last executing test programs: 11m41.808569311s ago: executing program 0 (id=3675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffda}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 11m41.616136432s ago: executing program 0 (id=3677): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x138f67536d80380e, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xfe, 0xfffff020}, {0x16, 0x0, 0x7}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000500aaaaaaaa0000000000bbbbbbbbbbbb0180c20000000180c2000001"]) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 11m39.203469784s ago: executing program 0 (id=3690): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10003}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r6}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f0000000040)=0x20000, &(0x7f0000000500)=r6}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) 11m37.787439537s ago: executing program 0 (id=3697): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x50) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768b", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, r3, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0xe00, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11m37.530403912s ago: executing program 0 (id=3701): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x0, 0xad}, 0x28) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee68886dd", 0x0, 0xadf0, 0xf000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m36.470726884s ago: executing program 0 (id=3706): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x49, 0xff, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x1, 0x43fe, 0x7fffffbf, 0x0, 0x0, 0x0, 0x0, 0x8000000044000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r2) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180)) 11m21.303139507s ago: executing program 32 (id=3706): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x49, 0xff, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x1, 0x43fe, 0x7fffffbf, 0x0, 0x0, 0x0, 0x0, 0x8000000044000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r2) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180)) 5.125994531s ago: executing program 5 (id=8049): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x1a, 0x1a00}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="f4f20800062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 4.647307419s ago: executing program 5 (id=8051): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', 0x0, r2, 0x0, 0x5, 0x1}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x6d}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xca}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x20, &(0x7f0000000240)=""/32, 0x41000, 0x20, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb875}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x5, 0x1, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r3, r4, 0xe, 0xa, r2, @void, @value=r2, @void, @void, r6}, 0x20) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) sendmsg(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="c98e01edce9700b4f498fef145c43e6abbd1cff3dc2b7366dd66a8b768804c6085339929a5669f4326cafe4155143f789494166ac4ecdb9aeec68d228b9ed48c9866b8cd4b6b032b3c3f3e4f4c545096b11bc4eb6941ce739235e3920f4c95eb3d7169e3407a3c32d5ca7e030c907d421047cea4d37a7f8d9eb6d49800758a3092b63798a1b9597f50dd07680f1588b362a0fca5623a04934bfa05cfcb3cde440fcd2e3235dde01600a681c66574357d941d7ac7b9", 0xb5}, {&(0x7f00000005c0)="a7a71defcd84b289526ded8925721c6b23", 0x11}, {&(0x7f0000000600)="511c71e0162bd6277f8a7ff7d569ccf3d50e922860ea4133c9b83255aada5b1779282fbd9ab1877da95c804c8a2d0a24cc488d30dbff9e4e771c75eeb7855886a0076943b921ddaf77ed2918b94929dd9dd1cbd00bf3626caacb78bd46dc16f4142500ac15c75b594c121919c7f2a964ab581ff49f77dedaf8fd4fd74232c4fe43baec25020fdef9ae4f44c03c1f5076db89b2aca3717031749b76506a0ef132cac6aed94c7e24ee741e01eb791a5c220ce30cfe1241107d540ccfac9332587e602e1d7294ecafd720a16982705a33caf0b16991b257cf42d5469664", 0xdc}], 0x3, &(0x7f0000000740)=[{0x78, 0x3a, 0x5b7, "daf69827a9855f9d2f2c01effecc4fb6b79dbe0151864216ccd97645d93a1df9a5bb57cc129e08c98893dcfc6ec0b2bc26e61cba61ba681fbcb9c122e96f4af73b1d661b83d0a1953a088a7d5fabf7b760b7c2483937b187a063d159ac8baf9b4287de"}], 0x78}, 0xc051) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, r2, 0x2, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000bc0)={&(0x7f0000000800)="6677c6eb45a7dd99e88104027df6fdab51f39861bbc7899e8dc2de70b6b403fcac91ae0339583b10953a19f36e7d73644d5ce70253b612c559b21726340de6a7ca55136127b6775bb1374b5ca09228acd56a2fa6be722154e31c35bab6d84cbafa4223cda5c1afaa801e41481bac77433884a3ba29992656d0289ed7ec960519c1d99b91b82e59f9a4b727c770e4fdd0d46a7e59ee6d8c35bf77dcb7d5cc037117ff32b96ed7ac2366e19a516b6a84393f377253fdb72cb5e7f73fff77edebebf700c9854b9dbce3cb8fb94d35b2b4d0441ca6bc9e5e7da690ccebc004f48dedf6ccc8f6d3f94f63", &(0x7f0000000900)=""/75, &(0x7f0000000980)="1d0ed56a31ecf3f66fd69088e6bf951c7a4de38b1e93a6f9a01bb551d4177ff44d9f91c3f7137673b20166310f35dd7c954c236d688718411f103e942b2129d791b2749abac7bd838118ae6706eaff61dfe00f18d5a44930cd07d97fb3c33cfb693ff4dd6e2d29195fdc060a5640fb187103a4d2b906e8f0371f979d095abdc5b646684986e309c41226", &(0x7f0000000a40)="eeec8c1da9b8d4fbf424378b592196d678236abbf38edfdb870ad28a7b0588c425dab2f47a24e1392aed20c50a96ed944e4bc27cdb91b968b42ac80b7614184b2b04c33ac70f86ced796c27807bed3a6649aad6e4a4a55e32c5f4136e48d50ef567c62b4a4cf106c5d743c1d7ef7160f028cdd6bd3c631eac29c8e501b76ce9e148583671a7d961cee13d9122a384bf1057c4ede9d3652d615cec35fbb9f85f26a51877fcbff3dbbaf732d35fa3b9de397d5414deef9af1d04ca9f2099e95c6d8a69102e706469b8476aa03dfb6c449c38", 0x3, r8, 0x4}, 0x38) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x8}, 0x18) close(r0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000cc0)=@generic={&(0x7f0000000c80)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000d00)={0x1, 0xa, [@remote, @remote, @local, @local, @broadcast, @empty, @random="51f0e91aa53f", @random="4a69f36739d6", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d40)={0x0, r0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@cgroup=r5, r9, 0x38, 0x2010, 0x0, @value=r5, @void, @void, @void, r6}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000dc0)={r2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r2, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000ec0)=r10) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, r5, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={r5}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001000)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000fc0)={@map=r5, 0xffffffffffffffff, 0x37, 0x202c, r9, @void, @void, @value=r11, @void, r6}, 0x20) 4.384340164s ago: executing program 5 (id=8054): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000200, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="028dffffffff"}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x44, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5d533", &(0x7f0000000640)=""/148, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 4.380432174s ago: executing program 4 (id=8057): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x18000, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'ipvlan1\x00', 0x1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xfffffffffffffe7d) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x3fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.060968143s ago: executing program 5 (id=8059): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) 2.126772716s ago: executing program 1 (id=8062): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x20010900, &(0x7f0000000580), 0x0, &(0x7f0000000300), &(0x7f0000000680), &(0x7f00000006c0)) perf_event_open(0x0, r1, 0xf, r0, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), 0x0}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) 2.044520191s ago: executing program 5 (id=8064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000edffffffffefff06000095000000deffffff"], 0x0, 0x5, 0xea, &(0x7f00000005c0)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x3, 0x2}, 0x10}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x200008c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010011c0001000000dc00000000000000"], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x38, 0x0, 0x1300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018460000060000000000000000000000bf91000000000000b7020000020000008500000084000000b700"], &(0x7f00000001c0)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xe2ab}, 0x94) 1.961531176s ago: executing program 4 (id=8066): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000080)=[{&(0x7f0000000040)="1400003029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 1.900563389s ago: executing program 3 (id=8067): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 1.900108359s ago: executing program 1 (id=8068): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1=0xe00001f4}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0xba}}}}], 0x20, 0xa00}, 0x4840) 1.822413553s ago: executing program 1 (id=8069): socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244ce7ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a60d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba949609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c23595bf88f78f00000000008f02712c3d8fc4e2b4507ec874eb2b630000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2c85c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200400000004000cbefd9a6bb70f60eb9c01dd2fc79a957c84f2369dcd548b3d360c4b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f04ff00009de2323f927355408f573c4797d3fa9709495a3b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff27b1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e2076234e8000000000000009f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de85573d12986d6d74e71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff07f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aafc91fbb4c256409e54daefbb107c381fa729ff5f3907ac5a33b444bb769b7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf1cf84393e549fb06a2e609768222f6b9d6ed1dd38e6131ba0a3723b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e0d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65856eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1787cc341fff44fec5c1c439a0f79427a19bd7fa51d1b0311e074e81aff993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac838674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f532639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483be1920efcb413798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aea00e057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19ebc1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f811f7a793a70d2d6d7bfbb90d220acc687931b42d6bc83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02831b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342f9c009adb5b2251461a1b24bb68f486e172932ecb204b4d807536a75942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841020a645d1cc9ec4eee79c290fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f14e4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e938e0d5fa16650f2b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e98389557affbd25e185ef66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3940600de34de2001c8533a3766e6e4c496957908b0a12814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca15981090ded672f5af8a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd163d4eda93fc49571c36b1793db8f7e6aed12a305366599f5f029a7b24558c020293ef472f00000000000000007cfbd7cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd004be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a773c6437be8e70ce7123603eed32ec718ca5ffc3bbc8d1ebceec1c6df2703ee93fe6055c2b27974801f2041125b7cfca18e8cc863bf2702d2df259cd0aa7a319b1f8e5ef346deaf0cadbac2f31ba418e7ba0c1cc416f549ab6464db7fc19d9c7509d601620fd8b8daf233f0e631232dd6672dd60d8c507ba9245394ad28665545132c03646e2827793621a58f92f1a7ea0a4a392e3189a4ec2232b3b4d3248e9000000985d9c2231dbea34fe5d05f0a9734983583f95a3249df4d70b7e9102d7e8f992e251ac99419c927defe7d93355f90a44ce9b82ec1c0f2c4b03fc4eb0aecaf5adc42a7198d947945adc7e3dcb9b7e7ad7b9df59278be0035f50ec344da371c2d2ec853c62e8b060eda68bf9535a7c283637eca1b985ab5fdf8305e61c0d24c0ad6f58831cf4fccf0eb589be3a14f1c0f985c68be4ec5705e86a8892484f12be24bce2dbbb6c856a52e507283f478146565217eae82589780ac8d53a887a7a43b61bc2e23affe9aad55333455fedbcbb25b2d88b2ecef26744949cd98020fe6324851d098b44ed50f0e033fd0f299e65c932e7871500f900fde1f19087d2170683b0e88cba46beb7e08aec85110bb0bb56efb7fa2fa43a69071fd32fade9000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.768690727s