last executing test programs: 6.913870765s ago: executing program 2 (id=4696): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x42008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x17}, 0x0, 0xc8, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100), 0x120) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000003c0), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r6, &(0x7f00000000c0)}, 0x20) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="60584a0a349627ea96d1a4b1b6f3f022e42ce88a2dd5f103ce6e5bf2b49c8b0c0a8c524fb5dc462c78abed572ef2d8e75c070e6f7ff67b687ebbc8e82ca0ee5c721eed33f116982c", 0x48}], 0x1}, 0x41) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) 6.089022744s ago: executing program 3 (id=4700): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/81, 0x27, 0x51, 0x1, 0x5}, 0x28) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0xa4d7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r7, 0x4, r5, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./cgroup/../file0\x00', 0x0, 0x4010, r6}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x16, r8, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x5, 0x5856}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000600)=[{0x0, 0x3, 0xe}, {0x4, 0x3, 0x3, 0xa}, {0x0, 0x5, 0x1, 0xc}, {0x1, 0x2, 0x0, 0x4}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x0, 0x1, 0xc, 0x9}, {0x3, 0x1, 0xf}], 0x10, 0x9d}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="82d6b79a04000000040000000a0000005765ce6f", @ANYRES32=r11, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) 6.086491354s ago: executing program 2 (id=4708): r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xed, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x42202000, &(0x7f0000000680)="3934b263f1c4d6009a5ad4d9e1b8616d0e46baff50b13d8c05549e265f19b7ead721d1da96ec50341725683e3a376ddbdfae1714b36635dd1df041baedbc42e5f08748e0c50325498c8c14b1d7094b21bd6ace37941e6b37851c1c54d0724431758a911957742a42109df17ae2c5ec8d73a23703b5e5d4c20ee1de0a8449849d8977ee6461238d68d7c91e21a95b90ae23ce807ca783da6034c15d22fcbaf4c0d526a89d922210c8ef5df7d1a33db135f619759c25be8f3f8704496b5b33d0968be5ff9853587804cfdb7f96e2db7211508b", 0xd2, 0x0, 0x0, &(0x7f0000000500)="f5feeb493367ec15f31b3b2788115c75") perf_event_open(0x0, r1, 0xfdffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000f70000006b11ba00000000008510000002000000850000000500000095003300000000009500a50500000000a1286c054e956fb0ec59433b9355f4c3c1c465f458c3bf0774213904eeb537fa1dab601400272b938d663d8e6949dfdcfec61560fed0c7a9aad11e9d6411caf8fde7a734f7ffcff99f32c11d16941ae4cd2ea8e51379fe1f89722618fde6a7e29f3359ad8592eee8345c3791b7e08200e33e2a63"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x24048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0xffffffff, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0xa, 0x3, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.387241075s ago: executing program 3 (id=4703): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000600)="9747fc8733f0042e5447ee0dd20705d3d62f24478a22e2a62d8e28399153ad128b94ab70a8858b79bbbf6fe733898d356fda4de60d2a63d4d3db1348f6d5c510d20fb103c0cf4c4778b2764d6a5b032b97baa6c193bae960d9eda842c7b82406c5c30c68ce79898ee60d55bd75bbe8074ea695243f5517b71656d729e0fcb786386c657cdf273f956f3f90f236cb795b20f71c5dc2872e6bc1be3c9c3905ac37d2a3d4f1a467f36991b19f63eda768949c194164d00c618529b8c8e954d981706ce31fa6b2aed72f53b0bc7d02e3b47d4815a5ccc0e83ad5bd7de23e62778c33b50923f0a99456e7d32b9c474a4ec6d4514a1899dc1d648d", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000002440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x2, 0x800, 0xe48}]}]}, {0x0, [0x61, 0x61, 0x61, 0x61, 0x2e]}}, &(0x7f0000002500)=""/52, 0x37, 0x34, 0x1, 0x6}, 0x1f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 4.463466038s ago: executing program 2 (id=4706): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900"], 0x33fe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/185, 0xb9, 0x0, &(0x7f0000000340)=""/128, 0x80}}, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x103000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffffffffffc2, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e00280010000000028000001266", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2d, 'pids'}, {0x2b, 'rlimit'}, {0x0, 'blkio'}, {0x2d, 'devices'}]}, 0x1e) 4.372408234s ago: executing program 3 (id=4707): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/81, 0x27, 0x51, 0x1, 0x5}, 0x28) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0xa4d7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r7, 0x4, r5, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./cgroup/../file0\x00', 0x0, 0x4010, r6}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x16, r8, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x5, 0x5856}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000600)=[{0x0, 0x3, 0xe}, {0x4, 0x3, 0x3, 0xa}, {0x0, 0x5, 0x1, 0xc}, {0x1, 0x2, 0x0, 0x4}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x0, 0x1, 0xc, 0x9}, {0x3, 0x1, 0xf}], 0x10, 0x9d}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="82d6b79a04000000040000000a0000005765ce6f", @ANYRES32=r12, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) 4.056152433s ago: executing program 2 (id=4710): r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xed, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x42202000, &(0x7f0000000680)="3934b263f1c4d6009a5ad4d9e1b8616d0e46baff50b13d8c05549e265f19b7ead721d1da96ec50341725683e3a376ddbdfae1714b36635dd1df041baedbc42e5f08748e0c50325498c8c14b1d7094b21bd6ace37941e6b37851c1c54d0724431758a911957742a42109df17ae2c5ec8d73a23703b5e5d4c20ee1de0a8449849d8977ee6461238d68d7c91e21a95b90ae23ce807ca783da6034c15d22fcbaf4c0d526a89d922210c8ef5df7d1a33db135f619759c25be8f3f8704496b5b33d0968be5ff9853587804cfdb7f96e2db7211508b", 0xd2, 0x0, 0x0, &(0x7f0000000500)="f5feeb493367ec15f31b3b2788115c75") perf_event_open(0x0, r1, 0xfdffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000f70000006b11ba00000000008510000002000000850000000500000095003300000000009500a50500000000a1286c054e956fb0ec59433b9355f4c3c1c465f458c3bf0774213904eeb537fa1dab601400272b938d663d8e6949dfdcfec61560fed0c7a9aad11e9d6411caf8fde7a734f7ffcff99f32c11d16941ae4cd2ea8e51379fe1f89722618fde6a7e29f3359ad8592eee8345c3791b7e08200e33e2a63"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x24048811) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0xa, 0x3, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.879034903s ago: executing program 3 (id=4712): unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_clone(0x63000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r5, r3, 0x4, r4}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={0x0, 0x0, 0x8}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000007000000008000000000200000711220000000000094ffffffdfdd00", @ANYRESOCT=r5], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) socketpair(0x21, 0x800, 0xf0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$sock(r7, &(0x7f0000000600)={&(0x7f0000000340)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x5, 0x1, "5b2d480088b1976ff1e387bdd3f4de81289c6931407dffefcf99de46aa74a3a2f6258fc81e5cb15d914fdc7298f0135a117395ef1cf4f052e710d38eb7412b", 0x23}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)="0d632628294c2a479f3b426ef5f7ea2619061425a3c25e97af084c61d9c98f50e1b47caac5072c3f498ef231da9762dc73326f77fd3c00f4068d7f8cedd3df135543d5a5571b53f1c1c8a31ec12da23a8b178c7f194020e51f896caeef6d", 0x5e}, {&(0x7f0000000a40)="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", 0x12a}, {&(0x7f0000000500)="cffeb8196543c8ce945f2ad7ff5d100c889384dcf24dc9bd648c1ebfce98218b3034", 0x22}, {&(0x7f0000000540)="b9849a2ed40e9807e2925bd4dc50a162bdc647459220eca5d50eb6301abd1f187a88f2fb3831e5a5e77fb5da5427952414897cf9b5eb9c508e3083", 0x3b}], 0x4, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x18}, 0x10) socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) 3.042123542s ago: executing program 0 (id=4713): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) setsockopt$sock_attach_bpf(r3, 0x29, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x0) socketpair(0x1d, 0x1, 0x6, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x12) 2.991604705s ago: executing program 1 (id=4714): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.837856444s ago: executing program 0 (id=4715): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.027176682s ago: executing program 1 (id=4716): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000600)="9747fc8733f0042e5447ee0dd20705d3d62f24478a22e2a62d8e28399153ad128b94ab70a8858b79bbbf6fe733898d356fda4de60d2a63d4d3db1348f6d5c510d20fb103c0cf4c4778b2764d6a5b032b97baa6c193bae960d9eda842c7b82406c5c30c68ce79898ee60d55bd75bbe8074ea695243f5517b71656d729e0fcb786386c657cdf273f956f3f90f236cb795b20f71c5dc2872e6bc1be3c9c3905ac37d2a3d4f1a467f36991b19f63eda768949c194164d00c618529b8c8e954d981706ce31fa6b2aed72f53b0bc7d02e3b47d4815a5ccc0e83ad5bd7de23e62778c33b50923f0a99456e7d32b9c474a4ec6d4514a1899dc1d648d", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000002440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x2, 0x800, 0xe48}]}]}, {0x0, [0x61, 0x61, 0x61, 0x61, 0x2e]}}, &(0x7f0000002500)=""/52, 0x37, 0x34, 0x1, 0x6}, 0x1f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 1.809586574s ago: executing program 0 (id=4717): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/81, 0x27, 0x51, 0x1, 0x5}, 0x28) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0xa4d7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r7, 0x4, r5, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./cgroup/../file0\x00', 0x0, 0x4010, r6}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x16, r8, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x5, 0x5856}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000600)=[{0x0, 0x3, 0xe}, {0x4, 0x3, 0x3, 0xa}, {0x0, 0x5, 0x1, 0xc}, {0x1, 0x2, 0x0, 0x4}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x0, 0x1, 0xc, 0x9}, {0x3, 0x1, 0xf}], 0x10, 0x9d}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="82d6b79a04000000040000000a0000005765ce6f", @ANYRES32=r12, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) 1.734960249s ago: executing program 1 (id=4718): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900"], 0x33fe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/185, 0xb9, 0x0, &(0x7f0000000340)=""/128, 0x80}}, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x103000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffffffffffc2, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e00280010000000028000001266", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2d, 'pids'}, {0x2b, 'rlimit'}, {0x0, 'blkio'}, {0x2d, 'devices'}]}, 0x1e) 1.55608173s ago: executing program 0 (id=4719): r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xed, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x42202000, &(0x7f0000000680)="3934b263f1c4d6009a5ad4d9e1b8616d0e46baff50b13d8c05549e265f19b7ead721d1da96ec50341725683e3a376ddbdfae1714b36635dd1df041baedbc42e5f08748e0c50325498c8c14b1d7094b21bd6ace37941e6b37851c1c54d0724431758a911957742a42109df17ae2c5ec8d73a23703b5e5d4c20ee1de0a8449849d8977ee6461238d68d7c91e21a95b90ae23ce807ca783da6034c15d22fcbaf4c0d526a89d922210c8ef5df7d1a33db135f619759c25be8f3f8704496b5b33d0968be5ff9853587804cfdb7f96e2db7211508b", 0xd2, 0x0, 0x0, &(0x7f0000000500)="f5feeb493367ec15f31b3b2788115c75") perf_event_open(0x0, r1, 0xfdffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000f70000006b11ba00000000008510000002000000850000000500000095003300000000009500a50500000000a1286c054e956fb0ec59433b9355f4c3c1c465f458c3bf0774213904eeb537fa1dab601400272b938d663d8e6949dfdcfec61560fed0c7a9aad11e9d6411caf8fde7a734f7ffcff99f32c11d16941ae4cd2ea8e51379fe1f89722618fde6a7e29f3359ad8592eee8345c3791b7e08200e33e2a63"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x24048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0xffffffff, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0xa, 0x3, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.476146584s ago: executing program 1 (id=4720): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/81, 0x27, 0x51, 0x1, 0x5}, 0x28) r2 = openat$cgroup_int(r1, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0xa4d7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, r7, 0x4, r5, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./cgroup/../file0\x00', 0x0, 0x4010, r6}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000005c0), 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x14, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000f00)=""/4096, 0x41100, 0x5c, '\x00', 0x0, @fallback=0x16, r8, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x5, 0x5856}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000600)=[{0x0, 0x3, 0xe}, {0x4, 0x3, 0x3, 0xa}, {0x0, 0x5, 0x1, 0xc}, {0x1, 0x2, 0x0, 0x4}, {0x3, 0x2, 0x0, 0xc}, {0x5, 0x2, 0x10, 0x6}, {0x0, 0x1, 0xc, 0x9}, {0x3, 0x1, 0xf}], 0x10, 0x9d}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="82d6b79a04000000040000000a0000005765ce6f", @ANYRES32=r12, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) 1.249426377s ago: executing program 1 (id=4721): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x42008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x17}, 0x0, 0xc8, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0), 0xb9) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)}, 0x20) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000040)="60584a0a349627ea96d1a4b1b6f3f022e42ce88a2dd5f103ce6e5bf2b49c8b0c0a8c524fb5dc462c78abed572ef2d8e75c070e6f7ff67b687ebbc8e82ca0ee5c721eed33f116982c", 0x48}], 0x1}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 1.20483239s ago: executing program 0 (id=4722): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000060000000000000e0066aebcb9ad15bb810000009500000000000000043f23abaf05232a63fc4f5ebd277c6b8fd9a5a14175243c60904259d35d572c1fa8f10c3932e725ffc9f84dbd625ae5f41d077aacf3d72f612489b55303f0a725d3beae2b2eff2603e7298c99fce56b5c29c7e917fcd6489a063342d8c7e2e5"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 989.890803ms ago: executing program 2 (id=4723): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) setsockopt$sock_attach_bpf(r3, 0x29, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x0) socketpair(0x1d, 0x1, 0x6, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, 0x0, 0x12) 981.944633ms ago: executing program 3 (id=4724): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 915.114447ms ago: executing program 1 (id=4725): r0 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xed, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x42202000, &(0x7f0000000680)="3934b263f1c4d6009a5ad4d9e1b8616d0e46baff50b13d8c05549e265f19b7ead721d1da96ec50341725683e3a376ddbdfae1714b36635dd1df041baedbc42e5f08748e0c50325498c8c14b1d7094b21bd6ace37941e6b37851c1c54d0724431758a911957742a42109df17ae2c5ec8d73a23703b5e5d4c20ee1de0a8449849d8977ee6461238d68d7c91e21a95b90ae23ce807ca783da6034c15d22fcbaf4c0d526a89d922210c8ef5df7d1a33db135f619759c25be8f3f8704496b5b33d0968be5ff9853587804cfdb7f96e2db7211508b", 0xd2, 0x0, 0x0, &(0x7f0000000500)="f5feeb493367ec15f31b3b2788115c75") perf_event_open(0x0, r1, 0xfdffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000f70000006b11ba00000000008510000002000000850000000500000095003300000000009500a50500000000a1286c054e956fb0ec59433b9355f4c3c1c465f458c3bf0774213904eeb537fa1dab601400272b938d663d8e6949dfdcfec61560fed0c7a9aad11e9d6411caf8fde7a734f7ffcff99f32c11d16941ae4cd2ea8e51379fe1f89722618fde6a7e29f3359ad8592eee8345c3791b7e08200e33e2a63"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x24048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0xa, 0x3, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 677.030661ms ago: executing program 2 (id=4726): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/uts\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 231.329607ms ago: executing program 0 (id=4727): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000600)="9747fc8733f0042e5447ee0dd20705d3d62f24478a22e2a62d8e28399153ad128b94ab70a8858b79bbbf6fe733898d356fda4de60d2a63d4d3db1348f6d5c510d20fb103c0cf4c4778b2764d6a5b032b97baa6c193bae960d9eda842c7b82406c5c30c68ce79898ee60d55bd75bbe8074ea695243f5517b71656d729e0fcb786386c657cdf273f956f3f90f236cb795b20f71c5dc2872e6bc1be3c9c3905ac37d2a3d4f1a467f36991b19f63eda768949c194164d00c618529b8c8e954d981706ce31fa6b2aed72f53b0bc7d02e3b47d4815a5ccc0e83ad5bd7de23e62778c33b50923f0a99456e7d32b9c474a4ec6d4514a1899dc1d648d", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002540)={&(0x7f0000002440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x2, 0x800, 0xe48}]}]}, {0x0, [0x61, 0x61, 0x61, 0x61, 0x2e]}}, &(0x7f0000002500)=""/52, 0x37, 0x34, 0x1, 0x6}, 0x1f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 0s ago: executing program 3 (id=4728): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900"], 0x33fe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/185, 0xb9, 0x0, &(0x7f0000000340)=""/128, 