0x290/0x290 [ 2395.210891][ T8115] ? common_file_perm+0x171/0x1c0 [ 2395.215943][ T8115] ? __fget_files+0x43d/0x4b0 [ 2395.220652][ T8115] __x64_sys_recvmsg+0x205/0x2e0 [ 2395.225614][ T8115] ? ___sys_recvmsg+0x590/0x590 [ 2395.230502][ T8115] ? lockdep_hardirqs_on+0x94/0x140 [ 2395.235718][ T8115] do_syscall_64+0x4c/0xa0 [ 2395.240157][ T8115] ? clear_bhb_loop+0x60/0xb0 [ 2395.244851][ T8115] ? clear_bhb_loop+0x60/0xb0 [ 2395.249545][ T8115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2395.255453][ T8115] RIP: 0033:0x7f0a98f9ce59 [ 2395.259889][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2395.279512][ T8115] RSP: 002b:00007f0a99f25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2395.287946][ T8115] RAX: ffffffffffffffda RBX: 00007f0a99215fa0 RCX: 00007f0a98f9ce59 [ 2395.295928][ T8115] RDX: 0000000000010002 RSI: 0000200000000780 RDI: 0000000000000003 [ 2395.303914][ T8115] RBP: 00007f0a99f25090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.311899][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2395.319886][ T8115] R13: 00007f0a99216038 R14: 00007f0a99215fa0 R15: 00007ffd94fdfc78 [ 2395.327897][ T8115] [ 2397.106082][ T8136] netlink: 'syz.5.11996': attribute type 39 has an invalid length. [ 2397.656036][ T8146] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11998'. [ 2397.905499][ T8148] netlink: 'syz.2.11998': attribute type 13 has an invalid length. [ 2397.964489][ T8148] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11998'. [ 2398.038657][ T8148] syz_tun: refused to change device tx_queue_len [ 2398.062214][ T8148] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2398.154324][ T8145] netlink: 'syz.3.11994': attribute type 2 has an invalid length. [ 2398.178906][ T8145] netlink: 'syz.3.11994': attribute type 8 has an invalid length. [ 2398.214815][ T8145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11994'. [ 2399.029103][ T8176] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12006'. [ 2399.306695][ T8176] device wg2 entered promiscuous mode [ 2399.422194][ T8184] netlink: 'syz.3.12009': attribute type 39 has an invalid length. [ 2400.840623][ T8197] netlink: 'syz.1.12014': attribute type 2 has an invalid length. [ 2400.862758][ T8197] netlink: 'syz.1.12014': attribute type 8 has an invalid length. [ 2400.934237][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12014'. [ 2401.206210][ T8225] netlink: 'syz.4.12023': attribute type 2 has an invalid length. [ 2401.214086][ T8225] netlink: 'syz.4.12023': attribute type 1 has an invalid length. [ 2401.275896][ T8225] netlink: 'syz.4.12023': attribute type 2 has an invalid length. [ 2401.701766][ T8233] device syzkaller0 entered promiscuous mode [ 2405.952071][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.958671][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.628853][ T8261] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12035'. [ 2406.643911][ T8264] validate_nla: 128 callbacks suppressed [ 2406.643928][ T8264] netlink: 'syz.1.12035': attribute type 13 has an invalid length. [ 2406.668801][ T8264] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12035'. [ 2406.682599][ T8272] netlink: 'syz.3.12036': attribute type 2 has an invalid length. [ 2406.700616][ T8272] netlink: 'syz.3.12036': attribute type 8 has an invalid length. [ 2406.719801][ T8272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12036'. [ 2406.859954][ T8279] netlink: 'syz.4.12039': attribute type 39 has an invalid length. [ 2407.555727][ T8289] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12044'. [ 2407.711761][ T8290] netlink: 'syz.4.12044': attribute type 13 has an invalid length. [ 2407.735489][ T8290] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12044'. [ 2407.756241][ T8290] syz_tun: refused to change device tx_queue_len [ 2407.762954][ T8290] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2407.918575][ T8301] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12047'. [ 2408.947757][ T8308] device syzkaller0 entered promiscuous mode [ 2409.021713][ T8312] netlink: 'syz.1.12049': attribute type 13 has an invalid length. [ 2409.083656][ T8312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12049'. [ 2411.852013][T31924] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2414.238854][ T8328] netlink: 'syz.1.12054': attribute type 39 has an invalid length. [ 2414.249324][ T8330] netlink: 'syz.3.12051': attribute type 2 has an invalid length. [ 2414.257549][ T8330] netlink: 'syz.3.12051': attribute type 8 has an invalid length. [ 2414.265960][ T8330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12051'. [ 2414.287320][ T8346] mac80211_hwsim hwsim576 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2414.462756][ T8352] netlink: 'syz.1.12060': attribute type 10 has an invalid length. [ 2414.486985][ T8352] device geneve0 entered promiscuous mode [ 2414.911850][ T8367] netlink: 'syz.4.12064': attribute type 13 has an invalid length. [ 2414.943045][ T8367] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12064'. [ 2414.967121][ T8367] syz_tun: refused to change device tx_queue_len [ 2414.973519][ T8367] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2415.232966][ T8373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2415.241977][ T8373] IPv6: NLM_F_CREATE should be set when creating new route [ 2415.250094][ T8373] IPv6: NLM_F_CREATE should be set when creating new route [ 2415.257551][ T8373] IPv6: NLM_F_CREATE should be set when creating new route [ 2415.466788][ T8380] netlink: 'syz.3.12063': attribute type 10 has an invalid length. [ 2415.474803][ T8380] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12063'. [ 2415.532665][ T8380] bridge0: port 2(ipvlan1) entered blocking state [ 2415.542542][ T8380] bridge0: port 2(ipvlan1) entered disabled state [ 2415.553557][ T8380] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2415.767327][ T8389] netlink: 'syz.2.12071': attribute type 39 has an invalid length. [ 2416.091828][ T8399] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2416.215150][ T8402] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12077'. [ 2416.338966][ T8407] device syzkaller0 entered promiscuous mode [ 2416.378154][ T8408] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12075'. [ 2416.734497][T31924] wlan1: Trigger new scan to find an IBSS to join [ 2419.705589][T32482] wlan1: Trigger new scan to find an IBSS to join [ 2422.205594][ T8420] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12079'. [ 2422.215251][ T8403] netlink: 'syz.3.12075': attribute type 13 has an invalid length. [ 2422.235509][ T8403] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12075'. [ 2422.244821][ T8405] netlink: 'syz.5.12073': attribute type 2 has an invalid length. [ 2422.254294][ T8405] netlink: 'syz.5.12073': attribute type 8 has an invalid length. [ 2422.263045][ T8405] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12073'. [ 2422.285402][ T8421] netlink: 'syz.4.12079': attribute type 13 has an invalid length. [ 2422.293341][ T8421] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12079'. [ 2422.327478][ T8421] syz_tun: refused to change device tx_queue_len [ 2422.333894][ T8421] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2422.435780][ T8431] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12082'. [ 2422.745669][T31924] wlan1: Trigger new scan to find an IBSS to join [ 2423.373750][ T8449] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2423.588550][ T8455] netlink: 'syz.5.12084': attribute type 39 has an invalid length. [ 2423.646316][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2423.747734][ T8459] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12089'. [ 2423.828128][ T8461] netlink: 'syz.2.12091': attribute type 12 has an invalid length. [ 2423.885049][ T8461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12091'. [ 2424.369066][ T8476] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12095'. [ 2424.536017][ T8476] netlink: 'syz.4.12095': attribute type 13 has an invalid length. [ 2424.543984][ T8476] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12095'. [ 2424.597195][ T8476] syz_tun: refused to change device tx_queue_len [ 2424.765672][ T8476] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2424.850257][ T8471] netlink: 'syz.3.12094': attribute type 2 has an invalid length. [ 2424.881261][ T8471] netlink: 'syz.3.12094': attribute type 8 has an invalid length. [ 2424.925713][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12094'. [ 2425.380453][ T8502] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2425.679381][ T8509] netlink: 'syz.1.12103': attribute type 39 has an invalid length. [ 2425.979263][ T8512] wlan1: mtu greater than device maximum [ 2426.489349][ T8530] syz_tun: refused to change device tx_queue_len [ 2426.561861][ T8530] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2427.258566][ T8549] __nla_validate_parse: 6 callbacks suppressed [ 2427.258587][ T8549] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12116'. [ 2427.327592][ T8549] openvswitch: netlink: Message has 6 unknown bytes. [ 2427.591629][ T8554] validate_nla: 5 callbacks suppressed [ 2427.591650][ T8554] netlink: 'syz.2.12117': attribute type 39 has an invalid length. [ 2427.864571][ T8563] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12119'. [ 2428.547076][ T8581] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12124'. [ 2428.623072][ T8573] netlink: 'syz.2.12123': attribute type 2 has an invalid length. [ 2428.650612][ T8573] netlink: 'syz.2.12123': attribute type 8 has an invalid length. [ 2428.723246][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12123'. [ 2428.765658][ T8583] netlink: 'syz.1.12124': attribute type 13 has an invalid length. [ 2428.773819][ T8583] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12124'. [ 2429.295865][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12132'. [ 2429.396723][ T8599] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12132'. [ 2429.525440][ T8600] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12132'. [ 2429.559335][ T8604] netlink: 'syz.3.12133': attribute type 39 has an invalid length. [ 2429.908980][ T8613] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12136'. [ 2430.694339][ T8624] netlink: 'syz.3.12140': attribute type 2 has an invalid length. [ 2430.790571][ T8624] netlink: 'syz.3.12140': attribute type 8 has an invalid length. [ 2430.861057][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12140'. [ 2431.517964][ T8642] netlink: 'syz.5.12144': attribute type 13 has an invalid length. [ 2431.614828][ T8642] syz_tun: refused to change device tx_queue_len [ 2431.871250][ T8642] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2432.379067][ T8663] netlink: 'syz.5.12151': attribute type 12 has an invalid length. [ 2432.405434][ T8663] __nla_validate_parse: 2 callbacks suppressed [ 2432.405451][ T8663] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12151'. [ 2432.451539][ T8661] netlink: 'syz.1.12150': attribute type 39 has an invalid length. [ 2433.302927][ T8676] mac80211_hwsim hwsim573 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2433.561794][ T8685] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12157'. [ 2434.751331][ T8699] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12161'. [ 2434.828086][ T8702] netlink: 'syz.1.12161': attribute type 13 has an invalid length. [ 2434.872276][ T8702] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12161'. [ 2435.019246][ T8709] netlink: 'syz.4.12164': attribute type 39 has an invalid length. [ 2435.638037][ T8720] netlink: 'syz.2.12168': attribute type 29 has an invalid length. [ 2435.764124][ T8720] netlink: 'syz.2.12168': attribute type 29 has an invalid length. [ 2435.797065][ T8722] netlink: 'syz.2.12168': attribute type 29 has an invalid length. [ 2435.835280][ T8723] FAULT_INJECTION: forcing a failure. [ 2435.835280][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 2435.904224][ T8723] CPU: 1 PID: 8723 Comm: syz.1.12169 Not tainted syzkaller #0 [ 2435.911742][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2435.921795][ T8723] Call Trace: [ 2435.925069][ T8723] [ 2435.927994][ T8723] dump_stack_lvl+0x188/0x24e [ 2435.932682][ T8723] ? show_regs_print_info+0x12/0x12 [ 2435.937883][ T8723] ? load_image+0x400/0x400 [ 2435.942387][ T8723] ? __might_sleep+0xd0/0xd0 [ 2435.946971][ T8723] ? __lock_acquire+0x7d10/0x7d10 [ 2435.951992][ T8723] should_fail_ex+0x399/0x4d0 [ 2435.956670][ T8723] should_failslab+0x5/0x20 [ 2435.961163][ T8723] slab_pre_alloc_hook+0x59/0x310 [ 2435.966180][ T8723] ? __lock_acquire+0x7d10/0x7d10 [ 2435.971203][ T8723] ? kvmalloc_node+0x6c/0x180 [ 2435.975879][ T8723] __kmem_cache_alloc_node+0x4f/0x260 [ 2435.981247][ T8723] ? schedule_delayed_monitor_work+0x160/0x160 [ 2435.987400][ T8723] ? kvmalloc_node+0x6c/0x180 [ 2435.992072][ T8723] __kmalloc_node+0xa0/0x240 [ 2435.996667][ T8723] kvmalloc_node+0x6c/0x180 [ 2436.001168][ T8723] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 2436.006535][ T8723] ? 0xffffffffa00041c0 [ 2436.010682][ T8723] ? text_poke_copy+0x79/0x90 [ 2436.015355][ T8723] ? 0xffffffffa00041c0 [ 2436.019499][ T8723] ? 0xffffffffa00041c0 [ 2436.023642][ T8723] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 2436.029534][ T8723] ? 0xffffffffa00041c0 [ 2436.033683][ T8723] ? xdp_convert_md_to_buff+0x330/0x330 [ 2436.039247][ T8723] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2436.045486][ T8723] ? bpf_test_init+0x119/0x140 [ 2436.050241][ T8723] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2436.055695][ T8723] bpf_prog_test_run_xdp+0x736/0xf10 [ 2436.060984][ T8723] ? dev_put+0x80/0x80 [ 2436.065054][ T8723] ? dev_put+0x80/0x80 [ 2436.069117][ T8723] bpf_prog_test_run+0x31e/0x390 [ 2436.074052][ T8723] __sys_bpf+0x62b/0x780 [ 2436.078290][ T8723] ? bpf_link_show_fdinfo+0x380/0x380 [ 2436.083667][ T8723] ? lock_chain_count+0x20/0x20 [ 2436.088519][ T8723] __x64_sys_bpf+0x78/0x90 [ 2436.092931][ T8723] do_syscall_64+0x4c/0xa0 [ 2436.097344][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 2436.102014][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 2436.106686][ T8723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2436.112579][ T8723] RIP: 0033:0x7f8b5879ce59 [ 2436.116984][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2436.136579][ T8723] RSP: 002b:00007f8b569f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2436.144993][ T8723] RAX: ffffffffffffffda RBX: 00007f8b58a15fa0 RCX: 00007f8b5879ce59 [ 2436.152957][ T8723] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2436.160917][ T8723] RBP: 00007f8b569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2436.168887][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2436.176848][ T8723] R13: 00007f8b58a16038 R14: 00007f8b58a15fa0 R15: 00007ffc31155138 [ 2436.184826][ T8723] [ 2437.342947][ T8741] FAULT_INJECTION: forcing a failure. [ 2437.342947][ T8741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2437.445501][ T8741] CPU: 1 PID: 8741 Comm: syz.2.12174 Not tainted syzkaller #0 [ 2437.453022][ T8741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2437.463097][ T8741] Call Trace: [ 2437.466393][ T8741] [ 2437.469343][ T8741] dump_stack_lvl+0x188/0x24e [ 2437.474045][ T8741] ? show_regs_print_info+0x12/0x12 [ 2437.479261][ T8741] ? load_image+0x400/0x400 [ 2437.483777][ T8741] ? __might_fault+0xa6/0x120 [ 2437.488463][ T8741] ? format_decode+0xb0b/0x1300 [ 2437.493334][ T8741] should_fail_ex+0x399/0x4d0 [ 2437.498031][ T8741] copyin+0x1b/0x120 [ 2437.501943][ T8741] _copy_from_iter+0x447/0x1130 [ 2437.506817][ T8741] ? copyout_mc+0x110/0x110 [ 2437.511332][ T8741] ? txopt_get+0x76/0x3f0 [ 2437.515678][ T8741] ? txopt_get+0x76/0x3f0 [ 2437.520029][ T8741] ? txopt_get+0x340/0x3f0 [ 2437.524456][ T8741] ? tomoyo_check_acl+0x378/0x3f0 [ 2437.529493][ T8741] ? fl6_sock_lookup+0xc0/0xc0 [ 2437.534276][ T8741] rawv6_probe_proto_opt+0x166/0x300 [ 2437.539586][ T8741] rawv6_sendmsg+0xa71/0x1700 [ 2437.544296][ T8741] ? compat_rawv6_ioctl+0x60/0x60 [ 2437.549350][ T8741] ? aa_sk_perm+0x81f/0x950 [ 2437.553880][ T8741] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2437.560321][ T8741] ? inet_sendmsg+0x78/0x2f0 [ 2437.564916][ T8741] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2437.570205][ T8741] ? security_socket_sendmsg+0x7c/0xa0 [ 2437.575666][ T8741] ? inet_send_prepare+0x260/0x260 [ 2437.580768][ T8741] ____sys_sendmsg+0x5be/0x970 [ 2437.585535][ T8741] ? __sys_sendmsg_sock+0x30/0x30 [ 2437.590552][ T8741] ? __import_iovec+0x315/0x500 [ 2437.595400][ T8741] ? import_iovec+0x6f/0xa0 [ 2437.599892][ T8741] ___sys_sendmsg+0x2a2/0x360 [ 2437.604566][ T8741] ? __sys_sendmsg+0x290/0x290 [ 2437.609338][ T8741] ? __lock_acquire+0x7d10/0x7d10 [ 2437.614371][ T8741] __se_sys_sendmsg+0x1bb/0x2a0 [ 2437.619222][ T8741] ? __x64_sys_sendmsg+0x80/0x80 [ 2437.624164][ T8741] ? lockdep_hardirqs_on+0x94/0x140 [ 2437.629354][ T8741] do_syscall_64+0x4c/0xa0 [ 2437.633781][ T8741] ? clear_bhb_loop+0x60/0xb0 [ 2437.638470][ T8741] ? clear_bhb_loop+0x60/0xb0 [ 2437.643153][ T8741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2437.649047][ T8741] RIP: 0033:0x7f16dc59ce59 [ 2437.653460][ T8741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2437.673066][ T8741] RSP: 002b:00007f16dd44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2437.681481][ T8741] RAX: ffffffffffffffda RBX: 00007f16dc815fa0 RCX: 00007f16dc59ce59 [ 2437.689442][ T8741] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 2437.697404][ T8741] RBP: 00007f16dd44f090 R08: 0000000000000000 R09: 0000000000000000 [ 2437.705364][ T8741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2437.713321][ T8741] R13: 00007f16dc816038 R14: 00007f16dc815fa0 R15: 00007ffcc26a77f8 [ 2437.721296][ T8741] [ 2437.945571][ T8751] netlink: 'syz.4.12177': attribute type 39 has an invalid length. [ 2438.505002][ T8753] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12178'. [ 2438.553103][T12327] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2438.626014][ T8759] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.12179'. [ 2438.750943][ T8764] netlink: 'syz.5.12179': attribute type 13 has an invalid length. [ 2438.856660][ T8764] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12179'. [ 2438.906542][ T8764] syz_tun: refused to change device tx_queue_len [ 2439.069246][ T8764] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2439.770336][ T8778] netlink: 'syz.3.12185': attribute type 13 has an invalid length. [ 2439.846793][ T8776] netlink: 'syz.4.12187': attribute type 19 has an invalid length. [ 2440.395208][ T8790] netlink: 'syz.4.12192': attribute type 2 has an invalid length. [ 2440.424942][ T8790] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12192'. [ 2440.492835][ T8789] netlink: 'syz.3.12190': attribute type 39 has an invalid length. [ 2440.902172][ T8804] netlink: 'syz.1.12196': attribute type 13 has an invalid length. [ 2441.015557][ T8804] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12196'. [ 2441.841512][ T8813] netlink: 'syz.4.12200': attribute type 13 has an invalid length. [ 2442.371710][ T8826] netlink: 'syz.2.12204': attribute type 19 has an invalid length. [ 2442.703211][ T8833] netlink: 'syz.2.12208': attribute type 39 has an invalid length. [ 2442.841081][ T8839] netlink: 'syz.1.12209': attribute type 21 has an invalid length. [ 2442.848695][ T8840] FAULT_INJECTION: forcing a failure. [ 2442.848695][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 2442.859571][ T8839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12209'. [ 2442.928001][ T8840] CPU: 0 PID: 8840 Comm: syz.4.12211 Not tainted syzkaller #0 [ 2442.935524][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2442.945597][ T8840] Call Trace: [ 2442.948886][ T8840] [ 2442.951827][ T8840] dump_stack_lvl+0x188/0x24e [ 2442.956531][ T8840] ? show_regs_print_info+0x12/0x12 [ 2442.961751][ T8840] ? load_image+0x400/0x400 [ 2442.966271][ T8840] ? __might_sleep+0xd0/0xd0 [ 2442.970867][ T8840] ? __lock_acquire+0x7d10/0x7d10 [ 2442.975899][ T8840] should_fail_ex+0x399/0x4d0 [ 2442.980594][ T8840] should_failslab+0x5/0x20 [ 2442.985113][ T8840] slab_pre_alloc_hook+0x59/0x310 [ 2442.990164][ T8840] kmem_cache_alloc+0x56/0x2f0 [ 2442.994947][ T8840] ? security_file_alloc+0x30/0x110 [ 2443.000168][ T8840] security_file_alloc+0x30/0x110 [ 2443.005222][ T8840] __alloc_file+0xc2/0x230 [ 2443.009660][ T8840] alloc_empty_file+0x90/0x180 [ 2443.014444][ T8840] path_openat+0x10f/0x2ee0 [ 2443.018981][ T8840] ? verify_lock_unused+0x140/0x140 [ 2443.024210][ T8840] ? do_filp_open+0x430/0x430 [ 2443.028909][ T8840] ? perf_trace_lock_acquire+0x100/0x3e0 [ 2443.034565][ T8840] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2443.041186][ T8840] do_filp_open+0x1f1/0x430 [ 2443.045714][ T8840] ? vfs_tmpfile+0x480/0x480 [ 2443.050343][ T8840] ? _raw_spin_unlock+0x24/0x40 [ 2443.055207][ T8840] ? alloc_fd+0x58f/0x630 [ 2443.059571][ T8840] do_sys_openat2+0x150/0x4b0 [ 2443.064265][ T8840] ? atomic_notifier_call_chain+0x282/0x2b0 [ 2443.070176][ T8840] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2443.076008][ T8840] ? do_sys_open+0xe0/0xe0 [ 2443.080451][ T8840] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2443.086457][ T8840] ? lock_chain_count+0x20/0x20 [ 2443.091332][ T8840] __x64_sys_openat+0x135/0x160 [ 2443.096207][ T8840] do_syscall_64+0x4c/0xa0 [ 2443.100656][ T8840] ? clear_bhb_loop+0x60/0xb0 [ 2443.105362][ T8840] ? clear_bhb_loop+0x60/0xb0 [ 2443.110075][ T8840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2443.115991][ T8840] RIP: 0033:0x7f02d175d68e [ 2443.120421][ T8840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2443.140228][ T8840] RSP: 002b:00007f02d25ecec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2443.148677][ T8840] RAX: ffffffffffffffda RBX: 00007f02d25ed6c0 RCX: 00007f02d175d68e [ 2443.156681][ T8840] RDX: 0000000000000002 RSI: 00007f02d25ecf90 RDI: ffffffffffffff9c [ 2443.164678][ T8840] RBP: 00007f02d25ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2443.172672][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2443.180672][ T8840] R13: 00007f02d1a16038 R14: 00007f02d1a15fa0 R15: 00007ffff641e578 [ 2443.188721][ T8840] [ 2443.198151][T31924] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2443.311942][ T8845] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12212'. [ 2443.435791][ T8846] netlink: 'syz.2.12212': attribute type 13 has an invalid length. [ 2443.493556][ T8846] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12212'. [ 2443.557047][ T8846] syz_tun: refused to change device tx_queue_len [ 2443.578892][ T8846] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2443.674762][ T8850] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2443.692018][ T8854] netlink: 'syz.1.12215': attribute type 13 has an invalid length. [ 2444.406066][ T8867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12218'. [ 2444.528314][ T8864] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12219'. [ 2444.845720][T12327] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2445.296906][ T8898] validate_nla: 6 callbacks suppressed [ 2445.296922][ T8898] netlink: 'syz.1.12228': attribute type 13 has an invalid length. [ 2445.475416][ T8898] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12228'. [ 2445.550618][ T8897] netlink: 'syz.4.12227': attribute type 13 has an invalid length. [ 2445.748664][ T8904] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2445.917599][ T8912] netlink: 'syz.1.12234': attribute type 39 has an invalid length. [ 2446.202768][ T8920] netlink: 'syz.5.12239': attribute type 28 has an invalid length. [ 2446.284615][ T8926] FAULT_INJECTION: forcing a failure. [ 2446.284615][ T8926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2446.398409][ T8926] CPU: 0 PID: 8926 Comm: syz.2.12238 Not tainted syzkaller #0 [ 2446.405940][ T8926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2446.416024][ T8926] Call Trace: [ 2446.419315][ T8926] [ 2446.422257][ T8926] dump_stack_lvl+0x188/0x24e [ 2446.426960][ T8926] ? show_regs_print_info+0x12/0x12 [ 2446.432178][ T8926] ? load_image+0x400/0x400 [ 2446.436698][ T8926] ? __lock_acquire+0x7d10/0x7d10 [ 2446.441746][ T8926] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2446.447755][ T8926] should_fail_ex+0x399/0x4d0 [ 2446.452454][ T8926] _copy_from_user+0x2c/0x170 [ 2446.457160][ T8926] __ia32_sys_rt_sigreturn+0x21d/0x760 [ 2446.462649][ T8926] ? load_gs_index+0x130/0x130 [ 2446.467453][ T8926] ? lock_chain_count+0x20/0x20 [ 2446.472331][ T8926] ? lockdep_hardirqs_on+0x94/0x140 [ 2446.477553][ T8926] do_syscall_64+0x4c/0xa0 [ 2446.481994][ T8926] ? clear_bhb_loop+0x60/0xb0 [ 2446.486690][ T8926] ? clear_bhb_loop+0x60/0xb0 [ 2446.491388][ T8926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2446.497299][ T8926] RIP: 0033:0x7f16dc53e1d9 [ 2446.501726][ T8926] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 2446.521351][ T8926] RSP: 002b:00007f16dd44ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 2446.529788][ T8926] RAX: ffffffffffffffda RBX: 00007f16dc815fa0 RCX: 00007f16dc53e1d9 [ 2446.537779][ T8926] RDX: 00007f16dd44ea80 RSI: 00007f16dd44ebb0 RDI: 0000000000000021 [ 2446.545766][ T8926] RBP: 00007f16dd44f090 R08: 0000000000000000 R09: 0000000000000000 [ 2446.553751][ T8926] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2446.561737][ T8926] R13: 00007f16dc816038 R14: 00007f16dc815fa0 R15: 00007ffcc26a77f8 [ 2446.569737][ T8926] [ 2446.621210][ T8922] netlink: 'syz.1.12237': attribute type 2 has an invalid length. [ 2446.670087][ T8922] netlink: 'syz.1.12237': attribute type 8 has an invalid length. [ 2446.735572][ T8922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12237'. [ 2447.024495][ T8937] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12244'. [ 2447.266945][ T8938] netlink: 'syz.3.12244': attribute type 13 has an invalid length. [ 2447.296690][ T8938] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12244'. [ 2447.781529][ T8946] netlink: 'syz.2.12246': attribute type 13 has an invalid length. [ 2447.934970][ T8948] netlink: 'syz.1.12247': attribute type 39 has an invalid length. [ 2448.079573][ T8951] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2449.800221][ T8984] netlink: 'syz.4.12258': attribute type 13 has an invalid length. [ 2449.865697][ T8984] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12258'. [ 2449.946639][ T8984] syz_tun: refused to change device tx_queue_len [ 2449.953041][ T8984] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2450.200301][ T8978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12256'. [ 2450.545707][ T8993] validate_nla: 2 callbacks suppressed [ 2450.545728][ T8993] netlink: 'syz.3.12260': attribute type 13 has an invalid length. [ 2451.040847][ T9000] netlink: 'syz.1.12261': attribute type 39 has an invalid length. [ 2451.116069][ T9002] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2451.753675][ T9030] netlink: 'syz.4.12273': attribute type 13 has an invalid