ago: executing program 3 (id=8070): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000200, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="028dffffffff"}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x4f, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5d533c411581f58d4a05fe50786", &(0x7f0000000640)=""/148, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.660376413s ago: executing program 2 (id=8072): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b590101080a5de9f19f55d0e5ad", 0xffeb}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) 1.659298323s ago: executing program 4 (id=8073): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000200, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="028dffffffff"}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x2d, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c88", &(0x7f0000000640)=""/148, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.570795498s ago: executing program 1 (id=8074): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000100)=[{&(0x7f0000000040)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000005007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8004000) 1.537361s ago: executing program 2 (id=8075): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000ff0000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.472601813s ago: executing program 3 (id=8076): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) 1.408391128s ago: executing program 1 (id=8077): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x30040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r2) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x815) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) r4 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x28, 0x8, 0x0, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffdef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)="b1648ee31c11bf3c3593fd6a6d1ab959e527fcacb829501aae82f11fa6802131e167f5de762b2b4c5ae50720e98a6e032904ae29a09703ffe9e30c1266e22ff7a78d09015256dd", 0x47}, {&(0x7f0000000280)="32c998b6521c057816ede8b5dd90819d80f1ab133f7940b98771da22fa02f7d4c88958b615dce253906da1a4eb8f1844dd5c684c3c7044d2bc1a81cb9d12d36b20517557d22d8879a847a5b0bdc51be192c9e6fe6a68a329b887f2af3063ab82367ee914f4f7ecc2d1f0893a8833bf43382ed6cd2f8033c9c330b676ed473069e7705d3afec85e93856dc4", 0x8b}, {&(0x7f0000000780)="e94171746fd8e398e8efeb91218c3e928e08b975411b8a2579b83e316ad2d1be3a8f739345de6398b34e9d5a95cf7eb56acd1891d09189158cd942dc4596ffbdbb2f4308f1a4fcab12c7d14133cbeb270890ac741db174522393382083c611364358130c036347a503027e7a85bbdd362c739da2720061790212e6a0d046566d0d2790d55235ddc66e0c25dc5d47c6b19663c6436dc7c29549a026ea3ab24cf99e32c91371d93402e26aa83a0b8c31c9b5c3ba334a4d34320e4b", 0xba}, {&(0x7f0000000a40)="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", 0x1000}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x41}}}}], 0x20}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f00000005c0)}, 0x20) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.341617431s ago: executing program 5 (id=8078): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x18000, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'ipvlan1\x00', 0x1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xfffffffffffffe7d) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.303727014s ago: executing program 2 (id=8079): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400002022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 1.270030036s ago: executing program 3 (id=8080): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.232889918s ago: executing program 4 (id=8081): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000800000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.115793584s ago: executing program 2 (id=8082): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000006c0)=@ax25={{0x3, @null}, [@netrom, @bcast, @bcast, @rose, @rose, @bcast, @netrom, @netrom]}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000840)=""/72, 0x48}, {&(0x7f00000008c0)=""/248, 0xf8}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/187, 0xbb}, {&(0x7f0000000c40)=""/178, 0xb2}], 0x7}, 0x2001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400300029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', r4, r5, 0x5, 0x2, 0x3}, 0x50) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg(r6, &(0x7f00000005c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7f, 0x4}, 0x80, 0x0}, 0x8000) 1.110694085s ago: executing program 3 (id=8083): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f00000000c0)=@raw=[@ldst={0x0, 0x3, 0x3, 0x7, 0x9, 0x40, 0x8}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x650134d50e1c684d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xe, 0x5, 0xec}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x3, 0x1, 0x7}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000300)=r1}, 0x20) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1e) (async) socketpair(0x29, 0x1, 0x87db, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000400)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="64c63fea7c701ae25ecf083f1047ce094f7b6d4fdba6d4f2f966b7b2f0a5146c88da1ea8dcc8357b8ff4a753104a31ec0ff33a85a5e721b5d20180b43b465b0c9bbbdb079ff4460acc6a4206cc29a3662fc292db5d1271172fca275fd130c33cca6f1070c2543d1b5d7bb73be3058dd9518ea2a0bab9fc379a5fb2be3d3d5df032942fe1f13cb1fd5efcb41f873c54173c40dcf192c9f315a1a2dc1214a593cd31ddff1da8bb601dbba5e304afb422ad3a7680517816b0bd06e6a085e5fe3d", 0xbf}, {&(0x7f0000001500)="1f11e0c8e09af708a88690a9dede98686cdd5ea74f7bbec342ab83413c8dbbc2e17cd015e3a935b2bdac5fcdc43c1395e0475447983e7644bc55cd86c4ebeda473845e0ca9394e5b707e29fbe4b9349c40809db5ff30d26856e5c826aa73c7d49ad8d978be1dca7971194db2a5f9ccab4cc7203b693fed0959a71b9d49240558cd8bf50d3290aa05f2253725e74ae3994ba0aebec4ca4b9949fec6aa43", 0x9d}], 0x3, &(0x7f0000001600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x4040011) (async) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001680)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f00000016c0)={'some', 0x20, 0x5, 0x20, 0x8}, 0x2f) syz_clone(0x10200000, &(0x7f0000001700)="45ea387cc8e5bb8e42ef191ecd68c6fda933342cff1756fd23dd6fa0be20945f472e40a0b3af6d5a39954b302bc829044fde844d27cbabd29f676da9d2084f751c706ddff206c1eca91bb4ced85adc004b39fb4a9aded192e43c5ece57f58f5f5483ffe5e6c4c88331811201a74090f195df44743bca6cdf0d2d404bda8c3a009dee2209674040607052b2adbda7697587681fb48bd3a6042a0e9168eaaa34df37cb83fc43e54c102284c711c9a1239a53d85a4695b3931bc22c7eeeb4928e073de5186f3687c6a68811f8b17422e6960d948ca7c703aead8d497b3c7083b994081fda7ccb074696d15744140bb7e86749e2bf324aa965d2", 0xf8, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="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") r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002880)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f00000028c0), 0x2, 0x0) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) (async) unlink(&(0x7f0000002900)='./file0\x00') openat$cgroup_int(r5, &(0x7f0000002940)='cgroup.clone_children\x00', 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000002980), 0x4) (async) mkdir(&(0x7f00000029c0)='./file0\x00', 0x15) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002a40)={'veth0_macvtap\x00', 0x100}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b40)={&(0x7f0000002a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@fwd={0x5}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x7a, 0x0, 0x63, 0x6}]}, {0x0, [0x2e, 0x4f, 0x0, 0x0]}}, &(0x7f0000002ac0)=""/87, 0x3a, 0x57, 0x0, 0x9, 0x9e237b92dbe6ac2a}, 0x28) (async) sendmsg$tipc(r3, &(0x7f0000003300)={&(0x7f0000002b80)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10, &(0x7f0000003200)=[{&(0x7f0000002bc0)="100006655602101db491181616e90513963b133e7069760487207802d412771d1d7e123c7bfbb97ff90a4db7bcbb6a029d871101f42fae9802651f73f5c9d07fae66156080099837475b7201cee1672eb840b425676b3241c71044d196b238177e5cb45369736ebc6562d50abfa955c663d4ca9209b1e8c1c56989aa4548690028a54e29ee8bc41f32563a496061c796cc6d0741b98239e4bf5294ac673dcee276d0", 0xa2}, {&(0x7f0000002c80)="78b9c27fec6c27904923d220284c4879925a1ce2c86a0465d0928c55ddd65f20e990d92a0105550e471bff43f40b5150e198e8e62b3879b0ee0b320307e1148dc5053e619898e193df042862901df9f1a7209fd8f13121c37cf2b8541a54", 0x5e}, {&(0x7f0000002d00)="abc8fc28a73bc312221d3a92221d718595583e5e158c8e58582efb5eb68551e6e94e5760ec3f71fc2c2535ef799bde865934ced9cc0d778136b9cf6a6c1ca7ca91c4b0f88bae72aa5036e5a3a9aeed39ae4de14fe13f75e0ca6fb75fb30ce7c1c6ab41069f17bf51457fede45d81deb96ebd8d994e9f4ec82a0c673383814eaa189d2791d85413e5d3cab912b8426b75f3c6f7a9f9e51a7de164d9bd9cf9bb313f1e63747a5f145afce3d281f323502dec6208d0276c9c3cf9e681a3d7798f92ba6dd44c487a5227f4db15c251050f63b754cd", 0xd3}, {&(0x7f0000002e00)="9a66b0172fcd2b438bd0e6a9dd5ff964dea5cfcd5670341d136b9ed853ed10e69b7580aef8c6e61f33bdf7261d6ef44d4be12ffc1b13dbcd8348776df2834106da189015429aea82ad48475c", 0x4c}, {&(0x7f0000002e80)="3fd30179d4c17ddb3f4b5d0fb0b39b45aee9bc3dc140f3ad54bf8a86180d62a3dc1c81d9c4281b7c38d3ab02afe17618a97ad14d6137ec0900b1fd5662def965f8287af461aacb9e24765dc64ecbb909742a366e62fd0021d87d973867c8da510a5bb9cac793793478b1fd421a024705cd1ee4658131cf72384b04ac3a2169aac8c681ab99a58de30365ee73072ea74511114d717b3f86d45c96bfe952c5dedbe716f1025cbb4c35e02a775480d65df68dc2bb281c8064eb3f91d482eaab082473ae61fd7c85370fe5c5c5b4a6fb720b61a1ac87459d0ce292", 0xd9}, {&(0x7f0000002f80)="1ec4bf14a130be47a0d6450f5fb28ddadaee8872591ede6d85daf272fcb71421a16ff8d9504df517d40a4dec3a63", 0x2e}, {&(0x7f0000002fc0)="87b863892edf347cdba2916905509c70484c7dd88dede4a0525eec9efce02a5e0a3e8367580e3a2ddf7c67ad0b", 0x2d}, {&(0x7f0000003000)="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", 0xfe}, {&(0x7f0000003100)="ff8cce48880b5541bb4aebf683eb66821a8e8cf44db33123dedbb8c3cda3d67f9b3459f5c9556a6c9aa19b4e1a0f60b9f366e236ae179c98ffcb5c8ae5efd969e571054a65569bb5af38688745f2a3692b377049c5d052372dda2f5dc85c3088effad29b9cf29a2e977e10288b7a656e1642e93bd2b9cb5f8176854a4f6d44523d1dd9e37a0891e3c5b67e81ce5d17c2177cd1eed916b6b1a171f15b62bfbbe33f6db4bf9b296b641d2596b98a0c12bf5f88e26d2d1acfe09cedc6f1aad4f515cbd342a2e0855f15788fe815", 0xcc}], 0x9, &(0x7f00000032c0)="1dc4c480aa2e39e7336b8855", 0xc, 0x4040001}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000003340), 0x48400, 0x0) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000003380)) r8 = openat$cgroup_pressure(r6, &(0x7f00000033c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000003400)={'full', 0x20, 0xcd21, 0x20, 0x8}, 0x2f) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003480)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003440)={@cgroup=r9, r1, 0xc55812f374bcd5b3, 0x10, 0x0, @void, @value=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003540)={{r0, 0xffffffffffffffff}, &(0x7f00000034c0), &(0x7f0000003500)=r1}, 0x20) r11 = openat$cgroup_ro(r10, &(0x7f0000003580)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) mkdirat$cgroup(r11, &(0x7f00000035c0)='syz1\x00', 0x1ff) 915.770406ms ago: executing program 3 (id=8084): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000001500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000000071120b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f00000002c0)="4bcf03773c561e6e03e62aaff806ff5fa0d63fdee3f6199d9806507f6bb19cebc4616cf919953bb65f4358bf9bba649f5571780a685716aab8e94e6c", &(0x7f0000000300)=""/67}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x1080d2, 0x89, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@fwd={0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x4, [{0x0, 