0x80}}, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x103000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x24000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffffffffffc2, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e00280010000000028000001266", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2d, 'pids'}, {0x2b, 'rlimit'}, {0x0, 'blkio'}, {0x2d, 'devices'}]}, 0x1e) kernel console output (not intermixed with test programs): hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 958.765215][T16417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 958.774979][T16417] 60993 total pagecache pages [ 958.780243][T16417] 0 pages in swap cache [ 958.784452][T16417] Free swap = 124996kB [ 958.792644][T16417] Total swap = 124996kB [ 958.797067][T16417] 2097051 pages RAM [ 958.800913][T16417] 0 pages HighMem/MovableOnly [ 958.805995][T16417] 416922 pages reserved [ 958.810191][T16417] 0 pages cma reserved [ 963.656080][T16461] netlink: 'syz.3.3662': attribute type 10 has an invalid length. [ 963.745552][T16462] bond0: entered promiscuous mode [ 963.751554][T16462] bond_slave_0: entered promiscuous mode [ 963.757548][T16462] bond_slave_1: entered promiscuous mode [ 965.237208][T16488] netlink: 'syz.1.3673': attribute type 2 has an invalid length. [ 965.250399][T16488] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3673'. [ 965.597724][T16504] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3679'. [ 965.952412][T16497] netlink: 'syz.1.3674': attribute type 1 has an invalid length. [ 965.973044][T16497] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3674'. [ 965.986406][T16497] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3674'. [ 966.310398][T16517] netlink: 'syz.1.3683': attribute type 2 has an invalid length. [ 966.374708][T16517] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3683'. [ 967.488025][T16521] FAULT_INJECTION: forcing a failure. [ 967.488025][T16521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.507975][T16521] CPU: 1 PID: 16521 Comm: syz.1.3686 Not tainted syzkaller #0 [ 967.515532][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 967.525803][T16521] Call Trace: [ 967.529142][T16521] [ 967.532124][T16521] dump_stack_lvl+0x18c/0x250 [ 967.536870][T16521] ? show_regs_print_info+0x20/0x20 [ 967.542172][T16521] ? load_image+0x400/0x400 [ 967.546838][T16521] ? __might_fault+0xaa/0x120 [ 967.551624][T16521] ? __lock_acquire+0x7d40/0x7d40 [ 967.556820][T16521] should_fail_ex+0x39d/0x4d0 [ 967.561598][T16521] _copy_from_iter+0x1d9/0x12e0 [ 967.566533][T16521] ? __virt_addr_valid+0x18c/0x540 [ 967.571801][T16521] ? __lock_acquire+0x7d40/0x7d40 [ 967.576890][T16521] ? mark_lock+0x94/0x320 [ 967.581288][T16521] ? copyout_mc+0x70/0x70 [ 967.586292][T16521] ? __virt_addr_valid+0x18c/0x540 [ 967.593005][T16521] ? __virt_addr_valid+0x18c/0x540 [ 967.598344][T16521] ? __virt_addr_valid+0x469/0x540 [ 967.603509][T16521] ? __phys_addr_symbol+0x2f/0x70 [ 967.608762][T16521] ? __check_object_size+0x506/0xa20 [ 967.614192][T16521] udplite_getfrag+0x4d/0xa0 [ 967.618938][T16521] __ip_append_data+0x1f30/0x3d40 [ 967.624118][T16521] ? udp_sendmsg+0x23b0/0x23b0 [ 967.628979][T16521] ? ip_setup_cork+0x860/0x860 [ 967.633798][T16521] ? __local_bh_enable_ip+0x13a/0x1c0 [ 967.639305][T16521] ? lockdep_hardirqs_on+0x98/0x150 [ 967.644549][T16521] ip_append_data+0x10d/0x180 [ 967.649365][T16521] ? udp_sendmsg+0x23b0/0x23b0 [ 967.654216][T16521] udp_sendmsg+0x5d0/0x23b0 [ 967.658763][T16521] ? mark_lock+0x94/0x320 [ 967.663177][T16521] ? udp_sendmsg+0x23b0/0x23b0 [ 967.668042][T16521] ? udp_cmsg_send+0x350/0x350 [ 967.673984][T16521] ? __lock_acquire+0x1273/0x7d40 [ 967.679084][T16521] ? verify_lock_unused+0x140/0x140 [ 967.684336][T16521] ? verify_lock_unused+0x140/0x140 [ 967.689568][T16521] ? aa_label_sk_perm+0x463/0x5c0 [ 967.694652][T16521] ? tomoyo_check_path_number_acl+0x280/0x280 [ 967.700771][T16521] udpv6_sendmsg+0x93d/0x2390 [ 967.705500][T16521] ? udpv6_sendmsg+0x2390/0x2390 [ 967.710528][T16521] ? udp_v6_early_demux+0xf80/0xf80 [ 967.715916][T16521] ? __lock_acquire+0x1273/0x7d40 [ 967.721018][T16521] ? inet_send_prepare+0x5c/0x260 [ 967.726086][T16521] ? inet6_sendmsg+0x5f/0xd0 [ 967.730708][T16521] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 967.735949][T16521] ____sys_sendmsg+0x5ba/0x960 [ 967.740763][T16521] ? __asan_memset+0x22/0x40 [ 967.745391][T16521] ? __sys_sendmsg_sock+0x30/0x30 [ 967.750465][T16521] ? __import_iovec+0x5f2/0x850 [ 967.755381][T16521] ? import_iovec+0x73/0xa0 [ 967.760015][T16521] ___sys_sendmsg+0x2a6/0x360 [ 967.764839][T16521] ? get_pid_task+0x20/0x1e0 [ 967.769468][T16521] ? __sys_sendmsg+0x2a0/0x2a0 [ 967.774381][T16521] ? __lock_acquire+0x7d40/0x7d40 [ 967.779463][T16521] __se_sys_sendmsg+0x1c2/0x2b0 [ 967.784615][T16521] ? __x64_sys_sendmsg+0x80/0x80 [ 967.789599][T16521] ? lockdep_hardirqs_on+0x98/0x150 [ 967.794834][T16521] do_syscall_64+0x55/0xa0 [ 967.799293][T16521] ? clear_bhb_loop+0x40/0x90 [ 967.804015][T16521] ? clear_bhb_loop+0x40/0x90 [ 967.808733][T16521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.814664][T16521] RIP: 0033:0x7fce8ed9bf79 [ 967.819119][T16521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.838769][T16521] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.847234][T16521] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 967.855323][T16521] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 967.863328][T16521] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 967.871331][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.879333][T16521] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 967.887357][T16521] [ 967.918160][T11227] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 967.974572][T16524] netlink: 'syz.2.3684': attribute type 3 has an invalid length. [ 967.997857][T16524] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3684'. [ 968.018898][T16523] netlink: 'syz.3.3685': attribute type 40 has an invalid length. [ 968.408358][T16538] FAULT_INJECTION: forcing a failure. [ 968.408358][T16538] name failslab, interval 1, probability 0, space 0, times 0 [ 968.437548][T16538] CPU: 0 PID: 16538 Comm: syz.1.3691 Not tainted syzkaller #0 [ 968.445108][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 968.455238][T16538] Call Trace: [ 968.458567][T16538] [ 968.461547][T16538] dump_stack_lvl+0x18c/0x250 [ 968.466297][T16538] ? show_regs_print_info+0x20/0x20 [ 968.471560][T16538] ? load_image+0x400/0x400 [ 968.476111][T16538] ? __might_sleep+0xe0/0xe0 [ 968.480765][T16538] ? __lock_acquire+0x7d40/0x7d40 [ 968.485911][T16538] should_fail_ex+0x39d/0x4d0 [ 968.490655][T16538] should_failslab+0x9/0x20 [ 968.495215][T16538] slab_pre_alloc_hook+0x59/0x310 [ 968.500384][T16538] ? tomoyo_encode+0x28b/0x540 [ 968.505197][T16538] ? tomoyo_encode+0x28b/0x540 [ 968.510011][T16538] __kmem_cache_alloc_node+0x53/0x250 [ 968.515455][T16538] ? tomoyo_encode+0x28b/0x540 [ 968.520298][T16538] __kmalloc+0xa4/0x230 [ 968.524514][T16538] tomoyo_encode+0x28b/0x540 [ 968.529165][T16538] tomoyo_realpath_from_path+0x592/0x5d0 [ 968.534911][T16538] tomoyo_path_number_perm+0x248/0x620 [ 968.540446][T16538] ? tomoyo_path_number_perm+0x217/0x620 [ 968.546251][T16538] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 968.551780][T16538] ? trace_call_bpf+0xc3/0x6c0 [ 968.556613][T16538] ? trace_call_bpf+0xc3/0x6c0 [ 968.561438][T16538] ? trace_call_bpf+0x5e9/0x6c0 [ 968.566413][T16538] ? __fget_files+0x28/0x4b0 [ 968.571060][T16538] ? __fget_files+0x28/0x4b0 [ 968.575717][T16538] security_file_ioctl+0x70/0xa0 [ 968.580716][T16538] __se_sys_ioctl+0x48/0x170 [ 968.585366][T16538] do_syscall_64+0x55/0xa0 [ 968.589837][T16538] ? clear_bhb_loop+0x40/0x90 [ 968.594561][T16538] ? clear_bhb_loop+0x40/0x90 [ 968.599292][T16538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 968.605239][T16538] RIP: 0033:0x7fce8ed9bf79 [ 968.609705][T16538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.629367][T16538] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.637849][T16538] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 968.645881][T16538] RDX: 0000200000000080 RSI: 0000000000008994 RDI: 0000000000000004 [ 968.653908][T16538] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 968.661940][T16538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.670053][T16538] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 968.678107][T16538] [ 968.715305][T16538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 968.830280][T16547] netlink: 'syz.1.3694': attribute type 2 has an invalid length. [ 968.838509][T16547] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3694'. [ 968.889030][T16550] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3695'. [ 969.207654][T16557] netlink: 'syz.0.3698': attribute type 40 has an invalid length. [ 969.986872][T16563] syzkaller0: entered promiscuous mode [ 969.992448][T16563] syzkaller0: entered allmulticast mode [ 970.084721][T16565] netlink: 'syz.0.3701': attribute type 3 has an invalid length. [ 970.095900][T16565] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3701'. [ 970.103424][T16563] FAULT_INJECTION: forcing a failure. [ 970.103424][T16563] name failslab, interval 1, probability 0, space 0, times 0 [ 970.126939][T16563] CPU: 1 PID: 16563 Comm: syz.2.3702 Not tainted syzkaller #0 [ 970.134497][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 970.144607][T16563] Call Trace: [ 970.147931][T16563] [ 970.150904][T16563] dump_stack_lvl+0x18c/0x250 [ 970.155661][T16563] ? show_regs_print_info+0x20/0x20 [ 970.160928][T16563] ? load_image+0x400/0x400 [ 970.165503][T16563] ? __might_sleep+0xe0/0xe0 [ 970.170154][T16563] ? __lock_acquire+0x7d40/0x7d40 [ 970.175243][T16563] should_fail_ex+0x39d/0x4d0 [ 970.179994][T16563] should_failslab+0x9/0x20 [ 970.184572][T16563] slab_pre_alloc_hook+0x59/0x310 [ 970.189669][T16563] ? tomoyo_encode+0x28b/0x540 [ 970.194482][T16563] ? tomoyo_encode+0x28b/0x540 [ 970.199306][T16563] __kmem_cache_alloc_node+0x53/0x250 [ 970.204754][T16563] ? tomoyo_encode+0x28b/0x540 [ 970.209585][T16563] __kmalloc+0xa4/0x230 [ 970.213809][T16563] tomoyo_encode+0x28b/0x540 [ 970.218458][T16563] tomoyo_realpath_from_path+0x592/0x5d0 [ 970.224176][T16563] tomoyo_path_number_perm+0x248/0x620 [ 970.229707][T16563] ? tomoyo_path_number_perm+0x217/0x620 [ 970.235420][T16563] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 970.240971][T16563] ? ksys_write+0x1c4/0x260 [ 970.245581][T16563] ? __fget_files+0x28/0x4b0 [ 970.250238][T16563] ? __fget_files+0x28/0x4b0 [ 970.254916][T16563] security_file_ioctl+0x70/0xa0 [ 970.260030][T16563] __se_sys_ioctl+0x48/0x170 [ 970.264693][T16563] do_syscall_64+0x55/0xa0 [ 970.269179][T16563] ? clear_bhb_loop+0x40/0x90 [ 970.273925][T16563] ? clear_bhb_loop+0x40/0x90 [ 970.278671][T16563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.284631][T16563] RIP: 0033:0x7f3fa8f9bf79 [ 970.289126][T16563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.308791][T16563] RSP: 002b:00007f3fa71f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.317251][T16563] RAX: ffffffffffffffda RBX: 00007f3fa9215fa0 RCX: 00007f3fa8f9bf79 [ 970.325260][T16563] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000006 [ 970.333276][T16563] RBP: 00007f3fa71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.341286][T16563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.349299][T16563] R13: 00007f3fa9216038 R14: 00007f3fa9215fa0 R15: 00007ffddd7d2038 [ 970.357406][T16563] [ 970.401841][T16563] ERROR: Out of memory at tomoyo_realpath_from_path. [ 970.678596][T16576] syzkaller0: entered promiscuous mode [ 970.684865][T16576] syzkaller0: entered allmulticast mode [ 970.745211][T16579] syzkaller0: entered promiscuous mode [ 970.754971][T16579] syzkaller0: entered allmulticast mode [ 970.792519][T16580] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3706'. [ 970.823765][T16579] syzkaller0: mtu less than device minimum [ 970.896020][T16582] netlink: 'syz.0.3707': attribute type 3 has an invalid length. [ 970.904526][T16582] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3707'. [ 970.959280][T16580] netlink: 'syz.2.3706': attribute type 4 has an invalid length. [ 970.988131][T16580] netlink: 'syz.2.3706': attribute type 21 has an invalid length. [ 971.020478][T16580] IPv6: NLM_F_CREATE should be specified when creating new route [ 971.040432][T16580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 971.047899][T16580] IPv6: NLM_F_CREATE should be set when creating new route [ 971.055399][T16580] IPv6: NLM_F_CREATE should be set when creating new route [ 971.140135][T16588] netlink: 'syz.3.3708': attribute type 2 has an invalid length. [ 971.160397][T16588] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3708'. [ 972.590928][T16597] netlink: 'syz.0.3720': attribute type 2 has an invalid length. [ 972.612860][T11240] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 972.616423][T16597] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3720'. [ 972.770493][T16599] netlink: 'syz.3.3713': attribute type 3 has an invalid length. [ 972.782695][T16599] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3713'. [ 972.827241][T16601] netlink: 'syz.2.3712': attribute type 40 has an invalid length. [ 973.461773][T16615] FAULT_INJECTION: forcing a failure. [ 973.461773][T16615] name failslab, interval 1, probability 0, space 0, times 0 [ 973.498577][T16615] CPU: 1 PID: 16615 Comm: syz.1.3717 Not tainted syzkaller #0 [ 973.506168][T16615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 973.516380][T16615] Call Trace: [ 973.519735][T16615] [ 973.522715][T16615] dump_stack_lvl+0x18c/0x250 [ 973.527489][T16615] ? show_regs_print_info+0x20/0x20 [ 973.532769][T16615] ? load_image+0x400/0x400 [ 973.537341][T16615] ? __might_sleep+0xe0/0xe0 [ 973.542010][T16615] ? __lock_acquire+0x7d40/0x7d40 [ 973.547116][T16615] should_fail_ex+0x39d/0x4d0 [ 973.551882][T16615] should_failslab+0x9/0x20 [ 973.556459][T16615] slab_pre_alloc_hook+0x59/0x310 [ 973.561618][T16615] ? __lock_acquire+0x7d40/0x7d40 [ 973.566722][T16615] kmem_cache_alloc_node+0x60/0x320 [ 973.571982][T16615] ? __alloc_skb+0x103/0x2c0 [ 973.576655][T16615] __alloc_skb+0x103/0x2c0 [ 973.581151][T16615] netlink_sendmsg+0x66a/0xbf0 [ 973.585986][T16615] ? perf_trace_lock+0x304/0x3b0 [ 973.591036][T16615] ? netlink_getsockopt+0x590/0x590 [ 973.596536][T16615] ? aa_sock_msg_perm+0x94/0x150 [ 973.601564][T16615] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 973.606948][T16615] ? security_socket_sendmsg+0x80/0xa0 [ 973.612466][T16615] ? netlink_getsockopt+0x590/0x590 [ 973.617743][T16615] ____sys_sendmsg+0x5ba/0x960 [ 973.622597][T16615] ? __asan_memset+0x22/0x40 [ 973.627253][T16615] ? __sys_sendmsg_sock+0x30/0x30 [ 973.632340][T16615] ? __import_iovec+0x3fa/0x850 [ 973.637288][T16615] ? import_iovec+0x73/0xa0 [ 973.641905][T16615] ___sys_sendmsg+0x2a6/0x360 [ 973.646679][T16615] ? __sys_sendmsg+0x2a0/0x2a0 [ 973.651576][T16615] ? __lock_acquire+0x7d40/0x7d40 [ 973.656870][T16615] __se_sys_sendmsg+0x1c2/0x2b0 [ 973.661814][T16615] ? __x64_sys_sendmsg+0x80/0x80 [ 973.666961][T16615] ? lockdep_hardirqs_on+0x98/0x150 [ 973.672245][T16615] do_syscall_64+0x55/0xa0 [ 973.676752][T16615] ? clear_bhb_loop+0x40/0x90 [ 973.681521][T16615] ? clear_bhb_loop+0x40/0x90 [ 973.686926][T16615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.692884][T16615] RIP: 0033:0x7fce8ed9bf79 [ 973.697357][T16615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.717036][T16615] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.725517][T16615] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 973.733542][T16615] RDX: 0000000000040050 RSI: 0000200000000000 RDI: 0000000000000006 [ 973.741627][T16615] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 973.749759][T16615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.757791][T16615] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 973.765874][T16615] [ 974.089306][T16622] netlink: 'syz.0.3719': attribute type 3 has an invalid length. [ 974.108759][T16622] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3719'. [ 974.695571][T16637] FAULT_INJECTION: forcing a failure. [ 974.695571][T16637] name failslab, interval 1, probability 0, space 0, times 0 [ 974.728718][T16637] CPU: 1 PID: 16637 Comm: syz.1.3725 Not tainted syzkaller #0 [ 974.736288][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 974.746448][T16637] Call Trace: [ 974.749778][T16637] [ 974.752759][T16637] dump_stack_lvl+0x18c/0x250 [ 974.757949][T16637] ? show_regs_print_info+0x20/0x20 [ 974.763217][T16637] ? load_image+0x400/0x400 [ 974.767796][T16637] ? __lock_acquire+0x7d40/0x7d40 [ 974.772892][T16637] should_fail_ex+0x39d/0x4d0 [ 974.777653][T16637] should_failslab+0x9/0x20 [ 974.782229][T16637] slab_pre_alloc_hook+0x59/0x310 [ 974.787331][T16637] ? bpf_test_init+0x9f/0x140 [ 974.792065][T16637] ? bpf_test_init+0x9f/0x140 [ 974.796801][T16637] __kmem_cache_alloc_node+0x53/0x250 [ 974.802247][T16637] ? bpf_test_init+0x9f/0x140 [ 974.806980][T16637] __kmalloc+0xa4/0x230 [ 974.811210][T16637] bpf_test_init+0x9f/0x140 [ 974.815776][T16637] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 