last executing test programs: 9.825266933s ago: executing program 0 (id=1846): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 9.238609391s ago: executing program 3 (id=1853): unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x796, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0xffff4819, 0x3d, &(0x7f0000000340)=""/61, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0xd4a, 0xfffffff9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x1, 0xc, 0x6}, {0x2, 0x4, 0x8, 0x4}, {0x1, 0x1, 0x1}], 0x10, 0x7f}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000071b"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @broadcast}) 8.857780953s ago: executing program 3 (id=1854): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd055, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 8.502705534s ago: executing program 3 (id=1858): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009085000000710000001801000020207025000000000020200fe8cf979d207b1af8101c0e8f8777f601000000bfa100000000000007010000f8ffffffb70200000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x3, 0x4, 0xcb, 0x8, 0x0, 0xbc3, 0x400, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x5, @perf_config_ext={0x3, 0x9}, 0x8082, 0x3, 0x10001, 0x5, 0xc0000, 0x7, 0x3ff, 0x0, 0x5, 0x0, 0xe0}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0x6, 0x3, 0x8, 0x0, 0x4, 0x1c23c, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x9}, 0x101020, 0x5, 0x3, 0x0, 0x1, 0x5fdf, 0x6e3, 0x0, 0x90, 0x0, 0x8}, 0x0, 0x4, r2, 0x9) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x408e0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d", 0x4f}, {&(0x7f0000000180)="3e1ec8b3adedf6326aa6e126825a2f", 0xf}], 0x2}, 0x24040008) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x3, 0x73) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x43c9, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00', 0x5, 0x252, &(0x7f00000023c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8940, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r9, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x1, @local, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) sendmsg$unix(r8, &(0x7f0000000380)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="6e09c00988f58b77f549f52549bb30f006dcea145f8e017ac5cc3fb7", 0x1c}, {&(0x7f00000001c0)="0f3644d77eb3c8dc85b3ad6800ec70f283e70833ecf768ff4a779639048fea5617c5ef61ebf7a66a00a68cea423b8c4f0542110f79b8dcca4024c7e50a9aa06f9a4ca5230c5dc5e4593f444cce", 0x4d}, {&(0x7f0000000240)="cf71e7665230603fa2c37e068cdb4d51ec9ce11df55cbc2fd01a682cb562e2079488e62ee4fc4794da4b825de3f6988cf4c4d30aa45483cd423c66b5350f34abf321b06d44daf6024d3b3a0d6a302059c06e77482bfd81fd33129161ca572d5f5f8be751f58c80fa3f8552c818ecd014eecccfdc1913744e93319d381f96950b07c609105dc1b9781bb87ee1f4141172b59465154edfcfa72e96fc8296f75276c1c57e8c77242bd8d09390f7af94aac9e96fd0e0cecab6bbd92a954f5c272f260dca4857effd", 0xc6}], 0x3, 0x0, 0x0, 0x1}, 0xc001) 8.277170581s ago: executing program 3 (id=1859): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 7.327854591s ago: executing program 2 (id=1863): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06b", 0x61}], 0x1}, 0x0) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180)={'veth0_macvtap', 0x32, 0x36}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1664, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xfffffffe}, 0xfffffffffffffffe}, 0x28) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 7.197719685s ago: executing program 2 (id=1864): r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24044054) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) 7.01697952s ago: executing program 2 (id=1865): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, 0x0, 0x0) close(r0) 6.996774121s ago: executing program 2 (id=1867): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000001000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000800000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62f, 0x0, @perf_config_ext={0x1}, 0x10f380, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000440), 0x12) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)}, {&(0x7f0000000440)="de19f496ca4908ffcc0049bc7dae9c6a39a13cb6", 0x14}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.868657526s ago: executing program 2 (id=1872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x1766999dedbf7e0e}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6, 0x5b, 0x2, 0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x140, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x7f, 0x9, 0x3, 0x6, 0x0, 0x8000000000000001, 0x20480, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x101004, 0x4, 0x2, 0x3, 0xfffffffffffffff7, 0x0, 0xffff, 0x0, 0x5, 0x0, 0x5}) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000100), 0x120) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) 5.844426637s ago: executing program 4 (id=1873): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000001000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000800000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62f, 0x0, @perf_config_ext={0x1}, 0x10f380, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000440), 0x12) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="de19f496ca4908ffcc0049bc7dae9c", 0xf}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.370759602s ago: executing program 2 (id=1874): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 4.937514426s ago: executing program 4 (id=1875): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409000000", 0x71}], 0x1}, 0x0) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180)={'veth0_macvtap', 0x32, 0x36}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1664, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xfffffffe}, 0xfffffffffffffffe}, 0x28) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 4.659963524s ago: executing program 4 (id=1876): r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24044054) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) 4.422242102s ago: executing program 4 (id=1877): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000006639819014a00b49000fc691abba28d1a155278470cade879ab7b023c0f4e5c1a6bedc800010000000000000000000000000000000000000000013fb83f1832abb40e5d31a9ccd807d73dc2e9086bc90d2775c007a5496887331f069371a073104321fbd07520cd20c4594fc0f4235dad437f3b79cbeec5414c80abe164c9f3d8d77d0b4716bafce75622442770b20eaac74a0a29526cae427945cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffff7}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1c, 0xf, 0x4, 0x3, 0x582f0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000008c0)={r0, r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) 4.174473559s ago: executing program 4 (id=1879): r0 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46", 0xb}], 0x1}, 0x4048004) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x48e) sendmsg$kcm(r0, 0x0, 0x40) 4.022550844s ago: executing program 4 (id=1881): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 2.367455946s ago: executing program 0 (id=1884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'rose0\x00', 0x1766999dedbf7e0e}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x45}, {0x6, 0x5b, 0x2, 0x4}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x140, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x7f, 0x9, 0x3, 0x6, 0x0, 0x8000000000000001, 0x20480, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x101004, 0x4, 0x2, 0x3, 0xfffffffffffffff7, 0x0, 0xffff, 0x0, 0x5, 0x0, 0x5}) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000100), 0x120) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) 2.23344095s ago: executing program 1 (id=1885): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd055, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 1.948515819s ago: executing program 1 (id=1886): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409000000", 0x71}], 0x1}, 0x0) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180)={'veth0_macvtap', 0x32, 0x36}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1664, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xfffffffe}, 0xfffffffffffffffe}, 0x28) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x2b, 0x1, 0x0) 1.743960115s ago: executing program 1 (id=1887): r0 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b87003000000000000000160af365040014000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24044054) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) 1.572918821s ago: executing program 1 (id=1888): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 1.309975889s ago: executing program 3 (id=1889): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000006639819014a00b49000fc691abba28d1a155278470cade879ab7b023c0f4e5c1a6bedc800010000000000000000000000000000000000000000013fb83f1832abb40e5d31a9ccd807d73dc2e9086bc90d2775c007a5496887331f069371a073104321fbd07520cd20c4594fc0f4235dad437f3b79cbeec5414c80abe164c9f3d8d77d0b4716bafce75622442770b20eaac74a0a29526cae427945cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffff7}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1c, 0xf, 0x4, 0x3, 0x582f0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000008c0)={r0, r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) 979.398669ms ago: executing program 1 (id=1890): r0 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46", 0xb}], 0x1}, 0x4048004) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x48e) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x40) 976.838819ms ago: executing program 0 (id=1891): unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x9, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x796, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0xffff4819, 0x3d, &(0x7f0000000340)=""/61, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x9, 0xd4a, 0xfffffff9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x1, 0xc, 0x6}, {0x2, 0x4, 0x8, 0x4}, {0x1, 0x1, 0x1}], 0x10, 0x7f}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3000000000000000000000000700000094040000071b"], 0x30}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @broadcast}) 817.994164ms ago: executing program 1 (id=1892): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 628.369361ms ago: executing program 0 (id=1893): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009085000000710000001801000020207025000000000020200fe8cf979d207b1af8101c0e8f8777f601000000bfa100000000000007010000f8ffffffb70200000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x3, 0x4, 0xcb, 0x8, 0x0, 0xbc3, 0x400, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x5, @perf_config_ext={0x3, 0x9}, 0x8082, 0x3, 0x10001, 0x5, 0xc0000, 0x7, 0x3ff, 0x0, 0x5, 0x0, 0xe0}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0x6, 0x3, 0x8, 0x0, 0x4, 0x1c23c, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x9}, 0x101020, 0x5, 0x3, 0x0, 0x1, 0x5fdf, 0x6e3, 0x0, 0x90, 0x0, 0x8}, 0x0, 0x4, r2, 0x9) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x408e0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5880d", 0x4f}, {&(0x7f0000000180)="3e1ec8b3adedf6326aa6e126825a2f", 0xf}], 0x2}, 0x24040008) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x3, 0x73) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x43c9, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00', 0x5, 0x252, &(0x7f00000023c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8940, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r9, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x1, @local, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) sendmsg$unix(r8, &(0x7f0000000380)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="6e09c00988f58b77f549f52549bb30f006dcea145f8e017ac5cc3fb7", 0x1c}, {&(0x7f00000001c0)="0f3644d77eb3c8dc85b3ad6800ec70f283e70833ecf768ff4a779639048fea5617c5ef61ebf7a66a00a68cea423b8c4f0542110f79b8dcca4024c7e50a9aa06f9a4ca5230c5dc5e4593f444cce", 0x4d}, {&(0x7f0000000240)="cf71e7665230603fa2c37e068cdb4d51ec9ce11df55cbc2fd01a682cb562e2079488e62ee4fc4794da4b825de3f6988cf4c4d30aa45483cd423c66b5350f34abf321b06d44daf6024d3b3a0d6a302059c06e77482bfd81fd33129161ca572d5f5f8be751f58c80fa3f8552c818ecd014eecccfdc1913744e93319d381f96950b07c609105dc1b9781bb87ee1f4141172b59465154edfcfa72e96fc8296f75276c1c57e8c77242bd8d09390f7af94aac9e96fd0e0cecab6bbd92a954f5c272f260dca4857effd", 0xc6}], 0x3, 0x0, 0x0, 0x1}, 0xc001) 358.857669ms ago: executing program 0 (id=1894): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009085000000710000001801000020207025000000000020200fe8cf979d207b1af8101c0e8f8777f601000000bfa100000000000007010000f8ffffffb70200000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x3, 0x4, 0xcb, 0x8, 0x0, 0xbc3, 0x400, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x5, @perf_config_ext={0x3, 0x9}, 0x8082, 0x3, 0x10001, 0x5, 0xc0000, 0x7, 0x3ff, 0x0, 0x5, 0x0, 0xe0}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0x6, 0x3, 0x8, 0x0, 0x4, 0x1c23c, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x9}, 0x101020, 0x5, 0x3, 0x0, 0x1, 0x5fdf, 0x6e3, 0x0, 0x90, 0x0, 0x8}, 0x0, 0x4, r2, 0x9) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x408e0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e42382b7f820d70da9b3621f02bf77789211581f4894e5", 0x4d}, {&(0x7f0000000180)="3e1ec8b3adedf6326aa6e126825a2f", 0xf}], 0x2}, 0x24040008) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x3, 0x73) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x43c9, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00', 0x5, 0x252, &(0x7f00000023c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8940, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r9, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x1, @local, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) sendmsg$unix(r8, &(0x7f0000000380)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="6e09c00988f58b77f549f52549bb30f006dcea145f8e017ac5cc3fb7", 0x1c}, {&(0x7f00000001c0)="0f3644d77eb3c8dc85b3ad6800ec70f283e70833ecf768ff4a779639048fea5617c5ef61ebf7a66a00a68cea423b8c4f0542110f79b8dcca4024c7e50a9aa06f9a4ca5230c5dc5e4593f444cce", 0x4d}, {&(0x7f0000000240)="cf71e7665230603fa2c37e068cdb4d51ec9ce11df55cbc2fd01a682cb562e2079488e62ee4fc4794da4b825de3f6988cf4c4d30aa45483cd423c66b5350f34abf321b06d44daf6024d3b3a0d6a302059c06e77482bfd81fd33129161ca572d5f5f8be751f58c80fa3f8552c818ecd014eecccfdc1913744e93319d381f96950b07c609105dc1b9781bb87ee1f4141172b59465154edfcfa72e96fc8296f75276c1c57e8c77242bd8d09390f7af94aac9e96fd0e0cecab6bbd92a954f5c272f260dca4857effd", 0xc6}], 0x3, 0x0, 0x0, 0x1}, 0xc001) 127.758576ms ago: executing program 3 (id=1895): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 0s ago: executing program 0 (id=1896): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000001000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000800000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62f, 0x0, @perf_config_ext={0x1}, 0x10f380, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000440), 0x12) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)}, {&(0x7f0000000440)="de19f496ca4908ffcc0049bc7dae9c6a39a13cb6", 0x14}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 82.939563][ T5235] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 83.463004][ T5246] netlink: 'syz.3.343': attribute type 3 has an invalid length. [ 83.507608][ T5246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.343'. [ 84.003125][ T5268] tap0: tun_chr_ioctl cmd 1074025675 [ 84.008570][ T5268] tap0: persist disabled [ 84.030558][ T5268] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 84.328398][ T5282] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 84.379509][ T5282] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.360'. [ 84.946754][ T5303] device syzkaller0 entered promiscuous mode [ 84.996742][ T5305] tap0: tun_chr_ioctl cmd 1074025675 [ 85.015484][ T5305] tap0: persist disabled [ 85.039106][ T5305] netlink: 'syz.2.367': attribute type 10 has an invalid length. [ 86.428253][ T5343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.555330][ T5357] FAULT_INJECTION: forcing a failure. [ 86.555330][ T5357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.674112][ T5357] CPU: 0 PID: 5357 Comm: syz.2.383 Not tainted syzkaller #0 [ 86.681435][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.691675][ T5357] Call Trace: [ 86.694964][ T5357] [ 86.697901][ T5357] dump_stack_lvl+0x188/0x250 [ 86.702596][ T5357] ? show_regs_print_info+0x20/0x20 [ 86.707798][ T5357] ? load_image+0x410/0x410 [ 86.712312][ T5357] ? __lock_acquire+0x7b50/0x7b50 [ 86.717340][ T5357] should_fail+0x383/0x4b0 [ 86.721757][ T5357] _copy_from_user+0x2e/0x170 [ 86.726503][ T5357] __copy_msghdr_from_user+0xc9/0x630 [ 86.731881][ T5357] ? verify_lock_unused+0x140/0x140 [ 86.737088][ T5357] ? mark_lock+0x94/0x320 [ 86.741425][ T5357] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 86.746717][ T5357] ? __lock_acquire+0x13dc/0x7b50 [ 86.751768][ T5357] ___sys_sendmsg+0x19a/0x2e0 [ 86.756465][ T5357] ? __sys_sendmsg+0x290/0x290 [ 86.761264][ T5357] __se_sys_sendmsg+0x1b7/0x2a0 [ 86.766127][ T5357] ? __x64_sys_sendmsg+0x80/0x80 [ 86.771069][ T5357] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 86.777063][ T5357] ? lockdep_hardirqs_on+0x94/0x140 [ 86.782269][ T5357] do_syscall_64+0x4c/0xa0 [ 86.786685][ T5357] ? clear_bhb_loop+0x30/0x80 [ 86.791370][ T5357] ? clear_bhb_loop+0x30/0x80 [ 86.796053][ T5357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.801956][ T5357] RIP: 0033:0x7f4401d660d9 [ 86.806375][ T5357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.825987][ T5357] RSP: 002b:00007f43fffbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.834415][ T5357] RAX: ffffffffffffffda RBX: 00007f4401fedfa0 RCX: 00007f4401d660d9 [ 86.842522][ T5357] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 86.850507][ T5357] RBP: 00007f43fffbe090 R08: 0000000000000000 R09: 0000000000000000 [ 86.858491][ T5357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.866369][ T5361] tap0: tun_chr_ioctl cmd 1074025675 [ 86.866466][ T5357] R13: 00007f4401fee038 R14: 00007f4401fedfa0 R15: 00007ffcc0e6cbe8 [ 86.866495][ T5357] [ 86.899122][ T5361] tap0: persist disabled [ 86.913084][ T5361] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 87.207309][ T5378] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.391'. [ 87.512492][ T5397] netlink: 'syz.0.398': attribute type 4 has an invalid length. [ 87.550389][ T5397] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.398'. [ 87.768529][ T5402] tap0: tun_chr_ioctl cmd 1074025675 [ 87.855730][ T5402] tap0: persist disabled [ 87.886387][ T5403] netlink: 'syz.3.400': attribute type 10 has an invalid length. [ 87.899358][ T5405] netlink: 'syz.4.401': attribute type 3 has an invalid length. [ 87.955466][ T5405] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.401'. [ 88.428790][ T5436] FAULT_INJECTION: forcing a failure. [ 88.428790][ T5436] name failslab, interval 1, probability 0, space 0, times 0 [ 88.444678][ T5429] device syzkaller0 entered promiscuous mode [ 88.467844][ T5436] CPU: 1 PID: 5436 Comm: syz.3.410 Not tainted syzkaller #0 [ 88.475149][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.485190][ T5436] Call Trace: [ 88.488452][ T5436] [ 88.491367][ T5436] dump_stack_lvl+0x188/0x250 [ 88.496037][ T5436] ? show_regs_print_info+0x20/0x20 [ 88.501228][ T5436] ? load_image+0x410/0x410 [ 88.505718][ T5436] ? __might_sleep+0xf0/0xf0 [ 88.510289][ T5436] ? __lock_acquire+0x7b50/0x7b50 [ 88.515300][ T5436] should_fail+0x383/0x4b0 [ 88.519701][ T5436] should_failslab+0x5/0x20 [ 88.524186][ T5436] slab_pre_alloc_hook+0x51/0xc0 [ 88.529111][ T5436] __kmalloc_node_track_caller+0x68/0x3a0 [ 88.534824][ T5436] ? alloc_skb_with_frags+0xa7/0x720 [ 88.540090][ T5436] ? __alloc_skb+0xf4/0x750 [ 88.544572][ T5436] ? alloc_skb_with_frags+0xa7/0x720 [ 88.549835][ T5436] __alloc_skb+0x22c/0x750 [ 88.554235][ T5436] alloc_skb_with_frags+0xa7/0x720 [ 88.559342][ T5436] ? __lock_acquire+0x7b50/0x7b50 [ 88.564366][ T5436] sock_alloc_send_pskb+0x87f/0x9a0 [ 88.569551][ T5436] ? __might_fault+0xb3/0x110 [ 88.574231][ T5436] ? sock_kzfree_s+0x50/0x50 [ 88.578814][ T5436] tun_get_user+0x8f7/0x3b60 [ 88.583403][ T5436] ? tun_ring_recv+0xc90/0xc90 [ 88.588157][ T5436] ? rcu_lock_release+0x5/0x20 [ 88.592908][ T5436] ? __lock_acquire+0x7b50/0x7b50 [ 88.597918][ T5436] ? lock_chain_count+0x20/0x20 [ 88.602759][ T5436] tun_chr_write_iter+0x112/0x1e0 [ 88.607777][ T5436] vfs_write+0x748/0xd70 [ 88.612009][ T5436] ? file_end_write+0x250/0x250 [ 88.616845][ T5436] ? __fget_files+0x402/0x470 [ 88.621509][ T5436] ? __fdget_pos+0x1e2/0x370 [ 88.626108][ T5436] ? ksys_write+0x70/0x260 [ 88.630509][ T5436] ksys_write+0x153/0x260 [ 88.634918][ T5436] ? __ia32_sys_read+0x80/0x80 [ 88.639666][ T5436] ? lockdep_hardirqs_on+0x94/0x140 [ 88.644860][ T5436] do_syscall_64+0x4c/0xa0 [ 88.649303][ T5436] ? clear_bhb_loop+0x30/0x80 [ 88.653973][ T5436] ? clear_bhb_loop+0x30/0x80 [ 88.658636][ T5436] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.664511][ T5436] RIP: 0033:0x7fdf2cd800d9 [ 88.668918][ T5436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.688512][ T5436] RSP: 002b:00007fdf2afb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.696915][ T5436] RAX: ffffffffffffffda RBX: 00007fdf2d008090 RCX: 00007fdf2cd800d9 [ 88.704867][ T5436] RDX: 0000000000000012 RSI: 0000200000000440 RDI: 0000000000000003 [ 88.712822][ T5436] RBP: 00007fdf2afb7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.720770][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.728724][ T5436] R13: 00007fdf2d008128 R14: 00007fdf2d008090 R15: 00007ffc8cd87f98 [ 88.736688][ T5436] [ 88.808443][ T5435] device syzkaller0 entered promiscuous mode [ 88.819878][ T5433] netlink: 'syz.4.411': attribute type 4 has an invalid length. [ 88.838643][ T5433] netlink: 152 bytes leftover after parsing attributes in process `syz.4.411'. [ 89.135478][ T5452] tap0: tun_chr_ioctl cmd 1074025675 [ 89.161465][ T5452] tap0: persist disabled [ 89.186960][ T5460] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 89.283277][ T5459] netlink: 'syz.2.420': attribute type 28 has an invalid length. [ 89.823252][ T5502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.436'. [ 89.865550][ T5505] netlink: 'syz.1.437': attribute type 3 has an invalid length. [ 89.890133][ T5507] tap0: tun_chr_ioctl cmd 1074025675 [ 89.904079][ T5505] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.437'. [ 89.930957][ T5507] tap0: persist disabled [ 89.946347][ T5507] netlink: 'syz.4.438': attribute type 10 has an invalid length. [ 90.094100][ T5518] FAULT_INJECTION: forcing a failure. [ 90.094100][ T5518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.146659][ T5518] CPU: 1 PID: 5518 Comm: syz.1.442 Not tainted syzkaller #0 [ 90.153980][ T5518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.164038][ T5518] Call Trace: [ 90.167312][ T5518] [ 90.170232][ T5518] dump_stack_lvl+0x188/0x250 [ 90.174901][ T5518] ? show_regs_print_info+0x20/0x20 [ 90.180081][ T5518] ? load_image+0x410/0x410 [ 90.184570][ T5518] ? __lock_acquire+0x7b50/0x7b50 [ 90.189586][ T5518] should_fail+0x383/0x4b0 [ 90.193993][ T5518] _copy_from_iter+0x234/0x1160 [ 90.198836][ T5518] ? __lock_acquire+0x7b50/0x7b50 [ 90.203850][ T5518] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 90.209211][ T5518] ? __virt_addr_valid+0x3c6/0x470 [ 90.214304][ T5518] ? __phys_addr_symbol+0x2b/0x70 [ 90.219305][ T5518] ? __check_object_size+0x30c/0x410 [ 90.224576][ T5518] netlink_sendmsg+0x758/0xbe0 [ 90.229328][ T5518] ? netlink_getsockopt+0x570/0x570 [ 90.234507][ T5518] ? aa_sock_msg_perm+0x94/0x150 [ 90.239424][ T5518] ? apparmor_socket_sendmsg+0x88/0x230 [ 90.244947][ T5518] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 90.250210][ T5518] ? security_socket_sendmsg+0x7c/0xa0 [ 90.255649][ T5518] ? netlink_getsockopt+0x570/0x570 [ 90.260826][ T5518] ____sys_sendmsg+0x5be/0x8f0 [ 90.265576][ T5518] ? __sys_sendmsg_sock+0x30/0x30 [ 90.270585][ T5518] ? import_iovec+0x6f/0xa0 [ 90.275072][ T5518] ___sys_sendmsg+0x236/0x2e0 [ 90.279733][ T5518] ? __sys_sendmsg+0x290/0x290 [ 90.284488][ T5518] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 90.290723][ T5518] __se_sys_sendmsg+0x1b7/0x2a0 [ 90.295559][ T5518] ? __x64_sys_sendmsg+0x80/0x80 [ 90.300481][ T5518] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.306449][ T5518] ? lockdep_hardirqs_on+0x94/0x140 [ 90.311633][ T5518] do_syscall_64+0x4c/0xa0 [ 90.316028][ T5518] ? clear_bhb_loop+0x30/0x80 [ 90.320683][ T5518] ? clear_bhb_loop+0x30/0x80 [ 90.325340][ T5518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.331212][ T5518] RIP: 0033:0x7fe0fd3540d9 [ 90.335613][ T5518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.355208][ T5518] RSP: 002b:00007fe0fb5ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.363703][ T5518] RAX: ffffffffffffffda RBX: 00007fe0fd5dbfa0 RCX: 00007fe0fd3540d9 [ 90.371667][ T5518] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011 [ 90.379619][ T5518] RBP: 00007fe0fb5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 90.387571][ T5518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.395525][ T5518] R13: 00007fe0fd5dc038 R14: 00007fe0fd5dbfa0 R15: 00007fff2bc474d8 [ 90.403487][ T5518] [ 90.414075][ T5526] netlink: 10 bytes leftover after parsing attributes in process `syz.4.445'. [ 90.464325][ T5524] netlink: 'syz.1.442': attribute type 28 has an invalid length. [ 90.497401][ T5522] netlink: 160 bytes leftover after parsing attributes in process `syz.0.444'. [ 90.546035][ T5531] FAULT_INJECTION: forcing a failure. [ 90.546035][ T5531] name failslab, interval 1, probability 0, space 0, times 0 [ 90.558963][ T5531] CPU: 0 PID: 5531 Comm: syz.4.446 Not tainted syzkaller #0 [ 90.566363][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.576428][ T5531] Call Trace: [ 90.579714][ T5531] [ 90.582647][ T5531] dump_stack_lvl+0x188/0x250 [ 90.587342][ T5531] ? show_regs_print_info+0x20/0x20 [ 90.592554][ T5531] ? load_image+0x410/0x410 [ 90.597076][ T5531] ? verify_lock_unused+0x140/0x140 [ 90.602292][ T5531] should_fail+0x383/0x4b0 [ 90.606724][ T5531] should_failslab+0x5/0x20 [ 90.611233][ T5531] slab_pre_alloc_hook+0x51/0xc0 [ 90.616178][ T5531] ? inet_frag_find+0x8d4/0x1d50 [ 90.621127][ T5531] kmem_cache_alloc+0x3d/0x280 [ 90.625901][ T5531] inet_frag_find+0x8d4/0x1d50 [ 90.630673][ T5531] ? ip6frag_obj_hashfn+0x20/0x20 [ 90.635713][ T5531] ? inet_frag_destroy_rcu+0xc0/0xc0 [ 90.641028][ T5531] nf_ct_frag6_gather+0x681/0x1da0 [ 90.646148][ T5531] ? verify_lock_unused+0x140/0x140 [ 90.651355][ T5531] ? __lock_acquire+0x1305/0x7b50 [ 90.656402][ T5531] ? ipv6_defrag+0x3a0/0x3a0 [ 90.661018][ T5531] ipv6_defrag+0x2a5/0x3a0 [ 90.665443][ T5531] ? defrag6_net_exit+0xb0/0xb0 [ 90.670302][ T5531] nf_hook_slow+0xb9/0x200 [ 90.674725][ T5531] ? refcount_add+0x80/0x80 [ 90.679235][ T5531] NF_HOOK+0x1f2/0x390 [ 90.683306][ T5531] ? refcount_add+0x80/0x80 [ 90.687819][ T5531] ? ip6_rcv_core+0x1600/0x1600 [ 90.692681][ T5531] ? refcount_add+0x80/0x80 [ 90.697198][ T5531] ? ip6_rcv_finish_core+0x420/0x420 [ 90.702497][ T5531] __netif_receive_skb+0xcc/0x290 [ 90.707524][ T5531] ? ktime_get_with_offset+0x2d7/0x320 [ 90.712990][ T5531] netif_receive_skb+0x19e/0x700 [ 90.717930][ T5531] ? __bpf_trace_softirq+0x10/0x10 [ 90.723042][ T5531] ? _copy_from_iter+0x5bf/0x1160 [ 90.728067][ T5531] ? netif_receive_skb_core+0x210/0x210 [ 90.733624][ T5531] tun_rx_batched+0x606/0x760 [ 90.738308][ T5531] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 90.744295][ T5531] ? local_bh_enable+0x20/0x20 [ 90.749071][ T5531] ? __local_bh_enable_ip+0x136/0x1c0 [ 90.754451][ T5531] ? read_lock_is_recursive+0x10/0x10 [ 90.759837][ T5531] ? __local_bh_enable_ip+0x136/0x1c0 [ 90.765211][ T5531] ? _local_bh_enable+0xa0/0xa0 [ 90.770078][ T5531] tun_get_user+0x25bf/0x3b60 [ 90.774779][ T5531] ? tun_ring_recv+0xc90/0xc90 [ 90.779558][ T5531] ? rcu_lock_release+0x5/0x20 [ 90.784331][ T5531] ? __lock_acquire+0x7b50/0x7b50 [ 90.789378][ T5531] tun_chr_write_iter+0x112/0x1e0 [ 90.794412][ T5531] vfs_write+0x748/0xd70 [ 90.798669][ T5531] ? file_end_write+0x250/0x250 [ 90.803538][ T5531] ? __fget_files+0x402/0x470 [ 90.808226][ T5531] ? __fdget_pos+0x1e2/0x370 [ 90.812819][ T5531] ? ksys_write+0x70/0x260 [ 90.817240][ T5531] ksys_write+0x153/0x260 [ 90.821577][ T5531] ? __ia32_sys_read+0x80/0x80 [ 90.826348][ T5531] ? lockdep_hardirqs_on+0x94/0x140 [ 90.831551][ T5531] do_syscall_64+0x4c/0xa0 [ 90.835968][ T5531] ? clear_bhb_loop+0x30/0x80 [ 90.840646][ T5531] ? clear_bhb_loop+0x30/0x80 [ 90.845324][ T5531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.851222][ T5531] RIP: 0033:0x7f083b69a0d9 [ 90.855641][ T5531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.875244][ T5531] RSP: 002b:00007f08398f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.883650][ T5531] RAX: ffffffffffffffda RBX: 00007f083b921fa0 RCX: 00007f083b69a0d9 [ 90.891602][ T5531] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 90.899553][ T5531] RBP: 00007f08398f2090 R08: 0000000000000000 R09: 0000000000000000 [ 90.907505][ T5531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.915459][ T5531] R13: 00007f083b922038 R14: 00007f083b921fa0 R15: 00007ffc0b1606b8 [ 90.923431][ T5531] [ 91.117027][ T5539] FAULT_INJECTION: forcing a failure. [ 91.117027][ T5539] name failslab, interval 1, probability 0, space 0, times 0 [ 91.181735][ T5539] CPU: 1 PID: 5539 Comm: syz.4.452 Not tainted syzkaller #0 [ 91.189063][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.199124][ T5539] Call Trace: [ 91.202410][ T5539] [ 91.205345][ T5539] dump_stack_lvl+0x188/0x250 [ 91.210036][ T5539] ? show_regs_print_info+0x20/0x20 [ 91.215243][ T5539] ? load_image+0x410/0x410 [ 91.219754][ T5539] ? __might_sleep+0xf0/0xf0 [ 91.224356][ T5539] ? __lock_acquire+0x7b50/0x7b50 [ 91.229388][ T5539] should_fail+0x383/0x4b0 [ 91.233815][ T5539] should_failslab+0x5/0x20 [ 91.238324][ T5539] slab_pre_alloc_hook+0x51/0xc0 [ 91.243265][ T5539] __kmalloc+0x6b/0x340 [ 91.247424][ T5539] ? sk_prot_alloc+0xe7/0x210 [ 91.252104][ T5539] ? rcu_lock_release+0x5/0x20 [ 91.256871][ T5539] sk_prot_alloc+0xe7/0x210 [ 91.261377][ T5539] ? sk_alloc+0x1d/0x310 [ 91.265617][ T5539] sk_alloc+0x2f/0x310 [ 91.269692][ T5539] ? alg_create+0x5e/0x130 [ 91.274116][ T5539] alg_create+0xa0/0x130 [ 91.278377][ T5539] __sock_create+0x473/0x910 [ 91.282979][ T5539] __sys_socketpair+0x1bd/0x540 [ 91.287831][ T5539] __x64_sys_socketpair+0x97/0xb0 [ 91.292887][ T5539] do_syscall_64+0x4c/0xa0 [ 91.297291][ T5539] ? clear_bhb_loop+0x30/0x80 [ 91.301952][ T5539] ? clear_bhb_loop+0x30/0x80 [ 91.306611][ T5539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.312490][ T5539] RIP: 0033:0x7f083b69a0d9 [ 91.316889][ T5539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.336483][ T5539] RSP: 002b:00007f08398f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 91.344882][ T5539] RAX: ffffffffffffffda RBX: 00007f083b921fa0 RCX: 00007f083b69a0d9 [ 91.352837][ T5539] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 91.360791][ T5539] RBP: 00007f08398f2090 R08: 0000000000000000 R09: 0000000000000000 [ 91.368745][ T5539] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 91.376702][ T5539] R13: 00007f083b922038 R14: 00007f083b921fa0 R15: 00007ffc0b1606b8 [ 91.384668][ T5539] [ 91.454490][ T5554] netlink: 'syz.3.453': attribute type 10 has an invalid length. [ 91.477245][ T5554] netlink: 2 bytes leftover after parsing attributes in process `syz.3.453'. [ 91.505345][ T5554] device bond0 entered promiscuous mode [ 91.521265][ T5554] device bond_slave_0 entered promiscuous mode [ 91.540373][ T5554] device bond_slave_1 entered promiscuous mode [ 91.550745][ T5554] device batadv_slave_0 entered promiscuous mode [ 91.567609][ T5554] bridge0: port 3(bond0) entered blocking state [ 91.587666][ T5554] bridge0: port 3(bond0) entered disabled state [ 91.601207][ T5554] bridge0: port 3(bond0) entered blocking state [ 91.607681][ T5554] bridge0: port 3(bond0) entered forwarding state [ 91.667098][ T5564] tap0: tun_chr_ioctl cmd 1074025675 [ 91.677743][ T5564] tap0: persist disabled [ 91.705041][ T5553] netlink: 'syz.2.455': attribute type 10 has an invalid length. [ 91.748250][ T5571] netlink: set zone limit has 8 unknown bytes [ 91.755459][ T5572] netlink: 'syz.0.460': attribute type 21 has an invalid length. [ 91.785308][ T5571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.792916][ T5571] IPv6: NLM_F_CREATE should be set when creating new route [ 91.800238][ T5571] IPv6: NLM_F_CREATE should be set when creating new route [ 91.807447][ T5571] IPv6: NLM_F_CREATE should be set when creating new route [ 92.013013][ T5587] netlink: 'syz.3.468': attribute type 7 has an invalid length. [ 92.028840][ T5585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.036121][ T5585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.075361][ T5585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.082329][ T5585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.111253][ T5585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.117957][ T5585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.127417][ T5585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.134148][ T5585] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.153791][ T5585] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.990381][ T5604] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.471'. [ 93.137354][ T5617] tap0: tun_chr_ioctl cmd 1074025675 [ 93.149298][ T5617] tap0: persist disabled [ 93.721608][ T5638] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.483'. [ 93.829268][ T5638] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 93.885916][ T5646] validate_nla: 2 callbacks suppressed [ 93.885933][ T5646] netlink: 'syz.1.487': attribute type 6 has an invalid length. [ 93.950710][ T5646] netlink: 128 bytes leftover after parsing attributes in process `syz.1.487'. [ 94.177996][ T5660] tap0: tun_chr_ioctl cmd 1074025675 [ 94.192267][ T5660] tap0: persist disabled [ 94.205519][ T5660] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 95.645476][ T5689] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.503'. [ 95.728399][ T5689] netlink: 'syz.4.503': attribute type 21 has an invalid length. [ 95.771707][ T5689] netlink: 132 bytes leftover after parsing attributes in process `syz.4.503'. [ 95.807478][ T5695] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 95.845667][ T5695] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.505'. [ 95.869377][ T5694] netlink: 'syz.1.504': attribute type 3 has an invalid length. [ 95.878591][ T5694] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.504'. [ 96.092564][ T5701] tap0: tun_chr_ioctl cmd 1074025675 [ 96.105615][ T5701] tap0: persist disabled [ 96.199170][ T5704] netlink: 'syz.4.507': attribute type 10 has an invalid length. [ 96.383195][ T5713] netlink: 60 bytes leftover after parsing attributes in process `syz.4.511'. [ 96.454662][ T5713] netlink: 60 bytes leftover after parsing attributes in process `syz.4.511'. [ 96.484102][ T5720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.511'. [ 96.500399][ T5721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.511'. [ 96.661918][ T5727] FAULT_INJECTION: forcing a failure. [ 96.661918][ T5727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.766686][ T5727] CPU: 1 PID: 5727 Comm: syz.0.517 Not tainted syzkaller #0 [ 96.774006][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.784066][ T5727] Call Trace: [ 96.787352][ T5727] [ 96.790283][ T5727] dump_stack_lvl+0x188/0x250 [ 96.794973][ T5727] ? show_regs_print_info+0x20/0x20 [ 96.800184][ T5727] ? load_image+0x410/0x410 [ 96.804705][ T5727] ? __lock_acquire+0x7b50/0x7b50 [ 96.809739][ T5727] should_fail+0x383/0x4b0 [ 96.814162][ T5727] _copy_from_user+0x2e/0x170 [ 96.818847][ T5727] bpf_test_init+0x136/0x1b0 [ 96.823446][ T5727] bpf_prog_test_run_skb+0x181/0x1190 [ 96.828827][ T5727] ? __fget_files+0x402/0x470 [ 96.833520][ T5727] ? cpu_online+0x60/0x60 [ 96.837857][ T5727] bpf_prog_test_run+0x31c/0x390 [ 96.842806][ T5727] __sys_bpf+0x5a5/0x6f0 [ 96.847052][ T5727] ? bpf_link_show_fdinfo+0x380/0x380 [ 96.852457][ T5727] __x64_sys_bpf+0x78/0x90 [ 96.856979][ T5727] do_syscall_64+0x4c/0xa0 [ 96.861612][ T5727] ? clear_bhb_loop+0x30/0x80 [ 96.866340][ T5727] ? clear_bhb_loop+0x30/0x80 [ 96.871023][ T5727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.876919][ T5727] RIP: 0033:0x7fb7c6d1f0d9 [ 96.881518][ T5727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.902839][ T5727] RSP: 002b:00007fb7c4f77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.911264][ T5727] RAX: ffffffffffffffda RBX: 00007fb7c6fa6fa0 RCX: 00007fb7c6d1f0d9 [ 96.919240][ T5727] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 96.927299][ T5727] RBP: 00007fb7c4f77090 R08: 0000000000000000 R09: 0000000000000000 [ 96.935268][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.943241][ T5727] R13: 00007fb7c6fa7038 R14: 00007fb7c6fa6fa0 R15: 00007ffd0171c878 [ 96.951226][ T5727] [ 97.325663][ T5739] tap0: tun_chr_ioctl cmd 1074025675 [ 97.335223][ T5739] tap0: persist disabled [ 97.364873][ T5740] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 97.493131][ T5748] netlink: 'syz.0.522': attribute type 28 has an invalid length. [ 98.148382][ T5777] tap0: tun_chr_ioctl cmd 1074025675 [ 98.159821][ T5777] tap0: persist disabled [ 98.167914][ T5777] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 98.678459][ T5793] netlink: 'syz.0.544': attribute type 29 has an invalid length. [ 99.531400][ T5822] FAULT_INJECTION: forcing a failure. [ 99.531400][ T5822] name failslab, interval 1, probability 0, space 0, times 0 [ 99.600145][ T5822] CPU: 0 PID: 5822 Comm: syz.0.554 Not tainted syzkaller #0 [ 99.607471][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.617624][ T5822] Call Trace: [ 99.620902][ T5822] [ 99.623819][ T5822] dump_stack_lvl+0x188/0x250 [ 99.628496][ T5822] ? show_regs_print_info+0x20/0x20 [ 99.633678][ T5822] ? load_image+0x410/0x410 [ 99.638173][ T5822] should_fail+0x383/0x4b0 [ 99.642577][ T5822] should_failslab+0x5/0x20 [ 99.647059][ T5822] slab_pre_alloc_hook+0x51/0xc0 [ 99.651981][ T5822] __kmalloc_node_track_caller+0x68/0x3a0 [ 99.657682][ T5822] ? __ipv6_ifa_notify+0x203/0xe60 [ 99.662771][ T5822] ? __alloc_skb+0xf4/0x750 [ 99.667279][ T5822] ? __ipv6_ifa_notify+0x203/0xe60 [ 99.672391][ T5822] __alloc_skb+0x22c/0x750 [ 99.676801][ T5822] ? verify_lock_unused+0x140/0x140 [ 99.681991][ T5822] __ipv6_ifa_notify+0x203/0xe60 [ 99.686923][ T5822] ? inet6_fill_ifla6_attrs+0x2740/0x2740 [ 99.692625][ T5822] ? mark_lock+0x94/0x320 [ 99.697069][ T5822] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.703054][ T5822] ? lock_chain_count+0x20/0x20 [ 99.707896][ T5822] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 99.713876][ T5822] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.719240][ T5822] ? lockdep_hardirqs_on+0x94/0x140 [ 99.724430][ T5822] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.729792][ T5822] ? _local_bh_enable+0xa0/0xa0 [ 99.734641][ T5822] inet6_addr_modify+0x8f3/0x1720 [ 99.739668][ T5822] ? inet6_set_link_af+0xb80/0xb80 [ 99.744775][ T5822] ? rcu_lock_release+0x9/0x20 [ 99.749526][ T5822] ? __lock_acquire+0x7b50/0x7b50 [ 99.754544][ T5822] ? ipv6_get_ifaddr+0x66a/0x6e0 [ 99.759473][ T5822] ? ipv6_dev_find+0x40/0x40 [ 99.764047][ T5822] ? ipv6_mc_up+0x3cb/0x570 [ 99.768536][ T5822] inet6_rtm_newaddr+0x60a/0x8f0 [ 99.773467][ T5822] ? inet6_dump_ifinfo+0x930/0x930 [ 99.778571][ T5822] ? inet6_dump_ifinfo+0x930/0x930 [ 99.783677][ T5822] rtnetlink_rcv_msg+0x7f1/0xf10 [ 99.791739][ T5822] ? lock_chain_count+0x20/0x20 [ 99.798959][ T5822] ? rtnetlink_bind+0x80/0x80 [ 99.803651][ T5822] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.809038][ T5822] ? lockdep_hardirqs_on+0x94/0x140 [ 99.814228][ T5822] ? __local_bh_enable_ip+0x136/0x1c0 [ 99.819585][ T5822] ? _local_bh_enable+0xa0/0xa0 [ 99.824427][ T5822] ? __dev_queue_xmit+0x1b64/0x2e50 [ 99.829625][ T5822] ? dev_queue_xmit+0x20/0x20 [ 99.834287][ T5822] ? memcpy+0x3c/0x60 [ 99.838250][ T5822] ? __copy_skb_header+0x3ba/0x4f0 [ 99.843351][ T5822] netlink_rcv_skb+0x1e9/0x430 [ 99.848103][ T5822] ? rtnetlink_bind+0x80/0x80 [ 99.852767][ T5822] ? netlink_ack+0xb10/0xb10 [ 99.857356][ T5822] netlink_unicast+0x78f/0x940 [ 99.862110][ T5822] netlink_sendmsg+0x8ba/0xbe0 [ 99.866888][ T5822] ? netlink_getsockopt+0x570/0x570 [ 99.872072][ T5822] ? aa_sock_msg_perm+0x94/0x150 [ 99.876995][ T5822] ? apparmor_socket_sendmsg+0x88/0x230 [ 99.882522][ T5822] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 99.887802][ T5822] ? security_socket_sendmsg+0x7c/0xa0 [ 99.893256][ T5822] ? netlink_getsockopt+0x570/0x570 [ 99.898454][ T5822] ____sys_sendmsg+0x5be/0x8f0 [ 99.903211][ T5822] ? __sys_sendmsg_sock+0x30/0x30 [ 99.908227][ T5822] ? import_iovec+0x6f/0xa0 [ 99.912719][ T5822] ___sys_sendmsg+0x236/0x2e0 [ 99.917393][ T5822] ? __sys_sendmsg+0x290/0x290 [ 99.922168][ T5822] __se_sys_sendmsg+0x1b7/0x2a0 [ 99.927009][ T5822] ? __x64_sys_sendmsg+0x80/0x80 [ 99.931928][ T5822] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 99.937905][ T5822] ? lockdep_hardirqs_on+0x94/0x140 [ 99.943091][ T5822] do_syscall_64+0x4c/0xa0 [ 99.947487][ T5822] ? clear_bhb_loop+0x30/0x80 [ 99.952150][ T5822] ? clear_bhb_loop+0x30/0x80 [ 99.956818][ T5822] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.962693][ T5822] RIP: 0033:0x7fb7c6d1f0d9 [ 99.967094][ T5822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.986684][ T5822] RSP: 002b:00007fb7c4f77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.995081][ T5822] RAX: ffffffffffffffda RBX: 00007fb7c6fa6fa0 RCX: 00007fb7c6d1f0d9 [ 100.003036][ T5822] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 100.010989][ T5822] RBP: 00007fb7c4f77090 R08: 0000000000000000 R09: 0000000000000000 [ 100.018946][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.026895][ T5822] R13: 00007fb7c6fa7038 R14: 00007fb7c6fa6fa0 R15: 00007ffd0171c878 [ 100.034863][ T5822] [ 100.399948][ T5836] tap0: tun_chr_ioctl cmd 1074025675 [ 100.418372][ T5836] tap0: persist disabled [ 100.451865][ T5836] validate_nla: 3 callbacks suppressed [ 100.451911][ T5836] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 101.490603][ T5872] tap0: tun_chr_ioctl cmd 1074025675 [ 101.496068][ T5872] tap0: persist disabled [ 101.540995][ T5872] netlink: 'syz.1.574': attribute type 10 has an invalid length. [ 101.646207][ T5878] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.572'. [ 102.262128][ T5897] netlink: 'syz.1.585': attribute type 21 has an invalid length. [ 102.409450][ T5901] netlink: 'syz.0.586': attribute type 16 has an invalid length. [ 102.418798][ T5901] netlink: 'syz.0.586': attribute type 3 has an invalid length. [ 102.434668][ T5901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.586'. [ 102.767435][ T5911] tap0: tun_chr_ioctl cmd 1074025675 [ 102.810173][ T5911] tap0: persist disabled [ 102.881155][ T5911] netlink: 'syz.2.589': attribute type 10 has an invalid length. [ 103.008684][ T5921] netlink: 156 bytes leftover after parsing attributes in process `syz.0.588'. [ 103.160568][ T5930] FAULT_INJECTION: forcing a failure. [ 103.160568][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.220363][ T5930] CPU: 0 PID: 5930 Comm: syz.2.594 Not tainted syzkaller #0 [ 103.227684][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.237746][ T5930] Call Trace: [ 103.241035][ T5930] [ 103.243972][ T5930] dump_stack_lvl+0x188/0x250 [ 103.248666][ T5930] ? show_regs_print_info+0x20/0x20 [ 103.253879][ T5930] ? load_image+0x410/0x410 [ 103.258403][ T5930] ? __lock_acquire+0x7b50/0x7b50 [ 103.263442][ T5930] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 103.270052][ T5930] should_fail+0x383/0x4b0 [ 103.274563][ T5930] _copy_from_user+0x2e/0x170 [ 103.279235][ T5930] ___sys_recvmsg+0x173/0x5c0 [ 103.283925][ T5930] ? __sys_recvmsg+0x280/0x280 [ 103.288688][ T5930] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 103.295260][ T5930] ? vfs_write+0xaa6/0xd70 [ 103.299684][ T5930] ? __fget_files+0x402/0x470 [ 103.304376][ T5930] __x64_sys_recvmsg+0x201/0x2d0 [ 103.309307][ T5930] ? ___sys_recvmsg+0x5c0/0x5c0 [ 103.314142][ T5930] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 103.320135][ T5930] ? lockdep_hardirqs_on+0x94/0x140 [ 103.325328][ T5930] do_syscall_64+0x4c/0xa0 [ 103.329730][ T5930] ? clear_bhb_loop+0x30/0x80 [ 103.334393][ T5930] ? clear_bhb_loop+0x30/0x80 [ 103.339063][ T5930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.344944][ T5930] RIP: 0033:0x7f4401d660d9 [ 103.349348][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.368941][ T5930] RSP: 002b:00007f43fffbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 103.377344][ T5930] RAX: ffffffffffffffda RBX: 00007f4401fedfa0 RCX: 00007f4401d660d9 [ 103.385300][ T5930] RDX: 0000000040000003 RSI: 0000200000001780 RDI: 0000000000000005 [ 103.393255][ T5930] RBP: 00007f43fffbe090 R08: 0000000000000000 R09: 0000000000000000 [ 103.401212][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.409166][ T5930] R13: 00007f4401fee038 R14: 00007f4401fedfa0 R15: 00007ffcc0e6cbe8 [ 103.417149][ T5930] [ 104.015515][ T5960] raw_sendmsg: syz.3.606 forgot to set AF_INET. Fix it! [ 104.033141][ T5960] netlink: 'syz.3.606': attribute type 10 has an invalid length. [ 104.058926][ T5960] bridge0: port 3(bond0) entered disabled state [ 104.065410][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.073221][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.126431][ T5960] bridge0: port 3(bond0) entered blocking state [ 104.132984][ T5960] bridge0: port 3(bond0) entered forwarding state [ 104.140382][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.147470][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.154850][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.162060][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.276693][ T5960] team0: Port device bridge0 added [ 104.298631][ T5959] netlink: 'syz.3.606': attribute type 16 has an invalid length. [ 104.329051][ T5959] netlink: 168 bytes leftover after parsing attributes in process `syz.3.606'. [ 104.369341][ T5958] tap0: tun_chr_ioctl cmd 1074025675 [ 104.375373][ T5958] tap0: persist disabled [ 104.388194][ T5968] netlink: 'syz.4.605': attribute type 10 has an invalid length. [ 104.740477][ T5982] netlink: 'syz.3.611': attribute type 8 has an invalid length. [ 105.612861][ T6000] tap0: tun_chr_ioctl cmd 1074025675 [ 105.618298][ T6000] tap0: persist disabled [ 105.676307][ T6003] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 105.775954][ T6010] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 105.797355][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.621'. [ 105.855083][ T6010] batman_adv: batadv0: Adding interface: vlan1 [ 105.896144][ T6010] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.036623][ T6010] batman_adv: batadv0: Interface activated: vlan1 [ 106.282725][ T6029] netlink: 'syz.1.629': attribute type 29 has an invalid length. [ 106.434517][ T6029] netlink: 'syz.1.629': attribute type 29 has an invalid length. [ 106.459498][ T6026] netlink: 'syz.1.629': attribute type 29 has an invalid length. [ 106.772533][ T6049] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.636'. [ 106.825152][ T6049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.636'. [ 106.916268][ T6053] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 107.039457][ T6058] tap0: tun_chr_ioctl cmd 1074025675 [ 107.049323][ T6058] tap0: persist disabled [ 107.066069][ T6058] netlink: 'syz.1.639': attribute type 10 has an invalid length. [ 107.367526][ T6069] netlink: 'syz.4.644': attribute type 4 has an invalid length. [ 107.411948][ T6069] netlink: 'syz.4.644': attribute type 16 has an invalid length. [ 107.441051][ T6069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.644'. [ 107.467419][ T6074] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 107.493020][ T6074] team0: Device geneve1 is up. Set it down before adding it as a team port [ 107.553147][ T6075] netlink: 156 bytes leftover after parsing attributes in process `syz.4.644'. [ 107.661003][ T6069] netlink: 128 bytes leftover after parsing attributes in process `syz.4.644'. [ 107.685220][ T6077] netlink: 399 bytes leftover after parsing attributes in process `syz.2.646'. [ 107.719536][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 107.762759][ T6069] net_ratelimit: 3429 callbacks suppressed [ 107.762774][ T6069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.934472][ T6069] syz.4.644 (6069) used greatest stack depth: 19888 bytes left [ 108.067072][ T6090] tap0: tun_chr_ioctl cmd 1074025675 [ 108.094803][ T6099] FAULT_INJECTION: forcing a failure. [ 108.094803][ T6099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.116418][ T6090] tap0: persist disabled [ 108.124753][ T6099] CPU: 1 PID: 6099 Comm: syz.1.654 Not tainted syzkaller #0 [ 108.132052][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.142109][ T6099] Call Trace: [ 108.145390][ T6099] [ 108.148316][ T6099] dump_stack_lvl+0x188/0x250 [ 108.152999][ T6099] ? show_regs_print_info+0x20/0x20 [ 108.158196][ T6099] ? load_image+0x410/0x410 [ 108.162710][ T6099] ? __lock_acquire+0x7b50/0x7b50 [ 108.167745][ T6099] should_fail+0x383/0x4b0 [ 108.172159][ T6099] _copy_from_user+0x2e/0x170 [ 108.176845][ T6099] iovec_from_user+0x142/0x370 [ 108.181612][ T6099] __import_iovec+0x70/0x490 [ 108.186207][ T6099] import_iovec+0x6f/0xa0 [ 108.190539][ T6099] ___sys_sendmsg+0x1fd/0x2e0 [ 108.195237][ T6099] ? __sys_sendmsg+0x290/0x290 [ 108.200017][ T6099] ? trace_event_raw_event_lock+0x250/0x250 [ 108.205930][ T6099] __se_sys_sendmsg+0x1b7/0x2a0 [ 108.210787][ T6099] ? __x64_sys_sendmsg+0x80/0x80 [ 108.215725][ T6099] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.221720][ T6099] ? lockdep_hardirqs_on+0x94/0x140 [ 108.226924][ T6099] do_syscall_64+0x4c/0xa0 [ 108.231336][ T6099] ? clear_bhb_loop+0x30/0x80 [ 108.236028][ T6099] ? clear_bhb_loop+0x30/0x80 [ 108.240703][ T6099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.246596][ T6099] RIP: 0033:0x7fe0fd3540d9 [ 108.251012][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.270614][ T6099] RSP: 002b:00007fe0fb5ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.279034][ T6099] RAX: ffffffffffffffda RBX: 00007fe0fd5dbfa0 RCX: 00007fe0fd3540d9 [ 108.287018][ T6099] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000003 [ 108.294996][ T6099] RBP: 00007fe0fb5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 108.302965][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.310935][ T6099] R13: 00007fe0fd5dc038 R14: 