length. [ 2452.111991][ T9033] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.12274'. [ 2452.434791][ T9032] netlink: 'syz.5.12274': attribute type 13 has an invalid length. [ 2452.452960][ T9032] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12274'. [ 2452.613208][ T9032] syz_tun: refused to change device tx_queue_len [ 2452.706742][ T9032] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2452.968718][ T9035] netlink: 'syz.2.12275': attribute type 2 has an invalid length. [ 2453.005902][ T9035] netlink: 'syz.2.12275': attribute type 8 has an invalid length. [ 2453.063452][ T9035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12275'. [ 2453.185511][ T9052] netlink: 'syz.5.12280': attribute type 21 has an invalid length. [ 2453.221586][ T9058] netlink: 'syz.3.12281': attribute type 39 has an invalid length. [ 2453.822955][ T9063] mac80211_hwsim hwsim576 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2454.029990][T12327] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 2454.369269][ T9074] netlink: 'syz.3.12285': attribute type 2 has an invalid length. [ 2454.457930][ T9074] netlink: 'syz.3.12285': attribute type 8 has an invalid length. [ 2454.542293][ T9074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12285'. [ 2454.585165][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12289'. [ 2454.633500][ T9086] device wlan1 entered promiscuous mode [ 2454.816487][ T9095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12290'. [ 2454.993180][ T9095] syz_tun: refused to change device tx_queue_len [ 2455.035815][ T9095] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2455.194111][ T9093] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12290'. [ 2455.256643][ T9114] FAULT_INJECTION: forcing a failure. [ 2455.256643][ T9114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2455.365628][ T9114] CPU: 1 PID: 9114 Comm: syz.5.12297 Not tainted syzkaller #0 [ 2455.373160][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2455.383236][ T9114] Call Trace: [ 2455.386530][ T9114] [ 2455.389472][ T9114] dump_stack_lvl+0x188/0x24e [ 2455.394176][ T9114] ? show_regs_print_info+0x12/0x12 [ 2455.399398][ T9114] ? load_image+0x400/0x400 [ 2455.403925][ T9114] ? __lock_acquire+0x7d10/0x7d10 [ 2455.408973][ T9114] ? perf_trace_lock_acquire+0x100/0x3e0 [ 2455.414639][ T9114] should_fail_ex+0x399/0x4d0 [ 2455.419334][ T9114] strncpy_from_user+0x32/0x350 [ 2455.424210][ T9114] bpf_prog_load+0x1f3/0x1560 [ 2455.428923][ T9114] ? map_freeze+0x390/0x390 [ 2455.433448][ T9114] ? __might_fault+0xa6/0x120 [ 2455.438150][ T9114] ? __might_fault+0xa6/0x120 [ 2455.442846][ T9114] ? __might_fault+0xc2/0x120 [ 2455.447537][ T9114] ? __might_fault+0xa6/0x120 [ 2455.452233][ T9114] ? bpf_lsm_bpf+0x5/0x10 [ 2455.456581][ T9114] ? security_bpf+0x7a/0xa0 [ 2455.461100][ T9114] __sys_bpf+0x5b8/0x780 [ 2455.465362][ T9114] ? bpf_link_show_fdinfo+0x380/0x380 [ 2455.470771][ T9114] ? lock_chain_count+0x20/0x20 [ 2455.475652][ T9114] __x64_sys_bpf+0x78/0x90 [ 2455.480088][ T9114] do_syscall_64+0x4c/0xa0 [ 2455.484522][ T9114] ? clear_bhb_loop+0x60/0xb0 [ 2455.489218][ T9114] ? clear_bhb_loop+0x60/0xb0 [ 2455.493914][ T9114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2455.499830][ T9114] RIP: 0033:0x7f0a98f9ce59 [ 2455.504262][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2455.523892][ T9114] RSP: 002b:00007f0a99f25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2455.532330][ T9114] RAX: ffffffffffffffda RBX: 00007f0a99215fa0 RCX: 00007f0a98f9ce59 [ 2455.540320][ T9114] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2455.548312][ T9114] RBP: 00007f0a99f25090 R08: 0000000000000000 R09: 0000000000000000 [ 2455.556303][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2455.564290][ T9114] R13: 00007f0a99216038 R14: 00007f0a99215fa0 R15: 00007ffd94fdfc78 [ 2455.572300][ T9114] [ 2456.087857][T12327] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 2456.508968][ T9126] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.12303'. [ 2456.529931][ T9123] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2456.604883][ T9126] openvswitch: netlink: Flow actions attr not present in new flow. [ 2456.928990][ T9129] validate_nla: 3 callbacks suppressed [ 2456.929008][ T9129] netlink: 'syz.5.12304': attribute type 2 has an invalid length. [ 2457.033442][ T9129] netlink: 'syz.5.12304': attribute type 8 has an invalid length. [ 2457.071568][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12304'. [ 2457.285486][ T9141] netlink: 'syz.2.12305': attribute type 13 has an invalid length. [ 2457.715477][ T75] wlan1: Trigger new scan to find an IBSS to join [ 2457.783750][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12308'. [ 2457.983570][ T9156] device wlan1 entered promiscuous mode [ 2458.824003][ T9162] netlink: 'syz.5.12312': attribute type 39 has an invalid length. [ 2459.142635][ T9171] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12313'. [ 2459.228076][T12327] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2459.409019][ T9174] netlink: 'syz.1.12313': attribute type 13 has an invalid length. [ 2459.505428][ T9174] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12313'. [ 2459.845851][ T9179] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2460.071807][ T9188] netlink: 'syz.5.12320': attribute type 13 has an invalid length. [ 2460.381763][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12325'. [ 