974.821240][T16637] ? dev_put+0x80/0x80 [ 974.825392][T16637] ? dev_put+0x80/0x80 [ 974.829525][T16637] bpf_prog_test_run+0x321/0x390 [ 974.834545][T16637] __sys_bpf+0x49d/0x890 [ 974.838850][T16637] ? bpf_link_show_fdinfo+0x390/0x390 [ 974.844307][T16637] ? lock_chain_count+0x20/0x20 [ 974.849235][T16637] __x64_sys_bpf+0x7c/0x90 [ 974.853713][T16637] do_syscall_64+0x55/0xa0 [ 974.858190][T16637] ? clear_bhb_loop+0x40/0x90 [ 974.862925][T16637] ? clear_bhb_loop+0x40/0x90 [ 974.867683][T16637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.873651][T16637] RIP: 0033:0x7fce8ed9bf79 [ 974.878134][T16637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.897819][T16637] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.906303][T16637] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 974.914341][T16637] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 974.922370][T16637] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 974.930438][T16637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.938469][T16637] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 974.946523][T16637] [ 976.414259][T16649] netlink: 'syz.1.3730': attribute type 3 has an invalid length. [ 976.453244][T16649] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3730'. [ 977.860245][T16658] netlink: 'syz.0.3733': attribute type 40 has an invalid length. [ 978.259478][T16664] netlink: 'syz.2.3735': attribute type 3 has an invalid length. [ 978.291481][T16664] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3735'. [ 979.687967][T16684] FAULT_INJECTION: forcing a failure. [ 979.687967][T16684] name failslab, interval 1, probability 0, space 0, times 0 [ 979.726605][T16684] CPU: 1 PID: 16684 Comm: syz.3.3741 Not tainted syzkaller #0 [ 979.734181][T16684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 979.744307][T16684] Call Trace: [ 979.747630][T16684] [ 979.750610][T16684] dump_stack_lvl+0x18c/0x250 [ 979.755449][T16684] ? show_regs_print_info+0x20/0x20 [ 979.760763][T16684] ? load_image+0x400/0x400 [ 979.765344][T16684] ? __lock_acquire+0x7d40/0x7d40 [ 979.770456][T16684] should_fail_ex+0x39d/0x4d0 [ 979.775212][T16684] should_failslab+0x9/0x20 [ 979.779786][T16684] slab_pre_alloc_hook+0x59/0x310 [ 979.784909][T16684] ? bpf_test_init+0x9f/0x140 [ 979.789656][T16684] ? bpf_test_init+0x9f/0x140 [ 979.794399][T16684] __kmem_cache_alloc_node+0x53/0x250 [ 979.799857][T16684] ? bpf_test_init+0x9f/0x140 [ 979.804594][T16684] __kmalloc+0xa4/0x230 [ 979.808830][T16684] bpf_test_init+0x9f/0x140 [ 979.813404][T16684] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 979.818865][T16684] ? dev_put+0x80/0x80 [ 979.823015][T16684] ? dev_put+0x80/0x80 [ 979.827146][T16684] bpf_prog_test_run+0x321/0x390 [ 979.832192][T16684] __sys_bpf+0x49d/0x890 [ 979.836512][T16684] ? bpf_link_show_fdinfo+0x390/0x390 [ 979.841968][T16684] ? lock_chain_count+0x20/0x20 [ 979.846896][T16684] __x64_sys_bpf+0x7c/0x90 [ 979.851554][T16684] do_syscall_64+0x55/0xa0 [ 979.856034][T16684] ? clear_bhb_loop+0x40/0x90 [ 979.860821][T16684] ? clear_bhb_loop+0x40/0x90 [ 979.865572][T16684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.871539][T16684] RIP: 0033:0x7fbf60b9bf79 [ 979.876012][T16684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.895787][T16684] RSP: 002b:00007fbf619fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.904304][T16684] RAX: ffffffffffffffda RBX: 00007fbf60e15fa0 RCX: 00007fbf60b9bf79 [ 979.912507][T16684] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 979.920517][T16684] RBP: 00007fbf619fd090 R08: 0000000000000000 R09: 0000000000000000 [ 979.928523][T16684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.936568][T16684] R13: 00007fbf60e16038 R14: 00007fbf60e15fa0 R15: 00007fff98349fc8 [ 979.944601][T16684] [ 980.257012][T16688] netlink: 'syz.2.3743': attribute type 3 has an invalid length. [ 980.265103][T16688] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3743'. [ 981.157681][T16708] FAULT_INJECTION: forcing a failure. [ 981.157681][T16708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.206047][T16708] CPU: 1 PID: 16708 Comm: syz.3.3748 Not tainted syzkaller #0 [ 981.213654][T16708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 981.223796][T16708] Call Trace: [ 981.227164][T16708] [ 981.230168][T16708] dump_stack_lvl+0x18c/0x250 [ 981.234951][T16708] ? show_regs_print_info+0x20/0x20 [ 981.240241][T16708] ? load_image+0x400/0x400 [ 981.244843][T16708] ? __might_fault+0xaa/0x120 [ 981.249612][T16708] ? __lock_acquire+0x7d40/0x7d40 [ 981.254787][T16708] should_fail_ex+0x39d/0x4d0 [ 981.259584][T16708] _copy_from_user+0x2f/0xe0 [ 981.264295][T16708] sctp_setsockopt+0x19e/0x11e0 [ 981.269238][T16708] ? sock_common_recvmsg+0x190/0x190 [ 981.274629][T16708] do_sock_setsockopt+0x175/0x1a0 [ 981.279770][T16708] ? __fdget+0x180/0x210 [ 981.284128][T16708] __x64_sys_setsockopt+0x182/0x200 [ 981.289445][T16708] do_syscall_64+0x55/0xa0 [ 981.293948][T16708] ? clear_bhb_loop+0x40/0x90 [ 981.298709][T16708] ? clear_bhb_loop+0x40/0x90 [ 981.303560][T16708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.309538][T16708] RIP: 0033:0x7fbf60b9bf79 [ 981.314041][T16708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.333828][T16708] RSP: 002b:00007fbf619fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 981.342440][T16708] RAX: ffffffffffffffda RBX: 00007fbf60e15fa0 RCX: 00007fbf60b9bf79 [ 981.350492][T16708] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000004 [ 981.358549][T16708] RBP: 00007fbf619fd090 R08: 0000000000000008 R09: 0000000000000000 [ 981.366594][T16708] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.374642][T16708] R13: 00007fbf60e16038 R14: 00007fbf60e15fa0 R15: 00007fff98349fc8 [ 981.382768][T16708] [ 981.480534][T16710] netlink: 'syz.2.3749': attribute type 3 has an invalid length. [ 981.489981][T16710] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3749'. [ 982.598844][T16736] netlink: 'syz.0.3758': attribute type 11 has an invalid length. [ 982.620204][T16736] netlink: 200752 bytes leftover after parsing attributes in process `syz.0.3758'. [ 985.481495][T16749] netlink: 'syz.0.3763': attribute type 3 has an invalid length. [ 985.496377][T16749] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3763'. [ 987.770657][T16773] netlink: 'syz.3.3768': attribute type 2 has an invalid length. [ 987.779362][T16773] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3768'. [ 987.946889][T16781] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.3772'. [ 987.997711][T16783] netlink: 'syz.2.3773': attribute type 10 has an invalid length. [ 988.006501][T16783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3773'. [ 988.018003][T16783] ipvlan1: entered promiscuous mode [ 988.023637][T16783] ipvlan1: entered allmulticast mode [ 988.030349][T16783] veth0_vlan: entered allmulticast mode [ 988.069151][T16783] bridge0: port 3(ipvlan1) entered blocking state [ 988.096817][T16783] bridge0: port 3(ipvlan1) entered disabled state [ 988.129721][T16783] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 988.165199][T16787] netlink: 'syz.0.3775': attribute type 3 has an invalid length. [ 988.182268][T16787] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3775'. [ 988.396988][T16795] netlink: 'syz.1.3776': attribute type 40 has an invalid length. [ 989.938565][T16819] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3783'. [ 990.120585][T16826] FAULT_INJECTION: forcing a failure. [ 990.120585][T16826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.204557][T16831] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3788'. [ 990.246540][T16826] CPU: 0 PID: 16826 Comm: syz.0.3785 Not tainted syzkaller #0 [ 990.254104][T16826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 990.264209][T16826] Call Trace: [ 990.267537][T16826] [ 990.270537][T16826] dump_stack_lvl+0x18c/0x250 [ 990.275271][T16826] ? show_regs_print_info+0x20/0x20 [ 990.280519][T16826] ? load_image+0x400/0x400 [ 990.285058][T16826] ? __might_fault+0xaa/0x120 [ 990.289774][T16826] ? __lock_acquire+0x7d40/0x7d40 [ 990.294835][T16826] should_fail_ex+0x39d/0x4d0 [ 990.299559][T16826] _copy_from_user+0x2f/0xe0 [ 990.304194][T16826] bpf_prog_test_run_skb+0x266/0x12b0 [ 990.309608][T16826] ? __fget_files+0x28/0x4b0 [ 990.314232][T16826] ? __fget_files+0x28/0x4b0 [ 990.318912][T16826] ? __fget_files+0x43d/0x4b0 [ 990.323630][T16826] ? cpu_online+0x60/0x60 [ 990.328271][T16826] bpf_prog_test_run+0x321/0x390 [ 990.333260][T16826] __sys_bpf+0x49d/0x890 [ 990.337544][T16826] ? bpf_link_show_fdinfo+0x390/0x390 [ 990.342966][T16826] ? lock_chain_count+0x20/0x20 [ 990.347876][T16826] __x64_sys_bpf+0x7c/0x90 [ 990.352326][T16826] do_syscall_64+0x55/0xa0 [ 990.356780][T16826] ? clear_bhb_loop+0x40/0x90 [ 990.361497][T16826] ? clear_bhb_loop+0x40/0x90 [ 990.366218][T16826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.372151][T16826] RIP: 0033:0x7f8ab3b9bf79 [ 990.376603][T16826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.396256][T16826] RSP: 002b:00007f8ab4aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 990.404710][T16826] RAX: ffffffffffffffda RBX: 00007f8ab3e15fa0 RCX: 00007f8ab3b9bf79 [ 990.412718][T16826] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 990.420728][T16826] RBP: 00007f8ab4aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 990.428741][T16826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.436773][T16826] R13: 00007f8ab3e16038 R14: 00007f8ab3e15fa0 R15: 00007fff17c66658 [ 990.444804][T16826] [ 990.537261][T16832] netlink: 'syz.3.3787': attribute type 40 has an invalid length. [ 990.754821][T16840] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 990.761595][T16836] netlink: 'syz.0.3789': attribute type 3 has an invalid length. [ 990.776634][T16836] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3789'. [ 991.320278][T16857] netlink: 'syz.0.3794': attribute type 2 has an invalid length. [ 991.328549][T16857] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3794'. [ 991.604608][T16862] FAULT_INJECTION: forcing a failure. [ 991.604608][T16862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.707290][T16862] CPU: 1 PID: 16862 Comm: syz.0.3797 Not tainted syzkaller #0 [ 991.714873][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 991.725019][T16862] Call Trace: [ 991.728423][T16862] [ 991.731419][T16862] dump_stack_lvl+0x18c/0x250 [ 991.736182][T16862] ? show_regs_print_info+0x20/0x20 [ 991.741459][T16862] ? load_image+0x400/0x400 [ 991.746040][T16862] ? __might_fault+0xaa/0x120 [ 991.750834][T16862] ? __lock_acquire+0x7d40/0x7d40 [ 991.755950][T16862] should_fail_ex+0x39d/0x4d0 [ 991.760716][T16862] _copy_from_user+0x2f/0xe0 [ 991.765422][T16862] bpf_prog_test_run_skb+0x266/0x12b0 [ 991.770854][T16862] ? __fget_files+0x28/0x4b0 [ 991.775508][T16862] ? __fget_files+0x28/0x4b0 [ 991.780160][T16862] ? __fget_files+0x43d/0x4b0 [ 991.784933][T16862] ? cpu_online+0x60/0x60 [ 991.789326][T16862] bpf_prog_test_run+0x321/0x390 [ 991.794344][T16862] __sys_bpf+0x49d/0x890 [ 991.798695][T16862] ? bpf_link_show_fdinfo+0x390/0x390 [ 991.804172][T16862] ? lock_chain_count+0x20/0x20 [ 991.809118][T16862] __x64_sys_bpf+0x7c/0x90 [ 991.813604][T16862] do_syscall_64+0x55/0xa0 [ 991.818079][T16862] ? clear_bhb_loop+0x40/0x90 [ 991.822816][T16862] ? clear_bhb_loop+0x40/0x90 [ 991.827558][T16862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 991.833597][T16862] RIP: 0033:0x7f8ab3b9bf79 [ 991.838071][T16862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.857737][T16862] RSP: 002b:00007f8ab4aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 991.866226][T16862] RAX: ffffffffffffffda RBX: 00007f8ab3e15fa0 RCX: 00007f8ab3b9bf79 [ 991.874267][T16862] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 991.882301][T16862] RBP: 00007f8ab4aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 991.890414][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.898443][T16862] R13: 00007f8ab3e16038 R14: 00007f8ab3e15fa0 R15: 00007fff17c66658 [ 991.906511][T16862] [ 992.318476][T16869] netlink: 'syz.1.3799': attribute type 40 has an invalid length. [ 992.971488][T16873] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3800'. [ 993.158373][T11236] wlan1: Trigger new scan to find an IBSS to join [ 993.163411][T16877] netlink: 'syz.1.3803': attribute type 3 has an invalid length. [ 993.173477][T16875] netlink: 'syz.3.3802': attribute type 40 has an invalid length. [ 993.220168][T16877] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3803'. [ 993.320849][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.328906][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.743838][T16898] netlink: 'syz.1.3810': attribute type 40 has an invalid length. [ 993.760148][T16895] netlink: 'syz.2.3816': attribute type 40 has an invalid length. [ 994.043046][T16906] FAULT_INJECTION: forcing a failure. [ 994.043046][T16906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.066828][T16906] CPU: 0 PID: 16906 Comm: syz.2.3813 Not tainted syzkaller #0 [ 994.074397][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 994.084514][T16906] Call Trace: [ 994.087843][T16906] [ 994.090833][T16906] dump_stack_lvl+0x18c/0x250 [ 994.095577][T16906] ? show_regs_print_info+0x20/0x20 [ 994.100839][T16906] ? load_image+0x400/0x400 [ 994.105414][T16906] ? __lock_acquire+0x7d40/0x7d40 [ 994.110500][T16906] ? __virt_addr_valid+0x18c/0x540 [ 994.115679][T16906] should_fail_ex+0x39d/0x4d0 [ 994.120432][T16906] _copy_from_user+0x2f/0xe0 [ 994.125088][T16906] map_update_elem+0x4e8/0x700 [ 994.129926][T16906] __sys_bpf+0x6b5/0x890 [ 994.134234][T16906] ? bpf_link_show_fdinfo+0x390/0x390 [ 994.139681][T16906] ? lock_chain_count+0x20/0x20 [ 994.144669][T16906] __x64_sys_bpf+0x7c/0x90 [ 994.149158][T16906] do_syscall_64+0x55/0xa0 [ 994.153655][T16906] ? clear_bhb_loop+0x40/0x90 [ 994.158388][T16906] ? clear_bhb_loop+0x40/0x90 [ 994.163120][T16906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 994.169083][T16906] RIP: 0033:0x7f3fa8f9bf79 [ 994.173563][T16906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.193409][T16906] RSP: 002b:00007f3fa71f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 994.201892][T16906] RAX: ffffffffffffffda RBX: 00007f3fa9215fa0 RCX: 00007f3fa8f9bf79 [ 994.209930][T16906] RDX: 0000000000000020 RSI: 0000200000001740 RDI: 0000000000000002 [ 994.217960][T16906] RBP: 00007f3fa71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 994.225988][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.234013][T16906] R13: 00007f3fa9216038 R14: 00007f3fa9215fa0 R15: 00007ffddd7d2038 [ 994.242161][T16906] [ 994.720071][T16914] FAULT_INJECTION: forcing a failure. [ 994.720071][T16914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.735138][T16914] CPU: 1 PID: 16914 Comm: syz.2.3817 Not tainted syzkaller #0 [ 994.742681][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 994.752891][T16914] Call Trace: [ 994.756217][T16914] [ 994.759193][T16914] dump_stack_lvl+0x18c/0x250 [ 994.763975][T16914] ? show_regs_print_info+0x20/0x20 [ 994.769240][T16914] ? load_image+0x400/0x400 [ 994.773816][T16914] ? __lock_acquire+0x7d40/0x7d40 [ 994.778910][T16914] ? snprintf+0xe9/0x140 [ 994.783223][T16914] should_fail_ex+0x39d/0x4d0 [ 994.787978][T16914] _copy_to_user+0x2f/0xa0 [ 994.792528][T16914] simple_read_from_buffer+0xe7/0x150 [ 994.797979][T16914] proc_fail_nth_read+0x1e8/0x260 [ 994.803069][T16914] ? proc_fault_inject_write+0x360/0x360 [ 994.808774][T16914] ? fsnotify_perm+0x271/0x5e0 [ 994.813619][T16914] ? proc_fault_inject_write+0x360/0x360 [ 994.819328][T16914] vfs_read+0x28b/0x970 [ 994.823554][T16914] ? kernel_read+0x1e0/0x1e0 [ 994.828207][T16914] ? __fget_files+0x28/0x4b0 [ 994.832873][T16914] ? __fget_files+0x28/0x4b0 [ 994.837535][T16914] ? __fget_files+0x43d/0x4b0 [ 994.842288][T16914] ? __fdget_pos+0x2a3/0x330 [ 994.846943][T16914] ? ksys_read+0x75/0x260 [ 994.851341][T16914] ksys_read+0x150/0x260 [ 994.855660][T16914] ? vfs_write+0x990/0x990 [ 994.860146][T16914] ? lockdep_hardirqs_on+0x98/0x150 [ 994.865407][T16914] do_syscall_64+0x55/0xa0 [ 994.869891][T16914] ? clear_bhb_loop+0x40/0x90 [ 994.874630][T16914] ? clear_bhb_loop+0x40/0x90 [ 994.879373][T16914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 994.885331][T16914] RIP: 0033:0x7f3fa8f5c84e [ 994.889813][T16914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 994.909536][T16914] RSP: 002b:00007f3fa71f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 994.918020][T16914] RAX: ffffffffffffffda RBX: 00007f3fa71f66c0 RCX: 00007f3fa8f5c84e [ 994.926205][T16914] RDX: 000000000000000f RSI: 00007f3fa71f60a0 RDI: 0000000000000004 [ 994.934251][T16914] RBP: 00007f3fa71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 994.942285][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.950312][T16914] R13: 00007f3fa9216038 R14: 00007f3fa9215fa0 R15: 00007ffddd7d2038 [ 994.958372][T16914] [ 995.593455][T16921] netlink: 'syz.2.3820': attribute type 40 has an invalid length. [ 995.688016][T16927] FAULT_INJECTION: forcing a failure. [ 995.688016][T16927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.715199][T16927] CPU: 