0x4}, {0x0, 0x1}, {0xc, 0x5}, {0xb, 0x1}, {0xc, 0x1}, {0xf, 0x5}]}, @const={0x1, 0x0, 0x0, 0xa, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x7e}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85", 0x12}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 915.146126ms ago: executing program 4 (id=8085): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d8612c11af8ec2b8fdefa285f66ec2577cabcab81e4fd6a4d14207d5a0757aa271fb6d8ec6499a887878ff0df3d8ee65ea79b041c790dff894d213acbdccf6e9d34a13b812729f1b3acc8d297f8e1552fdd413fc2ecefcf67cfe4b7d41fc6fa69fc72ac5a8425c4b886d464413d6415c276ef1b3d7f1803ea33edad10ce28d127893780411637cc7f6674bda81765ce7192a8e57489ec649324738de55146b43a6cba6c0d9f7da2eb2be2197b96d3d93d78c958b6d4bcd275aded20674d3c3a529fa8f51d92aaaba943883"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="1400000036000b63717a3c4a0e1e02f30ccefc77", 0x14}], 0x1}, 0x40000) 864.860049ms ago: executing program 2 (id=8086): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 3) 411.669406ms ago: executing program 1 (id=8087): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000200, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="028dffffffff"}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x4f, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5d533c411581f58d4a05fe50786", &(0x7f0000000640)=""/148, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 268.365534ms ago: executing program 4 (id=8088): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x10, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x10041) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0), 0x12) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, &(0x7f0000000740)}}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7) 0s ago: executing program 2 (id=8089): r0 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffee8, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000040)=r1, 0x4) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000006c0)="d6", 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc909}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x1, 0xb, 0xc4, 0x3, 0x0, 0x10001, 0x80, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x9, 0x5}, 0x1001e, 0xc9c6, 0xfffffe01, 0x0, 0xc, 0xfffffff8, 0x4, 0x0, 0x8, 0x0, 0x9}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES8=r8], 0x9a) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000040000000400000005000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="000000000100"/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r11) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x8, 0x7f, 0xbd, 0x80000c0}, {0x5, 0x3, 0x7, 0xfffffffa}]}) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.4.6991'. [ 1296.355107][T23289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.391296][T23289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.411641][T23271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1296.434985][T23271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.454812][T23271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.479762][T23289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1296.846498][T25059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6998'. [ 1296.908605][T25059] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6998'. [ 1297.016192][T25059] device hsr_slave_0 left promiscuous mode [ 1297.044753][T25059] device hsr_slave_1 left promiscuous mode [ 1297.140120][T25063] netlink: 'syz.1.7000': attribute type 10 has an invalid length. [ 1297.180563][T25063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1298.002188][T25063] netlink: 'syz.1.7000': attribute type 10 has an invalid length. [ 1298.010550][T25063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1298.288598][T25076] FAULT_INJECTION: forcing a failure. [ 1298.288598][T25076] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.361924][T25076] CPU: 1 PID: 25076 Comm: syz.5.7004 Not tainted syzkaller #0 [ 1298.369553][T25076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1298.379638][T25076] Call Trace: [ 1298.382975][T25076] [ 1298.385946][T25076] dump_stack_lvl+0x188/0x24e [ 1298.390687][T25076] ? show_regs_print_info+0x12/0x12 [ 1298.396099][T25076] ? load_image+0x400/0x400 [ 1298.400646][T25076] ? __lock_acquire+0x7d10/0x7d10 [ 1298.405729][T25076] should_fail_ex+0x399/0x4d0 [ 1298.410451][T25076] should_failslab+0x5/0x20 [ 1298.414990][T25076] slab_pre_alloc_hook+0x59/0x310 [ 1298.420056][T25076] ? apparmor_sk_alloc_security+0x74/0x100 [ 1298.425914][T25076] __kmem_cache_alloc_node+0x4f/0x260 [ 1298.431336][T25076] ? apparmor_sk_alloc_security+0x74/0x100 [ 1298.437204][T25076] kmalloc_trace+0x26/0xe0 [ 1298.441664][T25076] apparmor_sk_alloc_security+0x74/0x100 [ 1298.447348][T25076] security_sk_alloc+0x6a/0xa0 [ 1298.452160][T25076] sk_prot_alloc+0x101/0x210 [ 1298.456792][T25076] sk_alloc+0x36/0x340 [ 1298.460894][T25076] ? rcu_read_unlock+0x8c/0xa0 [ 1298.465710][T25076] unix_create1+0xb3/0x710 [ 1298.470171][T25076] unix_create+0x143/0x1f0 [ 1298.474629][T25076] __sock_create+0x4a2/0x940 [ 1298.479265][T25076] __sys_socketpair+0x232/0x540 [ 1298.484163][T25076] __x64_sys_socketpair+0x97/0xb0 [ 1298.489322][T25076] do_syscall_64+0x4c/0xa0 [ 1298.493784][T25076] ? clear_bhb_loop+0x60/0xb0 [ 1298.498501][T25076] ? clear_bhb_loop+0x60/0xb0 [ 1298.503217][T25076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1298.509333][T25076] RIP: 0033:0x7f6255b9bf79 [ 1298.513785][T25076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.533431][T25076] RSP: 002b:00007f6256a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1298.541888][T25076] RAX: ffffffffffffffda RBX: 00007f6255e15fa0 RCX: 00007f6255b9bf79 [ 1298.549892][T25076] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1298.557895][T25076] RBP: 00007f6256a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.565897][T25076] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 1298.573902][T25076] R13: 00007f6255e16038 R14: 00007f6255e15fa0 R15: 00007ffc3e4b4d38 [ 1298.581915][T25076] [ 1298.587128][T25081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7007'. [ 1298.639134][T25082] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7008'. [ 1298.664060][T25072] netlink: 'syz.1.7006': attribute type 10 has an invalid length. [ 1299.136832][T25100] netlink: 'syz.5.7014': attribute type 3 has an invalid length. [ 1299.161365][T25100] netlink: 'syz.5.7014': attribute type 1 has an invalid length. [ 1299.169186][T25100] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.7014'. [ 1299.205406][T25100] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.7014'. [ 1299.215506][T25100] bridge_slave_1: default FDB implementation only supports local addresses [ 1299.965154][T25114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1300.104447][T25121] netlink: 'syz.1.7021': attribute type 29 has an invalid length. [ 1300.124926][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.131365][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.451060][T25121] netlink: 'syz.1.7021': attribute type 29 has an invalid length. [ 1300.666365][T25132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7023'. [ 1306.923847][T25162] tun0: tun_chr_ioctl cmd 1074025675 [ 1306.936114][T25162] tun0: persist enabled [ 1306.955112][T25161] tun0: tun_chr_ioctl cmd 1074025675 [ 1306.973381][T25161] tun0: persist enabled [ 1307.560476][T25177] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7035'. [ 1310.480053][T25187] netlink: 'syz.4.7039': attribute type 6 has an invalid length. [ 1310.491571][T25192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7040'. [ 1310.806791][T25209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7042'. [ 1311.343245][T25228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7051'. [ 1311.684594][T25244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1311.862018][T25248] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7057'. [ 1314.657617][T25251] netlink: 'syz.5.7058': attribute type 6 has an invalid length. [ 1314.857942][T25260] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7062'. [ 1314.934611][T25262] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7063'. [ 1315.014737][T25267] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7064'. [ 1315.168119][T25273] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1315.337356][T25282] netlink: 'syz.2.7069': attribute type 29 has an invalid length. [ 1315.708311][T25282] netlink: 'syz.2.7069': attribute type 29 has an invalid length. [ 1315.757302][T25290] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7072'. [ 1315.769654][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1316.002518][T25296] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1316.028314][T25295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.037073][T25295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.049774][T25295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.058705][T25295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.243434][T25310] FAULT_INJECTION: forcing a failure. [ 1316.243434][T25310] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.256945][T25310] CPU: 0 PID: 25310 Comm: syz.5.7078 Not tainted syzkaller #0 [ 1316.264455][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1316.274547][T25310] Call Trace: [ 1316.277859][T25310] [ 1316.280823][T25310] dump_stack_lvl+0x188/0x24e [ 1316.285551][T25310] ? show_regs_print_info+0x12/0x12 [ 1316.290800][T25310] ? load_image+0x400/0x400 [ 1316.295350][T25310] ? mark_lock+0x94/0x320 [ 1316.299732][T25310] ? __lock_acquire+0x13cf/0x7d10 [ 1316.304816][T25310] should_fail_ex+0x399/0x4d0 [ 1316.309568][T25310] should_failslab+0x5/0x20 [ 1316.314137][T25310] slab_pre_alloc_hook+0x59/0x310 [ 1316.319210][T25310] kmem_cache_alloc+0x56/0x2f0 [ 1316.324009][T25310] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1316.329440][T25310] radix_tree_node_alloc+0x7e/0x3a0 [ 1316.334712][T25310] idr_get_free+0x2af/0xa60 [ 1316.339273][T25310] idr_alloc_cyclic+0x277/0x5c0 [ 1316.344190][T25310] ? idr_alloc+0x2e0/0x2e0 [ 1316.348666][T25310] ? do_raw_spin_lock+0x128/0x2f0 [ 1316.353753][T25310] ? __radix_tree_preload+0x82/0x880 [ 1316.359091][T25310] ? bpf_map_alloc_id+0x21/0xd0 [ 1316.363994][T25310] bpf_map_alloc_id+0x40/0xd0 [ 1316.368721][T25310] map_create+0xae5/0x1000 [ 1316.373219][T25310] __sys_bpf+0x38b/0x780 [ 1316.377511][T25310] ? bpf_link_show_fdinfo+0x380/0x380 [ 1316.382942][T25310] ? lock_chain_count+0x20/0x20 [ 1316.387844][T25310] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1316.393890][T25310] __x64_sys_bpf+0x78/0x90 [ 1316.398368][T25310] do_syscall_64+0x4c/0xa0 [ 1316.402838][T25310] ? clear_bhb_loop+0x60/0xb0 [ 1316.407561][T25310] ? clear_bhb_loop+0x60/0xb0 [ 1316.412285][T25310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1316.418231][T25310] RIP: 0033:0x7f6255b9bf79 [ 1316.422687][T25310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.442350][T25310] RSP: 002b:00007f6256a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1316.450813][T25310] RAX: ffffffffffffffda RBX: 00007f6255e15fa0 RCX: 00007f6255b9bf79 [ 1316.458824][T25310] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000000 [ 1316.466841][T25310] RBP: 00007f6256a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.474857][T25310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1316.482867][T25310] R13: 00007f6255e16038 R14: 00007f6255e15fa0 R15: 00007ffc3e4b4d38 [ 1316.490898][T25310] [ 1316.566848][T25311] netlink: 'syz.1.7075': attribute type 6 has an invalid length. [ 1316.915585][T25328] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7083'. [ 1317.103090][T25335] sctp: [Deprecated]: syz.1.7085 (pid 25335) Use of int in max_burst socket option deprecated. [ 1317.103090][T25335] Use struct sctp_assoc_value instead [ 1317.126962][T25333] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7086'. [ 1317.448037][T23289] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1317.494416][T25341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7087'. [ 