00007fe0fd5dbfa0 R15: 00007fff2bc474d8 [ 108.318917][ T6099] [ 108.460516][ T6104] FAULT_INJECTION: forcing a failure. [ 108.460516][ T6104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.520294][ T6104] CPU: 1 PID: 6104 Comm: syz.1.657 Not tainted syzkaller #0 [ 108.527611][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.537673][ T6104] Call Trace: [ 108.540953][ T6104] [ 108.543893][ T6104] dump_stack_lvl+0x188/0x250 [ 108.548580][ T6104] ? show_regs_print_info+0x20/0x20 [ 108.553787][ T6104] ? load_image+0x410/0x410 [ 108.558300][ T6104] ? __lock_acquire+0x7b50/0x7b50 [ 108.563335][ T6104] should_fail+0x383/0x4b0 [ 108.567761][ T6104] _copy_from_user+0x2e/0x170 [ 108.572442][ T6104] __copy_msghdr_from_user+0x48a/0x630 [ 108.577900][ T6104] ? verify_lock_unused+0x140/0x140 [ 108.583105][ T6104] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 108.588401][ T6104] ? __lock_acquire+0x13dc/0x7b50 [ 108.593448][ T6104] ___sys_sendmsg+0x19a/0x2e0 [ 108.598145][ T6104] ? __sys_sendmsg+0x290/0x290 [ 108.602942][ T6104] __se_sys_sendmsg+0x1b7/0x2a0 [ 108.607793][ T6104] ? __x64_sys_sendmsg+0x80/0x80 [ 108.612725][ T6104] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.618721][ T6104] ? lockdep_hardirqs_on+0x94/0x140 [ 108.623927][ T6104] do_syscall_64+0x4c/0xa0 [ 108.628344][ T6104] ? clear_bhb_loop+0x30/0x80 [ 108.633018][ T6104] ? clear_bhb_loop+0x30/0x80 [ 108.637695][ T6104] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.643588][ T6104] RIP: 0033:0x7fe0fd3540d9 [ 108.648003][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.667603][ T6104] RSP: 002b:00007fe0fb5ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.676015][ T6104] RAX: ffffffffffffffda RBX: 00007fe0fd5dbfa0 RCX: 00007fe0fd3540d9 [ 108.683984][ T6104] RDX: 000000003000c0c5 RSI: 0000200000000000 RDI: 0000000000000004 [ 108.691952][ T6104] RBP: 00007fe0fb5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 108.699919][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.707884][ T6104] R13: 00007fe0fd5dc038 R14: 00007fe0fd5dbfa0 R15: 00007fff2bc474d8 [ 108.710298][ T6113] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.659'. [ 108.715861][ T6104] [ 108.814381][ T6114] netlink: 156 bytes leftover after parsing attributes in process `syz.3.660'. [ 108.959202][ T6120] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.663'. [ 109.039314][ T6122] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.663'. [ 109.367740][ T6137] tap0: tun_chr_ioctl cmd 1074025675 [ 109.394439][ T6137] tap0: persist disabled [ 109.835008][ T6150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.050280][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.610274][ T6197] tap0: tun_chr_ioctl cmd 1074025675 [ 112.637849][ T6197] tap0: persist disabled [ 112.644462][ T6203] __nla_validate_parse: 1 callbacks suppressed [ 112.644492][ T6203] netlink: 156660 bytes leftover after parsing attributes in process `syz.2.690'. [ 112.665147][ T6202] netlink: 168 bytes leftover after parsing attributes in process `syz.4.691'. [ 112.676324][ T6200] validate_nla: 6 callbacks suppressed [ 112.676336][ T6200] netlink: 'syz.1.688': attribute type 10 has an invalid length. [ 113.100694][ T6222] netlink: 'syz.2.698': attribute type 29 has an invalid length. [ 113.108735][ T6222] netlink: 'syz.2.698': attribute type 29 has an invalid length. [ 113.136180][ T6222] netlink: 'syz.2.698': attribute type 29 has an invalid length. [ 113.203865][ T6230] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 113.225780][ T6230] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 113.326193][ T6234] netlink: 'syz.2.703': attribute type 10 has an invalid length. [ 113.355188][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.362604][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.465171][ T6237] tap0: tun_chr_ioctl cmd 1074025675 [ 113.494441][ T6237] tap0: persist disabled [ 113.509153][ T6237] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 114.651780][ T6282] FAULT_INJECTION: forcing a failure. [ 114.651780][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.745271][ T6284] tap0: tun_chr_ioctl cmd 1074025675 [ 114.800677][ T6284] tap0: persist disabled [ 114.805105][ T6292] netlink: 'syz.3.721': attribute type 10 has an invalid length. [ 114.805334][ T6282] CPU: 0 PID: 6282 Comm: syz.1.719 Not tainted syzkaller #0 [ 114.820105][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.830162][ T6282] Call Trace: [ 114.833442][ T6282] [ 114.836371][ T6282] dump_stack_lvl+0x188/0x250 [ 114.841053][ T6282] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 114.847219][ T6282] ? show_regs_print_info+0x20/0x20 [ 114.852428][ T6282] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 114.858709][ T6282] should_fail+0x383/0x4b0 [ 114.863138][ T6282] _copy_to_user+0x2e/0x130 [ 114.867657][ T6282] bpf_obj_get_info_by_fd+0x276d/0x2df0 [ 114.873227][ T6282] ? bpf_map_get_fd_by_id+0x330/0x330 [ 114.878641][ T6282] ? __might_fault+0xb3/0x110 [ 114.883327][ T6282] ? bpf_lsm_bpf+0x5/0x10 [ 114.888092][ T6282] ? security_bpf+0x7a/0xa0 [ 114.892645][ T6282] __sys_bpf+0x484/0x6f0 [ 114.896894][ T6282] ? bpf_link_show_fdinfo+0x380/0x380 [ 114.902271][ T6282] __x64_sys_bpf+0x78/0x90 [ 114.906675][ T6282] do_syscall_64+0x4c/0xa0 [ 114.911076][ T6282] ? clear_bhb_loop+0x30/0x80 [ 114.915750][ T6282] ? clear_bhb_loop+0x30/0x80 [ 114.920425][ T6282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.926313][ T6282] RIP: 0033:0x7fe0fd3540d9 [ 114.930721][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.950325][ T6282] RSP: 002b:00007fe0fb5ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.958727][ T6282] RAX: ffffffffffffffda RBX: 00007fe0fd5dbfa0 RCX: 00007fe0fd3540d9 [ 114.966693][ T6282] RDX: 0000000000000010 RSI: 0000200000002500 RDI: 000000000000000f [ 114.974823][ T6282] RBP: 00007fe0fb5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 114.982779][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.990741][ T6282] R13: 00007fe0fd5dc038 R14: 00007fe0fd5dbfa0 R15: 00007fff2bc474d8 [ 114.998708][ T6282] [ 115.659952][ T6326] netlink: 'syz.2.734': attribute type 25 has an invalid length. [ 115.681007][ T6325] FAULT_INJECTION: forcing a failure. [ 115.681007][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.707421][ T6326] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 115.750144][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.734'. [ 115.750672][ T6325] CPU: 0 PID: 6325 Comm: syz.4.735 Not tainted syzkaller #0 [ 115.766285][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.776340][ T6325] Call Trace: [ 115.779623][ T6325] [ 115.782561][ T6325] dump_stack_lvl+0x188/0x250 [ 115.784307][ T6330] tap0: tun_chr_ioctl cmd 1074025675 [ 115.787247][ T6325] ? show_regs_print_info+0x20/0x20 [ 115.787277][ T6325] ? load_image+0x410/0x410 [ 115.802220][ T6325] ? __lock_acquire+0x7b50/0x7b50 [ 115.807254][ T6325] ? __lock_acquire+0x13dc/0x7b50 [ 115.812286][ T6325] should_fail+0x383/0x4b0 [ 115.816710][ T6325] strncpy_from_user+0x32/0x350 [ 115.821571][ T6325] bpf_prog_load+0x1fd/0x14e0 [ 115.826269][ T6325] ? map_freeze+0x360/0x360 [ 115.830774][ T6325] ? __might_fault+0xb7/0x110 [ 115.835451][ T6325] ? ktime_get+0x7b/0x270 [ 115.839792][ T6325] ? __might_fault+0xb3/0x110 [ 115.841205][ T6330] tap0: persist disabled [ 115.844469][ T6325] ? bpf_lsm_bpf+0x5/0x10 [ 115.844492][ T6325] ? security_bpf+0x7a/0xa0 [ 115.844511][ T6325] __sys_bpf+0x532/0x6f0 [ 115.844532][ T6325] ? bpf_link_show_fdinfo+0x380/0x380 [ 115.865341][ T6327] netlink: 172 bytes leftover after parsing attributes in process `syz.1.731'. [ 115.867235][ T6325] __x64_sys_bpf+0x78/0x90 [ 115.880540][ T6325] do_syscall_64+0x4c/0xa0 [ 115.884959][ T6325] ? clear_bhb_loop+0x30/0x80 [ 115.889634][ T6325] ? clear_bhb_loop+0x30/0x80 [ 115.894315][ T6325] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.900211][ T6325] RIP: 0033:0x7f083b69a0d9 [ 115.904622][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.924228][ T6325] RSP: 002b:00007f08398f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.932645][ T6325] RAX: ffffffffffffffda RBX: 00007f083b921fa0 RCX: 00007f083b69a0d9 [ 115.940617][ T6325] RDX: 0000000000000094 RSI: 0000200000000c00 RDI: 0000000000000005 [ 115.948593][ T6325] RBP: 00007f08398f2090 R08: 0000000000000000 R09: 0000000000000000 [ 115.956564][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.964538][ T6325] R13: 00007f083b922038 R14: 00007f083b921fa0 R15: 00007ffc0b1606b8 [ 115.972524][ T6325] [ 116.641404][ T6352] tap0: tun_chr_ioctl cmd 2148553947 [ 116.716196][ T6346] tap0: tun_chr_ioctl cmd 1074025681 [ 117.048512][ T6359] FAULT_INJECTION: forcing a failure. [ 117.048512][ T6359] name failslab, interval 1, probability 0, space 0, times 0 [ 117.114029][ T6359] CPU: 1 PID: 6359 Comm: syz.2.746 Not tainted syzkaller #0 [ 117.121398][ T6359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.131506][ T6359] Call Trace: [ 117.134834][ T6359] [ 117.137817][ T6359] dump_stack_lvl+0x188/0x250 [ 117.142590][ T6359] ? show_regs_print_info+0x20/0x20 [ 117.147858][ T6359] ? load_image+0x410/0x410 [ 117.149784][ T6365] tap0: tun_chr_ioctl cmd 1074025675 [ 117.152437][ T6359] ? __might_sleep+0xf0/0xf0 [ 117.152496][ T6359] ? __lock_acquire+0x7b50/0x7b50 [ 117.158007][ T6365] tap0: persist disabled [ 117.162421][ T6359] should_fail+0x383/0x4b0 [ 117.162501][ T6359] should_failslab+0x5/0x20 [ 117.180676][ T6359] slab_pre_alloc_hook+0x51/0xc0 [ 117.185694][ T6359] __kmalloc+0x6b/0x340 [ 117.189895][ T6359] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 117.195672][ T6359] tomoyo_realpath_from_path+0xed/0x5e0 [ 117.201371][ T6359] tomoyo_path_number_perm+0x251/0x6b0 [ 117.206913][ T6359] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 117.212428][ T6359] ? perf_trace_lock+0x301/0x390 [ 117.217824][ T6359] security_file_ioctl+0x6c/0xa0 [ 117.222836][ T6359] __se_sys_ioctl+0x48/0x170 [ 117.227505][ T6359] do_syscall_64+0x4c/0xa0 [ 117.231961][ T6359] ? clear_bhb_loop+0x30/0x80 [ 117.236679][ T6359] ? clear_bhb_loop+0x30/0x80 [ 117.241430][ T6359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.247358][ T6359] RIP: 0033:0x7f4401d660d9 [ 117.251822][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.271476][ T6359] RSP: 002b:00007f43fffbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.279949][ T6359] RAX: ffffffffffffffda RBX: 00007f4401fedfa0 RCX: 00007f4401d660d9 [ 117.287966][ T6359] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000008 [ 117.296024][ T6359] RBP: 00007f43fffbe090 R08: 0000000000000000 R09: 0000000000000000 [ 117.304053][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.312068][ T6359] R13: 00007f4401fee038 R14: 00007f4401fedfa0 R15: 00007ffcc0e6cbe8 [ 117.320208][ T6359] [ 117.341926][ T6359] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.914594][ T6395] validate_nla: 3 callbacks suppressed [ 117.914609][ T6395] netlink: 'syz.4.758': attribute type 10 has an invalid length. [ 118.000641][ T6395] device hsr0 entered promiscuous mode [ 118.006303][ T6395] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 118.058340][ T6396] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 118.104862][ T144] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 118.123478][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 118.252189][ T6404] tap0: tun_chr_ioctl cmd 1074025675 [ 118.257581][ T6404] tap0: persist disabled [ 118.590831][ T6415] netlink: 'syz.1.762': attribute type 10 has an invalid length. [ 119.285274][ T6424] sctp: [Deprecated]: syz.1.769 (pid 6424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.285274][ T6424] Use struct sctp_sack_info instead [ 119.848722][ T6423] delete_channel: no stack [ 120.008900][ T6456] tap0: tun_chr_ioctl cmd 1074025675 [ 120.042466][ T6456] tap0: persist disabled [ 120.060976][ T6463] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 120.152627][ T6468] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.784'. [ 120.652903][ T6485] FAULT_INJECTION: forcing a failure. [ 120.652903][ T6485] name failslab, interval 1, probability 0, space 0, times 0 [ 120.654297][ T6482] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.791'. [ 120.716611][ T6485] CPU: 0 PID: 6485 Comm: syz.4.792 Not tainted syzkaller #0 [ 120.717037][ T6482] openvswitch: netlink: Message has 20476 unknown bytes. [ 120.723931][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.723944][ T6485] Call Trace: [ 120.723956][ T6485] [ 120.723965][ T6485] dump_stack_lvl+0x188/0x250 [ 120.724008][ T6485] ? show_regs_print_info+0x20/0x20 [ 120.724030][ T6485] ? load_image+0x410/0x410 [ 120.724056][ T6485] ? __might_sleep+0xf0/0xf0 [ 120.724077][ T6485] ? __lock_acquire+0x7b50/0x7b50 [ 120.724110][ T6485] should_fail+0x383/0x4b0 [ 120.724139][ T6485] should_failslab+0x5/0x20 [ 120.724157][ T6485] slab_pre_alloc_hook+0x51/0xc0 [ 120.724182][ T6485] __kmalloc+0x6b/0x340 [ 120.724197][ T6485] ? sk_prot_alloc+0xe7/0x210 [ 120.793976][ T6485] sk_prot_alloc+0xe7/0x210 [ 120.798496][ T6485] ? sk_alloc+0x1d/0x310 [ 120.802769][ T6485] sk_alloc+0x2f/0x310 [ 120.806863][ T6485] bpf_prog_test_run_skb+0x23c/0x1190 [ 120.810124][ T6492] netlink: 'syz.0.795': attribute type 21 has an invalid length. [ 120.812260][ T6485] ? __fget_files+0x402/0x470 [ 120.824641][ T6485] ? cpu_online+0x60/0x60 [ 120.828986][ T6485] bpf_prog_test_run+0x31c/0x390 [ 120.833951][ T6485] __sys_bpf+0x5a5/0x6f0 [ 120.838207][ T6485] ? bpf_link_show_fdinfo+0x380/0x380 [ 120.843618][ T6485] __x64_sys_bpf+0x78/0x90 [ 120.843818][ T6492] netlink: 'syz.0.795': attribute type 6 has an invalid length. [ 120.848047][ T6485] do_syscall_64+0x4c/0xa0 [ 120.860063][ T6485] ? clear_bhb_loop+0x30/0x80 [ 120.864754][ T6485] ? clear_bhb_loop+0x30/0x80 [ 120.869447][ T6485] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.875347][ T6485] RIP: 0033:0x7f083b69a0d9 [ 120.879777][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.897291][ T6492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.795'. [ 120.899385][ T6485] RSP: 002b:00007f08398f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 120.916733][ T6485] RAX: ffffffffffffffda RBX: 00007f083b921fa0 RCX: 00007f083b69a0d9 [ 120.924718][ T6485] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 120.932700][ T6485] RBP: 00007f08398f2090 R08: 0000000000000000 R09: 0000000000000000 [ 120.940677][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.948649][ T6485] R13: 00007f083b922038 R14: 00007f083b921fa0 R15: 00007ffc0b1606b8 [ 120.956653][ T6485] [ 121.086751][ T6498] tap0: tun_chr_ioctl cmd 1074025675 [ 121.112656][ T6498] tap0: persist disabled [ 121.151208][ T6498] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 121.162520][ T6494] netlink: 'syz.2.796': attribute type 21 has an invalid length. [ 121.194857][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.796'. [ 121.217746][ T6494] netlink: 3 bytes leftover after parsing attributes in process `syz.2.796'. [ 121.523945][ T6511] netlink: 'syz.4.802': attribute type 21 has an invalid length. [ 121.580129][ T6511] netlink: 'syz.4.802': attribute type 6 has an invalid length. [ 121.606601][ T6511] netlink: 132 bytes leftover after parsing attributes in process `syz.4.802'. [ 121.670271][ T6511] FAULT_INJECTION: forcing a failure. [ 121.670271][ T6511] name failslab, interval 1, probability 0, space 0, times 0 [ 121.735096][ T6511] CPU: 1 PID: 6511 Comm: syz.4.802 Not tainted syzkaller #0 [ 121.742419][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.752483][ T6511] Call Trace: [ 121.755768][ T6511] [ 121.758696][ T6511] dump_stack_lvl+0x188/0x250 [ 121.763383][ T6511] ? show_regs_print_info+0x20/0x20 [ 121.768574][ T6511] ? load_image+0x410/0x410 [ 121.773070][ T6511] ? __nla_validate+0x50/0x50 [ 121.777741][ T6511] ? ip_tun_cmp_encap+0x1a0/0x1a0 [ 121.782764][ T6511] should_fail+0x383/0x4b0 [ 121.787176][ T6511] should_failslab+0x5/0x20 [ 121.791675][ T6511] slab_pre_alloc_hook+0x51/0xc0 [ 121.796600][ T6511] __kmalloc+0x6b/0x340 [ 121.800741][ T6511] ? ip_tun_build_state+0x136/0x650 [ 121.805926][ T6511] ? __nla_parse+0x3c/0x50 [ 121.810355][ T6511] ip_tun_build_state+0x136/0x650 [ 121.815368][ T6511] ? iptunnel_pmtud_build_icmpv6+0xfc0/0xfc0 [ 121.821340][ T6511] ? rcu_lock_release+0x5/0x20 [ 121.826107][ T6511] lwtunnel_build_state+0x34a/0x490 [ 121.831332][ T6511] fib_nh_common_init+0x141/0x2c0 [ 121.836364][ T6511] ? fib_dump_info+0x10b0/0x10b0 [ 121.841303][ T6511] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 121.847449][ T6511] fib_nh_init+0x9a/0x400 [ 121.851773][ T6511] fib_create_info+0xf93/0x2450 [ 121.856621][ T6511] fib_table_insert+0xe4/0x1b80 [ 121.861459][ T6511] ? lwtunnel_valid_encap_type+0x22f/0x550 [ 121.867257][ T6511] ? rtm_to_fib_config+0x1122/0x1550 [ 121.872543][ T6511] ? fib_new_table+0x106/0x2d0 [ 121.877293][ T6511] inet_rtm_newroute+0x147/0x230 [ 121.882213][ T6511] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 