0 PID: 16927 Comm: syz.1.3824 Not tainted syzkaller #0 [ 995.722754][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 995.732869][T16927] Call Trace: [ 995.736196][T16927] [ 995.739173][T16927] dump_stack_lvl+0x18c/0x250 [ 995.743918][T16927] ? show_regs_print_info+0x20/0x20 [ 995.749179][T16927] ? load_image+0x400/0x400 [ 995.753754][T16927] ? __lock_acquire+0x7d40/0x7d40 [ 995.758847][T16927] ? __virt_addr_valid+0x18c/0x540 [ 995.764025][T16927] should_fail_ex+0x39d/0x4d0 [ 995.768773][T16927] _copy_from_user+0x2f/0xe0 [ 995.773442][T16927] map_lookup_elem+0x502/0x7c0 [ 995.778269][T16927] __sys_bpf+0x438/0x890 [ 995.782564][T16927] ? bpf_link_show_fdinfo+0x390/0x390 [ 995.788092][T16927] ? lock_chain_count+0x20/0x20 [ 995.793015][T16927] __x64_sys_bpf+0x7c/0x90 [ 995.797488][T16927] do_syscall_64+0x55/0xa0 [ 995.801972][T16927] ? clear_bhb_loop+0x40/0x90 [ 995.806696][T16927] ? clear_bhb_loop+0x40/0x90 [ 995.811427][T16927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.817373][T16927] RIP: 0033:0x7fce8ed9bf79 [ 995.821835][T16927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.841597][T16927] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 995.850488][T16927] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 995.858498][T16927] RDX: 0000000000000020 RSI: 0000200000001100 RDI: 0000000000000001 [ 995.866674][T16927] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 995.874678][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.882682][T16927] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 995.890699][T16927] [ 996.230173][T16946] FAULT_INJECTION: forcing a failure. [ 996.230173][T16946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.243415][T16946] CPU: 0 PID: 16946 Comm: syz.2.3830 Not tainted syzkaller #0 [ 996.250957][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 996.261083][T16946] Call Trace: [ 996.264421][T16946] [ 996.267398][T16946] dump_stack_lvl+0x18c/0x250 [ 996.272236][T16946] ? show_regs_print_info+0x20/0x20 [ 996.277504][T16946] ? load_image+0x400/0x400 [ 996.282071][T16946] ? __lock_acquire+0x7d40/0x7d40 [ 996.287163][T16946] ? snprintf+0xe9/0x140 [ 996.291479][T16946] should_fail_ex+0x39d/0x4d0 [ 996.296228][T16946] _copy_to_user+0x2f/0xa0 [ 996.300710][T16946] simple_read_from_buffer+0xe7/0x150 [ 996.306146][T16946] proc_fail_nth_read+0x1e8/0x260 [ 996.311217][T16946] ? proc_fault_inject_write+0x360/0x360 [ 996.316995][T16946] ? fsnotify_perm+0x271/0x5e0 [ 996.321812][T16946] ? proc_fault_inject_write+0x360/0x360 [ 996.327482][T16946] vfs_read+0x28b/0x970 [ 996.331697][T16946] ? kernel_read+0x1e0/0x1e0 [ 996.336411][T16946] ? __fget_files+0x28/0x4b0 [ 996.341035][T16946] ? __fget_files+0x28/0x4b0 [ 996.345666][T16946] ? __fget_files+0x43d/0x4b0 [ 996.350397][T16946] ? __fdget_pos+0x2a3/0x330 [ 996.355028][T16946] ? ksys_read+0x75/0x260 [ 996.359398][T16946] ksys_read+0x150/0x260 [ 996.363684][T16946] ? vfs_write+0x990/0x990 [ 996.368147][T16946] ? lockdep_hardirqs_on+0x98/0x150 [ 996.373395][T16946] do_syscall_64+0x55/0xa0 [ 996.377862][T16946] ? clear_bhb_loop+0x40/0x90 [ 996.382575][T16946] ? clear_bhb_loop+0x40/0x90 [ 996.387284][T16946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.393219][T16946] RIP: 0033:0x7f3fa8f5c84e [ 996.397689][T16946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 996.417343][T16946] RSP: 002b:00007f3fa71f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 996.425798][T16946] RAX: ffffffffffffffda RBX: 00007f3fa71f66c0 RCX: 00007f3fa8f5c84e [ 996.433832][T16946] RDX: 000000000000000f RSI: 00007f3fa71f60a0 RDI: 0000000000000005 [ 996.441867][T16946] RBP: 00007f3fa71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 996.449979][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.457995][T16946] R13: 00007f3fa9216038 R14: 00007f3fa9215fa0 R15: 00007ffddd7d2038 [ 996.466019][T16946] [ 997.237847][T16962] netlink: 'syz.2.3834': attribute type 40 has an invalid length. [ 997.520399][T16970] pimreg0: tun_chr_ioctl cmd 1074025681 [ 997.882817][T16988] netlink: 'syz.3.3848': attribute type 16 has an invalid length. [ 997.893132][T16988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3848'. [ 997.904465][T16988] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.952822][T16990] netlink: 'syz.1.3847': attribute type 40 has an invalid length. [ 998.112581][T16994] FAULT_INJECTION: forcing a failure. [ 998.112581][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 998.127860][T16994] CPU: 0 PID: 16994 Comm: syz.1.3850 Not tainted syzkaller #0 [ 998.135410][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 998.145530][T16994] Call Trace: [ 998.148872][T16994] [ 998.151852][T16994] dump_stack_lvl+0x18c/0x250 [ 998.156607][T16994] ? show_regs_print_info+0x20/0x20 [ 998.161877][T16994] ? load_image+0x400/0x400 [ 998.166483][T16994] ? __might_sleep+0xe0/0xe0 [ 998.171131][T16994] ? __lock_acquire+0x7d40/0x7d40 [ 998.176214][T16994] should_fail_ex+0x39d/0x4d0 [ 998.180964][T16994] should_failslab+0x9/0x20 [ 998.185519][T16994] slab_pre_alloc_hook+0x59/0x310 [ 998.190605][T16994] ? alloc_perf_context+0x4e/0x220 [ 998.195758][T16994] __kmem_cache_alloc_node+0x53/0x250 [ 998.201176][T16994] ? alloc_perf_context+0x4e/0x220 [ 998.206326][T16994] kmalloc_trace+0x2a/0xe0 [ 998.210785][T16994] alloc_perf_context+0x4e/0x220 [ 998.215766][T16994] find_get_context+0x83/0x4f0 [ 998.220578][T16994] __se_sys_perf_event_open+0xaa7/0x1c50 [ 998.226264][T16994] ? __wait_for_common+0x6a1/0x6f0 [ 998.231436][T16994] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 998.237115][T16994] ? lock_chain_count+0x20/0x20 [ 998.242010][T16994] ? lockdep_hardirqs_on+0x98/0x150 [ 998.247255][T16994] ? __x64_sys_perf_event_open+0x20/0xc0 [ 998.252930][T16994] do_syscall_64+0x55/0xa0 [ 998.257389][T16994] ? clear_bhb_loop+0x40/0x90 [ 998.262098][T16994] ? clear_bhb_loop+0x40/0x90 [ 998.266816][T16994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.272746][T16994] RIP: 0033:0x7fce8ed9bf79 [ 998.277201][T16994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.296932][T16994] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 998.305567][T16994] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 998.313581][T16994] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 998.321595][T16994] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 998.329606][T16994] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 998.337609][T16994] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 998.345632][T16994] [ 998.351163][T11236] wlan1: Trigger new scan to find an IBSS to join [ 998.441968][T17002] FAULT_INJECTION: forcing a failure. [ 998.441968][T17002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.456867][T17002] CPU: 1 PID: 17002 Comm: syz.1.3853 Not tainted syzkaller #0 [ 998.464396][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 998.474485][T17002] Call Trace: [ 998.477783][T17002] [ 998.480745][T17002] dump_stack_lvl+0x18c/0x250 [ 998.485483][T17002] ? show_regs_print_info+0x20/0x20 [ 998.490730][T17002] ? load_image+0x400/0x400 [ 998.495301][T17002] ? __lock_acquire+0x7d40/0x7d40 [ 998.500392][T17002] ? __virt_addr_valid+0x18c/0x540 [ 998.505574][T17002] should_fail_ex+0x39d/0x4d0 [ 998.510332][T17002] _copy_from_user+0x2f/0xe0 [ 998.515006][T17002] bpf_test_init+0xde/0x140 [ 998.519759][T17002] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 998.525948][T17002] ? dev_put+0x80/0x80 [ 998.530099][T17002] ? dev_put+0x80/0x80 [ 998.534220][T17002] bpf_prog_test_run+0x321/0x390 [ 998.539419][T17002] __sys_bpf+0x49d/0x890 [ 998.543726][T17002] ? bpf_link_show_fdinfo+0x390/0x390 [ 998.549186][T17002] ? lock_chain_count+0x20/0x20 [ 998.554126][T17002] __x64_sys_bpf+0x7c/0x90 [ 998.558613][T17002] do_syscall_64+0x55/0xa0 [ 998.563111][T17002] ? clear_bhb_loop+0x40/0x90 [ 998.567857][T17002] ? clear_bhb_loop+0x40/0x90 [ 998.572600][T17002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.578557][T17002] RIP: 0033:0x7fce8ed9bf79 [ 998.583028][T17002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.602786][T17002] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 998.611260][T17002] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 998.619289][T17002] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 998.627386][T17002] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 998.635409][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.643455][T17002] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 998.651518][T17002] [ 998.828971][T17010] FAULT_INJECTION: forcing a failure. [ 998.828971][T17010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.842742][T17010] CPU: 0 PID: 17010 Comm: syz.2.3856 Not tainted syzkaller #0 [ 998.850289][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 998.860402][T17010] Call Trace: [ 998.863737][T17010] [ 998.866739][T17010] dump_stack_lvl+0x18c/0x250 [ 998.871495][T17010] ? show_regs_print_info+0x20/0x20 [ 998.876756][T17010] ? load_image+0x400/0x400 [ 998.881321][T17010] ? __lock_acquire+0x7d40/0x7d40 [ 998.886434][T17010] ? __virt_addr_valid+0x18c/0x540 [ 998.891614][T17010] should_fail_ex+0x39d/0x4d0 [ 998.896356][T17010] _copy_from_user+0x2f/0xe0 [ 998.901004][T17010] bpf_test_init+0xde/0x140 [ 998.905569][T17010] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 998.911003][T17010] ? dev_put+0x80/0x80 [ 998.915125][T17010] ? dev_put+0x80/0x80 [ 998.919234][T17010] bpf_prog_test_run+0x321/0x390 [ 998.924247][T17010] __sys_bpf+0x49d/0x890 [ 998.928536][T17010] ? bpf_link_show_fdinfo+0x390/0x390 [ 998.933973][T17010] ? lock_chain_count+0x20/0x20 [ 998.938878][T17010] __x64_sys_bpf+0x7c/0x90 [ 998.943334][T17010] do_syscall_64+0x55/0xa0 [ 998.947797][T17010] ? clear_bhb_loop+0x40/0x90 [ 998.952512][T17010] ? clear_bhb_loop+0x40/0x90 [ 998.957234][T17010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.963254][T17010] RIP: 0033:0x7f3fa8f9bf79 [ 998.967704][T17010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.987438][T17010] RSP: 002b:00007f3fa71f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 998.995897][T17010] RAX: ffffffffffffffda RBX: 00007f3fa9215fa0 RCX: 00007f3fa8f9bf79 [ 999.003985][T17010] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 999.012180][T17010] RBP: 00007f3fa71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 999.020192][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.028206][T17010] R13: 00007f3fa9216038 R14: 00007f3fa9215fa0 R15: 00007ffddd7d2038 [ 999.036243][T17010] [ 999.184359][T17022] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3860'. [ 999.242583][T17021] netlink: 'syz.1.3859': attribute type 40 has an invalid length. [ 999.510318][T11227] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1000.537847][T17049] netlink: 'syz.0.3868': attribute type 13 has an invalid length. [ 1000.550939][T17047] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1000.565360][T17047] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1000.579136][T17047] tipc: Started in network mode [ 1000.584146][T17047] tipc: Node identity b, cluster identity 73 [ 1000.591724][T17047] tipc: Node number set to 11 [ 1000.666698][T17052] FAULT_INJECTION: forcing a failure. [ 1000.666698][T17052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.696197][T17052] CPU: 1 PID: 17052 Comm: syz.1.3870 Not tainted syzkaller #0 [ 1000.703750][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1000.713877][T17052] Call Trace: [ 1000.717208][T17052] [ 1000.720185][T17052] dump_stack_lvl+0x18c/0x250 [ 1000.725020][T17052] ? show_regs_print_info+0x20/0x20 [ 1000.730367][T17052] ? load_image+0x400/0x400 [ 1000.734960][T17052] ? __lock_acquire+0x7d40/0x7d40 [ 1000.740057][T17052] ? snprintf+0xe9/0x140 [ 1000.744367][T17052] should_fail_ex+0x39d/0x4d0 [ 1000.749121][T17052] _copy_to_user+0x2f/0xa0 [ 1000.753605][T17052] simple_read_from_buffer+0xe7/0x150 [ 1000.759062][T17052] proc_fail_nth_read+0x1e8/0x260 [ 1000.764161][T17052] ? proc_fault_inject_write+0x360/0x360 [ 1000.769852][T17052] ? fsnotify_perm+0x271/0x5e0 [ 1000.774667][T17052] ? proc_fault_inject_write+0x360/0x360 [ 1000.780363][T17052] vfs_read+0x28b/0x970 [ 1000.784592][T17052] ? kernel_read+0x1e0/0x1e0 [ 1000.789275][T17052] ? __fget_files+0x28/0x4b0 [ 1000.793932][T17052] ? __fget_files+0x28/0x4b0 [ 1000.798583][T17052] ? __fget_files+0x43d/0x4b0 [ 1000.803385][T17052] ? __fdget_pos+0x2a3/0x330 [ 1000.808044][T17052] ? ksys_read+0x75/0x260 [ 1000.812421][T17052] ksys_read+0x150/0x260 [ 1000.816706][T17052] ? vfs_write+0x990/0x990 [ 1000.821431][T17052] ? lockdep_hardirqs_on+0x98/0x150 [ 1000.826670][T17052] do_syscall_64+0x55/0xa0 [ 1000.831121][T17052] ? clear_bhb_loop+0x40/0x90 [ 1000.835831][T17052] ? clear_bhb_loop+0x40/0x90 [ 1000.840542][T17052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.846469][T17052] RIP: 0033:0x7fce8ed5c84e [ 1000.850927][T17052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1000.870572][T17052] RSP: 002b:00007fce8fbfafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1000.879028][T17052] RAX: ffffffffffffffda RBX: 00007fce8fbfb6c0 RCX: 00007fce8ed5c84e [ 1000.887032][T17052] RDX: 000000000000000f RSI: 00007fce8fbfb0a0 RDI: 0000000000000004 [ 1000.895030][T17052] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.903043][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.911041][T17052] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 1000.919062][T17052] [ 1001.014263][T17058] netlink: 'syz.3.3872': attribute type 40 has an invalid length. [ 1001.189284][T17066] netlink: 'syz.1.3876': attribute type 13 has an invalid length. [ 1003.947384][T11232] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1004.307700][T17080] netlink: 'syz.1.3880': attribute type 10 has an invalid length. [ 1004.334917][T17080] veth0_macvtap: left promiscuous mode [ 1004.347153][T17088] FAULT_INJECTION: forcing a failure. [ 1004.347153][T17088] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.361857][T17088] CPU: 1 PID: 17088 Comm: syz.0.3883 Not tainted syzkaller #0 [ 1004.369424][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1004.379558][T17088] Call Trace: [ 1004.382897][T17088] [ 1004.385982][T17088] dump_stack_lvl+0x18c/0x250 [ 1004.390846][T17088] ? show_regs_print_info+0x20/0x20 [ 1004.396133][T17088] ? load_image+0x400/0x400 [ 1004.400729][T17088] ? __lock_acquire+0x7d40/0x7d40 [ 1004.405847][T17088] should_fail_ex+0x39d/0x4d0 [ 1004.410614][T17088] should_failslab+0x9/0x20 [ 1004.415240][T17088] slab_pre_alloc_hook+0x59/0x310 [ 1004.420333][T17088] ? bpf_prog_alloc+0x3d/0x1a0 [ 1004.425144][T17088] ? bpf_prog_load+0x6eb/0x1670 [ 1004.430046][T17088] ? __sys_bpf+0x5ba/0x890 [ 1004.434511][T17088] kmem_cache_alloc_node+0x60/0x320 [ 1004.439844][T17088] ? alloc_vmap_area+0x1b4/0x1e30 [ 1004.444986][T17088] alloc_vmap_area+0x1b4/0x1e30 [ 1004.449931][T17088] ? vm_map_ram+0xcb0/0xcb0 [ 1004.454490][T17088] ? rcu_is_watching+0x15/0xb0 [ 1004.459325][T17088] __get_vm_area_node+0x162/0x370 [ 1004.464417][T17088] __vmalloc_node_range+0x36e/0x1330 [ 1004.469754][T17088] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1004.475382][T17088] ? __lock_acquire+0x7d40/0x7d40 [ 1004.480464][T17088] ? free_vm_area+0x50/0x50 [ 1004.485030][T17088] ? __fget_files+0x28/0x4b0 [ 1004.489669][T17088] ? __fget_files+0x28/0x4b0 [ 1004.494326][T17088] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1004.499929][T17088] __vmalloc+0x7a/0x90 [ 1004.504062][T17088] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1004.509660][T17088] bpf_prog_alloc_no_stats+0x47/0x440 [ 1004.515081][T17088] ? bpf_prog_alloc+0x2b/0x1a0 [ 1004.519901][T17088] bpf_prog_alloc+0x3d/0x1a0 [ 1004.524542][T17088] bpf_prog_load+0x6eb/0x1670 [ 1004.529298][T17088] ? map_freeze+0x420/0x420 [ 1004.533858][T17088] ? __might_fault+0xaa/0x120 [ 1004.538586][T17088] ? __lock_acquire+0x7d40/0x7d40 [ 1004.543677][T17088] ? file_end_write+0x159/0x250 [ 1004.548585][T17088] ? __might_fault+0xaa/0x120 [ 1004.553319][T17088] ? __might_fault+0xc6/0x120 [ 1004.558044][T17088] ? __might_fault+0xaa/0x120 [ 1004.562860][T17088] ? bpf_lsm_bpf+0x9/0x10 [ 1004.567241][T17088] ? security_bpf+0x7e/0xa0 [ 1004.571845][T17088] __sys_bpf+0x5ba/0x890 [ 1004.576239][T17088] ? bpf_link_show_fdinfo+0x390/0x390 [ 1004.581689][T17088] ? lock_chain_count+0x20/0x20 [ 1004.586606][T17088] __x64_sys_bpf+0x7c/0x90 [ 1004.591082][T17088] do_syscall_64+0x55/0xa0 [ 1004.595547][T17088] ? clear_bhb_loop+0x40/0x90 [ 1004.600298][T17088] ? clear_bhb_loop+0x40/0x90 [ 1004.605029][T17088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.610967][T17088] RIP: 0033:0x7f8ab3b9bf79 [ 1004.615436][T17088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.635093][T17088] RSP: 002b:00007f8ab4aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1004.643556][T17088] RAX: ffffffffffffffda RBX: 00007f8ab3e15fa0 RCX: 00007f8ab3b9bf79 [ 1004.651581][T17088] RDX: 0000000000000094 RSI: 00002000000020c0 RDI: 0000000000000005 [ 1004.659598][T17088] RBP: 00007f8ab4aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.667612][T17088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.675634][T17088] R13: 