2460.684542][ T9203] netlink: 'syz.4.12327': attribute type 39 has an invalid length. [ 2460.746319][ T75] wlan1: Trigger new scan to find an IBSS to join [ 2460.751304][ T9201] device wlan1 entered promiscuous mode [ 2460.938352][ T9210] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12328'. [ 2461.020382][ T9198] netlink: 'syz.1.12324': attribute type 2 has an invalid length. [ 2461.059536][ T9198] netlink: 'syz.1.12324': attribute type 8 has an invalid length. [ 2461.105635][ T9198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12324'. [ 2461.176726][T12327] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 2461.557717][ T9226] netlink: 'syz.4.12336': attribute type 13 has an invalid length. [ 2461.648673][ T9222] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12334'. [ 2461.788013][ T9222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12334'. [ 2461.893823][ T9222] syz_tun: refused to change device tx_queue_len [ 2461.934465][ T9222] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2462.137121][ T9229] mac80211_hwsim hwsim578 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2462.481528][ T9244] validate_nla: 1 callbacks suppressed [ 2462.481544][ T9244] netlink: 'syz.4.12339': attribute type 39 has an invalid length. [ 2462.666331][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2462.920951][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12341'. [ 2462.987462][T12327] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 2462.990324][ T9253] device wlan1 entered promiscuous mode [ 2463.212274][ T9259] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.12351'. [ 2463.382822][ T9261] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12343'. [ 2463.580791][ T9259] netlink: 'syz.5.12351': attribute type 13 has an invalid length. [ 2463.666116][ T9259] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12351'. [ 2463.740622][ T4155] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2463.806313][ T9259] syz_tun: refused to change device tx_queue_len [ 2463.892888][ T9259] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2464.007456][ T9274] netlink: 'syz.2.12347': attribute type 13 has an invalid length. [ 2464.214337][ T9283] netlink: 'syz.2.12352': attribute type 39 has an invalid length. [ 2464.670085][ T9288] mac80211_hwsim hwsim576 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2464.745681][ T4155] wlan1: Trigger new scan to find an IBSS to join [ 2464.752299][ T4155] wlan1: Trigger new scan to find an IBSS to join [ 2465.050024][T12327] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 2465.062073][ T9304] netlink: 'syz.4.12358': attribute type 12 has an invalid length. [ 2465.152268][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12358'. [ 2465.382613][ T9319] netlink: 'syz.5.12362': attribute type 13 has an invalid length. [ 2465.589898][ T9325] netlink: 'syz.1.12364': attribute type 39 has an invalid length. [ 2465.714818][ T75] wlan1: Trigger new scan to find an IBSS to join [ 2465.862906][ T9335] netlink: 'syz.4.12366': attribute type 13 has an invalid length. [ 2465.971813][ T9335] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12366'. [ 2466.071955][ T9335] syz_tun: refused to change device tx_queue_len [ 2466.155499][ T9335] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2466.199663][ T9330] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12366'. [ 2466.246929][ T9333] mac80211_hwsim hwsim571 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2466.343237][T12327] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 2466.401461][ T9347] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.12370'. [ 2466.500844][ T9347] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2466.746009][T32482] wlan1: Trigger new scan to find an IBSS to join [ 2466.922164][ T75] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2466.935769][T32482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2467.344213][ T9358] netlink: 'syz.3.12375': attribute type 29 has an invalid length. [ 2467.395768][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.402148][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.424037][ T9360] netlink: 15039 bytes leftover after parsing attributes in process `syz.2.12376'. [ 2467.532773][ T9362] netlink: 'syz.4.12377': attribute type 13 has an invalid length. [ 2467.552134][ T9358] netlink: 'syz.3.12375': attribute type 29 has an invalid length. [ 2467.576082][ T9363] netlink: 'syz.3.12375': attribute type 29 has an invalid length. [ 2467.709616][ T75] wlan1: Trigger new scan to find an IBSS to join [ 2467.899689][ T9373] netlink: 'syz.1.12380': attribute type 39 has an invalid length. [ 2468.176126][T12327] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 2468.301202][ T9383] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12383'. [ 2468.640023][ T9383] netlink: 'syz.3.12383': attribute type 13 has an invalid length. [ 2468.665793][ T9383] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12383'. [ 2468.737851][T10105] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2468.912954][ T9390] mac80211_hwsim hwsim569 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2468.913648][T32482] ------------[ cut here ]------------ [ 2468.913732][T32482] WARNING: CPU: 0 PID: 32482 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 2468.913773][T32482] Modules linked in: [ 2468.913790][T32482] CPU: 