121.887312][ T6511] ? rcu_read_unlock+0x90/0x90 [ 121.892072][ T6511] ? rcu_read_unlock+0x90/0x90 [ 121.896817][ T6511] rtnetlink_rcv_msg+0x7f1/0xf10 [ 121.901743][ T6511] ? lock_chain_count+0x20/0x20 [ 121.906579][ T6511] ? rtnetlink_bind+0x80/0x80 [ 121.911241][ T6511] ? __local_bh_enable_ip+0x136/0x1c0 [ 121.916595][ T6511] ? lockdep_hardirqs_on+0x94/0x140 [ 121.921778][ T6511] ? __local_bh_enable_ip+0x136/0x1c0 [ 121.927138][ T6511] ? _local_bh_enable+0xa0/0xa0 [ 121.931978][ T6511] ? __dev_queue_xmit+0x1b64/0x2e50 [ 121.937171][ T6511] ? dev_queue_xmit+0x20/0x20 [ 121.941829][ T6511] ? memcpy+0x3c/0x60 [ 121.945795][ T6511] ? __copy_skb_header+0x3ba/0x4f0 [ 121.950896][ T6511] netlink_rcv_skb+0x1e9/0x430 [ 121.955646][ T6511] ? rtnetlink_bind+0x80/0x80 [ 121.960314][ T6511] ? netlink_ack+0xb10/0xb10 [ 121.964913][ T6511] netlink_unicast+0x78f/0x940 [ 121.969668][ T6511] netlink_sendmsg+0x8ba/0xbe0 [ 121.974423][ T6511] ? netlink_getsockopt+0x570/0x570 [ 121.979601][ T6511] ? aa_sock_msg_perm+0x94/0x150 [ 121.984524][ T6511] ? apparmor_socket_sendmsg+0x88/0x230 [ 121.990051][ T6511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 121.995334][ T6511] ? security_socket_sendmsg+0x7c/0xa0 [ 122.000781][ T6511] ? netlink_getsockopt+0x570/0x570 [ 122.005967][ T6511] ____sys_sendmsg+0x5be/0x8f0 [ 122.010722][ T6511] ? __sys_sendmsg_sock+0x30/0x30 [ 122.015732][ T6511] ? import_iovec+0x6f/0xa0 [ 122.020220][ T6511] ___sys_sendmsg+0x236/0x2e0 [ 122.024892][ T6511] ? __sys_sendmsg+0x290/0x290 [ 122.029668][ T6511] __se_sys_sendmsg+0x1b7/0x2a0 [ 122.034505][ T6511] ? __x64_sys_sendmsg+0x80/0x80 [ 122.039441][ T6511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.045415][ T6511] ? lockdep_hardirqs_on+0x94/0x140 [ 122.050599][ T6511] do_syscall_64+0x4c/0xa0 [ 122.055000][ T6511] ? clear_bhb_loop+0x30/0x80 [ 122.059665][ T6511] ? clear_bhb_loop+0x30/0x80 [ 122.064323][ T6511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.070200][ T6511] RIP: 0033:0x7f083b69a0d9 [ 122.074602][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.094189][ T6511] RSP: 002b:00007f08398f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.102587][ T6511] RAX: ffffffffffffffda RBX: 00007f083b921fa0 RCX: 00007f083b69a0d9 [ 122.110540][ T6511] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 122.118494][ T6511] RBP: 00007f08398f2090 R08: 0000000000000000 R09: 0000000000000000 [ 122.126449][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.134402][ T6511] R13: 00007f083b922038 R14: 00007f083b921fa0 R15: 00007ffc0b1606b8 [ 122.142388][ T6511] [ 122.526620][ T6539] tap0: tun_chr_ioctl cmd 1074025675 [ 122.545598][ T6539] tap0: persist disabled [ 122.561162][ T6539] netlink: 'syz.2.811': attribute type 10 has an invalid length. [ 122.800454][ T6550] tap0: tun_chr_ioctl cmd 1074025675 [ 122.821600][ T6550] tap0: persist disabled [ 122.957728][ T6559] validate_nla: 1 callbacks suppressed [ 122.957745][ T6559] netlink: 'syz.1.819': attribute type 21 has an invalid length. [ 123.025041][ T6559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.819'. [ 123.123988][ T6553] netlink: 'syz.4.817': attribute type 21 has an invalid length. [ 123.165921][ T6553] netlink: 128 bytes leftover after parsing attributes in process `syz.4.817'. [ 123.261803][ T6553] netlink: 3 bytes leftover after parsing attributes in process `syz.4.817'. [ 123.351287][ T6580] FAULT_INJECTION: forcing a failure. [ 123.351287][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 123.380087][ T6580] CPU: 0 PID: 6580 Comm: syz.0.825 Not tainted syzkaller #0 [ 123.387402][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.397458][ T6580] Call Trace: [ 123.400742][ T6580] [ 123.403677][ T6580] dump_stack_lvl+0x188/0x250 [ 123.408377][ T6580] ? show_regs_print_info+0x20/0x20 [ 123.413584][ T6580] ? load_image+0x410/0x410 [ 123.418092][ T6580] ? __might_sleep+0xf0/0xf0 [ 123.422686][ T6580] ? __lock_acquire+0x7b50/0x7b50 [ 123.427709][ T6580] ? mark_lock+0x94/0x320 [ 123.432035][ T6580] should_fail+0x383/0x4b0 [ 123.436456][ T6580] should_failslab+0x5/0x20 [ 123.440959][ T6580] slab_pre_alloc_hook+0x51/0xc0 [ 123.445894][ T6580] __kmalloc+0x6b/0x340 [ 123.450040][ T6580] ? fib_create_info+0xad1/0x2450 [ 123.455056][ T6580] ? mutex_unlock+0x10/0x10 [ 123.459548][ T6580] fib_create_info+0xad1/0x2450 [ 123.464390][ T6580] ? pcpu_alloc+0x11e6/0x16d0 [ 123.469057][ T6580] fib_table_insert+0xe4/0x1b80 [ 123.473905][ T6580] ? fib_trie_table+0x134/0x1c0 [ 123.478741][ T6580] ? fib_new_table+0x27b/0x2d0 [ 123.483486][ T6580] inet_rtm_newroute+0x147/0x230 [ 123.488401][ T6580] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 123.493496][ T6580] ? rcu_read_unlock+0x90/0x90 [ 123.498254][ T6580] ? rcu_read_unlock+0x90/0x90 [ 123.502997][ T6580] rtnetlink_rcv_msg+0x7f1/0xf10 [ 123.507921][ T6580] ? lock_chain_count+0x20/0x20 [ 123.512756][ T6580] ? rtnetlink_bind+0x80/0x80 [ 123.517416][ T6580] ? __local_bh_enable_ip+0x136/0x1c0 [ 123.522771][ T6580] ? lockdep_hardirqs_on+0x94/0x140 [ 123.527956][ T6580] ? __local_bh_enable_ip+0x136/0x1c0 [ 123.533307][ T6580] ? _local_bh_enable+0xa0/0xa0 [ 123.538146][ T6580] ? __dev_queue_xmit+0x1b64/0x2e50 [ 123.543339][ T6580] ? perf_trace_lock+0xe4/0x390 [ 123.548264][ T6580] ? trace_event_raw_event_lock+0x250/0x250 [ 123.554138][ T6580] ? __copy_skb_header+0x3ba/0x4f0 [ 123.559236][ T6580] netlink_rcv_skb+0x1e9/0x430 [ 123.563986][ T6580] ? rtnetlink_bind+0x80/0x80 [ 123.568649][ T6580] ? netlink_ack+0xb10/0xb10 [ 123.573239][ T6580] netlink_unicast+0x78f/0x940 [ 123.577992][ T6580] netlink_sendmsg+0x8ba/0xbe0 [ 123.582743][ T6580] ? netlink_getsockopt+0x570/0x570 [ 123.587922][ T6580] ? aa_sock_msg_perm+0x94/0x150 [ 123.592841][ T6580] ? apparmor_socket_sendmsg+0x88/0x230 [ 123.598367][ T6580] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 123.603639][ T6580] ? security_socket_sendmsg+0x7c/0xa0 [ 123.609083][ T6580] ? netlink_getsockopt+0x570/0x570 [ 123.614266][ T6580] ____sys_sendmsg+0x5be/0x8f0 [ 123.619021][ T6580] ? __sys_sendmsg_sock+0x30/0x30 [ 123.624037][ T6580] ? import_iovec+0x6f/0xa0 [ 123.628527][ T6580] ___sys_sendmsg+0x236/0x2e0 [ 123.633194][ T6580] ? __sys_sendmsg+0x290/0x290 [ 123.637946][ T6580] ? trace_event_raw_event_lock+0x250/0x250 [ 123.643837][ T6580] __se_sys_sendmsg+0x1b7/0x2a0 [ 123.648677][ T6580] ? __x64_sys_sendmsg+0x80/0x80 [ 123.653593][ T6580] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.659565][ T6580] ? lockdep_hardirqs_on+0x94/0x140 [ 123.664754][ T6580] do_syscall_64+0x4c/0xa0 [ 123.669153][ T6580] ? clear_bhb_loop+0x30/0x80 [ 123.673812][ T6580] ? clear_bhb_loop+0x30/0x80 [ 123.678472][ T6580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.684347][ T6580] RIP: 0033:0x7fb7c6d1f0d9 [ 123.688749][ T6580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.708341][ T6580] RSP: 002b:00007fb7c4f77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.716746][ T6580] RAX: ffffffffffffffda RBX: 00007fb7c6fa6fa0 RCX: 00007fb7c6d1f0d9 [ 123.724708][ T6580] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 123.732666][ T6580] RBP: 00007fb7c4f77090 R08: 0000000000000000 R09: 0000000000000000 [ 123.740627][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.748594][ T6580] R13: 00007fb7c6fa7038 R14: 00007fb7c6fa6fa0 R15: 00007ffd0171c878 [ 123.756573][ T6580] [ 123.993505][ T6598] tap0: tun_chr_ioctl cmd 1074025675 [ 124.019322][ T6598] tap0: persist disabled [ 124.030252][ T6598] netlink: 'syz.2.832': attribute type 10 has an invalid length. [ 124.472961][ T6619] netlink: 156 bytes leftover after parsing attributes in process `syz.1.841'. [ 124.838881][ T6633] tap0: tun_chr_ioctl cmd 1074025675 [ 124.866054][ T6633] tap0: persist disabled [ 124.899865][ T6640] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 124.953654][ T6628] netlink: 'syz.1.843': attribute type 21 has an invalid length. [ 126.705072][ T6657] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 126.901646][ T154] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 126.930769][ T154] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 127.039461][ T6677] __nla_validate_parse: 2 callbacks suppressed [ 127.039491][ T6677] netlink: 156 bytes leftover after parsing attributes in process `syz.2.856'. [ 127.183880][ T6681] tap0: tun_chr_ioctl cmd 1074025675 [ 127.207308][ T6681] tap0: persist disabled [ 127.235176][ T6684] netlink: 'syz.1.862': attribute type 10 has an invalid length. [ 127.448405][ T6688] netlink: 'syz.3.863': attribute type 21 has an invalid length. [ 127.497804][ T6688] netlink: 128 bytes leftover after parsing attributes in process `syz.3.863'. [ 127.520244][ T6688] netlink: 3 bytes leftover after parsing attributes in process `syz.3.863'. [ 127.780567][ T6695] tap0: tun_chr_ioctl cmd 1074025675 [ 127.800901][ T6695] tap0: persist disabled [ 127.833721][ T6695] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 128.039241][ T6705] netlink: 'syz.2.869': attribute type 29 has an invalid length. [ 128.117301][ T6705] netlink: 'syz.2.869': attribute type 29 has an invalid length. [ 128.200849][ T6714] syzkaller1: tun_chr_ioctl cmd 21731 [ 128.433508][ T6716] ip6tnl0: mtu less than device minimum [ 128.511785][ T6724] netlink: 156 bytes leftover after parsing attributes in process `syz.4.877'. [ 128.644932][ T6726] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.769885][ T6735] netlink: 'syz.3.881': attribute type 21 has an invalid length. [ 128.780902][ T6735] netlink: 128 bytes leftover after parsing attributes in process `syz.3.881'. [ 128.838800][ T6735] netlink: 'syz.3.881': attribute type 4 has an invalid length. [ 128.980228][ T6742] tap0: tun_chr_ioctl cmd 1074025675 [ 128.985562][ T6742] tap0: persist disabled [ 129.403612][ T6756] tap0: tun_chr_ioctl cmd 1074025675 [ 129.430407][ T6756] tap0: persist disabled [ 129.456829][ T6756] netlink: 'syz.2.887': attribute type 10 has an invalid length. [ 130.743107][ T6790] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 130.905204][ T6804] netlink: 'syz.1.902': attribute type 46 has an invalid length. [ 130.949850][ T6795] netlink: 156 bytes leftover after parsing attributes in process `syz.3.894'. [ 131.290931][ T6815] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 131.337666][ T6808] tap0: tun_chr_ioctl cmd 1074025675 [ 131.357349][ T6808] tap0: persist disabled [ 131.410649][ T6816] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 131.717115][ T6824] netlink: 'syz.0.909': attribute type 3 has an invalid length. [ 131.803842][ T6824] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.909'. [ 132.355770][ T6845] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 132.590253][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 132.603707][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610618][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.765784][ T6853] tap0: tun_chr_ioctl cmd 1074025675 [ 132.778060][ T6853] tap0: persist disabled [ 133.119428][ T6857] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.921'. [ 133.268754][ T6863] validate_nla: 2 callbacks suppressed [ 133.268784][ T6863] netlink: 'syz.3.922': attribute type 10 has an invalid length. [ 133.601894][ T6875] netlink: 'syz.2.926': attribute type 3 has an invalid length. [ 133.630534][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 133.658652][ T6875] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.926'. [ 133.887648][ T6888] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 134.334982][ T6899] netlink: 'syz.3.936': attribute type 10 has an invalid length. [ 134.435804][ T6903] tap0: tun_chr_ioctl cmd 1074025675 [ 134.482429][ T6903] tap0: persist disabled [ 134.570450][ T6897] netlink: 'syz.2.935': attribute type 10 has an invalid length. [ 134.608177][ T6909] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.939'. [ 135.196516][ T6925] netlink: 'syz.2.946': attribute type 9 has an invalid length. [ 135.433212][ T6936] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.950'. [ 135.530899][ T6936] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.950'. [ 135.702407][ T6942] tap0: tun_chr_ioctl cmd 1074025675 [ 135.707848][ T6942] tap0: persist disabled [ 135.757854][ T6947] netlink: 'syz.4.953': attribute type 10 has an invalid length. [ 136.182257][ T6952] netlink: 'syz.4.957': attribute type 10 has an invalid length. [ 136.254472][ T6955] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.955'. [ 136.678941][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 136.734491][ T6968] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 136.958833][ T1584] wlan1: Creating new IBSS network, BSSID ae:92:6f:e5:4c:a8 [ 137.065999][ T6973] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 137.637516][ T6990] tap0: tun_chr_ioctl cmd 1074025675 [ 137.648478][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 137.737612][ T6990] tap0: persist disabled [ 137.762221][ T6995] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.973'. [ 137.850921][ T6995] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.973'. [ 139.388949][ T7036] tap0: tun_chr_ioctl cmd 1074025675 [ 139.405391][ T7036] tap0: persist disabled [ 139.415894][ T7036] validate_nla: 1 callbacks suppressed [ 139.415935][ T7036] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 139.732836][ T7049] device syzkaller0 entered promiscuous mode [ 140.001945][ T7054] netlink: 'syz.1.991': attribute type 21 has an invalid length. [ 140.009841][ T7054] netlink: 'syz.1.991': attribute type 6 has an invalid length. [ 140.027204][ T7054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.991'. [ 140.590306][ T9] wlan1: Trigger new scan to find an IBSS to join [ 140.674866][ T9] wlan1: Creating new IBSS network, BSSID ae:73:96:80:46:ef [ 140.724974][ T7061] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.998'. [ 140.765340][ T7061] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.998'. [ 141.404213][ T7088] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 142.345857][ T7121] FAULT_INJECTION: forcing a failure. [ 142.345857][ T7121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.441195][ T7121] CPU: 0 PID: 7121 Comm: syz.4.1017 Not tainted syzkaller #0 [ 142.448606][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.458666][ T7121] Call Trace: [ 142.461954][ T7121] [ 142.464895][ T7121] dump_stack_lvl+0x188/0x250 [ 142.469594][ T7121] ? show_regs_print_info+0x20/0x20 [ 142.474805][ T7121] ? load_image+0x410/0x410 [ 142.479326][ T7121] ? __lock_acquire+0x7b50/0x7b50 [ 142.484382][ T7121] should_fail+0x383/0x4b0 [ 142.488817][ T7121] _copy_to_user+0x2e/0x130 [ 142.493328][ T7121] simple_read_from_buffer+0xe3/0x150 [ 142.498705][ T7121] proc_fail_nth_read+0x1a6/0x220 [ 142.503737][ T7121] ? proc_fault_inject_write+0x310/0x310 [ 142.509374][ T7121] ? fsnotify_perm+0x254/0x560 [ 142.514139][ T7121] ? proc_fault_inject_write+0x310/0x310 [ 142.519770][ T7121] vfs_read+0x2ff/0xd50 [ 142.523926][ T7121] ? __lock_acquire+0x7b50/0x7b50 [ 142.528953][ T7121] ? kernel_read+0x1e0/0x1e0 [ 142.533556][ T7121] ? mutex_lock_nested+0x17/0x20 [ 142.538491][ T7121] ? __fdget_pos+0x2bf/0x370 [ 142.543074][ T7121] ? ksys_read+0x70/0x260 [ 142.547403][ T7121] ksys_read+0x153/0x260 [ 142.551642][ T7121] ? vfs_write+0xd70/0xd70 [ 142.556051][ T7121] ? lockdep_hardirqs_on+0x94/0x140 [ 142.561247][ T7121] do_syscall_64+0x4c/0xa0 [ 142.565655][ T7121] ? clear_bhb_loop+0x30/0x80 [ 142.570330][ T7121] ? clear_bhb_loop+0x30/0x80 [ 142.575015][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.580905][ T7121] RIP: 0033:0x7f083b65a90e [ 142.585320][ T7121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.604922][ T7121] RSP: 002b:00007f08398f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.613336][ T7121] RAX: ffffffffffffffda RBX: 00007f08398f26c0 RCX: 00007f083b65a90e [ 142.621301][ T7121] RDX: 000000000000000f RSI: 00007f08398f20a0 RDI: 0000000000000007 [ 142.629263][ T7121] RBP: 00007f08398f2090 R08: 0000000000000000 R09: 0000000000000000 [ 142.637226][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.645189][ T7121] R13: 00007f083b922038 R14: 00007f083b921fa0 R15: 00007ffc0b1606b8 [ 142.653167][ T7121] [ 143.640126][ T9] wlan1: Trigger new scan to find an IBSS to join [ 144.012985][ T7168] FAULT_INJECTION: forcing a failure. [ 144.012985][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 144.026051][ T7168] CPU: 0 PID: 7168 Comm: syz.3.1034 Not tainted syzkaller #0 [ 144.033434][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.043500][ T7168] Call Trace: [ 144.046784][ T7168] [ 144.049710][ T7168] dump_stack_lvl+0x188/0x250 [ 144.054398][ T7168] ? show_regs_print_info+0x20/0x20 [ 144.059596][ T7168] ? load_image+0x410/0x410 [ 144.064095][ T7168] ? rcu_nmi_exit+0x6f/0xf0 [ 144.068602][ T7168] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.074585][ T7168] ? lock_chain_count+0x20/0x20 [ 144.079441][ T7168] should_fail+0x383/0x4b0 [ 144.083857][ T7168] should_failslab+0x5/0x20 [ 144.088353][ T7168] slab_pre_alloc_hook+0x51/0xc0 [ 144.093280][ T7168] ? skb_clone+0x1bd/0x350 [ 144.097688][ T7168] kmem_cache_alloc+0x3d/0x280 [ 144.102451][ T7168] skb_clone+0x1bd/0x350 [ 144.106684][ T7168] ? dev_queue_xmit_nit+0x1f2/0xae0 [ 144.111880][ T7168] dev_queue_xmit_nit+0x2db/0xae0 [ 144.116906][ T7168] dev_hard_start_xmit+0x140/0x7d0 [ 144.122032][ T7168] __dev_queue_xmit+0x195d/0x2e50 [ 144.127049][ T7168] ? lock_chain_count+0x20/0x20 [ 144.131905][ T7168] ? asm_sysvec_call_function_single+0x16/0x20 [ 144.138055][ T7168] ? dev_queue_xmit+0x20/0x20 [ 144.142726][ T7168] ? memcpy+0x3c/0x60 [ 144.146697][ T7168] ? __copy_skb_header+0x3ba/0x4f0 [ 144.151808][ T7168] ? __skb_clone+0x446/0x6c0 [ 144.156394][ T7168] ? skb_clone+0x1f1/0x350 [ 144.160802][ T7168] __netlink_deliver_tap+0x522/0x7c0 [ 144.166090][ T7168] netlink_deliver_tap+0x16c/0x180 [ 144.171194][ T7168] netlink_unicast+0x759/0x940 [ 144.175959][ T7168] netlink_sendmsg+0x8ba/0xbe0 [ 144.180727][ T7168] ? netlink_getsockopt+0x570/0x570 [ 144.185919][ T7168] ? aa_sock_msg_perm+0x94/0x150 [ 144.190849][ T7168] ? apparmor_socket_sendmsg+0x173/0x230 [ 144.196472][ T7168] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 144.201747][ T7168] ? security_socket_sendmsg+0x7c/0xa0 [ 144.207198][ T7168] ? netlink_getsockopt+0x570/0x570 [ 144.212391][ T7168] ____sys_sendmsg+0x5be/0x8f0 [ 144.217159][ T7168] ? __sys_sendmsg_sock+0x30/0x30 [ 144.222268][ T7168] ? import_iovec+0x6f/0xa0 [ 144.226765][ T7168] ___sys_sendmsg+0x236/0x2e0 [ 144.231442][ T7168] ? __sys_sendmsg+0x290/0x290 [ 144.236228][ T7168] __se_sys_sendmsg+0x1b7/0x2a0 [ 144.241078][ T7168] ? __x64_sys_sendmsg+0x80/0x80 [ 144.246004][ T7168] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 144.251988][ T7168] ? lockdep_hardirqs_on+0x94/0x140 [ 144.257185][ T7168] do_syscall_64+0x4c/0xa0 [ 144.261590][ T7168] ? clear_bhb_loop+0x30/0x80 [ 144.266255][ T7168] ? clear_bhb_loop+0x30/0x80 [ 144.270925][ T7168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.276807][ T7168] RIP: 0033:0x7fdf2cd800d9 [ 144.281217][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.300813][ T7168] RSP: 002b:00007fdf2afd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.309219][ T7168] RAX: ffffffffffffffda RBX: 00007fdf2d007fa0 RCX: 00007fdf2cd800d9 [ 144.317188][ T7168] RDX: 000000002000c884 RSI: 00002000000016c0 RDI: 0000000000000004 [ 144.325151][ T7168] RBP: 00007fdf2afd8090 R08: 0000000000000000 R09: 0000000000000000 [ 144.333111][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.341074][ T7168] R13: 00007fdf2d008038 R14: 00007fdf2d007fa0 R15: 00007ffc8cd87f98 [ 144.349053][ T7168] [ 144.506544][ T7174] netlink: 'syz.1.1035': attribute type 10 has an invalid length. [ 144.560688][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1035'. [ 144.592871][ T7179] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1035'. [ 144.655993][ T7174] netlink: 'syz.1.1035': attribute type 10 has an invalid length. [ 144.694199][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1035'. [ 144.847972][ T7186] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1039'. [ 144.896480][ T7186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.937399][ T7186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.968815][ T7186] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 144.986570][ T7186] bond0 (unregistering): Released all slaves [ 145.328011][ T7197] netlink: 177048 bytes leftover after parsing attributes in process `syz.3.1046'. [ 145.598481][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1045'. [ 145.630230][ T7210] netlink: 'syz.1.1045': attribute type 29 has an invalid length. [ 145.638392][ T7210] netlink: 'syz.1.1045': attribute type 29 has an invalid length. [ 146.308060][ T7229] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1055'. [ 146.655750][ T7229] bridge0: port 3(bond0) entered disabled state [ 146.742496][ T7229] bridge0: port 3(bond0) entered disabled state [ 146.873727][ T7229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.923544][ T7229] device bond_slave_0 left promiscuous mode [ 146.969768][ T7229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.987200][ T7229] device bond_slave_1 left promiscuous mode [ 147.048642][ T7229] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 147.058309][ T7229] device batadv_slave_0 left promiscuous mode [ 147.072221][ T7229] bond0 (unregistering): Released all slaves [ 147.111317][ T7236] netlink: 'syz.1.1059': attribute type 4 has an invalid length. [ 147.578159][ T7241] netlink: 177048 bytes leftover after parsing attributes in process `syz.4.1063'. [ 147.645168][ T9] wlan1: Trigger new scan to find an IBSS to join [ 148.324120][ T7272] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1074'. [ 148.464688][ T7272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.499622][ T7272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.531959][ T7272] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 148.548337][ T7272] bond0 (unregistering): Released all slaves [ 148.579405][ T7275] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 148.633756][ T7284] device syzkaller0 entered promiscuous mode [ 148.748075][ T7296] netlink: 177048 bytes leftover after parsing attributes in process `syz.2.1080'. [ 148.852232][ T7298] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1081'. [ 149.067421][ T7308] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.1086'. [ 149.277293][ T7311] netlink: 'syz.0.1088': attribute type 10 has an invalid length. [ 149.314310][ T7311] device hsr0 entered promiscuous mode [ 149.373498][ T7311] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.428309][ T7311] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 149.447493][ T7311] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 149.473618][ T7311] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 149.496941][ T7326] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.506313][ T4238] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 149.515000][ T4238] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 149.644898][ T7333] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1096'. [ 149.745861][ T7320] syz.1.1092 (7320) used greatest stack depth: 17008 bytes left [ 149.942676][ T7347] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1112'. [ 150.208583][ T7354] netlink: 'syz.3.1100': attribute type 4 has an invalid length. [ 150.320557][ T7363] tap0: tun_chr_ioctl cmd 1074025675 [ 150.325904][ T7363] tap0: persist disabled [ 150.386279][ T7359] netlink: 'syz.2.1105': attribute type 10 has an invalid length. [ 150.681052][ T144] wlan1: Trigger new scan to find an IBSS to join [ 150.808237][ T7377] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.349213][ T7399] __nla_validate_parse: 1 callbacks suppressed [ 151.349229][ T7399] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1119'. [ 151.434030][ T7394] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1118'. [ 151.654258][ T7414] tap0: tun_chr_ioctl cmd 1074025675 [ 151.675796][ T7414] tap0: persist disabled [ 151.702229][ T7414] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 152.017855][ T7432] netlink: 'syz.1.1132': attribute type 4 has an invalid length. [ 152.028962][ T7432] netlink: 'syz.1.1132': attribute type 7 has an invalid length. [ 152.071076][ T7432] netlink: 198628 bytes leftover after parsing attributes in process `syz.1.1132'. [ 152.577034][ T7449] netlink: 'syz.0.1135': attribute type 4 has an invalid length. [ 152.669860][ T7449] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1135'. [ 152.886424][ T7459] tap0: tun_chr_ioctl cmd 1074025675 [ 152.910311][ T7459] tap0: persist disabled [ 152.916359][ T7459] netlink: 'syz.4.1144': attribute type 10 has an invalid length. [ 153.630274][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 155.748151][ T7484] netlink: 'syz.0.1153': attribute type 11 has an invalid length. [ 155.821019][ T7484] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1153'. [ 156.046324][ T7500] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 156.103804][ T7502] netlink: 'syz.0.1158': attribute type 4 has an invalid length. [ 156.136136][ T7502] netlink: 'syz.0.1158': attribute type 7 has an invalid length. [ 156.193079][ T7502] netlink: 198628 bytes leftover after parsing attributes in process `syz.0.1158'. [ 156.688217][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 156.700543][ T7524] netlink: 'syz.4.1165': attribute type 4 has an invalid length. [ 156.740681][ T7524] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1165'. [ 157.102332][ T7539] netlink: 'syz.3.1172': attribute type 11 has an invalid length. [ 157.127864][ T7539] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1172'. [ 158.679963][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 158.690430][ T144] wlan1: Creating new IBSS network, BSSID e2:e6:9d:91:a3:15 [ 160.033437][ T7552] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 160.067989][ T7552] netlink: 'syz.3.1184': attribute type 7 has an invalid length. [ 160.134467][ T7552] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.1184'. [ 160.776824][ T7576] netlink: 'syz.4.1185': attribute type 11 has an invalid length. [ 160.810845][ T7576] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.1185'. [ 162.682627][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 164.049126][ T1584] wlan1: Creating new IBSS network, BSSID 06:23:d9:1c:c6:45 [ 164.509195][ T7621] netlink: 'syz.2.1205': attribute type 11 has an invalid length. [ 164.540988][ T7621] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1205'. [ 164.802504][ T7641] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1214'. [ 164.823416][ T7638] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 164.902284][ T7641] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1214'. [ 167.631499][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 168.291501][ T7684] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1227'. [ 168.448107][ T7684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1227'. [ 168.738673][ T7696] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 170.590975][ T1161] wlan1: Trigger new scan to find an IBSS to join [ 172.071029][ T1161] wlan1: Creating new IBSS network, BSSID 1a:8f:99:ff:85:46 [ 172.112437][ T7728] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1241'. [ 172.148096][ T7730] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1242'. [ 172.254456][ T7728] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1241'. [ 172.427864][ T7740] netlink: 'syz.4.1248': attribute type 3 has an invalid length. [ 172.440129][ T7740] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1248'. [ 172.590378][ T1161] wlan1: Trigger new scan to find an IBSS to join [ 172.784379][ T7750] netlink: 'syz.1.1253': attribute type 25 has an invalid length. [ 172.902835][ T7750] netlink: 'syz.1.1253': attribute type 3 has an invalid length. [ 172.981537][ T7750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1253'. [ 173.105138][ T7760] netlink: 'syz.4.1258': attribute type 4 has an invalid length. [ 173.154224][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 173.707225][ T7766] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.878904][ T7774] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.891493][ T4238] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 173.899334][ T4238] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 174.086564][ T7786] netlink: 'syz.1.1265': attribute type 3 has an invalid length. [ 174.203981][ T7786] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1265'. [ 174.620700][ T7805] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1266'. [ 174.670558][ T1161] wlan1: Trigger new scan to find an IBSS to join [ 175.596940][ T7824] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.613326][ T9] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 175.621337][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 175.630379][ T4763] Bluetooth: hci1: command 0x0406 tx timeout [ 175.641368][ T1323] Bluetooth: hci0: command 0x0406 tx timeout [ 175.686286][ T1323] Bluetooth: hci2: command 0x0406 tx timeout [ 175.721647][ T7831] netlink: 'syz.1.1279': attribute type 21 has an invalid length. [ 175.743857][ T7831] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1279'. [ 175.744164][ T1323] Bluetooth: hci3: command 0x0406 tx timeout [ 175.785580][ T7837] netlink: 'syz.0.1278': attribute type 3 has an invalid length. [ 175.799284][ T1323] Bluetooth: hci4: command 0x0406 tx timeout [ 175.835450][ T7837] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1278'. [ 176.157718][ T7854] FAULT_INJECTION: forcing a failure. [ 176.157718][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 176.236445][ T7854] CPU: 0 PID: 7854 Comm: syz.0.1286 Not tainted syzkaller #0 [ 176.243853][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.253913][ T7854] Call Trace: [ 176.257196][ T7854] [ 176.260121][ T7854] dump_stack_lvl+0x188/0x250 [ 176.264798][ T7854] ? show_regs_print_info+0x20/0x20 [ 176.269991][ T7854] ? load_image+0x410/0x410 [ 176.274491][ T7854] ? __lock_acquire+0x7b50/0x7b50 [ 176.279503][ T7854] should_fail+0x383/0x4b0 [ 176.283904][ T7854] should_failslab+0x5/0x20 [ 176.288387][ T7854] slab_pre_alloc_hook+0x51/0xc0 [ 176.293306][ T7854] __kmalloc+0x6b/0x340 [ 176.297441][ T7854] ? security_sk_alloc+0x47/0x130 [ 176.302450][ T7854] security_sk_alloc+0x47/0x130 [ 176.307287][ T7854] sk_prot_alloc+0x101/0x210 [ 176.311866][ T7854] ? sk_alloc+0x1d/0x310 [ 176.316090][ T7854] sk_alloc+0x2f/0x310 [ 176.320142][ T7854] bpf_prog_test_run_skb+0x23c/0x1190 [ 176.325498][ T7854] ? __fget_files+0x402/0x470 [ 176.330162][ T7854] ? cpu_online+0x60/0x60 [ 176.334470][ T7854] bpf_prog_test_run+0x31c/0x390 [ 176.339394][ T7854] __sys_bpf+0x5a5/0x6f0 [ 176.343619][ T7854] ? bpf_link_show_fdinfo+0x380/0x380 [ 176.348991][ T7854] __x64_sys_bpf+0x78/0x90 [ 176.353388][ T7854] do_syscall_64+0x4c/0xa0 [ 176.357789][ T7854] ? clear_bhb_loop+0x30/0x80 [ 176.362447][ T7854] ? clear_bhb_loop+0x30/0x80 [ 176.367104][ T7854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.372976][ T7854] RIP: 0033:0x7fb7c6d1f0d9 [ 176.377377][ T7854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.396965][ T7854] RSP: 002b:00007fb7c4f77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.405361][ T7854] RAX: ffffffffffffffda RBX: 00007fb7c6fa6fa0 RCX: 00007fb7c6d1f0d9 [ 176.413312][ T7854] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 176.421267][ T7854] RBP: 00007fb7c4f77090 R08: 0000000000000000 R09: 0000000000000000 [ 176.429222][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.437175][ T7854] R13: 00007fb7c6fa7038 R14: 00007fb7c6fa6fa0 R15: 00007ffd0171c878 [ 176.445138][ T7854] [ 176.670378][ T1161] wlan1: Creating new IBSS network, BSSID 7a:a1:61:8f:b3:e0 [ 176.901161][ T7869] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.676550][ T7882] FAULT_INJECTION: forcing a failure. [ 177.676550][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 177.709073][ T7882] CPU: 1 PID: 7882 Comm: syz.0.1299 Not tainted syzkaller #0 [ 177.716485][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.726548][ T7882] Call Trace: [ 177.729824][ T7882] [ 177.732756][ T7882] dump_stack_lvl+0x188/0x250 [ 177.737446][ T7882] ? show_regs_print_info+0x20/0x20 [ 177.742653][ T7882] ? load_image+0x410/0x410 [ 177.747169][ T7882] ? __lock_acquire+0x7b50/0x7b50 [ 177.752208][ T7882] should_fail+0x383/0x4b0 [ 177.756648][ T7882] should_failslab+0x5/0x20 [ 177.761159][ T7882] slab_pre_alloc_hook+0x51/0xc0 [ 177.766103][ T7882] ? __alloc_file+0x25/0x240 [ 177.770694][ T7882] kmem_cache_alloc+0x3d/0x280 [ 177.775456][ T7882] __alloc_file+0x25/0x240 [ 177.779875][ T7882] alloc_empty_file+0x90/0x180 [ 177.784644][ T7882] alloc_file+0x5c/0x510 [ 177.788888][ T7882] ? do_raw_spin_unlock+0x11d/0x230 [ 177.794092][ T7882] alloc_file_pseudo+0x180/0x200 [ 177.799036][ T7882] ? alloc_empty_file_noaccount+0x80/0x80 [ 177.804757][ T7882] ? _raw_spin_unlock+0x24/0x40 [ 177.809620][ T7882] __anon_inode_getfd+0x26b/0x3d0 [ 177.814659][ T7882] ? anon_inode_getfd+0x40/0x40 [ 177.819521][ T7882] ? bpf_lsm_bpf_map+0x5/0x10 [ 177.824213][ T7882] map_create+0x1a62/0x2330 [ 177.828726][ T7882] __sys_bpf+0x30a/0x6f0 [ 177.832977][ T7882] ? bpf_link_show_fdinfo+0x380/0x380 [ 177.838368][ T7882] __x64_sys_bpf+0x78/0x90 [ 177.842792][ T7882] do_syscall_64+0x4c/0xa0 [ 177.847209][ T7882] ? clear_bhb_loop+0x30/0x80 [ 177.851892][ T7882] ? clear_bhb_loop+0x30/0x80 [ 177.856572][ T7882] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.862469][ T7882] RIP: 0033:0x7fb7c6d1f0d9 [ 177.866885][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.886488][ T7882] RSP: 002b:00007fb7c4f77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.894917][ T7882] RAX: ffffffffffffffda RBX: 