00007f8ab3e16038 R14: 00007f8ab3e15fa0 R15: 00007fff17c66658 [ 1004.683683][T17088] [ 1004.700122][T17088] syz.0.3883: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1004.717158][T17088] CPU: 0 PID: 17088 Comm: syz.0.3883 Not tainted syzkaller #0 [ 1004.724703][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1004.734831][T17088] Call Trace: [ 1004.738185][T17088] [ 1004.741180][T17088] dump_stack_lvl+0x18c/0x250 [ 1004.745948][T17088] ? show_regs_print_info+0x20/0x20 [ 1004.751340][T17088] ? load_image+0x400/0x400 [ 1004.756042][T17088] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1004.762544][T17088] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1004.769133][T17088] warn_alloc+0x246/0x340 [ 1004.773550][T17088] ? slab_free_freelist_hook+0x130/0x1a0 [ 1004.779265][T17088] ? zone_watermark_ok_safe+0x230/0x230 [ 1004.784887][T17088] ? __get_vm_area_node+0x17b/0x370 [ 1004.790189][T17088] ? __get_vm_area_node+0x17b/0x370 [ 1004.795505][T17088] __vmalloc_node_range+0x393/0x1330 [ 1004.800938][T17088] ? __lock_acquire+0x7d40/0x7d40 [ 1004.806050][T17088] ? free_vm_area+0x50/0x50 [ 1004.810659][T17088] ? __fget_files+0x28/0x4b0 [ 1004.815327][T17088] ? __fget_files+0x28/0x4b0 [ 1004.820103][T17088] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1004.825816][T17088] __vmalloc+0x7a/0x90 [ 1004.829984][T17088] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1004.835609][T17088] bpf_prog_alloc_no_stats+0x47/0x440 [ 1004.841054][T17088] ? bpf_prog_alloc+0x2b/0x1a0 [ 1004.845892][T17088] bpf_prog_alloc+0x3d/0x1a0 [ 1004.850650][T17088] bpf_prog_load+0x6eb/0x1670 [ 1004.855424][T17088] ? map_freeze+0x420/0x420 [ 1004.860021][T17088] ? __might_fault+0xaa/0x120 [ 1004.864769][T17088] ? __lock_acquire+0x7d40/0x7d40 [ 1004.869874][T17088] ? file_end_write+0x159/0x250 [ 1004.874817][T17088] ? __might_fault+0xaa/0x120 [ 1004.879590][T17088] ? __might_fault+0xc6/0x120 [ 1004.884339][T17088] ? __might_fault+0xaa/0x120 [ 1004.889083][T17088] ? bpf_lsm_bpf+0x9/0x10 [ 1004.893483][T17088] ? security_bpf+0x7e/0xa0 [ 1004.898079][T17088] __sys_bpf+0x5ba/0x890 [ 1004.902408][T17088] ? bpf_link_show_fdinfo+0x390/0x390 [ 1004.907896][T17088] ? lock_chain_count+0x20/0x20 [ 1004.912854][T17088] __x64_sys_bpf+0x7c/0x90 [ 1004.917353][T17088] do_syscall_64+0x55/0xa0 [ 1004.923091][T17088] ? clear_bhb_loop+0x40/0x90 [ 1004.923228][T17092] netlink: 'syz.3.3881': attribute type 2 has an invalid length. [ 1004.927943][T17088] ? clear_bhb_loop+0x40/0x90 [ 1004.927990][T17088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1004.928016][T17088] RIP: 0033:0x7f8ab3b9bf79 [ 1004.928041][T17088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.928061][T17088] RSP: 002b:00007f8ab4aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1004.928089][T17088] RAX: ffffffffffffffda RBX: 00007f8ab3e15fa0 RCX: 00007f8ab3b9bf79 [ 1004.928108][T17088] RDX: 0000000000000094 RSI: 00002000000020c0 RDI: 0000000000000005 [ 1004.928124][T17088] RBP: 00007f8ab4aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.928140][T17088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.928155][T17088] R13: 00007f8ab3e16038 R14: 00007f8ab3e15fa0 R15: 00007fff17c66658 [ 1004.928217][T17088] [ 1005.008956][T17088] Mem-Info: [ 1005.028914][T17088] active_anon:5235 inactive_anon:0 isolated_anon:0 [ 1005.028914][T17088] active_file:19358 inactive_file:40292 isolated_file:0 [ 1005.028914][T17088] unevictable:768 dirty:255 writeback:0 [ 1005.028914][T17088] slab_reclaimable:10376 slab_unreclaimable:93921 [ 1005.028914][T17088] mapped:25826 shmem:1361 pagetables:518 [ 1005.028914][T17088] sec_pagetables:0 bounce:0 [ 1005.028914][T17088] kernel_misc_reclaimable:0 [ 1005.028914][T17088] free:1348864 free_pcp:8368 free_cma:0 [ 1005.063614][T17092] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1005.099768][T17088] Node 0 active_anon:21040kB inactive_anon:0kB active_file:77432kB inactive_file:160968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103304kB dirty:1020kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10900kB pagetables:2172kB sec_pagetables:0kB all_unreclaimable? no [ 1005.133766][T17088] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1005.165439][T17088] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.199566][T17088] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1005.205748][T17088] Node 0 DMA32 free:1486648kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20944kB inactive_anon:0kB active_file:77432kB inactive_file:160140kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:11016kB local_pcp:3160kB free_cma:0kB [ 1005.239936][T17088] lowmem_reserve[]: 0 0 0 0 0 [ 1005.244757][T17088] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.305986][T17088] lowmem_reserve[]: 0 0 0 0 0 [ 1005.310838][T17088] Node 1 Normal free:3893440kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22560kB local_pcp:9184kB free_cma:0kB [ 1005.363286][T17088] lowmem_reserve[]: 0 0 0 0 0 [ 1005.368193][T17088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1005.384565][T17088] Node 0 DMA32: 786*4kB (UME) 2328*8kB (UME) 2405*16kB (UME) 1115*32kB (UME) 1335*64kB (UME) 478*128kB (UME) 218*256kB (UME) 121*512kB (UME) 50*1024kB (UME) 27*2048kB (M) 249*4096kB (UM) = 1486712kB [ 1005.426072][T17088] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1005.446108][T17088] Node 1 Normal: 242*4kB (UME) 51*8kB (UME) 54*16kB (UME) 58*32kB (UME) 23*64kB (UME) 6*128kB (U) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893440kB [ 1005.480961][T17088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.491510][T17088] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1005.501153][T17088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.511318][T17088] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1005.521087][T17088] 61011 total pagecache pages [ 1005.526048][T17088] 0 pages in swap cache [ 1005.530261][T17088] Free swap = 124996kB [ 1005.534454][T17088] Total swap = 124996kB [ 1005.540625][T17088] 2097051 pages RAM [ 1005.544509][T17088] 0 pages HighMem/MovableOnly [ 1005.572931][T17088] 416922 pages reserved [ 1005.587998][T17088] 0 pages cma reserved [ 1005.706364][T17101] netlink: 'syz.3.3888': attribute type 40 has an invalid length. [ 1006.020078][T17107] netlink: 159532 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1006.045504][T17107] netlink: zone id is out of range [ 1006.052849][T17107] netlink: zone id is out of range [ 1006.060772][T17107] netlink: zone id is out of range [ 1006.069259][T17107] netlink: zone id is out of range [ 1006.075382][T17107] netlink: zone id is out of range [ 1006.082101][T17107] netlink: zone id is out of range [ 1006.091123][T17107] netlink: zone id is out of range [ 1006.104667][T17107] netlink: zone id is out of range [ 1006.111040][T17107] netlink: zone id is out of range [ 1006.126411][T17107] netlink: zone id is out of range [ 1008.887490][T17118] netlink: 'syz.1.3895': attribute type 2 has an invalid length. [ 1008.905990][T17118] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3895'. [ 1009.267449][T17133] netlink: 'syz.3.3900': attribute type 40 has an invalid length. [ 1009.299097][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1010.506697][T17153] FAULT_INJECTION: forcing a failure. [ 1010.506697][T17153] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.535958][T17153] CPU: 0 PID: 17153 Comm: syz.3.3909 Not tainted syzkaller #0 [ 1010.543523][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1010.552542][T17150] netlink: 'syz.1.3908': attribute type 3 has an invalid length. [ 1010.553620][T17153] Call Trace: [ 1010.553634][T17153] [ 1010.553645][T17153] dump_stack_lvl+0x18c/0x250 [ 1010.553688][T17153] ? show_regs_print_info+0x20/0x20 [ 1010.553728][T17153] ? load_image+0x400/0x400 [ 1010.553760][T17153] ? __might_sleep+0xe0/0xe0 [ 1010.553789][T17153] ? __lock_acquire+0x7d40/0x7d40 [ 1010.553822][T17153] should_fail_ex+0x39d/0x4d0 [ 1010.553863][T17153] should_failslab+0x9/0x20 [ 1010.553894][T17153] slab_pre_alloc_hook+0x59/0x310 [ 1010.553931][T17153] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1010.553957][T17153] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1010.553979][T17153] __kmem_cache_alloc_node+0x53/0x250 [ 1010.554018][T17153] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1010.554041][T17153] __kmalloc+0xa4/0x230 [ 1010.554077][T17153] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1010.554117][T17153] tomoyo_path_number_perm+0x248/0x620 [ 1010.554153][T17153] ? tomoyo_path_number_perm+0x217/0x620 [ 1010.554188][T17153] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1010.554225][T17153] ? ksys_write+0x1c4/0x260 [ 1010.554296][T17153] ? __fget_files+0x28/0x4b0 [ 1010.554324][T17153] ? __fget_files+0x28/0x4b0 [ 1010.554370][T17153] security_file_ioctl+0x70/0xa0 [ 1010.554408][T17153] __se_sys_ioctl+0x48/0x170 [ 1010.554442][T17153] do_syscall_64+0x55/0xa0 [ 1010.554471][T17153] ? clear_bhb_loop+0x40/0x90 [ 1010.554495][T17153] ? clear_bhb_loop+0x40/0x90 [ 1010.554523][T17153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1010.554547][T17153] RIP: 0033:0x7fbf60b9bf79 [ 1010.554569][T17153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.554589][T17153] RSP: 002b:00007fbf619fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.554615][T17153] RAX: ffffffffffffffda RBX: 00007fbf60e15fa0 RCX: 00007fbf60b9bf79 [ 1010.554633][T17153] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 1010.554648][T17153] RBP: 00007fbf619fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.554664][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.554677][T17153] R13: 00007fbf60e16038 R14: 00007fbf60e15fa0 R15: 00007fff98349fc8 [ 1010.554727][T17153] [ 1010.597757][T17153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1010.692565][T17151] netlink: 'syz.0.3907': attribute type 2 has an invalid length. [ 1010.692595][T17151] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3907'. [ 1010.867094][T17150] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3908'. [ 1011.237505][T17167] netlink: 'syz.3.3913': attribute type 40 has an invalid length. [ 1011.277300][T17169] netlink: 'syz.2.3914': attribute type 28 has an invalid length. [ 1011.285218][T17169] netlink: 'syz.2.3914': attribute type 29 has an invalid length. [ 1011.319826][T17169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3914'. [ 1012.258176][T17187] netlink: 'syz.3.3920': attribute type 2 has an invalid length. [ 1012.286051][T17187] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3920'. [ 1014.814627][T17199] FAULT_INJECTION: forcing a failure. [ 1014.814627][T17199] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.834430][T17197] netlink: 'syz.3.3925': attribute type 3 has an invalid length. [ 1014.851628][T17197] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1014.862633][T17199] CPU: 1 PID: 17199 Comm: syz.2.3927 Not tainted syzkaller #0 [ 1014.862662][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1014.862676][T17199] Call Trace: [ 1014.862686][T17199] [ 1014.862695][T17199] dump_stack_lvl+0x18c/0x250 [ 1014.862736][T17199] ? show_regs_print_info+0x20/0x20 [ 1014.862768][T17199] ? load_image+0x400/0x400 [ 1014.862800][T17199] ? __might_sleep+0xe0/0xe0 [ 1014.862829][T17199] ? __lock_acquire+0x7d40/0x7d40 [ 1014.862862][T17199] should_fail_ex+0x39d/0x4d0 [ 1014.862900][T17199] should_failslab+0x9/0x20 [ 1014.862932][T17199] slab_pre_alloc_hook+0x59/0x310 [ 1014.862971][T17199] kmem_cache_alloc+0x5a/0x2d0 [ 1014.863001][T17199] ? sk_prot_alloc+0x57/0x210 [ 1014.863034][T17199] sk_prot_alloc+0x57/0x210 [ 1014.863067][T17199] ? sk_alloc+0x24/0x360 [ 1014.863097][T17199] sk_alloc+0x3a/0x360 [ 1014.863130][T17199] inet_create+0x7a0/0xfe0 [ 1014.863158][T17199] ? inet_create+0x9c/0xfe0 [ 1014.863189][T17199] __sock_create+0x4a6/0x940 [ 1014.863231][T17199] __sys_socket+0xd7/0x1a0 [ 1014.863267][T17199] __x64_sys_socket+0x7a/0x90 [ 1014.863302][T17199] do_syscall_64+0x55/0xa0 [ 1014.863330][T17199] ? clear_bhb_loop+0x40/0x90 [ 1014.863354][T17199] ? clear_bhb_loop+0x40/0x90 [ 1014.863381][T17199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.863409][T17199] RIP: 0033:0x7f3fa8f9bf79 [ 1014.863429][T17199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.863449][T17199] RSP: 002b:00007f3fa71f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1014.863474][T17199] RAX: ffffffffffffffda RBX: 00007f3fa9215fa0 RCX: 00007f3fa8f9bf79 [ 1014.863491][T17199] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 1014.863506][T17199] RBP: 00007f3fa71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.863521][T17199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.863534][T17199] R13: 00007f3fa9216038 R14: 00007f3fa9215fa0 R15: 00007ffddd7d2038 [ 1014.863570][T17199] [ 1014.945709][T17200] netlink: 'syz.1.3926': attribute type 40 has an invalid length. [ 1015.172384][T17207] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1015.380930][T17213] netlink: 'syz.0.3938': attribute type 40 has an invalid length. [ 1015.406471][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1015.794565][T17222] netlink: 'syz.0.3933': attribute type 2 has an invalid length. [ 1015.827752][T17222] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3933'. [ 1016.001283][T17230] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1016.036361][T17230] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1016.045738][T17230] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1016.137413][T17235] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1016.148622][T17237] FAULT_INJECTION: forcing a failure. [ 1016.148622][T17237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.168157][T17237] CPU: 0 PID: 17237 Comm: syz.1.3939 Not tainted syzkaller #0 [ 1016.175713][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1016.185917][T17237] Call Trace: [ 1016.189247][T17237] [ 1016.192228][T17237] dump_stack_lvl+0x18c/0x250 [ 1016.196986][T17237] ? show_regs_print_info+0x20/0x20 [ 1016.202514][T17237] ? load_image+0x400/0x400 [ 1016.207108][T17237] ? __might_fault+0xaa/0x120 [ 1016.211843][T17237] ? __lock_acquire+0x7d40/0x7d40 [ 1016.216927][T17237] should_fail_ex+0x39d/0x4d0 [ 1016.221671][T17237] _copy_from_user+0x2f/0xe0 [ 1016.226321][T17237] ___sys_sendmsg+0x1c7/0x360 [ 1016.231057][T17237] ? __sys_sendmsg+0x2a0/0x2a0 [ 1016.235914][T17237] ? __lock_acquire+0x7d40/0x7d40 [ 1016.241042][T17237] __se_sys_sendmsg+0x1c2/0x2b0 [ 1016.245954][T17237] ? __x64_sys_sendmsg+0x80/0x80 [ 1016.250967][T17237] ? lockdep_hardirqs_on+0x98/0x150 [ 1016.256576][T17237] do_syscall_64+0x55/0xa0 [ 1016.261042][T17237] ? clear_bhb_loop+0x40/0x90 [ 1016.265775][T17237] ? clear_bhb_loop+0x40/0x90 [ 1016.270502][T17237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1016.276437][T17237] RIP: 0033:0x7fce8ed9bf79 [ 1016.280899][T17237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.300543][T17237] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.309004][T17237] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 1016.317100][T17237] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1016.325111][T17237] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.333381][T17237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.341399][T17237] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 1016.349428][T17237] [ 1016.501661][T17242] netlink: 'syz.1.3942': attribute type 40 has an invalid length. [ 1016.544966][T17244] tun0: tun_chr_ioctl cmd 1074025675 [ 1016.551527][T17244] tun0: persist enabled [ 1016.556589][T17244] tun0: tun_chr_ioctl cmd 1074025675 [ 1016.562565][T17244] tun0: persist disabled [ 1016.853260][T17245] netlink: 'syz.0.3943': attribute type 3 has an invalid length. [ 1016.878079][T17245] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3943'. [ 1016.938926][T17252] netlink: 'syz.1.3945': attribute type 2 has an invalid length. [ 1016.978613][T17252] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1017.248699][T11236] wlan1: Trigger new scan to find an IBSS to join [ 1018.196156][T11227] wlan1: Trigger new scan to find an IBSS to join [ 1019.870241][T17267] netlink: 'syz.1.3950': attribute type 10 has an invalid length. [ 1019.904250][T17267] team0: Device hsr_slave_0 failed to register rx_handler [ 1019.922048][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3949'. [ 1019.971022][T17269] netlink: 'syz.0.3951': attribute type 10 has an invalid length. [ 1020.019643][T17269] team0: Device hsr_slave_0 failed to register rx_handler [ 1020.346561][T17279] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3955'. [ 1020.526238][T17279] sit0: entered promiscuous mode [ 1020.546629][T17279] sit0: entered allmulticast mode [ 1022.196247][T11227] wlan1: Trigger new scan to find an IBSS to join [ 1022.203057][T11236] wlan1: Trigger new scan to find an IBSS to join [ 1023.294082][T11232] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1023.302774][T11236] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1023.401197][T17288] netlink: 'syz.1.3958': attribute type 2 has an invalid length. [ 