1318.008969][T25356] netlink: 'syz.2.7092': attribute type 6 has an invalid length. [ 1318.696802][T25384] FAULT_INJECTION: forcing a failure. [ 1318.696802][T25384] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.732776][T25384] CPU: 0 PID: 25384 Comm: syz.4.7101 Not tainted syzkaller #0 [ 1318.740327][T25384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1318.750422][T25384] Call Trace: [ 1318.753734][T25384] [ 1318.756697][T25384] dump_stack_lvl+0x188/0x24e [ 1318.761429][T25384] ? show_regs_print_info+0x12/0x12 [ 1318.766680][T25384] ? load_image+0x400/0x400 [ 1318.771225][T25384] ? __lock_acquire+0x7d10/0x7d10 [ 1318.776301][T25384] should_fail_ex+0x399/0x4d0 [ 1318.781051][T25384] should_failslab+0x5/0x20 [ 1318.785631][T25384] slab_pre_alloc_hook+0x59/0x310 [ 1318.790694][T25384] ? apparmor_sk_alloc_security+0x74/0x100 [ 1318.796558][T25384] __kmem_cache_alloc_node+0x4f/0x260 [ 1318.801977][T25384] ? apparmor_sk_alloc_security+0x74/0x100 [ 1318.807838][T25384] kmalloc_trace+0x26/0xe0 [ 1318.812304][T25384] apparmor_sk_alloc_security+0x74/0x100 [ 1318.817986][T25384] security_sk_alloc+0x6a/0xa0 [ 1318.822800][T25384] sk_prot_alloc+0x101/0x210 [ 1318.827460][T25384] sk_alloc+0x36/0x340 [ 1318.831569][T25384] ? rcu_read_unlock+0x8c/0xa0 [ 1318.836370][T25384] unix_create1+0xb3/0x710 [ 1318.840826][T25384] unix_create+0x143/0x1f0 [ 1318.845266][T25384] __sock_create+0x4a2/0x940 [ 1318.849885][T25384] __sys_socketpair+0x232/0x540 [ 1318.854764][T25384] __x64_sys_socketpair+0x97/0xb0 [ 1318.859814][T25384] do_syscall_64+0x4c/0xa0 [ 1318.864263][T25384] ? clear_bhb_loop+0x60/0xb0 [ 1318.868955][T25384] ? clear_bhb_loop+0x60/0xb0 [ 1318.873669][T25384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.879575][T25384] RIP: 0033:0x7fee79f9bf79 [ 1318.884008][T25384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.903639][T25384] RSP: 002b:00007fee7af03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1318.912109][T25384] RAX: ffffffffffffffda RBX: 00007fee7a215fa0 RCX: 00007fee79f9bf79 [ 1318.920105][T25384] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1318.928096][T25384] RBP: 00007fee7af03090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.936127][T25384] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 1318.944122][T25384] R13: 00007fee7a216038 R14: 00007fee7a215fa0 R15: 00007ffdd18551e8 [ 1318.952131][T25384] [ 1319.419990][T25409] FAULT_INJECTION: forcing a failure. [ 1319.419990][T25409] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.483922][T25409] CPU: 0 PID: 25409 Comm: syz.3.7110 Not tainted syzkaller #0 [ 1319.491479][T25409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1319.501580][T25409] Call Trace: [ 1319.504919][T25409] [ 1319.507894][T25409] dump_stack_lvl+0x188/0x24e [ 1319.512638][T25409] ? show_regs_print_info+0x12/0x12 [ 1319.517903][T25409] ? load_image+0x400/0x400 [ 1319.522485][T25409] ? __might_sleep+0xd0/0xd0 [ 1319.527125][T25409] ? __lock_acquire+0x7d10/0x7d10 [ 1319.532224][T25409] should_fail_ex+0x399/0x4d0 [ 1319.536970][T25409] should_failslab+0x5/0x20 [ 1319.541531][T25409] slab_pre_alloc_hook+0x59/0x310 [ 1319.546604][T25409] ? sctp_association_new+0x86/0x25d0 [ 1319.552035][T25409] __kmem_cache_alloc_node+0x4f/0x260 [ 1319.557465][T25409] ? sctp_association_new+0x86/0x25d0 [ 1319.562902][T25409] kmalloc_trace+0x26/0xe0 [ 1319.567390][T25409] sctp_association_new+0x86/0x25d0 [ 1319.572653][T25409] ? sctp_do_bind+0x6bd/0x990 [ 1319.577439][T25409] sctp_connect_new_asoc+0x2da/0x6a0 [ 1319.582794][T25409] ? __sctp_connect+0xd80/0xd80 [ 1319.587716][T25409] ? sctp_endpoint_lookup_assoc+0xcd/0x260 [ 1319.593604][T25409] __sctp_connect+0x5b3/0xd80 [ 1319.598360][T25409] ? sctp_send_asconf+0x170/0x170 [ 1319.603449][T25409] ? __local_bh_enable_ip+0x136/0x1c0 [ 1319.608881][T25409] ? lockdep_hardirqs_on+0x94/0x140 [ 1319.614128][T25409] ? __local_bh_enable_ip+0x136/0x1c0 [ 1319.619579][T25409] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1319.625255][T25409] ? security_sctp_bind_connect+0x85/0xb0 [ 1319.631027][T25409] sctp_setsockopt_connectx+0x101/0x1a0 [ 1319.636641][T25409] sctp_setsockopt+0x8f4/0xf90 [ 1319.641478][T25409] ? sock_common_recvmsg+0x190/0x190 [ 1319.646824][T25409] __sys_setsockopt+0x2bf/0x3d0 [ 1319.651747][T25409] __x64_sys_setsockopt+0xb1/0xc0 [ 1319.656837][T25409] do_syscall_64+0x4c/0xa0 [ 1319.661306][T25409] ? clear_bhb_loop+0x60/0xb0 [ 1319.666029][T25409] ? clear_bhb_loop+0x60/0xb0 [ 1319.670760][T25409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1319.676710][T25409] RIP: 0033:0x7f4b3f19bf79 [ 1319.681171][T25409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.700843][T25409] RSP: 002b:00007f4b4000d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1319.709309][T25409] RAX: ffffffffffffffda RBX: 00007f4b3f415fa0 RCX: 00007f4b3f19bf79 [ 1319.717325][T25409] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 1319.725345][T25409] RBP: 00007f4b4000d090 R08: 0000000000000020 R09: 0000000000000000 [ 1319.733372][T25409] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.741390][T25409] R13: 00007f4b3f416038 R14: 00007f4b3f415fa0 R15: 00007ffd7f8b1378 [ 1319.749429][T25409] [ 1319.837998][T25414] netlink: 'syz.5.7111': attribute type 1 has an invalid length. [ 1319.920912][T25414] __nla_validate_parse: 3 callbacks suppressed [ 1319.920948][T25414] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.7111'. [ 1322.624080][T25417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7123'. [ 1322.637611][T25419] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7112'. [ 1323.014048][T25439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7117'. [ 1323.272659][T25448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1323.476792][T25459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7129'. [ 1323.503568][T25449] IPv6: Can't replace route, no match found [ 1323.524470][T25449] mac80211_hwsim hwsim56 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1324.190017][T25496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7139'. [ 1324.277564][T25498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7141'. [ 1324.450505][T25505] netlink: 'syz.5.7143': attribute type 3 has an invalid length. [ 1324.526073][T25505] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7143'. [ 1324.732512][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7145'. [ 1324.998408][T25513] netlink: 'syz.4.7147': attribute type 1 has an invalid length. [ 1325.044908][T25513] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.7147'. [ 1325.656761][T25524] netlink: 26 bytes leftover after parsing attributes in process `syz.4.7151'. [ 1325.802500][T23269] wlan1: Trigger new scan to find an IBSS to join [ 1326.057577][T25538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7156'. [ 1326.183846][T25552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7160'. [ 1326.318762][T25553] device lo entered promiscuous mode [ 1326.444064][T25553] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1326.761623][T23270] wlan1: Trigger new scan to find an IBSS to join [ 1326.948500][T25563] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7165'. [ 1327.043458][T25577] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7169'. [ 1327.070344][T25575] sctp: [Deprecated]: syz.3.7168 (pid 25575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1327.070344][T25575] Use struct sctp_sack_info instead [ 1328.857442][T23268] wlan1: Trigger new scan to find an IBSS to join [ 1329.907550][T25588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.986521][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7173'. [ 1330.003990][T25594] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7174'. [ 1330.422105][T25607] netlink: 46391 bytes leftover after parsing attributes in process `syz.5.7180'. [ 1330.659598][T25622] FAULT_INJECTION: forcing a failure. [ 1330.659598][T25622] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.712933][T25622] CPU: 0 PID: 25622 Comm: syz.2.7185 Not tainted syzkaller #0 [ 1330.720476][T25622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1330.730577][T25622] Call Trace: [ 1330.733888][T25622] [ 1330.736854][T25622] dump_stack_lvl+0x188/0x24e [ 1330.741589][T25622] ? show_regs_print_info+0x12/0x12 [ 1330.746858][T25622] ? load_image+0x400/0x400 [ 1330.751402][T25622] ? verify_lock_unused+0x140/0x140 [ 1330.756673][T25622] ? perf_trace_preemptirq_template+0x268/0x320 [ 1330.762974][T25622] should_fail_ex+0x399/0x4d0 [ 1330.767704][T25622] should_failslab+0x5/0x20 [ 1330.772264][T25622] slab_pre_alloc_hook+0x59/0x310 [ 1330.777333][T25622] kmem_cache_alloc+0x56/0x2f0 [ 1330.782133][T25622] ? skb_clone+0x1e7/0x370 [ 1330.786603][T25622] skb_clone+0x1e7/0x370 [ 1330.790902][T25622] __netlink_deliver_tap+0x3ed/0x800 [ 1330.796242][T25622] ? netlink_deliver_tap+0x2e/0x1b0 [ 1330.801485][T25622] netlink_deliver_tap+0x19c/0x1b0 [ 1330.806639][T25622] __netlink_sendskb+0x4b/0x90 [ 1330.811457][T25622] netlink_dump+0x957/0xd00 [ 1330.816100][T25622] ? netlink_lookup+0x200/0x200 [ 1330.820999][T25622] ? __inet_diag_dump_start+0x805/0x970 [ 1330.826692][T25622] __netlink_dump_start+0x537/0x6f0 [ 1330.831945][T25622] inet_diag_rcv_msg_compat+0x207/0x420 [ 1330.837540][T25622] ? __inet_diag_dump+0x380/0x380 [ 1330.842605][T25622] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1330.848816][T25622] ? lockdep_hardirqs_on+0x94/0x140 [ 1330.854052][T25622] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1330.859814][T25622] ? inet_diag_dump_start_compat+0x20/0x20 [ 1330.865656][T25622] ? inet_diag_dump+0x50/0x50 [ 1330.870391][T25622] ? __inet_diag_dump+0x380/0x380 [ 1330.875463][T25622] ? __inet_diag_dump+0x380/0x380 [ 1330.880541][T25622] sock_diag_rcv_msg+0x3cc/0x5f0 [ 1330.885530][T25622] netlink_rcv_skb+0x1fb/0x450 [ 1330.890341][T25622] ? sock_diag_bind+0xa0/0xa0 [ 1330.895071][T25622] ? netlink_ack+0x1170/0x1170 [ 1330.899904][T25622] ? netlink_deliver_tap+0x2e/0x1b0 [ 1330.905163][T25622] sock_diag_rcv+0x26/0x40 [ 1330.909619][T25622] netlink_unicast+0x74d/0x8d0 [ 1330.914449][T25622] netlink_sendmsg+0x8ad/0xbd0 [ 1330.919281][T25622] ? netlink_getsockopt+0x550/0x550 [ 1330.924531][T25622] ? aa_sock_msg_perm+0x94/0x150 [ 1330.929514][T25622] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1330.934841][T25622] ? security_socket_sendmsg+0x7c/0xa0 [ 1330.940351][T25622] ? netlink_getsockopt+0x550/0x550 [ 1330.945613][T25622] ____sys_sendmsg+0x5be/0x970 [ 1330.950433][T25622] ? __sys_sendmsg_sock+0x30/0x30 [ 1330.955506][T25622] ? __import_iovec+0x315/0x500 [ 1330.960412][T25622] ? import_iovec+0x6f/0xa0 [ 1330.964960][T25622] ___sys_sendmsg+0x2a2/0x360 [ 1330.969702][T25622] ? __sys_sendmsg+0x290/0x290 [ 1330.974561][T25622] __se_sys_sendmsg+0x1bb/0x2a0 [ 1330.979483][T25622] ? __x64_sys_sendmsg+0x80/0x80 [ 1330.984481][T25622] ? lockdep_hardirqs_on+0x94/0x140 [ 1330.989718][T25622] do_syscall_64+0x4c/0xa0 [ 1330.994178][T25622] ? clear_bhb_loop+0x60/0xb0 [ 1330.998890][T25622] ? clear_bhb_loop+0x60/0xb0 [ 1331.003611][T25622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1331.009545][T25622] RIP: 0033:0x7f4fedd9bf79 [ 1331.014086][T25622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.033749][T25622] RSP: 002b:00007f4feec61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1331.042201][T25622] RAX: ffffffffffffffda RBX: 00007f4fee015fa0 RCX: 00007f4fedd9bf79 [ 1331.050211][T25622] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1331.058217][T25622] RBP: 00007f4feec61090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.066228][T25622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.074279][T25622] R13: 00007f4fee016038 R14: 00007f4fee015fa0 R15: 00007ffc1d9de6b8 [ 1331.082300][T25622] [ 1331.147759][T25631] netlink: 'syz.4.7187': attribute type 3 has an invalid length. [ 1331.174199][T25631] netlink: 'syz.4.7187': attribute type 1 has an invalid length. [ 1331.203005][T25631] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.7187'. [ 1331.294266][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7190'. [ 1331.827001][T23269] wlan1: Trigger new