0 PID: 32482 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 2468.913811][T32482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2468.913825][T32482] Workqueue: cfg80211 cfg80211_event_work [ 2468.913856][T32482] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2468.913878][T32482] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 7c ed f7 0f 0b eb bb e8 88 7c ed f7 <0f> 0b eb b2 e8 7f 7c ed f7 0f 0b e9 77 fd ff ff e8 73 7c ed f7 0f [ 2468.913896][T32482] RSP: 0018:ffffc90005567aa0 EFLAGS: 00010293 [ 2468.913918][T32482] RAX: ffffffff89950a28 RBX: dffffc0000000000 RCX: ffff88802a2a3b80 [ 2468.913936][T32482] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 2468.913952][T32482] RBP: ffffc90005567b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 2468.913969][T32482] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff888062c035b8 [ 2468.913986][T32482] R13: 1ffff92000aacf5c R14: 000000000000001f R15: ffff888060978c90 [ 2468.914002][T32482] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2468.914021][T32482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2468.914066][T32482] CR2: 00007f16dc5ea540 CR3: 0000000073a8f000 CR4: 00000000003506f0 [ 2468.914086][T32482] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2468.914101][T32482] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2468.914116][T32482] Call Trace: [ 2468.914126][T32482] [ 2468.914138][T32482] ? mutex_lock_nested+0x10/0x10 [ 2468.914174][T32482] ? trace_rdev_return_void+0x240/0x240 [ 2468.914206][T32482] cfg80211_process_wdev_events+0x3ad/0x550 [ 2468.914240][T32482] cfg80211_process_rdev_events+0x9d/0x110 [ 2468.914263][T32482] ? process_one_work+0x7b0/0x1160 [ 2468.914286][T32482] cfg80211_event_work+0x2b/0x40 [ 2468.914313][T32482] process_one_work+0x8a2/0x1160 [ 2468.914352][T32482] ? worker_detach_from_pool+0x240/0x240 [ 2468.914381][T32482] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2468.914404][T32482] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2468.914434][T32482] ? kthread_data+0x4b/0xc0 [ 2468.914467][T32482] worker_thread+0xaa2/0x1270 [ 2468.914510][T32482] ? __kthread_parkme+0x162/0x1c0 [ 2468.914543][T32482] kthread+0x29d/0x330 [ 2468.914562][T32482] ? worker_clr_flags+0x1a0/0x1a0 [ 2468.914585][T32482] ? kthread_blkcg+0xd0/0xd0 [ 2468.914608][T32482] ret_from_fork+0x1f/0x30 [ 2468.914649][T32482] [ 2468.914661][T32482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2468.914670][T32482] CPU: 0 PID: 32482 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 2468.914687][T32482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2468.914697][T32482] Workqueue: cfg80211 cfg80211_event_work [ 2468.914719][T32482] Call Trace: [ 2468.914724][T32482] [ 2468.914729][T32482] dump_stack_lvl+0x188/0x24e [ 2468.914749][T32482] ? memcpy+0x3c/0x60 [ 2468.914765][T32482] ? show_regs_print_info+0x12/0x12 [ 2468.914788][T32482] ? load_image+0x400/0x400 [ 2468.914820][T32482] panic+0x2e5/0x730 [ 2468.914844][T32482] ? bpf_jit_dump+0xd0/0xd0 [ 2468.914871][T32482] ? ret_from_fork+0x1f/0x30 [ 2468.914895][T32482] __warn+0x2f8/0x4f0 [ 2468.914912][T32482] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2468.914932][T32482] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2468.914949][T32482] report_bug+0x2ba/0x4f0 [ 2468.914976][T32482] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2468.914998][T32482] handle_bug+0x3a/0x70 [ 2468.915021][T32482] exc_invalid_op+0x16/0x40 [ 2468.915044][T32482] asm_exc_invalid_op+0x16/0x20 [ 2468.915063][T32482] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2468.915081][T32482] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 7c ed f7 0f 0b eb bb e8 88 7c ed f7 <0f> 0b eb b2 e8 7f 7c ed f7 0f 0b e9 77 fd ff ff e8 73 7c ed f7 0f [ 2468.915094][T32482] RSP: 0018:ffffc90005567aa0 EFLAGS: 00010293 [ 2468.915109][T32482] RAX: ffffffff89950a28 RBX: dffffc0000000000 RCX: ffff88802a2a3b80 [ 2468.915123][T32482] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 2468.915136][T32482] RBP: ffffc90005567b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 2468.915148][T32482] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff888062c035b8 [ 2468.915162][T32482] R13: 1ffff92000aacf5c R14: 000000000000001f R15: ffff888060978c90 [ 2468.915182][T32482] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2468.915206][T32482] ? mutex_lock_nested+0x10/0x10 [ 2468.915234][T32482] ? trace_rdev_return_void+0x240/0x240 [ 2468.915261][T32482] cfg80211_process_wdev_events+0x3ad/0x550 [ 2468.915289][T32482] cfg80211_process_rdev_events+0x9d/0x110 [ 2468.915307][T32482] ? process_one_work+0x7b0/0x1160 [ 2468.915325][T32482] cfg80211_event_work+0x2b/0x40 [ 2468.915348][T32482] process_one_work+0x8a2/0x1160 [ 2468.915382][T32482] ? worker_detach_from_pool+0x240/0x240 [ 2468.915406][T32482] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2468.915424][T32482] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2468.915449][T32482] ? kthread_data+0x4b/0xc0 [ 2468.915478][T32482] worker_thread+0xaa2/0x1270 [ 2468.915515][T32482] ? __kthread_parkme+0x162/0x1c0 [ 2468.915543][T32482] kthread+0x29d/0x330 [ 2468.915558][T32482] ? worker_clr_flags+0x1a0/0x1a0 [ 2468.915577][T32482] ? kthread_blkcg+0xd0/0xd0 [ 2468.915594][T32482] ret_from_fork+0x1f/0x30 [ 2468.915628][T32482] [ 2468.924163][T32482] Kernel Offset: disabled [ 2469.446764][T32482] Rebooting in 86400 seconds..