1023.410372][T17288] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1023.583967][T17292] netlink: 'syz.2.3960': attribute type 3 has an invalid length. [ 1023.609581][T17292] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1023.909246][T17306] netlink: 'syz.0.3965': attribute type 3 has an invalid length. [ 1023.968950][T17306] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3965'. [ 1024.407692][T17321] netlink: 'syz.2.3966': attribute type 40 has an invalid length. [ 1024.973236][T17333] netlink: 'syz.2.3970': attribute type 2 has an invalid length. [ 1025.029595][T17333] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3970'. [ 1025.504393][T17335] FAULT_INJECTION: forcing a failure. [ 1025.504393][T17335] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.537813][T17335] CPU: 1 PID: 17335 Comm: syz.3.3971 Not tainted syzkaller #0 [ 1025.545381][T17335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1025.555498][T17335] Call Trace: [ 1025.558825][T17335] [ 1025.561799][T17335] dump_stack_lvl+0x18c/0x250 [ 1025.566566][T17335] ? show_regs_print_info+0x20/0x20 [ 1025.571827][T17335] ? load_image+0x400/0x400 [ 1025.576392][T17335] ? __might_sleep+0xe0/0xe0 [ 1025.581039][T17335] ? __lock_acquire+0x7d40/0x7d40 [ 1025.586114][T17335] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1025.592302][T17335] should_fail_ex+0x39d/0x4d0 [ 1025.597033][T17335] should_failslab+0x9/0x20 [ 1025.601620][T17335] slab_pre_alloc_hook+0x59/0x310 [ 1025.606687][T17335] ? find_get_pmu_context+0x81/0x9e0 [ 1025.612016][T17335] __kmem_cache_alloc_node+0x53/0x250 [ 1025.617424][T17335] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1025.623521][T17335] ? find_get_pmu_context+0x81/0x9e0 [ 1025.628847][T17335] kmalloc_trace+0x2a/0xe0 [ 1025.633305][T17335] find_get_pmu_context+0x81/0x9e0 [ 1025.638453][T17335] ? find_get_context+0x3df/0x4f0 [ 1025.643515][T17335] __se_sys_perf_event_open+0xb7b/0x1c50 [ 1025.649203][T17335] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1025.654885][T17335] ? lock_chain_count+0x20/0x20 [ 1025.659772][T17335] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1025.665890][T17335] ? lockdep_hardirqs_on+0x98/0x150 [ 1025.671123][T17335] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1025.676812][T17335] do_syscall_64+0x55/0xa0 [ 1025.681262][T17335] ? clear_bhb_loop+0x40/0x90 [ 1025.685972][T17335] ? clear_bhb_loop+0x40/0x90 [ 1025.690696][T17335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.696631][T17335] RIP: 0033:0x7fbf60b9bf79 [ 1025.701126][T17335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.720768][T17335] RSP: 002b:00007fbf619fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1025.729224][T17335] RAX: ffffffffffffffda RBX: 00007fbf60e15fa0 RCX: 00007fbf60b9bf79 [ 1025.737224][T17335] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000580 [ 1025.745403][T17335] RBP: 00007fbf619fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.753929][T17335] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1025.761953][T17335] R13: 00007fbf60e16038 R14: 00007fbf60e15fa0 R15: 00007fff98349fc8 [ 1025.769978][T17335] [ 1027.027271][T17365] netlink: 'syz.2.3978': attribute type 3 has an invalid length. [ 1027.037010][T17365] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3978'. [ 1027.583306][T17387] netlink: 'syz.0.3982': attribute type 2 has an invalid length. [ 1027.606815][T17387] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3982'. [ 1027.865481][T17392] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3984'. [ 1029.037936][T17410] netlink: 'syz.2.3989': attribute type 3 has an invalid length. [ 1029.120151][T17410] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3989'. [ 1029.427059][T17420] netlink: 'syz.1.3991': attribute type 2 has an invalid length. [ 1029.459638][T17420] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1033.279810][T17445] netlink: 'syz.0.3998': attribute type 40 has an invalid length. [ 1033.472693][T17452] netlink: 'syz.0.4002': attribute type 2 has an invalid length. [ 1033.495709][T17452] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1033.509203][T17449] netlink: 'syz.3.4001': attribute type 3 has an invalid length. [ 1033.536500][T17449] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1034.244754][T17450] netlink: 'syz.1.4000': attribute type 3 has an invalid length. [ 1034.264675][T17450] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4000'. [ 1035.466496][T17489] can: request_module (can-proto-5) failed. [ 1035.833552][T17496] netlink: 'syz.2.4012': attribute type 2 has an invalid length. [ 1035.844874][T17496] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4012'. [ 1035.866721][T17495] netlink: 'syz.3.4011': attribute type 40 has an invalid length. [ 1036.522430][T17511] netlink: 'syz.0.4016': attribute type 3 has an invalid length. [ 1036.545967][T17511] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4016'. [ 1036.872273][T17519] À: port 1(vlan0) entered blocking state [ 1036.878914][T17519] À: port 1(vlan0) entered disabled state [ 1036.884924][T17519] vlan0: entered allmulticast mode [ 1036.890168][T17519] veth0_vlan: entered allmulticast mode [ 1036.897502][T17519] vlan0: entered promiscuous mode [ 1036.973511][T17529] netlink: 'syz.2.4022': attribute type 40 has an invalid length. [ 1037.537506][T17542] netlink: 'syz.3.4024': attribute type 2 has an invalid length. [ 1037.555807][T17542] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4024'. [ 1037.597734][T17545] FAULT_INJECTION: forcing a failure. [ 1037.597734][T17545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.611277][T17545] CPU: 0 PID: 17545 Comm: syz.0.4026 Not tainted syzkaller #0 [ 1037.618888][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1037.629009][T17545] Call Trace: [ 1037.632348][T17545] [ 1037.635324][T17545] dump_stack_lvl+0x18c/0x250 [ 1037.640066][T17545] ? show_regs_print_info+0x20/0x20 [ 1037.645502][T17545] ? load_image+0x400/0x400 [ 1037.650068][T17545] ? __lock_acquire+0x7d40/0x7d40 [ 1037.655163][T17545] ? snprintf+0xe9/0x140 [ 1037.659474][T17545] should_fail_ex+0x39d/0x4d0 [ 1037.664223][T17545] _copy_to_user+0x2f/0xa0 [ 1037.668706][T17545] simple_read_from_buffer+0xe7/0x150 [ 1037.674148][T17545] proc_fail_nth_read+0x1e8/0x260 [ 1037.679236][T17545] ? proc_fault_inject_write+0x360/0x360 [ 1037.684947][T17545] ? fsnotify_perm+0x271/0x5e0 [ 1037.689787][T17545] ? proc_fault_inject_write+0x360/0x360 [ 1037.695483][T17545] vfs_read+0x28b/0x970 [ 1037.699755][T17545] ? kernel_read+0x1e0/0x1e0 [ 1037.704407][T17545] ? __fget_files+0x28/0x4b0 [ 1037.709096][T17545] ? __fget_files+0x28/0x4b0 [ 1037.713833][T17545] ? __fget_files+0x43d/0x4b0 [ 1037.718583][T17545] ? __fdget_pos+0x2a3/0x330 [ 1037.723223][T17545] ? ksys_read+0x75/0x260 [ 1037.727667][T17545] ksys_read+0x150/0x260 [ 1037.732025][T17545] ? vfs_write+0x990/0x990 [ 1037.736507][T17545] ? lockdep_hardirqs_on+0x98/0x150 [ 1037.741764][T17545] do_syscall_64+0x55/0xa0 [ 1037.746241][T17545] ? clear_bhb_loop+0x40/0x90 [ 1037.750966][T17545] ? clear_bhb_loop+0x40/0x90 [ 1037.755721][T17545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1037.761667][T17545] RIP: 0033:0x7f8ab3b5c84e [ 1037.766130][T17545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1037.785805][T17545] RSP: 002b:00007f8ab4aaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1037.794285][T17545] RAX: ffffffffffffffda RBX: 00007f8ab4aaf6c0 RCX: 00007f8ab3b5c84e [ 1037.802335][T17545] RDX: 000000000000000f RSI: 00007f8ab4aaf0a0 RDI: 0000000000000008 [ 1037.810359][T17545] RBP: 00007f8ab4aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.818383][T17545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.826430][T17545] R13: 00007f8ab3e16038 R14: 00007f8ab3e15fa0 R15: 00007fff17c66658 [ 1037.834489][T17545] [ 1038.031217][T17546] netlink: 'syz.1.4027': attribute type 3 has an invalid length. [ 1038.057049][T17546] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4027'. [ 1038.713237][T17562] netlink: 'syz.2.4031': attribute type 40 has an invalid length. [ 1039.507220][T17587] netlink: 'syz.3.4037': attribute type 2 has an invalid length. [ 1039.515143][T17587] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4037'. [ 1039.559498][T17589] netlink: 'syz.2.4038': attribute type 21 has an invalid length. [ 1039.767478][T17595] netlink: 'syz.0.4041': attribute type 40 has an invalid length. [ 1039.829339][T17594] netlink: 'syz.1.4039': attribute type 3 has an invalid length. [ 1039.842644][T17594] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4039'. [ 1040.722342][T17611] netlink: 'syz.0.4051': attribute type 3 has an invalid length. [ 1040.731348][T17611] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4051'. [ 1041.689795][T17636] netlink: 'syz.1.4049': attribute type 2 has an invalid length. [ 1041.701259][T17636] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1042.556150][T17659] netlink: 'syz.0.4058': attribute type 3 has an invalid length. [ 1042.595418][T17659] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4058'. [ 1042.770917][T17666] netlink: 'syz.1.4057': attribute type 21 has an invalid length. [ 1043.227524][T17670] netlink: 'syz.0.4069': attribute type 3 has an invalid length. [ 1043.235655][T17670] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1043.631468][T17682] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1043.987907][T17685] validate_nla: 1 callbacks suppressed [ 1043.987953][T17685] netlink: 'syz.0.4065': attribute type 3 has an invalid length. [ 1044.015156][T17685] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4065'. [ 1044.047640][T17692] FAULT_INJECTION: forcing a failure. [ 1044.047640][T17692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.065525][T17692] CPU: 1 PID: 17692 Comm: syz.1.4066 Not tainted syzkaller #0 [ 1044.073092][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1044.083210][T17692] Call Trace: [ 1044.086542][T17692] [ 1044.089522][T17692] dump_stack_lvl+0x18c/0x250 [ 1044.094291][T17692] ? show_regs_print_info+0x20/0x20 [ 1044.099569][T17692] ? load_image+0x400/0x400 [ 1044.104142][T17692] ? __lock_acquire+0x7d40/0x7d40 [ 1044.109243][T17692] should_fail_ex+0x39d/0x4d0 [ 1044.114011][T17692] _copy_from_user+0x2f/0xe0 [ 1044.118673][T17692] __copy_msghdr+0x3bb/0x580 [ 1044.123353][T17692] ___sys_sendmsg+0x214/0x360 [ 1044.128104][T17692] ? get_pid_task+0x20/0x1e0 [ 1044.132773][T17692] ? __sys_sendmsg+0x2a0/0x2a0 [ 1044.137638][T17692] ? __lock_acquire+0x7d40/0x7d40 [ 1044.142765][T17692] __se_sys_sendmsg+0x1c2/0x2b0 [ 1044.147687][T17692] ? __x64_sys_sendmsg+0x80/0x80 [ 1044.152712][T17692] ? lockdep_hardirqs_on+0x98/0x150 [ 1044.157977][T17692] do_syscall_64+0x55/0xa0 [ 1044.162448][T17692] ? clear_bhb_loop+0x40/0x90 [ 1044.167158][T17692] ? clear_bhb_loop+0x40/0x90 [ 1044.171872][T17692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.177801][T17692] RIP: 0033:0x7fce8ed9bf79 [ 1044.182244][T17692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.201892][T17692] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1044.210352][T17692] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 1044.218354][T17692] RDX: 0000000024000000 RSI: 00002000000024c0 RDI: 0000000000000003 [ 1044.226362][T17692] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.234363][T17692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.242372][T17692] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 1044.250399][T17692] [ 1045.173528][T17715] netlink: 'syz.0.4075': attribute type 3 has an invalid length. [ 1045.196459][T17715] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1045.230146][T17722] netlink: 'syz.1.4076': attribute type 2 has an invalid length. [ 1045.258302][T17722] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4076'. [ 1046.103410][T17754] netlink: 'syz.0.4089': attribute type 2 has an invalid length. [ 1046.111580][T17754] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1046.275725][T17756] FAULT_INJECTION: forcing a failure. [ 1046.275725][T17756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.316848][T17756] CPU: 0 PID: 17756 Comm: syz.1.4090 Not tainted syzkaller #0 [ 1046.324429][T17756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1046.334520][T17756] Call Trace: [ 1046.337852][T17756] [ 1046.340821][T17756] dump_stack_lvl+0x18c/0x250 [ 1046.345548][T17756] ? show_regs_print_info+0x20/0x20 [ 1046.350786][T17756] ? load_image+0x400/0x400 [ 1046.355333][T17756] ? __might_fault+0xaa/0x120 [ 1046.360051][T17756] ? __lock_acquire+0x7d40/0x7d40 [ 1046.365108][T17756] should_fail_ex+0x39d/0x4d0 [ 1046.369825][T17756] _copy_from_user+0x2f/0xe0 [ 1046.374452][T17756] __sys_bpf+0x23e/0x890 [ 1046.378731][T17756] ? bpf_link_show_fdinfo+0x390/0x390 [ 1046.384233][T17756] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1046.390438][T17756] __x64_sys_bpf+0x7c/0x90 [ 1046.394904][T17756] do_syscall_64+0x55/0xa0 [ 1046.399361][T17756] ? clear_bhb_loop+0x40/0x90 [ 1046.404067][T17756] ? clear_bhb_loop+0x40/0x90 [ 1046.408788][T17756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1046.414727][T17756] RIP: 0033:0x7fce8ed9bf79 [ 1046.419174][T17756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.438833][T17756] RSP: 002b:00007fce8fbfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1046.447315][T17756] RAX: ffffffffffffffda RBX: 00007fce8f015fa0 RCX: 00007fce8ed9bf79 [ 1046.455321][T17756] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 1046.463329][T17756] RBP: 00007fce8fbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.471349][T17756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.479367][T17756] R13: 00007fce8f016038 R14: 00007fce8f015fa0 R15: 00007ffe1fe47b78 [ 1046.487396][T17756] [ 1046.609384][T17758] netlink: 'syz.3.4091': attribute type 3 has an invalid length. [ 1046.618186][T17758] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4091'. [ 1047.432382][T17792] netlink: 'syz.2.4101': attribute type 14 has an invalid length. [ 1047.457384][T17792] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4101'. [ 1047.484527][T17790] netlink: 'syz.0.4100': attribute type 2 has an invalid length. [ 1047.527339][T17790] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4100'. [ 1047.738830][T17798] netlink: 'syz.3.4103': attribute type 40 has an invalid length. [ 1048.024124][T17801] netlink: 'syz.0.4105': attribute type 3 has an invalid length. [ 1048.033289][T17801] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4105'. [ 1051.235447][T17822] À: port 1(vlan0) entered blocking state [ 1051.242978][T17822] À: port 1(vlan0) entered disabled state [ 1051.257368][T17822] vlan0: entered allmulticast mode [ 1051.269126][T17822] veth0_vlan: entered allmulticast mode [ 1051.289296][T17822] vlan0: entered promiscuous mode [ 1051.478210][T17827] netlink: 'syz.0.4113': attribute type 2 has an invalid length. [ 1051.486461][T17827] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1051.701275][T17837] netlink: 'syz.3.4115': attribute type 2 has an invalid length. [ 1051.710089][T17837] netlink: 'syz.3.4115': attribute type 1 has an invalid length. [ 1051.718561][T17837] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1051.784539][T17837] netlink: 'syz.3.4115': attribute type 3 has an invalid length. [ 1051.793596][T17839] netlink: 'syz.0.4114': attribute type 3 has an invalid length. [ 1051.806355][T17837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1051.822151][T17839] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4114'. [ 1052.369063][T17850] netlink: 'syz.3.4119': attribute type 3 has an invalid length. [ 1052.400321][T17850] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4119'. [ 1052.539890][T17860] netlink: 'syz.2.4121': attribute type 2 has an invalid length. [ 1052.556379][T17860] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4121'. [ 1053.055686][T17862] netlink: 'syz.1.4122': attribute type 2 has an invalid length. [ 1053.063813][T17862] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4122'. [ 1053.165325][T17864] netlink: 'syz.3.4124': attribute type 40 has an invalid length. [ 1053.411276][T17872] netlink: 'syz.3.4127': attribute type 21 has an invalid length. [ 1054.049340][T17885] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4131'. [ 1054.759024][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.765576][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.739666][T17892] validate_nla: 1 callbacks suppressed [ 1056.739688][T17892] netlink: 'syz.0.4133': attribute type 2 has an invalid length. [ 1056.757344][T17892] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1057.015181][T17894] netlink: 'syz.2.4132': attribute type 3 has an invalid length. [ 1057.041002][T17894] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4132'. [ 1057.114038][T17900] netlink: 'syz.3.4134': attribute type 2 has an invalid length. [ 1057.136123][T17900] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1057.324063][T17907] netlink: 'syz.0.4136': attribute type 40 has an invalid length. [ 1057.707785][T17920] À: port 1(vlan0) entered blocking state [ 1057.726746][T17920] À: port 1(vlan0) entered