scan to find an IBSS to join [ 1331.843902][T23268] wlan1: Trigger new scan to find an IBSS to join [ 1332.828969][T25666] FAULT_INJECTION: forcing a failure. [ 1332.828969][T25666] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.846012][T25666] CPU: 0 PID: 25666 Comm: syz.4.7196 Not tainted syzkaller #0 [ 1332.853567][T25666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1332.863851][T25666] Call Trace: [ 1332.867187][T25666] [ 1332.870160][T25666] dump_stack_lvl+0x188/0x24e [ 1332.874918][T25666] ? show_regs_print_info+0x12/0x12 [ 1332.880194][T25666] ? load_image+0x400/0x400 [ 1332.884774][T25666] ? __lock_acquire+0x7d10/0x7d10 [ 1332.889869][T25666] ? memset+0x1e/0x40 [ 1332.893920][T25666] should_fail_ex+0x399/0x4d0 [ 1332.898685][T25666] should_failslab+0x5/0x20 [ 1332.903253][T25666] slab_pre_alloc_hook+0x59/0x310 [ 1332.908356][T25666] kmem_cache_alloc+0x56/0x2f0 [ 1332.913192][T25666] ? security_inode_alloc+0x30/0x110 [ 1332.918614][T25666] security_inode_alloc+0x30/0x110 [ 1332.923814][T25666] inode_init_always+0x8f8/0xc90 [ 1332.928831][T25666] new_inode_pseudo+0x91/0x1c0 [ 1332.933682][T25666] __sock_create+0x129/0x940 [ 1332.938335][T25666] ? __might_fault+0xa6/0x120 [ 1332.943080][T25666] ? __might_fault+0xc2/0x120 [ 1332.947826][T25666] __sys_socketpair+0x1bd/0x540 [ 1332.952775][T25666] __x64_sys_socketpair+0x97/0xb0 [ 1332.957877][T25666] do_syscall_64+0x4c/0xa0 [ 1332.962351][T25666] ? clear_bhb_loop+0x60/0xb0 [ 1332.967099][T25666] ? clear_bhb_loop+0x60/0xb0 [ 1332.971830][T25666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.977780][T25666] RIP: 0033:0x7fee79f9bf79 [ 1332.982249][T25666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.001915][T25666] RSP: 002b:00007fee7af03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1333.010398][T25666] RAX: ffffffffffffffda RBX: 00007fee7a215fa0 RCX: 00007fee79f9bf79 [ 1333.018427][T25666] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000018 [ 1333.026445][T25666] RBP: 00007fee7af03090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.034462][T25666] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.042499][T25666] R13: 00007fee7a216038 R14: 00007fee7a215fa0 R15: 00007ffdd18551e8 [ 1333.050579][T25666] [ 1333.075774][T25666] socket: no more sockets [ 1334.231038][T23271] wlan1: Creating new IBSS network, BSSID 8a:f0:cb:de:5e:c1 [ 1334.232891][T23269] wlan1: Creating new IBSS network, BSSID 36:74:4f:b1:a0:be [ 1334.487066][T25670] FAULT_INJECTION: forcing a failure. [ 1334.487066][T25670] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.530809][T25670] CPU: 1 PID: 25670 Comm: syz.4.7197 Not tainted syzkaller #0 [ 1334.538356][T25670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1334.548445][T25670] Call Trace: [ 1334.551753][T25670] [ 1334.554709][T25670] dump_stack_lvl+0x188/0x24e [ 1334.559436][T25670] ? show_regs_print_info+0x12/0x12 [ 1334.564730][T25670] ? load_image+0x400/0x400 [ 1334.569277][T25670] ? __might_sleep+0xd0/0xd0 [ 1334.573903][T25670] ? __lock_acquire+0x7d10/0x7d10 [ 1334.578979][T25670] should_fail_ex+0x399/0x4d0 [ 1334.583715][T25670] should_failslab+0x5/0x20 [ 1334.588354][T25670] slab_pre_alloc_hook+0x59/0x310 [ 1334.593428][T25670] ? __get_vm_area_node+0x122/0x330 [ 1334.598692][T25670] __kmem_cache_alloc_node+0x4f/0x260 [ 1334.604118][T25670] ? __get_vm_area_node+0x122/0x330 [ 1334.609356][T25670] kmalloc_node_trace+0x22/0xe0 [ 1334.614254][T25670] __get_vm_area_node+0x122/0x330 [ 1334.619307][T25670] ? perf_trace_buf_update+0xa8/0x230 [ 1334.624732][T25670] __vmalloc_node_range+0x357/0x13b0 [ 1334.630039][T25670] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.635610][T25670] ? perf_trace_preemptirq_template+0x268/0x320 [ 1334.641893][T25670] ? free_vm_area+0x50/0x50 [ 1334.646411][T25670] ? lockdep_hardirqs_on+0x94/0x140 [ 1334.651625][T25670] ? end_current_label_crit_section+0x170/0x170 [ 1334.657904][T25670] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.663572][T25670] __vmalloc+0x76/0x80 [ 1334.667682][T25670] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.673262][T25670] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1334.678749][T25670] ? bpf_lsm_capable+0x5/0x10 [ 1334.683445][T25670] ? security_capable+0x85/0xb0 [ 1334.688322][T25670] bpf_prog_alloc+0x1c/0x1b0 [ 1334.692947][T25670] bpf_prog_load+0x7c9/0x1560 [ 1334.697717][T25670] ? map_freeze+0x390/0x390 [ 1334.702245][T25670] ? __might_fault+0xa6/0x120 [ 1334.706944][T25670] ? __might_fault+0xa6/0x120 [ 1334.711646][T25670] ? __might_fault+0xc2/0x120 [ 1334.716357][T25670] ? __might_fault+0xa6/0x120 [ 1334.721055][T25670] ? bpf_lsm_bpf+0x5/0x10 [ 1334.725407][T25670] ? security_bpf+0x7a/0xa0 [ 1334.729940][T25670] __sys_bpf+0x5b8/0x780 [ 1334.734318][T25670] ? bpf_link_show_fdinfo+0x380/0x380 [ 1334.739737][T25670] __x64_sys_bpf+0x78/0x90 [ 1334.744187][T25670] do_syscall_64+0x4c/0xa0 [ 1334.748649][T25670] ? clear_bhb_loop+0x60/0xb0 [ 1334.753355][T25670] ? clear_bhb_loop+0x60/0xb0 [ 1334.758152][T25670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1334.764063][T25670] RIP: 0033:0x7fee79f9bf79 [ 1334.768521][T25670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.788161][T25670] RSP: 002b:00007fee7af03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1334.796773][T25670] RAX: ffffffffffffffda RBX: 00007fee7a215fa0 RCX: 00007fee79f9bf79 [ 1334.804761][T25670] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 1334.812755][T25670] RBP: 00007fee7af03090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.820746][T25670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.828735][T25670] R13: 00007fee7a216038 R14: 00007fee7a215fa0 R15: 00007ffdd18551e8 [ 1334.836734][T25670] [ 1335.039487][T25682] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.7198'. [ 1335.070324][T25670] syz.4.7197: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1335.273776][T25670] CPU: 1 PID: 25670 Comm: syz.4.7197 Not tainted syzkaller #0 [ 1335.281434][T25670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1335.291549][T25670] Call Trace: [ 1335.294886][T25670] [ 1335.297871][T25670] dump_stack_lvl+0x188/0x24e [ 1335.302645][T25670] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1335.309153][T25670] ? show_regs_print_info+0x12/0x12 [ 1335.314440][T25670] ? load_image+0x400/0x400 [ 1335.319023][T25670] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1335.325503][T25670] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1335.332079][T25670] warn_alloc+0x242/0x330 [ 1335.336485][T25670] ? __get_vm_area_node+0x122/0x330 [ 1335.341772][T25670] ? zone_watermark_ok_safe+0x270/0x270 [ 1335.347407][T25670] ? rcu_is_watching+0x11/0xa0 [ 1335.352279][T25670] ? __get_vm_area_node+0x318/0x330 [ 1335.357558][T25670] ? perf_trace_buf_update+0xa8/0x230 [ 1335.363022][T25670] __vmalloc_node_range+0x37c/0x13b0 [ 1335.368393][T25670] ? perf_trace_preemptirq_template+0x268/0x320 [ 1335.374814][T25670] ? free_vm_area+0x50/0x50 [ 1335.379371][T25670] ? lockdep_hardirqs_on+0x94/0x140 [ 1335.384642][T25670] ? end_current_label_crit_section+0x170/0x170 [ 1335.390973][T25670] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1335.396595][T25670] __vmalloc+0x76/0x80 [ 1335.400726][T25670] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1335.406345][T25670] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1335.411784][T25670] ? bpf_lsm_capable+0x5/0x10 [ 1335.416563][T25670] ? security_capable+0x85/0xb0 [ 1335.421494][T25670] bpf_prog_alloc+0x1c/0x1b0 [ 1335.426173][T25670] bpf_prog_load+0x7c9/0x1560 [ 1335.431018][T25670] ? map_freeze+0x390/0x390 [ 1335.435599][T25670] ? __might_fault+0xa6/0x120 [ 1335.440392][T25670] ? __might_fault+0xa6/0x120 [ 1335.445132][T25670] ? __might_fault+0xc2/0x120 [ 1335.449950][T25670] ? __might_fault+0xa6/0x120 [ 1335.454694][T25670] ? bpf_lsm_bpf+0x5/0x10 [ 1335.459083][T25670] ? security_bpf+0x7a/0xa0 [ 1335.463679][T25670] __sys_bpf+0x5b8/0x780 [ 1335.468103][T25670] ? bpf_link_show_fdinfo+0x380/0x380 [ 1335.473650][T25670] __x64_sys_bpf+0x78/0x90 [ 1335.478140][T25670] do_syscall_64+0x4c/0xa0 [ 1335.482657][T25670] ? clear_bhb_loop+0x60/0xb0 [ 1335.487409][T25670] ? clear_bhb_loop+0x60/0xb0 [ 1335.492162][T25670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1335.498115][T25670] RIP: 0033:0x7fee79f9bf79 [ 1335.502604][T25670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.522323][T25670] RSP: 002b:00007fee7af03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1335.530838][T25670] RAX: ffffffffffffffda RBX: 00007fee7a215fa0 RCX: 00007fee79f9bf79 [ 1335.538864][T25670] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 1335.546876][T25670] RBP: 00007fee7af03090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.554895][T25670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.562913][T25670] R13: 00007fee7a216038 R14: 00007fee7a215fa0 R15: 00007ffdd18551e8 [ 1335.570943][T25670] [ 1335.602496][T25670] Mem-Info: [ 1335.606269][T25670] active_anon:6937 inactive_anon:0 isolated_anon:0 [ 1335.606269][T25670] active_file:24557 inactive_file:40342 isolated_file:0 [ 1335.606269][T25670] unevictable:768 dirty:363 writeback:0 [ 1335.606269][T25670] slab_reclaimable:21772 slab_unreclaimable:97767 [ 1335.606269][T25670] mapped:30943 shmem:1373 pagetables:691 [ 1335.606269][T25670] sec_pagetables:0 bounce:0 [ 1335.606269][T25670] kernel_misc_reclaimable:0 [ 1335.606269][T25670] free:1310926 free_pcp:8782 free_cma:0 [ 1335.690722][T25670] Node 0 active_anon:27648kB inactive_anon:0kB active_file:98228kB inactive_file:161168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123772kB dirty:1452kB writeback:0kB shmem:3956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12116kB pagetables:2564kB sec_pagetables:0kB all_unreclaimable? no [ 1335.774956][T25670] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1335.815857][T25670] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.848875][T25670] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1335.856654][T25670] Node 0 DMA32 free:1321652kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27684kB inactive_anon:0kB active_file:98228kB inactive_file:161176kB unevictable:1536kB writepending:1540kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:23964kB local_pcp:6996kB free_cma:0kB [ 1335.910849][T25693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7203'. [ 1335.957519][T25670] lowmem_reserve[]: 0 0 1 1 1 [ 1335.972784][T25670] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 1336.024340][T25698] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7205'. [ 1336.041399][T25670] lowmem_reserve[]: 0 0 0 0 0 [ 1336.051337][T25670] Node 1 Normal free:3906672kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:12160kB local_pcp:160kB free_cma:0kB [ 1336.084770][T25698] bridge_slave_1: default FDB implementation only supports local addresses [ 1336.099068][T25702] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7207'. [ 1336.124445][T25670] lowmem_reserve[]: 0 0 0 0 0 [ 1336.129962][T25670] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1336.157109][T25670] Node 0 DMA32: 1445*4kB (UME) 2898*8kB (UME) 1273*16kB (UME) 1170*32kB (UME) 669*64kB (UME) 441*128kB (UME) 178*256kB (UME) 57*512kB (UM) 24*1024kB (UME) 10*2048kB (UM) 248*4096kB (UM) = 1321652kB [ 1336.187255][T25670] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1336.226476][T25670] Node 1 Normal: 248*4kB (UME) 62*8kB (UME) 32*16kB (UME) 185*32kB (UME) 58*64kB (UE) 26*128kB (UME) 14*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3906672kB [ 1336.281934][T25670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.311539][T25670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1336.331995][T25670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.366944][T25670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1336.411682][T25670] 66274 total pagecache pages [ 1336.416679][T25670] 0 pages in swap cache [ 1336.420990][T25670] Free swap = 124996kB [ 1336.466594][T25670] Total swap = 124996kB [ 1336.471060][T25670] 2097051 pages RAM [ 1336.477299][T25670] 0 pages HighMem/MovableOnly [ 1336.501459][T25670] 415205 