00007fb7c6fa6fa0 RCX: 00007fb7c6d1f0d9 [ 177.902889][ T7882] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 177.910863][ T7882] RBP: 00007fb7c4f77090 R08: 0000000000000000 R09: 0000000000000000 [ 177.918835][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.926804][ T7882] R13: 00007fb7c6fa7038 R14: 00007fb7c6fa6fa0 R15: 00007ffd0171c878 [ 177.934795][ T7882] [ 178.143242][ T7886] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.150247][ T154] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 178.193176][ T154] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 178.548634][ T7899] netlink: 'syz.3.1296': attribute type 21 has an invalid length. [ 178.611612][ T7899] __nla_validate_parse: 2 callbacks suppressed [ 178.611658][ T7899] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1296'. [ 179.120135][ T7911] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1296'. [ 179.640241][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 179.953189][ T7940] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.193015][ T7936] netlink: 'syz.3.1309': attribute type 10 has an invalid length. [ 180.232177][ T7939] tap0: tun_chr_ioctl cmd 1074025675 [ 180.238478][ T7939] tap0: persist disabled [ 180.450791][ T7943] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1307'. [ 180.479618][ T7949] netlink: 'syz.0.1311': attribute type 39 has an invalid length. [ 181.035203][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 181.081590][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 181.136817][ T7958] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1323'. [ 181.206805][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 181.243446][ T7958] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1323'. [ 181.295151][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 181.333254][ T7958] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1323'. [ 182.590258][ T9] wlan1: Trigger new scan to find an IBSS to join [ 183.630214][ T9] wlan1: Trigger new scan to find an IBSS to join [ 184.740778][ T7967] __nla_validate_parse: 1 callbacks suppressed [ 184.740795][ T7967] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1325'. [ 185.641812][ T144] wlan1: Creating new IBSS network, BSSID de:9b:bd:12:b3:db [ 186.302419][ T7976] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1328'. [ 186.421548][ T7978] netlink: 'syz.2.1315': attribute type 21 has an invalid length. [ 186.443521][ T7978] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1315'. [ 186.593741][ T7979] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1315'. [ 186.680180][ T9] wlan1: Trigger new scan to find an IBSS to join [ 187.217022][ T7999] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 187.246425][ T7995] tap0: tun_chr_ioctl cmd 1074025675 [ 187.273728][ T7995] tap0: persist disabled [ 187.447946][ T7993] netlink: 'syz.4.1327': attribute type 39 has an invalid length. [ 187.931132][ T8011] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1332'. [ 188.067492][ T4236] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 188.067576][ T8014] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.097048][ T4236] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 188.216071][ T8020] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.304042][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 188.361616][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 188.478775][ T8033] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1337'. [ 188.537988][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 188.587602][ T8033] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1337'. [ 188.694070][ T8036] netlink: 'syz.4.1336': attribute type 21 has an invalid length. [ 190.606369][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 193.240646][ T8052] tap0: tun_chr_ioctl cmd 1074025675 [ 193.275433][ T8052] tap0: persist disabled [ 193.295839][ T8055] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 193.749590][ T8064] __nla_validate_parse: 5 callbacks suppressed [ 193.749619][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 193.805598][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 193.845359][ T8064] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1355'. [ 193.893117][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 193.922427][ T8064] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1355'. [ 194.007649][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 194.040901][ T8064] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1355'. [ 194.066425][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.072844][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.345983][ T8075] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1355'. [ 194.360500][ T8072] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1346'. [ 194.680482][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 194.810394][ T4236] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 194.818239][ T4236] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 194.865090][ T8094] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.146621][ T8109] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 195.184909][ T8109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1358'. [ 195.423644][ T8121] FAULT_INJECTION: forcing a failure. [ 195.423644][ T8121] name failslab, interval 1, probability 0, space 0, times 0 [ 195.485766][ T8121] CPU: 0 PID: 8121 Comm: syz.1.1361 Not tainted syzkaller #0 [ 195.493177][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.503254][ T8121] Call Trace: [ 195.506537][ T8121] [ 195.509464][ T8121] dump_stack_lvl+0x188/0x250 [ 195.514154][ T8121] ? show_regs_print_info+0x20/0x20 [ 195.519353][ T8121] ? load_image+0x410/0x410 [ 195.523873][ T8121] ? __might_sleep+0xf0/0xf0 [ 195.528466][ T8121] ? __lock_acquire+0x7b50/0x7b50 [ 195.533488][ T8121] ? netlink_insert+0xe90/0x11f0 [ 195.538431][ T8121] should_fail+0x383/0x4b0 [ 195.542859][ T8121] should_failslab+0x5/0x20 [ 195.547373][ T8121] slab_pre_alloc_hook+0x51/0xc0 [ 195.552319][ T8121] kmem_cache_alloc_node+0x47/0x2c0 [ 195.557522][ T8121] ? __alloc_skb+0xf4/0x750 [ 195.562040][ T8121] __alloc_skb+0xf4/0x750 [ 195.566382][ T8121] netlink_sendmsg+0x654/0xbe0 [ 195.571163][ T8121] ? netlink_getsockopt+0x570/0x570 [ 195.576367][ T8121] ? aa_sock_msg_perm+0x94/0x150 [ 195.581309][ T8121] ? apparmor_socket_sendmsg+0x88/0x230 [ 195.586858][ T8121] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 195.592151][ T8121] ? security_socket_sendmsg+0x7c/0xa0 [ 195.597612][ T8121] ? netlink_getsockopt+0x570/0x570 [ 195.602823][ T8121] ____sys_sendmsg+0x5be/0x8f0 [ 195.607601][ T8121] ? __sys_sendmsg_sock+0x30/0x30 [ 195.612640][ T8121] ? import_iovec+0x6f/0xa0 [ 195.617148][ T8121] ___sys_sendmsg+0x236/0x2e0 [ 195.621840][ T8121] ? __sys_sendmsg+0x290/0x290 [ 195.626628][ T8121] ? trace_event_raw_event_lock+0x250/0x250 [ 195.632554][ T8121] __se_sys_sendmsg+0x1b7/0x2a0 [ 195.637417][ T8121] ? __x64_sys_sendmsg+0x80/0x80 [ 195.642355][ T8121] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 195.648354][ T8121] ? lockdep_hardirqs_on+0x94/0x140 [ 195.653557][ T8121] do_syscall_64+0x4c/0xa0 [ 195.657974][ T8121] ? clear_bhb_loop+0x30/0x80 [ 195.662654][ T8121] ? clear_bhb_loop+0x30/0x80 [ 195.667337][ T8121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.673232][ T8121] RIP: 0033:0x7fe0fd3540d9 [ 195.677647][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.697269][ T8121] RSP: 002b:00007fe0fb5ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.705688][ T8121] RAX: ffffffffffffffda RBX: 00007fe0fd5dbfa0 RCX: 00007fe0fd3540d9 [ 195.713662][ T8121] RDX: ff0f000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 195.721633][ T8121] RBP: 00007fe0fb5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 195.729605][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.737578][ T8121] R13: 00007fe0fd5dc038 R14: 00007fe0fd5dbfa0 R15: 00007fff2bc474d8 [ 195.745572][ T8121] [ 196.590370][ T9] wlan1: Creating new IBSS network, BSSID 9a:b8:94:c0:10:62 [ 200.895356][ T8138] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1367'. [ 201.551476][ T8155] netlink: 'syz.0.1372': attribute type 3 has an invalid length. [ 201.561038][ T8155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1372'. [ 202.008200][ T8164] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 202.622288][ T8178] netlink: 'syz.3.1365': attribute type 39 has an invalid length. [ 203.150760][ T8183] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1384'. [ 203.451311][ T8193] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:fde1:0023 with DS=0x3f [ 203.682828][ T8201] netlink: 'syz.4.1389': attribute type 3 has an invalid length. [ 203.701356][ T8201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1389'. [ 203.764210][ T8197] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 204.181179][ T1584] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 204.189090][ T1584] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 204.197070][ T8221] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 204.429174][ T8227] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1399'. [ 204.590079][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 204.740247][ T8240] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1403'. [ 204.784468][ T8236] netlink: 'syz.2.1400': attribute type 39 has an invalid length. [ 205.836723][ T8271] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 205.911102][ T8274] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1415'. [ 206.156754][ T8281] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 206.200474][ T8281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1418'. [ 206.287032][ T8285] netlink: 177048 bytes leftover after parsing attributes in process `syz.4.1420'. [ 206.595691][ T144] wlan1: Trigger new scan to find an IBSS to join [ 206.680975][ T144] wlan1: Trigger new scan to find an IBSS to join [ 206.972164][ T8304] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1428'. [ 207.579449][ T8335] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 207.640743][ T144] wlan1: Trigger new scan to find an IBSS to join [ 207.835729][ T8347] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.052665][ T8353] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1447'. [ 208.962432][ T8367] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1461'. [ 209.374738][ T8384] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1459'. [ 209.631266][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 209.773408][ T8395] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.783096][ T1584] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 209.822947][ T1584] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 209.907021][ T8400] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1466'. [ 210.524290][ T8407] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1478'. [ 210.600289][ T144] wlan1: Trigger new scan to find an IBSS to join [ 210.649359][ T144] wlan1: Creating new IBSS network, BSSID 32:a8:0b:d6:12:ef [ 210.683708][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 211.373609][ T8430] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1475'. [ 211.631107][ T144] wlan1: Trigger new scan to find an IBSS to join [ 211.711912][ T1584] wlan1: Creating new IBSS network, BSSID 86:49:c5:7a:38:d9 [ 211.754413][ T8440] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 211.770136][ T1584] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 211.783437][ T1584] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 212.079703][ T8453] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1485'. [ 212.366713][ T8468] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1490'. [ 212.739358][ T8475] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 212.784265][ T8484] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1495'. [ 213.142083][ T8489] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1497'. [ 213.236938][ T8489] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 213.596408][ T8498] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1502'. [ 213.630826][ T7910] wlan1: Trigger new scan to find an IBSS to join [ 214.140087][ T8520] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 215.230760][ T8539] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 215.367000][ T8541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1517'. [ 215.563141][ T8548] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1519'. [ 215.594893][ T8541] netlink: 'syz.3.1517': attribute type 21 has an invalid length. [ 215.640497][ T4236] wlan1: Creating new IBSS network, BSSID 26:6c:b1:93:cb:5f [ 215.656574][ T8541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1517'. [ 215.985731][ T8553] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1514'. [ 216.194895][ T8553] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 216.226096][ T8553] CPU: 0 PID: 8553 Comm: syz.2.1514 Not tainted syzkaller #0 [ 216.233506][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.243574][ T8553] Call Trace: [ 216.246857][ T8553] [ 216.249788][ T8553] dump_stack_lvl+0x188/0x250 [ 216.254461][ T8553] ? show_regs_print_info+0x20/0x20 [ 216.259646][ T8553] ? load_image+0x410/0x410 [ 216.264141][ T8553] sysfs_warn_dup+0x8a/0xa0 [ 216.268634][ T8553] sysfs_do_create_link_sd+0xc0/0x110 [ 216.273997][ T8553] device_add+0x83b/0x1050 [ 216.278400][ T8553] wiphy_register+0x1e74/0x2c40 [ 216.283243][ T8553] ? cfg80211_event_work+0x40/0x40 [ 216.288335][ T8553] ? minstrel_ht_alloc+0x807/0x980 [ 216.293433][ T8553] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 216.299497][ T8553] ieee80211_register_hw+0x2a03/0x3a60 [ 216.304973][ T8553] ? ieee80211_register_hw+0xae1/0x3a60 [ 216.310537][ T8553] ? ieee80211_tasklet_handler+0x20/0x20 [ 216.316191][ T8553] ? hrtimer_init+0x90/0x220 [ 216.320796][ T8553] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 216.327047][ T8553] ? hrtimer_init+0x10c/0x220 [ 216.331737][ T8553] mac80211_hwsim_new_radio+0x209d/0x4050 [ 216.337489][ T8553] hwsim_new_radio_nl+0xa7d/0xc50 [ 216.342540][ T8553] genl_rcv_msg+0xd0b/0xfa0 [ 216.347069][ T8553] ? genl_bind+0x370/0x370 [ 216.351502][ T8553] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 216.357497][ T8553] ? lock_chain_count+0x20/0x20 [ 216.362364][ T8553] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 216.368530][ T8553] ? lockdep_hardirqs_on+0x94/0x140 [ 216.373741][ T8553] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 216.379910][ T8553] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 216.386252][ T8553] ? lock_acquire+0x208/0x400 [ 216.390935][ T8553] netlink_rcv_skb+0x1e9/0x430 [ 216.395690][ T8553] ? genl_bind+0x370/0x370 [ 216.400093][ T8553] ? netlink_ack+0xb10/0xb10 [ 216.404676][ T8553] ? down_read+0x1aa/0x2e0 [ 216.409078][ T8553] genl_rcv+0x24/0x40 [ 216.413043][ T8553] netlink_unicast+0x78f/0x940 [ 216.417800][ T8553] netlink_sendmsg+0x8ba/0xbe0 [ 216.422556][ T8553] ? netlink_getsockopt+0x570/0x570 [ 216.427735][ T8553] ? aa_sock_msg_perm+0x94/0x150 [ 216.432667][ T8553] ? apparmor_socket_sendmsg+0x88/0x230 [ 216.438217][ T8553] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 216.443501][ T8553] ? security_socket_sendmsg+0x7c/0xa0 [ 216.448960][ T8553] ? netlink_getsockopt+0x570/0x570 [ 216.454149][ T8553] ____sys_sendmsg+0x5be/0x8f0 [ 216.458908][ T8553] ? __sys_sendmsg_sock+0x30/0x30 [ 216.463924][ T8553] ? import_iovec+0x6f/0xa0 [ 216.468415][ T8553] ___sys_sendmsg+0x236/0x2e0 [ 216.473086][ T8553] ? __sys_sendmsg+0x290/0x290 [ 216.477861][ T8553] __se_sys_sendmsg+0x1b7/0x2a0 [ 216.482957][ T8553] ? __x64_sys_sendmsg+0x80/0x80 [ 216.487896][ T8553] ? syscall_enter_from_user_mode+0x2a/0x70 [ 216.493783][ T8553] do_syscall_64+0x4c/0xa0 [ 216.498184][ T8553] ? clear_bhb_loop+0x30/0x80 [ 216.502844][ T8553] ? clear_bhb_loop+0x30/0x80 [ 216.507505][ T8553] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.513381][ T8553] RIP: 0033:0x7f4401d660d9 [ 216.517783][ T8553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.537372][ T8553] RSP: 002b:00007f43fffbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.545772][ T8553] RAX: ffffffffffffffda RBX: 00007f4401fedfa0 RCX: 00007f4401d660d9 [ 216.553806][ T8553] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 216.561773][ T8553] RBP: 00007f4401dfd024 R08: 0000000000000000 R09: 0000000000000000 [ 216.569736][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.577697][ T8553] R13: 00007f4401fee038 R14: 00007f4401fedfa0 R15: 00007ffcc0e6cbe8 [ 216.586107][ T8553] [ 216.601719][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 216.644500][ T8569] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 216.671506][ T144] wlan1: Trigger new scan to find an IBSS to join [ 216.883300][ T8580] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.369300][ T8596] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.379490][ T7910] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 217.425605][ T7910] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 217.640957][ T7910] wlan1: Trigger new scan to find an IBSS to join [ 217.771407][ T8603] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1533'. [ 218.685411][ T8621] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1536'. [ 218.800159][ T8624] netlink: 'syz.0.1536': attribute type 21 has an invalid length. [ 218.854411][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1536'. [ 219.158788][ T8632] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1540'. [ 219.217290][ T8632] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 219.643823][ T144] wlan1: Trigger new scan to find an IBSS to join [ 219.650532][ T7910] wlan1: Trigger new scan to find an IBSS to join [ 220.590175][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 220.985483][ T8646] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1549'. [ 221.631235][ T144] wlan1: Trigger new scan to find an IBSS to join [ 221.797747][ T8675] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1561'. [ 221.889420][ T8675] netlink: 'syz.1.1561': attribute type 21 has an invalid length. [ 221.968417][ T8675] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1561'. [ 221.996645][ T8685] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1564'. [ 222.055790][ T8685] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 222.575548][ T8704] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 222.590530][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 223.640084][ T7910] wlan1: Creating new IBSS network, BSSID e2:34:58:e6:bf:a8 [ 223.817772][ T8744] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1593'. [ 224.590355][ T144] wlan1: Trigger new scan to find an IBSS to join [ 224.599307][ T7910] wlan1: Trigger new scan to find an IBSS to join [ 224.621714][ T8762] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1610'. [ 224.763846][ T144] wlan1: Creating new IBSS network, BSSID a6:f9:b0:fc:12:ea [ 225.226789][ T8778] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 225.236318][ T1584] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 225.254857][ T1584] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 226.055795][ T8796] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 226.131153][ T8791] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1613'. [ 226.634721][ T8811] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1617'. [ 228.590379][ T7908] wlan1: Trigger new scan to find an IBSS to join [ 228.596954][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 229.124641][ T8852] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1630'. [ 229.340854][ T8862] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1634'. [ 229.839336][ T8875] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1654'. [ 230.358801][ T8894] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 230.500131][ T8889] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1650'. [ 230.680290][ T7908] wlan1: Creating new IBSS network, BSSID 8e:55:06:a9:93:19 [ 231.380375][ T8911] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 231.639751][ T9] wlan1: Trigger new scan to find an IBSS to join [ 232.250513][ T8927] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1660'. [ 232.681028][ T144] wlan1: Trigger new scan to find an IBSS to join [ 233.397855][ T8935] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1672'. [ 233.641123][ T9] wlan1: Creating new IBSS network, BSSID a6:00:cc:f9:07:69 [ 233.660054][ T7908] wlan1: Trigger new scan to find an IBSS to join [ 233.882409][ T8940] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 236.680379][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 236.687020][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 236.700034][ T9] wlan1: Trigger new scan to find an IBSS to join [ 236.968298][ T7908] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 237.003559][ T8967] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 237.019074][ T7908] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 237.164067][ T8971] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1665'. [ 237.315302][ T8988] netlink: 'syz.2.1676': attribute type 9 has an invalid length. [ 237.419842][ T8988] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1676'. [ 237.662909][ T8990] device syzkaller0 entered promiscuous mode [ 238.006600][ T8997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'. [ 238.375230][ T9008] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1684'. [ 239.640345][ T1584] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 240.084731][ T9038] device syzkaller0 entered promiscuous mode [ 240.326070][ T9042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1695'. [ 240.617411][ T9053] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1698'. [ 240.680214][ T7910] wlan1: Trigger new scan to find an IBSS to join [ 241.138762][ T9057] device syzkaller0 entered promiscuous mode [ 241.446990][ T9072] netlink: 'syz.1.1704': attribute type 9 has an invalid length. [ 241.463664][ T9075] netlink: 'syz.3.1705': attribute type 10 has an invalid length. [ 241.494255][ T9075] netlink: 'syz.3.1705': attribute type 10 has an invalid length. [ 241.521455][ T9072] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1704'. [ 241.548020][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1707'. [ 242.395423][ T9096] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1714'. [ 242.884525][ T9103] device syzkaller0 entered promiscuous mode [ 242.925409][ T9107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1720'. [ 243.616521][ T9137] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 243.838275][ T9128] device syzkaller0 entered promiscuous mode [ 243.854144][ T9137] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 243.866548][ T9144] netlink: 'syz.3.1728': attribute type 9 has an invalid length. [ 243.910196][ T9144] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1728'. [ 244.034823][ T9142] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1729'. [ 244.357613][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1732'. [ 244.820545][ T9176] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.851778][ T9179] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.862208][ T7910] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 244.873974][ T7910] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 244.923030][ T9181] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1745'. [ 245.288680][ T9185] device syzkaller0 entered promiscuous mode [ 248.591078][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 248.764072][ T9205] device syzkaller0 entered promiscuous mode [ 248.785615][ T9211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1753'. [ 249.225229][ T9231] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1762'. [ 249.346495][ T9240] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 249.506649][ T9245] netlink: 'syz.4.1749': attribute type 9 has an invalid length. [ 249.515937][ T9245] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1749'. [ 249.893535][ T9258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1768'. [ 250.554827][ T9265] device syzkaller0 entered promiscuous mode [ 250.718819][ T9266] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.945953][ T9289] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1778'. [ 251.419565][ T9300] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 251.574481][ T9301] device syzkaller0 entered promiscuous mode [ 251.807521][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1788'. [ 251.943067][ T9335] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.646949][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1805'. [ 252.866771][ T9357] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.901549][ T9359] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1796'. [ 253.208242][ T9351] device syzkaller0 entered promiscuous mode [ 253.543113][ T9388] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.630066][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 253.827834][ T9399] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 254.001262][ T9401] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 254.085302][ T9405] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1811'. [ 255.176831][ T9428] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 255.483180][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.489536][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.630771][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 255.977471][ T9442] device syzkaller0 entered promiscuous mode [ 256.590204][ T9] wlan1: Trigger new scan to find an IBSS to join [ 256.597133][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 256.607027][ T9461] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1824'. [ 256.952997][ T4236] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 256.953005][ T9468] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 256.970475][ T4236] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 257.649847][ T9] wlan1: Trigger new scan to find an IBSS to join [ 258.506511][ T9496] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.676146][ T9515] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1839'. [ 260.599684][ T9] wlan1: Trigger new scan to find an IBSS to join [ 260.600800][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 261.317713][ T9529] device syzkaller0 entered promiscuous mode [ 262.680190][ T4238] wlan1: Creating new IBSS network, BSSID 7e:b1:e0:ed:bc:1a [ 262.895509][ T9548] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 263.568783][ T9560] device syzkaller0 entered promiscuous mode [ 263.579999][ T9562] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1853'. [ 264.485497][ T9572] device syzkaller0 entered promiscuous mode [ 264.545361][ T9578] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 264.591310][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 265.631425][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 265.641646][ T9598] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1866'. [ 266.024454][ T9597] device syzkaller0 entered promiscuous mode [ 266.415115][ T9604] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.681060][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 266.720483][ T9614] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 267.065431][ T9621] device syzkaller0 entered promiscuous mode [ 267.452305][ T9633] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 268.335590][ T9647] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1878'. [ 268.772719][ T7910] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 268.782531][ T9652] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 268.800000][ T7910] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 269.631445][ T1584] wlan1: Trigger new scan to find an IBSS to join [ 269.638124][ T4236] wlan1: Trigger new scan to find an IBSS to join [ 269.638147][ T9] wlan1: Trigger new scan to find an IBSS to join [ 269.961573][ T9666] device syzkaller0 entered promiscuous mode [ 271.222316][ T9676] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.630209][ T1584] wlan1: Creating new IBSS network, BSSID ee:da:bd:23:d7:bd [ 271.691506][ T9684] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1891'. [ 272.000489][ T9691] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 272.593402][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 272.657241][ T9708] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 272.682275][ T4236] ------------[ cut here ]------------ [ 272.688002][ T4236] WARNING: CPU: 1 PID: 4236 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 272.738662][ T4236] Modules linked in: [ 272.762555][ T4236] CPU: 1 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 272.799611][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.831971][ T9709] device syzkaller0 entered promiscuous mode [ 272.848504][ T4236] Workqueue: cfg80211 cfg80211_event_work [ 272.873449][ T4236] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 272.915808][ T4236] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 a4 3f f8 0f 0b eb bf e8 d7 a4 3f f8 <0f> 0b eb b6 e8 ce a4 3f f8 0f 0b e9 82 fd ff ff e8 c2 a4 3f f8 0f [ 273.032063][ T4236] RSP: 0018:ffffc900031bfac0 EFLAGS: 00010293 [ 273.058234][ T4236] RAX: ffffffff89395ac9 RBX: 1ffff92000637f5c RCX: ffff88802249bb80 [ 273.094665][ T4236] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a42c0 [ 273.133202][ T4236] RBP: ffffc900031bfb70 R08: ffffffff901ef12f R09: 1ffffffff203de25 [ 273.185114][ T4236] R10: dffffc0000000000 R11: fffffbfff203de26 R12: ffff8880257f35f0 [ 273.213178][ T4236] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88805fa58c90 [ 273.247460][ T4236] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 273.278884][ T4236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.317935][ T4236] CR2: 00007fdf2afb6ff8 CR3: 0000000078cb9000 CR4: 00000000003506e0 [ 273.359608][ T4236] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.404446][ T4236] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 273.447894][ T4236] Call Trace: [ 273.465411][ T4236] [ 273.473972][ T4236] ? trace_rdev_return_void+0x1c0/0x1c0 [ 273.494026][ T4236] cfg80211_process_wdev_events+0x373/0x490 [ 273.515638][ T4236] cfg80211_process_rdev_events+0x9d/0x110 [ 273.536095][ T4236] cfg80211_event_work+0x2b/0x40 [ 273.557958][ T4236] process_one_work+0x867/0xff0 [ 273.585922][ T4236] ? worker_detach_from_pool+0x240/0x240 [ 273.607296][ T4236] ? lockdep_hardirqs_off+0x70/0x100 [ 273.633006][ T7910] wlan1: Trigger new scan to find an IBSS to join [ 273.642158][ T4236] ? _raw_spin_lock_irq+0xb7/0xf0 [ 273.662429][ T4236] ? _raw_spin_lock_irqsave+0x100/0x100 [ 273.686814][ T4236] ? wq_worker_running+0x97/0x170 [ 273.707578][ T4236] worker_thread+0xad7/0x12a0 [ 273.728462][ T4236] kthread+0x42e/0x520 [ 273.744949][ T4236] ? rcu_lock_release+0x20/0x20 [ 273.764524][ T4236] ? kthread_blkcg+0xd0/0xd0 [ 273.785180][ T4236] ret_from_fork+0x1f/0x30 [ 273.804161][ T4236] [ 273.817309][ T4236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.824604][ T4236] CPU: 1 PID: 4236 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 273.832152][ T4236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.842205][ T4236] Workqueue: cfg80211 cfg80211_event_work [ 273.847933][ T4236] Call Trace: [ 273.851211][ T4236] [ 273.854142][ T4236] dump_stack_lvl+0x188/0x250 [ 273.858829][ T4236] ? show_regs_print_info+0x20/0x20 [ 273.864043][ T4236] ? load_image+0x410/0x410 [ 273.868558][ T4236] panic+0x2f8/0x850 [ 273.872456][ T4236] ? bpf_jit_dump+0xd0/0xd0 [ 273.876971][ T4236] ? ret_from_fork+0x1f/0x30 [ 273.881564][ T4236] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 273.887107][ T4236] __warn+0x248/0x2b0 [ 273.891084][ T4236] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 273.896628][ T4236] report_bug+0x1b9/0x2e0 [ 273.900957][ T4236] handle_bug+0x3a/0x70 [ 273.905106][ T4236] exc_invalid_op+0x16/0x40 [ 273.909602][ T4236] asm_exc_invalid_op+0x16/0x20 [ 273.914882][ T4236] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 273.921041][ T4236] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 a4 3f f8 0f 0b eb bf e8 d7 a4 3f f8 <0f> 0b eb b6 e8 ce a4 3f f8 0f 0b e9 82 fd ff ff e8 c2 a4 3f f8 0f [ 273.940645][ T4236] RSP: 0018:ffffc900031bfac0 EFLAGS: 00010293 [ 273.946718][ T4236] RAX: ffffffff89395ac9 RBX: 1ffff92000637f5c RCX: ffff88802249bb80 [ 273.954687][ T4236] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a42c0 [ 273.962659][ T4236] RBP: ffffc900031bfb70 R08: ffffffff901ef12f R09: 1ffffffff203de25 [ 273.970633][ T4236] R10: dffffc0000000000 R11: fffffbfff203de26 R12: ffff8880257f35f0 [ 273.978605][ T4236] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88805fa58c90 [ 273.986590][ T4236] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 273.992154][ T4236] ? trace_rdev_return_void+0x1c0/0x1c0 [ 273.997717][ T4236] cfg80211_process_wdev_events+0x373/0x490 [ 274.003631][ T4236] cfg80211_process_rdev_events+0x9d/0x110 [ 274.009451][ T4236] cfg80211_event_work+0x2b/0x40 [ 274.014391][ T4236] process_one_work+0x867/0xff0 [ 274.019257][ T4236] ? worker_detach_from_pool+0x240/0x240 [ 274.024893][ T4236] ? lockdep_hardirqs_off+0x70/0x100 [ 274.030188][ T4236] ? _raw_spin_lock_irq+0xb7/0xf0 [ 274.035213][ T4236] ? _raw_spin_lock_irqsave+0x100/0x100 [ 274.040766][ T4236] ? wq_worker_running+0x97/0x170 [ 274.045802][ T4236] worker_thread+0xad7/0x12a0 [ 274.050519][ T4236] kthread+0x42e/0x520 [ 274.054588][ T4236] ? rcu_lock_release+0x20/0x20 [ 274.059438][ T4236] ? kthread_blkcg+0xd0/0xd0 [ 274.064032][ T4236] ret_from_fork+0x1f/0x30 [ 274.068465][ T4236] [ 274.071708][ T4236] Kernel Offset: disabled [ 274.076175][ T4236] Rebooting in 86400 seconds..