disabled state [ 1057.732849][T17920] vlan0: entered allmulticast mode [ 1057.740897][T17920] vlan0: entered promiscuous mode [ 1058.558753][T17939] netlink: 'syz.2.4146': attribute type 2 has an invalid length. [ 1058.597358][T17939] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4146'. [ 1060.011598][T17973] netlink: 'syz.3.4159': attribute type 3 has an invalid length. [ 1060.022238][T17973] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4159'. [ 1060.512655][T17988] netlink: 'syz.2.4162': attribute type 2 has an invalid length. [ 1060.527453][T17988] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4162'. [ 1060.751641][T17996] FAULT_INJECTION: forcing a failure. [ 1060.751641][T17996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.766617][T17996] CPU: 0 PID: 17996 Comm: syz.2.4166 Not tainted syzkaller #0 [ 1060.774225][T17996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1060.784397][T17996] Call Trace: [ 1060.787769][T17996] [ 1060.790801][T17996] dump_stack_lvl+0x18c/0x250 [ 1060.795611][T17996] ? show_regs_print_info+0x20/0x20 [ 1060.800923][T17996] ? load_image+0x400/0x400 [ 1060.805588][T17996] ? __lock_acquire+0x7d40/0x7d40 [ 1060.810726][T17996] ? snprintf+0xe9/0x140 [ 1060.815106][T17996] should_fail_ex+0x39d/0x4d0 [ 1060.819948][T17996] _copy_to_user+0x2f/0xa0 [ 1060.824490][T17996] simple_read_from_buffer+0xe7/0x150 [ 1060.830024][T17996] proc_fail_nth_read+0x1e8/0x260 [ 1060.835182][T17996] ? proc_fault_inject_write+0x360/0x360 [ 1060.840996][T17996] ? fsnotify_perm+0x271/0x5e0 [ 1060.846025][T17996] ? proc_fault_inject_write+0x360/0x360 [ 1060.851868][T17996] vfs_read+0x28b/0x970 [ 1060.856187][T17996] ? kernel_read+0x1e0/0x1e0 [ 1060.860893][T17996] ? __fget_files+0x28/0x4b0 [ 1060.865677][T17996] ? __fget_files+0x28/0x4b0 [ 1060.870376][T17996] ? __fget_files+0x43d/0x4b0 [ 1060.875400][T17996] ? __fdget_pos+0x2a3/0x330 [ 1060.880107][T17996] ? ksys_read+0x75/0x260 [ 1060.884662][T17996] ksys_read+0x150/0x260 [ 1060.889044][T17996] ? vfs_write+0x990/0x990 [ 1060.893597][T17996] ? lockdep_hardirqs_on+0x98/0x150 [ 1060.898932][T17996] do_syscall_64+0x55/0xa0 [ 1060.903484][T17996] ? clear_bhb_loop+0x40/0x90 [ 1060.908259][T17996] ? clear_bhb_loop+0x40/0x90 [ 1060.913054][T17996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.919052][T17996] RIP: 0033:0x7f3fa8f5c84e [ 1060.923578][T17996] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1060.943382][T17996] RSP: 002b:00007f3fa71f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1060.951910][T17996] RAX: ffffffffffffffda RBX: 00007f3fa71f66c0 RCX: 00007f3fa8f5c84e [ 1060.959980][T17996] RDX: 000000000000000f RSI: 00007f3fa71f60a0 RDI: 0000000000000008 [ 1060.968082][T17996] RBP: 00007f3fa71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.976258][T17996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.984323][T17996] R13: 00007f3fa9216038 R14: 00007f3fa9215fa0 R15: 00007ffddd7d2038 [ 1060.992493][T17996] [ 1061.515086][T18013] netlink: 'syz.3.4172': attribute type 3 has an invalid length. [ 1061.542904][T18013] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4172'. [ 1061.983695][T18029] netlink: 'syz.1.4175': attribute type 2 has an invalid length. [ 1062.017448][T18029] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4175'. [ 1062.492165][T18044] netlink: 'syz.1.4180': attribute type 3 has an invalid length. [ 1062.504938][T18044] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4180'. [ 1063.186383][T18058] netlink: 'syz.3.4185': attribute type 3 has an invalid length. [ 1063.214812][T18058] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4185'. [ 1063.914233][T18077] netlink: 'syz.1.4189': attribute type 2 has an invalid length. [ 1063.931695][T18077] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4189'. [ 1064.368391][T18092] netlink: 'syz.1.4192': attribute type 40 has an invalid length. [ 1067.603276][T18104] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1067.759751][T18115] netlink: 'syz.1.4202': attribute type 2 has an invalid length. [ 1067.767894][T18115] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4202'. [ 1068.209077][T18125] À: port 1(vlan0) entered blocking state [ 1068.222707][T18125] À: port 1(vlan0) entered disabled state [ 1068.239246][T18125] vlan0: entered allmulticast mode [ 1068.244504][T18125] veth0_vlan: entered allmulticast mode [ 1068.257915][T18125] vlan0: entered promiscuous mode [ 1068.271385][T18129] netlink: 'syz.2.4207': attribute type 40 has an invalid length. [ 1068.581743][T18136] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1071.236104][T11230] wlan1: Trigger new scan to find an IBSS to join [ 1071.637812][T18147] netlink: 'syz.1.4213': attribute type 2 has an invalid length. [ 1071.681708][T18147] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4213'. [ 1074.872535][T18159] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1075.085588][T18163] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1075.178770][T18167] netlink: 'syz.2.4223': attribute type 40 has an invalid length. [ 1075.500668][T18179] netlink: 'syz.2.4227': attribute type 2 has an invalid length. [ 1075.536142][T18179] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4227'. [ 1075.859435][T18185] netlink: 'syz.3.4228': attribute type 2 has an invalid length. [ 1075.867631][T18185] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4228'. [ 1077.165945][T11230] wlan1: Trigger new scan to find an IBSS to join [ 1078.705435][T18196] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1078.859987][T18201] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1079.022819][T18205] netlink: 'syz.2.4236': attribute type 40 has an invalid length. [ 1079.347490][T18217] netlink: 'syz.0.4240': attribute type 2 has an invalid length. [ 1079.355653][T18217] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4240'. [ 1081.156420][T11236] wlan1: Trigger new scan to find an IBSS to join [ 1081.236097][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1082.206151][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1082.257795][T18222] netlink: 'syz.2.4241': attribute type 2 has an invalid length. [ 1082.300245][T18222] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4241'. [ 1082.506590][T18231] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1082.819110][T18245] netlink: 'syz.0.4249': attribute type 40 has an invalid length. [ 1085.156121][T11232] wlan1: Trigger new scan to find an IBSS to join [ 1085.947189][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1086.439686][T18265] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1086.607969][T18269] netlink: 'syz.0.4259': attribute type 40 has an invalid length. [ 1086.685215][T18271] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1088.196360][T11232] wlan1: Trigger new scan to find an IBSS to join [ 1088.551472][T18287] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1088.757037][T18295] netlink: 'syz.3.4269': attribute type 40 has an invalid length. [ 1089.238469][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1091.166055][T11230] wlan1: Trigger new scan to find an IBSS to join [ 1091.237918][T11236] wlan1: Trigger new scan to find an IBSS to join [ 1094.196096][T11230] wlan1: Trigger new scan to find an IBSS to join [ 1094.678931][T11227] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1094.730041][T18333] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1094.861268][T18342] netlink: 'syz.3.4281': attribute type 40 has an invalid length. [ 1095.087451][T11227] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1096.019124][T18374] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1096.091313][T18373] netlink: 'syz.2.4290': attribute type 3 has an invalid length. [ 1096.130261][T18373] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4290'. [ 1096.716512][T18390] netlink: 'syz.0.4295': attribute type 40 has an invalid length. [ 1097.236994][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1097.350651][T18411] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1097.872019][T18422] netlink: 'syz.0.4305': attribute type 3 has an invalid length. [ 1097.895061][T18422] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4305'. [ 1100.677077][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1100.970476][T18435] netlink: 'syz.3.4307': attribute type 40 has an invalid length. [ 1101.156219][ T1084] wlan1: Trigger new scan to find an IBSS to join [ 1101.458224][T18447] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1101.560936][T18450] netlink: 'syz.0.4319': attribute type 40 has an invalid length. [ 1102.331284][T18469] netlink: 'syz.2.4316': attribute type 3 has an invalid length. [ 1102.342669][T18469] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1104.198052][T11227] wlan1: Trigger new scan to find an IBSS to join [ 1105.516127][T18490] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1107.001268][T18510] netlink: 'syz.0.4329': attribute type 3 has an invalid length. [ 1107.020006][T18510] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4329'. [ 1108.009193][T18524] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1109.449109][T18553] netlink: 'syz.1.4339': attribute type 3 has an invalid length. [ 1109.460706][T18553] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4339'. [ 1110.196473][T11230] wlan1: Trigger new scan to find an IBSS to join [ 1110.251914][T18568] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1113.236765][T11232] wlan1: Trigger new scan to find an IBSS to join [ 1114.198450][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1114.408671][T18598] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1114.517355][T18596] netlink: 'syz.1.4355': attribute type 3 has an invalid length. [ 1114.565932][T18596] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1114.773607][T18606] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1116.255656][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.262336][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.288299][T18634] netlink: 'syz.2.4368': attribute type 3 has an invalid length. [ 1116.299256][T18634] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4368'. [ 1117.156291][T11232] wlan1: Trigger new scan to find an IBSS to join [ 1117.163029][T11232] wlan1: Trigger new scan to find an IBSS to join [ 1119.094454][T18643] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1119.236119][ T1084] wlan1: Trigger new scan to find an IBSS to join [ 1120.146714][T11230] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1121.166116][ T1084] wlan1: Trigger new scan to find an IBSS to join [ 1121.236805][ T1084] wlan1: Trigger new scan to find an IBSS to join [ 1123.140943][T11227] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1123.358854][T18681] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1123.772010][T18690] netlink: 'syz.0.4385': attribute type 3 has an invalid length. [ 1123.823217][T18690] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1124.359681][T18705] netlink: 'syz.2.4391': attribute type 3 has an invalid length. [ 1124.387503][T18705] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4391'. [ 1125.086731][T11230] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1125.145010][T18721] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1125.899946][T18740] netlink: 'syz.2.4403': attribute type 3 has an invalid length. [ 1125.933236][T18740] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1127.166017][T11240] wlan1: Trigger new scan to find an IBSS to join [ 1127.236604][ T1084] wlan1: Trigger new scan to find an IBSS to join [ 1128.933514][T18751] netlink: 'syz.3.4404': attribute type 3 has an invalid length. [ 1128.944408][T18751] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4404'. [ 1128.971312][T18757] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1129.436994][T18772] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1130.075455][T18792] netlink: 'syz.1.4416': attribute type 3 has an invalid length. [ 1130.090990][T18792] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4416'. [ 1130.469747][T18783] syz.2.4414 (18783) used greatest stack depth: 17064 bytes left [ 1131.114566][T18809] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1131.236306][T11236] wlan1: Trigger new scan to find an IBSS to join [ 1131.237017][T11230] wlan1: Trigger new scan to find an IBSS to join [ 1132.201411][T11227] wlan1: Trigger new scan to find an IBSS to join [ 1132.202682][T18836] netlink: 'syz.0.4431': attribute type 3 has an invalid length. [ 1132.236581][T18836] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4431'. [ 1132.302604][T11227] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1133.156414][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1133.283943][T18851] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1133.981831][T18869] netlink: 'syz.1.4441': attribute type 40 has an invalid length. [ 1134.423466][T18877] netlink: 'syz.2.4443': attribute type 3 has an invalid length. [ 1134.433664][T18877] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4443'. [ 1135.244311][T11227] wlan1: Trigger new scan to find an IBSS to join [ 1135.306981][T18895] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1135.415185][T18897] netlink: 'syz.0.4455': attribute type 3 has an invalid length. [ 1135.434734][T18897] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4455'. [ 1135.934159][T18916] netlink: 'syz.0.4451': attribute type 40 has an invalid length. [ 1136.226913][ T2975] wlan1: Trigger new scan to find an IBSS to join [ 1136.937382][T18935] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1137.170693][T11238] wlan1: Trigger new scan to find an IBSS to join [ 1137.280036][T18943] netlink: 'syz.0.4461': attribute type 3 has an invalid length. [ 1137.293788][T18943] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4461'. [ 1137.730145][T18954] netlink: 'syz.3.4463': attribute type 40 has an invalid length. [ 1139.165986][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1139.185899][T18981] netlink: 'syz.2.4473': attribute type 3 has an invalid length. [ 1139.199050][T18981] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1139.245660][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1139.471131][T18987] netlink: 'syz.0.4474': attribute type 40 has an invalid length. [ 1139.771018][T18994] netlink: 'syz.0.4485': attribute type 40 has an invalid length. [ 1141.166105][T11227] wlan1: Trigger new scan to find an IBSS to join [ 1142.916945][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1142.925693][ T2975] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1143.427958][T19020] netlink: 'syz.0.4484': attribute type 3 has an invalid length. [ 1143.452754][T19020] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4484'. [ 1144.323761][T19034] netlink: 'syz.2.4488': attribute type 40 has an invalid length. [ 1145.161905][ T2975] wlan1: Trigger new scan to find an IBSS to join [ 1145.905791][T19061] netlink: 'syz.1.4497': attribute type 3 has an invalid length. [ 1145.914226][T19061] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4497'. [ 1146.140357][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1146.521116][T19078] netlink: 'syz.1.4502': attribute type 40 has an invalid length. [ 1150.165524][T19107] netlink: 'syz.3.4508': attribute type 3 has an invalid length. [ 1150.207131][T19107] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1150.465203][T19120] netlink: 'syz.2.4512': attribute type 40 has an invalid length. [ 1150.549835][T19124] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1151.858318][T19142] netlink: 'syz.0.4521': attribute type 3 has an invalid length. [ 1151.894156][T19142] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4521'. [ 1152.246368][T19152] netlink: 'syz.1.4523': attribute type 40 has an invalid length. [ 1152.451882][T19157] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1152.685966][T19165] netlink: 'syz.2.4528': attribute type 2 has an invalid length. [ 1152.694030][T19165] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4528'. [ 1153.240414][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1154.299879][T19182] netlink: 'syz.1.4535': attribute type 40 has an invalid length. [ 1154.532010][T19185] netlink: 'syz.0.4536': attribute type 3 has an invalid length. [ 1154.549849][T19185] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4536'. [ 1154.868926][T19196] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1155.348097][T19211] netlink: 'syz.3.4541': attribute type 2 has an invalid length. [ 1155.375279][T19211] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1157.167476][ T2975] wlan1: Trigger new scan to find an IBSS to join [ 1158.207893][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1158.387983][T19221] netlink: 'syz.3.4545': attribute type 40 has an invalid length. [ 1158.394829][T19223] netlink: 'syz.0.4547': attribute type 3 has an invalid length. [ 1158.404587][T19223] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4547'. [ 