pages reserved [ 1336.505992][T25670] 0 pages cma reserved [ 1337.369772][T25737] netlink: 'syz.5.7219': attribute type 10 has an invalid length. [ 1337.490752][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1337.801056][T25758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7226'. [ 1338.140696][T25765] netlink: 'syz.2.7228': attribute type 28 has an invalid length. [ 1338.150405][T25765] netlink: 'syz.2.7228': attribute type 29 has an invalid length. [ 1338.160582][T25765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7228'. [ 1339.589863][T25770] netlink: 'syz.5.7230': attribute type 3 has an invalid length. [ 1339.623864][T25770] netlink: 'syz.5.7230': attribute type 1 has an invalid length. [ 1339.636070][T25770] netlink: 198452 bytes leftover after parsing attributes in process `syz.5.7230'. [ 1339.801416][T23269] wlan1: Trigger new scan to find an IBSS to join [ 1339.808061][T23269] wlan1: Trigger new scan to find an IBSS to join [ 1340.366140][T25798] netlink: 'syz.5.7239': attribute type 10 has an invalid length. [ 1340.393197][T25798] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7239'. [ 1340.778012][T25799] device lo entered promiscuous mode [ 1340.808897][T25796] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7238'. [ 1340.824439][T25804] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7239'. [ 1341.313177][T25832] __nla_validate_parse: 1 callbacks suppressed [ 1341.313198][T25832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7248'. [ 1341.329107][T25832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7248'. [ 1341.439338][T25834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7248'. [ 1342.841354][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 1342.848350][T23289] wlan1: Trigger new scan to find an IBSS to join [ 1342.872665][T25849] netlink: 'syz.2.7253': attribute type 10 has an invalid length. [ 1342.880537][T25849] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7253'. [ 1342.968775][T25857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7253'. [ 1342.990127][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7255'. [ 1343.013821][T25856] device wlan0 entered promiscuous mode [ 1343.067201][T25853] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7254'. [ 1343.283552][T25866] syz.5.7258[25866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1343.283671][T25866] syz.5.7258[25866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1343.418278][T25868] FAULT_INJECTION: forcing a failure. [ 1343.418278][T25868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.474766][T25868] CPU: 1 PID: 25868 Comm: syz.1.7259 Not tainted syzkaller #0 [ 1343.482398][T25868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1343.492502][T25868] Call Trace: [ 1343.495840][T25868] [ 1343.498821][T25868] dump_stack_lvl+0x188/0x24e [ 1343.503551][T25868] ? show_regs_print_info+0x12/0x12 [ 1343.508798][T25868] ? load_image+0x400/0x400 [ 1343.513341][T25868] ? __lock_acquire+0x7d10/0x7d10 [ 1343.518413][T25868] ? __rcu_read_unlock+0x78/0xd0 [ 1343.523394][T25868] should_fail_ex+0x399/0x4d0 [ 1343.528135][T25868] _copy_to_user+0x2c/0x130 [ 1343.532682][T25868] bpf_test_finish+0x266/0x600 [ 1343.537494][T25868] ? convert___skb_to_skb+0x580/0x580 [ 1343.542905][T25868] ? convert_skb_to___skb+0x420/0x420 [ 1343.548310][T25868] ? __build_skb+0x257/0x3c0 [ 1343.552943][T25868] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1343.558382][T25868] ? cpu_online+0xa0/0xa0 [ 1343.562756][T25868] bpf_prog_test_run+0x31e/0x390 [ 1343.567780][T25868] __sys_bpf+0x62b/0x780 [ 1343.572087][T25868] ? bpf_link_show_fdinfo+0x380/0x380 [ 1343.577531][T25868] ? lock_chain_count+0x20/0x20 [ 1343.582415][T25868] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1343.588467][T25868] __x64_sys_bpf+0x78/0x90 [ 1343.592926][T25868] do_syscall_64+0x4c/0xa0 [ 1343.597382][T25868] ? clear_bhb_loop+0x60/0xb0 [ 1343.602092][T25868] ? clear_bhb_loop+0x60/0xb0 [ 1343.606814][T25868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1343.612756][T25868] RIP: 0033:0x7fe30439bf79 [ 1343.617211][T25868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.636859][T25868] RSP: 002b:00007fe305202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1343.645315][T25868] RAX: ffffffffffffffda RBX: 00007fe304615fa0 RCX: 00007fe30439bf79 [ 1343.653358][T25868] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1343.661368][T25868] RBP: 00007fe305202090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.669372][T25868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.677366][T25868] R13: 00007fe304616038 R14: 00007fe304615fa0 R15: 00007ffd7f90c638 [ 1343.685390][T25868] [ 1343.781084][T25875] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1343.791928][T25875] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1344.005540][T23272] wlan1: Creating new IBSS network, BSSID ea:e5:12:25:64:9d [ 1344.515149][T25891] device syzkaller0 entered promiscuous mode [ 1345.068945][T25902] netlink: 'syz.1.7271': attribute type 10 has an invalid length. [ 1345.088198][T25902] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7271'. [ 1345.136699][T25908] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7271'. [ 1346.764404][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1348.330095][T25924] __nla_validate_parse: 2 callbacks suppressed [ 1348.330111][T25924] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.7274'. [ 1348.349880][T25925] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7274'. [ 1348.360809][T25937] netlink: 'syz.1.7278': attribute type 21 has an invalid length. [ 1348.965462][T25950] FAULT_INJECTION: forcing a failure. [ 1348.965462][T25950] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.979983][T25955] netlink: 'syz.1.7284': attribute type 10 has an invalid length. [ 1348.991658][T25955] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7284'. [ 1348.993742][T25950] CPU: 1 PID: 25950 Comm: syz.3.7282 Not tainted syzkaller #0 [ 1349.008115][T25950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1349.018199][T25950] Call Trace: [ 1349.021513][T25950] [ 1349.024470][T25950] dump_stack_lvl+0x188/0x24e [ 1349.029226][T25950] ? show_regs_print_info+0x12/0x12 [ 1349.034558][T25950] ? load_image+0x400/0x400 [ 1349.039091][T25950] ? perf_trace_lock+0xf8/0x390 [ 1349.043982][T25950] should_fail_ex+0x399/0x4d0 [ 1349.048723][T25950] should_failslab+0x5/0x20 [ 1349.053274][T25950] slab_pre_alloc_hook+0x59/0x310 [ 1349.058365][T25950] kmem_cache_alloc+0x56/0x2f0 [ 1349.063169][T25950] ? skb_clone+0x1e7/0x370 [ 1349.067643][T25950] skb_clone+0x1e7/0x370 [ 1349.071934][T25950] __netlink_deliver_tap+0x3ed/0x800 [ 1349.077263][T25950] ? netlink_deliver_tap+0x2e/0x1b0 [ 1349.081840][T25957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7284'. [ 1349.082495][T25950] netlink_deliver_tap+0x19c/0x1b0 [ 1349.096702][T25950] netlink_dump+0x832/0xd00 [ 1349.101260][T25950] ? netlink_lookup+0x200/0x200 [ 1349.106169][T25950] ? netlink_lookup+0x30/0x200 [ 1349.111060][T25950] ? netlink_lookup+0x30/0x200 [ 1349.115871][T25950] __netlink_dump_start+0x537/0x6f0 [ 1349.121132][T25950] netlink_diag_handler_dump+0x195/0x230 [ 1349.126800][T25950] ? __lock_acquire+0x7d10/0x7d10 [ 1349.131883][T25950] ? netlink_policy_dump_write+0x5e0/0x5e0 [ 1349.137727][T25950] ? do_raw_spin_lock+0x128/0x2f0 [ 1349.142801][T25950] ? netlink_diag_handler_dump+0x230/0x230 [ 1349.148651][T25950] ? netlink_diag_dump+0x230/0x230 [ 1349.153796][T25950] ? sock_diag_lock_handler+0x19/0x280 [ 1349.159307][T25950] ? sock_diag_lock_handler+0x19/0x280 [ 1349.164801][T25950] ? netlink_policy_dump_write+0x5e0/0x5e0 [ 1349.170640][T25950] sock_diag_rcv_msg+0x3cc/0x5f0 [ 1349.175613][T25950] netlink_rcv_skb+0x1fb/0x450 [ 1349.180429][T25950] ? sock_diag_bind+0xa0/0xa0 [ 1349.185154][T25950] ? netlink_ack+0x1170/0x1170 [ 1349.189970][T25950] ? __rcu_read_unlock+0x78/0xd0 [ 1349.194957][T25950] ? netlink_deliver_tap+0x2e/0x1b0 [ 1349.200202][T25950] sock_diag_rcv+0x26/0x40 [ 1349.204646][T25950] netlink_unicast+0x74d/0x8d0 [ 1349.209477][T25950] netlink_sendmsg+0x8ad/0xbd0 [ 1349.214298][T25950] ? netlink_getsockopt+0x550/0x550 [ 1349.219556][T25950] ? security_socket_sendmsg+0x8e/0xa0 [ 1349.225063][T25950] ? netlink_getsockopt+0x550/0x550 [ 1349.230302][T25950] ____sys_sendmsg+0x5be/0x970 [ 1349.235182][T25950] ? __sys_sendmsg_sock+0x30/0x30 [ 1349.240240][T25950] ? __import_iovec+0x315/0x500 [ 1349.245142][T25950] ? import_iovec+0x6f/0xa0 [ 1349.249699][T25950] ___sys_sendmsg+0x2a2/0x360 [ 1349.254447][T25950] ? __sys_sendmsg+0x290/0x290 [ 1349.259362][T25950] __se_sys_sendmsg+0x1bb/0x2a0 [ 1349.264263][T25950] ? ct_nmi_exit+0x145/0x1c0 [ 1349.268888][T25950] ? __x64_sys_sendmsg+0x80/0x80 [ 1349.273917][T25950] ? lockdep_hardirqs_on+0x94/0x140 [ 1349.279152][T25950] do_syscall_64+0x4c/0xa0 [ 1349.283609][T25950] ? clear_bhb_loop+0x60/0xb0 [ 1349.288330][T25950] ? clear_bhb_loop+0x60/0xb0 [ 1349.293053][T25950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1349.298983][T25950] RIP: 0033:0x7f4b3f19bf79 [ 1349.303433][T25950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.323087][T25950] RSP: 002b:00007f4b4000d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1349.331546][T25950] RAX: ffffffffffffffda RBX: 00007f4b3f415fa0 RCX: 00007f4b3f19bf79 [ 1349.339567][T25950] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1349.347577][T25950] RBP: 00007f4b4000d090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.355635][T25950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.363723][T25950] R13: 00007f4b3f416038 R14: 00007f4b3f415fa0 R15: 00007ffd7f8b1378 [ 1349.371750][T25950] [ 1349.801811][T23269] wlan1: Trigger new scan to find an IBSS to join [ 1349.889505][T25972] netlink: 'syz.3.7289': attribute type 2 has an invalid length. [ 1349.941504][T25972] netlink: 175020 bytes leftover after parsing attributes in process `syz.3.7289'. [ 1350.197379][T25990] netlink: 'syz.1.7296': attribute type 1 has an invalid length. [ 1351.860803][T23272] wlan1: Creating new IBSS network, BSSID 66:4a:3b:47:53:04 [ 1351.873275][T25992] netlink: 'syz.1.7296': attribute type 1 has an invalid length. [ 1352.043187][T25998] netlink: 'syz.3.7298': attribute type 10 has an invalid length. [ 1352.051062][T25998] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1352.091083][T25998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7298'. [ 1352.123600][T26003] netlink: 'syz.2.7302': attribute type 29 has an invalid length. [ 1352.149277][T26003] netlink: 'syz.2.7302': attribute type 29 has an invalid length. [ 1352.174954][T26005] netlink: 'syz.2.7302': attribute type 29 has an invalid length. [ 1352.215694][T26003] netlink: 'syz.2.7302': attribute type 29 has an invalid length. [ 1353.068950][T26029] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7311'. [ 1353.208229][T26036] FAULT_INJECTION: forcing a failure. [ 1353.208229][T26036] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.223902][T26036] CPU: 0 PID: 26036 Comm: syz.4.7312 Not tainted syzkaller #0 [ 1353.231414][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1353.241498][T26036] Call Trace: [ 1353.244801][T26036] [ 1353.247756][T26036] dump_stack_lvl+0x188/0x24e [ 1353.252488][T26036] ? show_regs_print_info+0x12/0x12 [ 1353.257743][T26036] ? load_image+0x400/0x400 [ 1353.262285][T26036] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1353.268316][T26036] should_fail_ex+0x399/0x4d0 [ 1353.273053][T26036] should_failslab+0x5/0x20 [ 1353.277607][T26036] slab_pre_alloc_hook+0x59/0x310 [ 1353.282671][T26036] kmem_cache_alloc+0x56/0x2f0 [ 1353.287468][T26036] ? __build_skb+0x2a/0x3c0 [ 1353.292030][T26036] __build_skb+0x2a/0x3c0 [ 1353.296431][T26036] build_skb+0x1e/0x230 [ 1353.300627][T26036] bpf_prog_test_run_skb+0x37e/0x12a0 [ 1353.306044][T26036] ? __fget_files+0x28/0x4b0 [ 1353.310675][T26036] ? __fget_files+0x43d/0x4b0 [ 1353.315423][T26036] ? cpu_online+0xa0/0xa0 [ 1353.319786][T26036] bpf_prog_test_run+0x31e/0x390 [ 1353.324790][T26036] __sys_bpf+0x62b/0x780 [ 1353.329078][T26036] ? bpf_link_show_fdinfo+0x380/0x380 [ 