1158.811319][T19232] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1159.218885][T11236] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1159.317915][T19244] netlink: 'syz.3.4553': attribute type 2 has an invalid length. [ 1159.326500][T19244] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4553'. [ 1160.196856][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1162.204872][T11227] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1162.650638][T19261] netlink: 'syz.0.4560': attribute type 3 has an invalid length. [ 1162.659157][T19261] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4560'. [ 1162.703014][T19262] netlink: 'syz.1.4558': attribute type 40 has an invalid length. [ 1163.307595][T19273] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1163.806956][T19290] netlink: 'syz.1.4566': attribute type 2 has an invalid length. [ 1163.818433][T19290] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1164.058515][T19300] netlink: 'syz.1.4570': attribute type 40 has an invalid length. [ 1164.445444][T19311] netlink: 'syz.1.4572': attribute type 3 has an invalid length. [ 1164.455455][T19311] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4572'. [ 1164.510190][T19313] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1165.146517][T19335] netlink: 'syz.3.4578': attribute type 2 has an invalid length. [ 1165.154432][T19335] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4578'. [ 1165.796189][T19340] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1165.987253][T19345] netlink: 'syz.3.4581': attribute type 40 has an invalid length. [ 1166.012956][T19347] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1166.393831][T19358] netlink: 'syz.3.4585': attribute type 3 has an invalid length. [ 1166.440238][T19358] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4585'. [ 1166.981675][T19378] netlink: 'syz.3.4589': attribute type 2 has an invalid length. [ 1166.990228][T19378] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4589'. [ 1167.790717][T19382] netlink: 'syz.1.4592': attribute type 40 has an invalid length. [ 1167.881728][T19386] netlink: 'syz.3.4593': attribute type 40 has an invalid length. [ 1168.028950][T19388] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1168.204829][T11230] wlan1: Trigger new scan to find an IBSS to join [ 1168.214470][ T1084] wlan1: Trigger new scan to find an IBSS to join [ 1168.451954][T19396] netlink: 'syz.1.4597': attribute type 3 has an invalid length. [ 1168.493154][T19396] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4597'. [ 1168.661161][T19408] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1168.903311][T19412] netlink: 'syz.3.4601': attribute type 2 has an invalid length. [ 1168.926927][T19412] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1169.054011][T19416] netlink: 'syz.0.4603': attribute type 40 has an invalid length. [ 1169.953572][T19425] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1170.196452][T19431] netlink: 'syz.3.4608': attribute type 3 has an invalid length. [ 1170.204724][T19431] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1170.214637][T11227] wlan1: Trigger new scan to find an IBSS to join [ 1170.578793][T19443] netlink: 'syz.2.4609': attribute type 40 has an invalid length. [ 1170.734909][T19448] netlink: 'syz.1.4612': attribute type 2 has an invalid length. [ 1170.752984][T19448] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4612'. [ 1170.863249][T19453] netlink: 'syz.2.4614': attribute type 40 has an invalid length. [ 1171.859730][T19470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1171.869749][T19470] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1171.877880][T19470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1171.887367][T19470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1171.895510][T19470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1171.905605][T19470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1172.212354][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1172.212888][ T1084] wlan1: Trigger new scan to find an IBSS to join [ 1172.438207][T19475] netlink: 'syz.2.4620': attribute type 3 has an invalid length. [ 1172.446978][T19475] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1172.855256][T19488] netlink: 'syz.3.4624': attribute type 40 has an invalid length. [ 1172.975383][T19469] chnl_net:caif_netlink_parms(): no params data found [ 1173.064511][T19491] netlink: 'syz.0.4625': attribute type 2 has an invalid length. [ 1173.083613][T19491] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1173.225647][ T1084] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1173.301122][T19469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.314911][T19469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.334178][T19469] bridge_slave_0: entered allmulticast mode [ 1173.350878][T19469] bridge_slave_0: entered promiscuous mode [ 1173.956790][T19470] Bluetooth: hci0: command tx timeout [ 1174.214655][T19469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.222523][T19469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.235043][T19469] bridge_slave_1: entered allmulticast mode [ 1174.243572][T19469] bridge_slave_1: entered promiscuous mode [ 1174.358233][T19469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.379706][T19469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.474934][T19469] team0: Port device team_slave_0 added [ 1174.490747][T19469] team0: Port device team_slave_1 added [ 1174.550950][T19469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.559163][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.587282][T19469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.618104][T19469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.625262][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.652731][T19469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.771986][T19469] hsr_slave_0: entered promiscuous mode [ 1174.781742][T19469] hsr_slave_1: entered promiscuous mode [ 1174.999834][T19469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.114871][T19469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.284387][T19469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.289036][T19516] netlink: 'syz.3.4633': attribute type 3 has an invalid length. [ 1175.305663][T19516] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4633'. [ 1175.413718][T19469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.701347][T19522] netlink: 'syz.2.4634': attribute type 40 has an invalid length. [ 1175.768011][T19469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1175.777605][T19526] netlink: 'syz.3.4636': attribute type 2 has an invalid length. [ 1175.785427][T19526] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4636'. [ 1175.824189][T19469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1175.836190][T19469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1175.875227][T19469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1176.037711][T19470] Bluetooth: hci0: command tx timeout [ 1176.265218][T19469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.519655][T19469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.562058][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.569370][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.590825][T11230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.598152][T11230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.255551][T19469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.294116][T19560] netlink: 'syz.2.4644': attribute type 40 has an invalid length. [ 1177.644891][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.651502][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.741955][T19469] veth0_vlan: entered promiscuous mode [ 1177.760874][T19570] netlink: 'syz.2.4645': attribute type 2 has an invalid length. [ 1177.793579][T19469] veth1_vlan: entered promiscuous mode [ 1177.799682][T19570] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1177.881020][T19469] veth0_macvtap: entered promiscuous mode [ 1177.892899][T19469] veth1_macvtap: entered promiscuous mode [ 1177.961697][T19469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.016769][T19469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1178.072345][T19469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.093580][T19469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.110881][T19469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.120134][T19470] Bluetooth: hci0: command tx timeout [ 1178.126678][T19469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.206136][T19591] netlink: 'syz.0.4652': attribute type 40 has an invalid length. [ 1179.434427][T11230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.461339][T11230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.532338][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.558540][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.832808][T19608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.846272][T19608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.861997][T19608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.872389][T19608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.208133][T19470] Bluetooth: hci0: command tx timeout [ 1180.932348][T19613] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1181.137014][T19623] netlink: 'syz.2.4661': attribute type 40 has an invalid length. [ 1181.250599][T19620] netlink: 'syz.3.4662': attribute type 3 has an invalid length. [ 1181.264551][T19620] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4662'. [ 1183.236540][ T2975] wlan1: Trigger new scan to find an IBSS to join [ 1184.733009][T19641] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1185.089669][T19655] netlink: 'syz.2.4672': attribute type 40 has an invalid length. [ 1186.076372][T19664] netlink: 'syz.1.4675': attribute type 3 has an invalid length. [ 1186.091084][T19664] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1187.156157][T11238] wlan1: Trigger new scan to find an IBSS to join [ 1187.162782][ T2975] wlan1: Trigger new scan to find an IBSS to join [ 1189.002776][T11238] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1189.344716][T19684] À: port 1(vlan0) entered blocking state [ 1189.397047][T19684] À: port 1(vlan0) entered disabled state [ 1189.428706][T19684] vlan0: entered allmulticast mode [ 1189.433950][T19684] veth0_vlan: entered allmulticast mode [ 1189.448110][T19684] vlan0: entered promiscuous mode [ 1189.464114][T19681] À: port 1(vlan0) entered blocking state [ 1189.471376][T19681] À: port 1(vlan0) entered forwarding state [ 1189.511027][T19688] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1189.629635][T19696] netlink: 'syz.0.4682': attribute type 40 has an invalid length. [ 1191.608200][T19726] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1191.825358][T19737] netlink: 'syz.1.4694': attribute type 40 has an invalid length. [ 1192.198192][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1194.196676][T11238] wlan1: Trigger new scan to find an IBSS to join [ 1194.228971][T19766] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1194.649047][T19779] netlink: 'syz.2.4706': attribute type 40 has an invalid length. [ 1196.929875][T19809] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1197.176251][T19814] netlink: 'syz.1.4718': attribute type 40 has an invalid length. [ 1198.207324][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1198.213962][T11238] wlan1: Trigger new scan to find an IBSS to join [ 1199.166225][T11236] wlan1: Trigger new scan to find an IBSS to join [ 1199.355754][T11236] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1199.412974][T19838] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1199.415426][ T12] ------------[ cut here ]------------ [ 1199.428325][ T12] WARNING: CPU: 0 PID: 12 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 1199.438116][ T12] Modules linked in: [ 1199.442052][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1199.449560][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1199.459715][ T12] Workqueue: cfg80211 cfg80211_event_work [ 1199.465472][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 1199.471770][ T12] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 7c a2 f7 0f 0b eb bb e8 6e 7c a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 60 7c a2 f7 0f 0b e9 e0 fd ff ff e8 [ 1199.491658][ T12] RSP: 0000:ffffc90000117a20 EFLAGS: 00010293 [ 1199.497865][ T12] RAX: ffffffff89e49842 RBX: dffffc0000000000 RCX: ffff88801a27da00 [ 1199.505997][ T12] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 1199.514013][ T12] RBP: ffffc90000117af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 1199.522086][ T12] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff888048198c90 [ 1199.530344][ T12] R13: 1ffff92000022f4c R14: ffff888079b6b5b8 R15: 000000000000001f [ 1199.538735][ T12] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1199.547827][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1199.554460][ T12] CR2: 00007fbf60e17dac CR3: 000000002c9e7000 CR4: 00000000003506f0 [ 1199.562729][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1199.570873][ T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1199.578962][ T12] Call Trace: [ 1199.582288][ T12] [ 1199.585245][ T12] ? mutex_lock_nested+0x20/0x20 [ 1199.590392][ T12] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1199.596073][ T12] cfg80211_process_wdev_events+0x3bc/0x550 [ 1199.602056][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 1199.608046][ T12] cfg80211_event_work+0x2f/0x40 [ 1199.613066][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 1199.618958][ T12] process_scheduled_works+0xa5d/0x15d0 [ 1199.624627][ T12] ? assign_work+0x430/0x430 [ 1199.629781][ T12] ? assign_work+0x3d0/0x430 [ 1199.634598][ T12] worker_thread+0xa55/0xfc0 [ 1199.639743][ T12] kthread+0x2fa/0x390 [ 1199.643866][ T12] ? pr_cont_work+0x560/0x560 [ 1199.648725][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1199.653489][ T12] ret_from_fork+0x48/0x80 [ 1199.658071][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1199.662735][ T12] ret_from_fork_asm+0x11/0x20 [ 1199.667688][ T12] [ 1199.670777][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1199.678112][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1199.685574][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1199.695691][ T12] Workqueue: cfg80211 cfg80211_event_work [ 1199.701523][ T12] Call Trace: [ 1199.704865][ T12] [ 1199.707861][ T12] dump_stack_lvl+0x18c/0x250 [ 1199.712626][ T12] ? show_regs_print_info+0x20/0x20 [ 1199.717899][ T12] ? load_image+0x400/0x400 [ 1199.722481][ T12] panic+0x2dc/0x730 [ 1199.726452][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 1199.731029][ T12] ? ret_from_fork_asm+0x11/0x20 [ 1199.736655][ T12] __warn+0x2e0/0x470 [ 1199.740726][ T12] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1199.746355][ T12] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1199.751987][ T12] report_bug+0x2be/0x4f0 [ 1199.757275][ T12] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1199.762896][ T12] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1199.768528][ T12] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 1199.774376][ T12] handle_bug+0xcf/0x120 [ 1199.778696][ T12] exc_invalid_op+0x1a/0x50 [ 1199.783291][ T12] asm_exc_invalid_op+0x1a/0x20 [ 1199.788215][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 1199.794421][ T12] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 7c a2 f7 0f 0b eb bb e8 6e 7c a2 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 60 7c a2 f7 0f 0b e9 e0 fd ff ff e8 [ 1199.814068][ T12] RSP: 0000:ffffc90000117a20 EFLAGS: 00010293 [ 1199.820261][ T12] RAX: ffffffff89e49842 RBX: dffffc0000000000 RCX: ffff88801a27da00 [ 1199.828360][ T12] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 1199.836367][ T12] RBP: ffffc90000117af8 R08: ffffffff911bf56f R09: 1ffffffff2237ead [ 1199.844404][ T12] R10: dffffc0000000000 R11: fffffbfff2237eae R12: ffff888048198c90 [ 1199.852440][ T12] R13: 1ffff92000022f4c R14: ffff888079b6b5b8 R15: 000000000000001f [ 1199.860467][ T12] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1199.866100][ T12] ? mutex_lock_nested+0x20/0x20 [ 1199.871167][ T12] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1199.876770][ T12] cfg80211_process_wdev_events+0x3bc/0x550 [ 1199.882721][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 1199.888569][ T12] cfg80211_event_work+0x2f/0x40 [ 1199.893554][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 1199.899308][ T12] process_scheduled_works+0xa5d/0x15d0 [ 1199.904914][ T12] ? assign_work+0x430/0x430 [ 1199.909554][ T12] ? assign_work+0x3d0/0x430 [ 1199.914197][ T12] worker_thread+0xa55/0xfc0 [ 1199.918850][ T12] kthread+0x2fa/0x390 [ 1199.922951][ T12] ? pr_cont_work+0x560/0x560 [ 1199.927663][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1199.932291][ T12] ret_from_fork+0x48/0x80 [ 1199.936752][ T12] ? kthread_blkcg+0xd0/0xd0 [ 1199.941379][ T12] ret_from_fork_asm+0x11/0x20 [ 1199.946235][ T12] [ 1199.949869][ T12] Kernel Offset: disabled [ 1199.954467][ T12] Rebooting in 86400 seconds..