1353.334503][T26036] ? lock_chain_count+0x20/0x20 [ 1353.339398][T26036] __x64_sys_bpf+0x78/0x90 [ 1353.343854][T26036] do_syscall_64+0x4c/0xa0 [ 1353.348306][T26036] ? clear_bhb_loop+0x60/0xb0 [ 1353.353019][T26036] ? clear_bhb_loop+0x60/0xb0 [ 1353.357750][T26036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.363767][T26036] RIP: 0033:0x7fee79f9bf79 [ 1353.368215][T26036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.387865][T26036] RSP: 002b:00007fee7af03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1353.396318][T26036] RAX: ffffffffffffffda RBX: 00007fee7a215fa0 RCX: 00007fee79f9bf79 [ 1353.404329][T26036] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1353.412332][T26036] RBP: 00007fee7af03090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.420334][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.428324][T26036] R13: 00007fee7a216038 R14: 00007fee7a215fa0 R15: 00007ffdd18551e8 [ 1353.436334][T26036] [ 1355.389135][T26052] netlink: 'syz.1.7318': attribute type 10 has an invalid length. [ 1355.434549][T26052] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1355.459035][T26052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7318'. [ 1355.469204][T26053] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7317'. [ 1355.477421][T26055] FAULT_INJECTION: forcing a failure. [ 1355.477421][T26055] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.516493][T26055] CPU: 0 PID: 26055 Comm: syz.4.7321 Not tainted syzkaller #0 [ 1355.524114][T26055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.534197][T26055] Call Trace: [ 1355.537485][T26055] [ 1355.540428][T26055] dump_stack_lvl+0x188/0x24e [ 1355.545126][T26055] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1355.551295][T26055] ? show_regs_print_info+0x12/0x12 [ 1355.556534][T26055] ? load_image+0x400/0x400 [ 1355.561073][T26055] should_fail_ex+0x399/0x4d0 [ 1355.565783][T26055] should_failslab+0x5/0x20 [ 1355.570306][T26055] slab_pre_alloc_hook+0x59/0x310 [ 1355.575345][T26055] ? apparmor_sk_alloc_security+0x74/0x100 [ 1355.581197][T26055] __kmem_cache_alloc_node+0x4f/0x260 [ 1355.586585][T26055] ? lockdep_hardirqs_on+0x94/0x140 [ 1355.591806][T26055] ? apparmor_sk_alloc_security+0x74/0x100 [ 1355.597675][T26055] kmalloc_trace+0x26/0xe0 [ 1355.602115][T26055] apparmor_sk_alloc_security+0x74/0x100 [ 1355.607778][T26055] security_sk_alloc+0x6a/0xa0 [ 1355.612576][T26055] sk_prot_alloc+0x101/0x210 [ 1355.617185][T26055] ? sk_alloc+0x20/0x340 [ 1355.621450][T26055] sk_alloc+0x36/0x340 [ 1355.625536][T26055] ? bpf_ctx_init+0x163/0x1a0 [ 1355.630250][T26055] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1355.635809][T26055] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1355.641205][T26055] ? __fget_files+0x28/0x4b0 [ 1355.645823][T26055] ? __fget_files+0x43d/0x4b0 [ 1355.650526][T26055] ? cpu_online+0xa0/0xa0 [ 1355.654883][T26055] bpf_prog_test_run+0x31e/0x390 [ 1355.659847][T26055] __sys_bpf+0x62b/0x780 [ 1355.664113][T26055] ? bpf_link_show_fdinfo+0x380/0x380 [ 1355.669509][T26055] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1355.675687][T26055] __x64_sys_bpf+0x78/0x90 [ 1355.680124][T26055] do_syscall_64+0x4c/0xa0 [ 1355.684567][T26055] ? clear_bhb_loop+0x60/0xb0 [ 1355.689309][T26055] ? clear_bhb_loop+0x60/0xb0 [ 1355.694011][T26055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.699913][T26055] RIP: 0033:0x7fee79f9bf79 [ 1355.704356][T26055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.723992][T26055] RSP: 002b:00007fee7af03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1355.732446][T26055] RAX: ffffffffffffffda RBX: 00007fee7a215fa0 RCX: 00007fee79f9bf79 [ 1355.740433][T26055] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1355.748411][T26055] RBP: 00007fee7af03090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.756400][T26055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.764415][T26055] R13: 00007fee7a216038 R14: 00007fee7a215fa0 R15: 00007ffdd18551e8 [ 1355.772428][T26055] [ 1356.269253][T26073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1356.365335][T26073] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1356.422059][T26077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1356.603178][T26091] netlink: 'syz.2.7332': attribute type 41 has an invalid length. [ 1356.640731][T26087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.564662][T26104] netlink: 'syz.2.7336': attribute type 10 has an invalid length. [ 1358.581363][T26104] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7336'. [ 1358.590444][T26107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7336'. [ 1358.705849][T26112] netlink: 'syz.1.7338': attribute type 16 has an invalid length. [ 1358.905913][T26124] netlink: 'syz.5.7343': attribute type 21 has an invalid length. [ 1358.978815][T26131] netlink: 'syz.1.7346': attribute type 10 has an invalid length. [ 1361.347983][T26142] netlink: 'syz.4.7352': attribute type 10 has an invalid length. [ 1361.381680][T26142] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1361.398952][T26142] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7352'. [ 1361.570665][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.577192][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.580524][T26156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1362.670935][T26169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7362'. [ 1366.264490][T26196] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7369'. [ 1366.630227][T26212] netlink: 'syz.1.7374': attribute type 10 has an invalid length. [ 1366.638911][T26212] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7374'. [ 1366.826655][T26221] netlink: 'syz.2.7378': attribute type 11 has an invalid length. [ 1366.850013][T26221] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7378'. [ 1366.869486][T26221] netlink: 'syz.2.7378': attribute type 10 has an invalid length. [ 1366.918161][T26221] team0: Port device wlan1 added [ 1366.940459][T26219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.007592][T26225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7380'. [ 1369.662006][T26245] netlink: 'syz.3.7387': attribute type 3 has an invalid length. [ 1369.681301][T26245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7387'. [ 1369.760198][T26252] netlink: 'syz.4.7390': attribute type 10 has an invalid length. [ 1369.775106][T26252] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7390'. [ 1369.794457][T26252] device batadv_slave_1 entered promiscuous mode [ 1369.802009][T26254] netlink: 'syz.5.7388': attribute type 6 has an invalid length. [ 1369.802051][T26254] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.7388'. [ 1369.863734][T26254] device bridge_slave_1 left promiscuous mode [ 1369.905467][T26254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.053941][T26254] device bridge_slave_0 left promiscuous mode [ 1370.115233][T26254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.844299][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1370.855093][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7396'. [ 1370.905489][T26272] netlink: 'syz.2.7398': attribute type 19 has an invalid length. [ 1370.921468][T26272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7398'. [ 1371.051066][T26284] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7402'. [ 1371.457785][T26299] netlink: 'syz.1.7409': attribute type 39 has an invalid length. [ 1372.055772][T26314] netlink: 'syz.5.7414': attribute type 19 has an invalid length. [ 1372.081909][T26314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7414'. [ 1372.220683][T26316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7415'. [ 1372.505572][T26326] netlink: 'syz.2.7420': attribute type 10 has an invalid length. [ 1372.531279][T26326] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1372.595841][T26329] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1372.646849][T26329] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1373.801317][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1374.277125][T26357] netlink: 'syz.4.7429': attribute type 19 has an invalid length. [ 1374.329712][T26357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7429'. [ 1374.398969][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7431'. [ 1374.540566][T26367] netlink: 'syz.1.7428': attribute type 33 has an invalid length. [ 1374.550124][T26367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7428'. [ 1375.336499][T26378] netlink: 'syz.2.7436': attribute type 10 has an invalid length. [ 1375.366789][T26378] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7436'. [ 1376.344125][T26397] netlink: 'syz.5.7440': attribute type 39 has an invalid length. [ 1376.461012][T26401] netlink: 'syz.1.7442': attribute type 19 has an invalid length. [ 1376.480219][T26401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7442'. [ 1376.503557][T26407] netlink: 'syz.4.7444': attribute type 29 has an invalid length. [ 1376.515754][T26407] netlink: 'syz.4.7444': attribute type 29 has an invalid length. [ 1376.541816][T26407] netlink: 'syz.4.7444': attribute type 29 has an invalid length. [ 1376.721110][T26411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7445'. [ 1377.247610][T26428] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7449'. [ 1377.300534][T26428] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1377.315767][T26428] CPU: 1 PID: 26428 Comm: syz.5.7449 Not tainted syzkaller #0 [ 1377.323328][T26428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1377.333421][T26428] Call Trace: [ 1377.336734][T26428] [ 1377.339688][T26428] dump_stack_lvl+0x188/0x24e [ 1377.344412][T26428] ? show_regs_print_info+0x12/0x12 [ 1377.349664][T26428] ? load_image+0x400/0x400 [ 1377.354227][T26428] sysfs_warn_dup+0x8a/0xa0 [ 1377.358777][T26428] sysfs_do_create_link_sd+0xc0/0x110 [ 1377.364199][T26428] device_add+0x7ed/0xfb0 [ 1377.368580][T26428] wiphy_register+0x1d9f/0x2ac0 [ 1377.373477][T26428] ? cfg80211_event_work+0x40/0x40 [ 1377.378612][T26428] ? minstrel_ht_alloc+0x894/0xa20 [ 1377.383859][T26428] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1377.389952][T26428] ieee80211_register_hw+0x2d00/0x39f0 [ 1377.395463][T26428] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1377.401065][T26428] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1377.406658][T26428] ? ieee80211_tasklet_handler+0x20/0x20 [ 1377.412319][T26428] ? memset+0x1e/0x40 [ 1377.416316][T26428] ? __hrtimer_init+0x186/0x270 [ 1377.421195][T26428] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1377.426957][T26428] hwsim_new_radio_nl+0xafa/0xce0 [ 1377.432011][T26428] genl_family_rcv_msg_doit+0x22a/0x330 [ 1377.437611][T26428] ? end_current_label_crit_section+0x170/0x170 [ 1377.443870][T26428] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1377.449805][T26428] ? bpf_lsm_capable+0x5/0x10 [ 1377.454514][T26428] ? security_capable+0x85/0xb0 [ 1377.459392][T26428] genl_rcv_msg+0x604/0x790 [ 1377.463955][T26428] ? genl_bind+0x360/0x360 [ 1377.468404][T26428] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1377.474773][T26428] netlink_rcv_skb+0x1fb/0x450 [ 1377.479576][T26428] ? genl_bind+0x360/0x360 [ 1377.484016][T26428] ? netlink_ack+0x1170/0x1170 [ 1377.488818][T26428] ? down_read+0x1a8/0x2d0 [ 1377.493259][T26428] genl_rcv+0x24/0x40 [ 1377.497265][T26428] netlink_unicast+0x74d/0x8d0 [ 1377.502057][T26428] netlink_sendmsg+0x8ad/0xbd0 [ 1377.506860][T26428] ? netlink_getsockopt+0x550/0x550 [ 1377.512084][T26428] ? aa_sock_msg_perm+0x94/0x150 [ 1377.517037][T26428] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1377.522348][T26428] ? security_socket_sendmsg+0x7c/0xa0 [ 1377.527827][T26428] ? netlink_getsockopt+0x550/0x550 [ 1377.533057][T26428] ____sys_sendmsg+0x5be/0x970 [ 1377.537852][T26428] ? __sys_sendmsg_sock+0x30/0x30 [ 1377.542901][T26428] ? __import_iovec+0x315/0x500 [ 1377.547778][T26428] ? import_iovec+0x6f/0xa0 [ 1377.552298][T26428] ___sys_sendmsg+0x2a2/0x360 [ 1377.556996][T26428] ? try_to_wake_up+0x6ae/0x1080 [ 1377.561960][T26428] ? __sys_sendmsg+0x290/0x290 [ 1377.566779][T26428] __se_sys_sendmsg+0x1bb/0x2a0 [ 1377.571658][T26428] ? ct_nmi_exit+0x145/0x1c0 [ 1377.576274][T26428] ? __x64_sys_sendmsg+0x80/0x80 [ 1377.581243][T26428] ? lockdep_hardirqs_on+0x94/0x140 [ 1377.586457][T26428] do_syscall_64+0x4c/0xa0 [ 1377.590888][T26428] ? clear_bhb_loop+0x60/0xb0 [ 1377.595584][T26428] ? clear_bhb_loop+0x60/0xb0 [ 1377.600274][T26428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1377.606196][T26428] RIP: 0033:0x7f6255b9bf79 [ 1377.610625][T26428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.630247][T26428] RSP: 002b:00007f6256a60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1377.638674][T26428] RAX: ffffffffffffffda RBX: 00007f6255e15fa0 RCX: 00007f6255b9bf79 [ 1377.646666][T26428] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1377.654647][T26428] RBP: 00007f6255c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.662639][T26428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.670623][T26428] R13: 00007f6255e16038 R14: 00007f6255e15fa0 R15: 00007ffc3e4b4d38 [ 1377.678629][T26428] [ 1377.802320][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1378.083273][T26440] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.7450'. [ 1378.113389][T26440] openvswitch: netlink: Message has 48126 unknown bytes. [ 1378.306556][T26453] validate_nla: 1 callbacks suppressed [ 1378.306576][T26453] netlink: 'syz.5.7454': attribute type 10 has an invalid length. [ 1378.356612][T26453] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7454'. [ 1378.528656][T26460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7455'. [ 1378.725112][T26467] netlink: 'syz.4.7457': attribute type 19 has an invalid length. [ 1378.741331][T26467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7457'. [ 1378.777619][T26469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7459'. [ 1378.920818][T26481] netlink: 'syz.3.7464': attribute type 29 has an invalid length. [ 1378.930845][T26481] netlink: 'syz.3.7464': attribute type 29 has an invalid length. [ 1378.966522][T26481] netlink: 'syz.3.7464': attribute type 29 has an invalid length. [ 1378.985526][T26481] netlink: 'syz.3.7464': attribute type 29 has an invalid length. [ 1379.304946][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7467'. [ 1379.578862][T26495] netlink: 'syz.4.7468': attribute type 39 has an invalid length. [ 1379.736348][T26498] syz.2.7469[26498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1379.737660][T26498] syz.2.7469[26498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1379.781010][T26503] FAULT_INJECTION: forcing a failure. [ 1379.781010][T26503] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.865557][T26503] CPU: 1 PID: 26503 Comm: syz.5.7470 Not tainted syzkaller #0 [ 1379.873086][T26503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1379.883178][T26503] Call Trace: [ 1379.886480][T26503] [ 1379.889438][T26503] dump_stack_lvl+0x188/0x24e [ 1379.894276][T26503] ? show_regs_print_info+0x12/0x12 [ 1379.899534][T26503] ? load_image+0x400/0x400 [ 1379.904075][T26503] ? __might_sleep+0xd0/0xd0 [ 1379.908701][T26503] ? __lock_acquire+0x7d10/0x7d10 [ 1379.913824][T26503] should_fail_ex+0x399/0x4d0 [ 1379.918545][T26503] should_failslab+0x5/0x20 [ 1379.923095][T26503] slab_pre_alloc_hook+0x59/0x310 [ 1379.928158][T26503] kmem_cache_alloc_node+0x5a/0x320 [ 1379.933385][T26503] ? __alloc_skb+0xfc/0x7e0 [ 1379.937930][T26503] __alloc_skb+0xfc/0x7e0 [ 1379.942301][T26503] alloc_skb_with_frags+0xa7/0x710 [ 1379.947458][T26503] ? trace_event_raw_event_lock+0x250/0x250 [ 1379.953380][T26503] ? mark_lock+0x94/0x320 [ 1379.957766][T26503] sock_alloc_send_pskb+0x87f/0x9a0 [ 1379.963032][T26503] ? sock_kzfree_s+0x50/0x50 [ 1379.967650][T26503] ? do_raw_spin_lock+0x128/0x2f0 [ 1379.972744][T26503] ? __rwlock_init+0x140/0x140 [ 1379.977543][T26503] ? do_raw_spin_unlock+0x11d/0x230 [ 1379.982794][T26503] unix_dgram_sendmsg+0x539/0x16e0 [ 1379.987956][T26503] ? aa_sk_perm+0x81f/0x950 [ 1379.992513][T26503] ? unix_dgram_poll+0x680/0x680 [ 1379.997487][T26503] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1380.003942][T26503] ? aa_sock_msg_perm+0x94/0x150 [ 1380.008919][T26503] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 1380.014497][T26503] ? unix_dgram_peer_wake_me+0x430/0x430 [ 1380.020152][T26503] ____sys_sendmsg+0x5be/0x970 [ 1380.024965][T26503] ? __sys_sendmsg_sock+0x30/0x30 [ 1380.030023][T26503] ? __import_iovec+0x315/0x500 [ 1380.034906][T26503] ? import_iovec+0x6f/0xa0 [ 1380.039439][T26503] ___sys_sendmsg+0x2a2/0x360 [ 1380.044164][T26503] ? __sys_sendmsg+0x290/0x290 [ 1380.048979][T26503] ? trace_call_bpf+0xbf/0x6b0 [ 1380.053799][T26503] __se_sys_sendmsg+0x1bb/0x2a0 [ 1380.058681][T26503] ? ct_nmi_exit+0x145/0x1c0 [ 1380.063318][T26503] ? __x64_sys_sendmsg+0x80/0x80 [ 1380.068333][T26503] ? lockdep_hardirqs_on+0x94/0x140 [ 1380.073563][T26503] do_syscall_64+0x4c/0xa0 [ 1380.078032][T26503] ? clear_bhb_loop+0x60/0xb0 [ 1380.082753][T26503] ? clear_bhb_loop+0x60/0xb0 [ 1380.087477][T26503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1380.093416][T26503] RIP: 0033:0x7f6255b9bf79 [ 1380.097863][T26503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.117499][T26503] RSP: 002b:00007f6256a60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1380.125943][T26503] RAX: ffffffffffffffda RBX: 00007f6255e15fa0 RCX: 00007f6255b9bf79 [ 1380.133935][T26503] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1380.141929][T26503] RBP: 00007f6256a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.149923][T26503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.157917][T26503] R13: 00007f6255e16038 R14: 00007f6255e15fa0 R15: 00007ffc3e4b4d38 [ 1380.165928][T26503] [ 1380.373801][T26508] netlink: 'syz.5.7472': attribute type 10 has an invalid length. [ 1380.400425][T26508] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7472'. [ 1380.746068][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7480'. [ 1380.920287][T26538] netlink: 'syz.2.7482': attribute type 29 has an invalid length. [ 1380.928715][T26538] netlink: 'syz.2.7482': attribute type 29 has an invalid length. [ 1380.963772][T26535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7492'. [ 1381.856540][T23270] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1382.223077][T26549] device batadv_slave_1 entered promiscuous mode [ 1382.230612][T26549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.260531][T26549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.461419][T26561] __nla_validate_parse: 1 callbacks suppressed [ 1382.461462][T26561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7491'. [ 1382.484795][T26563] FAULT_INJECTION: forcing a failure. [ 1382.484795][T26563] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.526563][T26563] CPU: 1 PID: 26563 Comm: syz.2.7493 Not tainted syzkaller #0 [ 1382.534066][T26563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1382.544153][T26563] Call Trace: [ 1382.547456][T26563] [ 1382.550449][T26563] dump_stack_lvl+0x188/0x24e [ 1382.555174][T26563] ? show_regs_print_info+0x12/0x12 [ 1382.560419][T26563] ? load_image+0x400/0x400 [ 1382.564956][T26563] ? __lock_acquire+0x7d10/0x7d10 [ 1382.570027][T26563] should_fail_ex+0x399/0x4d0 [ 1382.574760][T26563] should_failslab+0x5/0x20 [ 1382.579299][T26563] slab_pre_alloc_hook+0x59/0x310 [ 1382.584355][T26563] kmem_cache_alloc_lru+0x49/0x2e0 [ 1382.589495][T26563] ? __d_alloc+0x31/0x700 [ 1382.593851][T26563] __d_alloc+0x31/0x700 [ 1382.598036][T26563] d_alloc_pseudo+0x19/0x70 [ 1382.602620][T26563] alloc_file_pseudo+0xe0/0x200 [ 1382.607503][T26563] ? alloc_empty_file_noaccount+0x80/0x80 [ 1382.613259][T26563] ? put_pid+0xc3/0x120 [ 1382.617456][T26563] ? init_peercred+0x273/0x310 [ 1382.622350][T26563] sock_alloc_file+0xb3/0x240 [ 1382.627066][T26563] __sys_socketpair+0x2cc/0x540 [ 1382.631982][T26563] __x64_sys_socketpair+0x97/0xb0 [ 1382.637054][T26563] do_syscall_64+0x4c/0xa0 [ 1382.641502][T26563] ? clear_bhb_loop+0x60/0xb0 [ 1382.646215][T26563] ? clear_bhb_loop+0x60/0xb0 [ 1382.650927][T26563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.656856][T26563] RIP: 0033:0x7f4fedd9bf79 [ 1382.661302][T26563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.680955][T26563] RSP: 002b:00007f4feec61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1382.689401][T26563] RAX: ffffffffffffffda RBX: 00007f4fee015fa0 RCX: 00007f4fedd9bf79 [ 1382.697397][T26563] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1382.705392][T26563] RBP: 00007f4feec61090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.713380][T26563] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 1382.721369][T26563] R13: 00007f4fee016038 R14: 00007f4fee015fa0 R15: 00007ffc1d9de6b8 [ 1382.729379][T26563] [ 1382.772470][T23268] wlan1: Trigger new scan to find an IBSS to join [ 1382.900747][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7497'. [ 1383.570529][T26593] netlink: 168 bytes leftover after parsing attributes in process `syz.5.7502'. [ 1384.035132][T26595] validate_nla: 5 callbacks suppressed [ 1384.035187][T26595] netlink: 'syz.3.7503': attribute type 10 has an invalid length. [ 1384.058661][T26595] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7503'. [ 1384.068421][T26595] device batadv_slave_1 entered promiscuous mode [ 1384.543844][T26607] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 1384.692177][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7509'. [ 1384.844024][T26622] netlink: 'syz.5.7513': attribute type 10 has an invalid length. [ 1384.912388][T26622] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7513'. [ 1385.055341][T26631] tun0: tun_chr_ioctl cmd 1074025675 [ 1385.063087][T26631] tun0: persist enabled [ 1385.135403][T26634] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.7516'. [ 1385.801241][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 1388.043423][T26629] tun0: tun_chr_ioctl cmd 1074025675 [ 1388.048811][T26629] tun0: persist enabled [ 1388.457907][T26656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7526'. [ 1388.702720][T26667] netlink: 'syz.2.7530': attribute type 10 has an invalid length. [ 1388.713705][T26665] sctp: [Deprecated]: syz.3.7527 (pid 26665) Use of int in max_burst socket option deprecated. [ 1388.713705][T26665] Use struct sctp_assoc_value instead [ 1388.761306][T26667] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7530'. [ 1388.771447][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1388.827040][T26673] netlink: 'syz.4.7532': attribute type 2 has an invalid length. [ 1388.860537][T26670] netlink: 'syz.5.7531': attribute type 10 has an invalid length. [ 1388.881659][T26670] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7531'. [ 1389.250498][T26684] netlink: 'syz.5.7533': attribute type 2 has an invalid length. [ 1389.685928][ T4342] wlan1: Creating new IBSS network, BSSID 06:3e:28:bb:e5:f8 [ 1389.701638][T23273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1390.210574][T26710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7541'. [ 1390.347468][T26717] netlink: 'syz.4.7545': attribute type 10 has an invalid length. [ 1390.366108][T26717] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7545'. [ 1390.467536][T26718] netlink: 'syz.3.7543': attribute type 21 has an invalid length. [ 1390.496708][T26718] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7543'. [ 1390.556098][T26718] netlink: 'syz.3.7543': attribute type 4 has an invalid length. [ 1390.617563][T26718] netlink: 'syz.3.7543': attribute type 5 has an invalid length. [ 1390.668676][T26718] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7543'. [ 1391.485129][T26757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7557'. [ 1391.956396][T26777] netlink: 'syz.3.7566': attribute type 10 has an invalid length. [ 1391.981115][T26777] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7566'. [ 1392.017952][T26779] netlink: 'syz.5.7567': attribute type 19 has an invalid length. [ 1392.038845][T26779] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7567'. [ 1392.654811][T26794] netlink: 'syz.5.7570': attribute type 10 has an invalid length. [ 1393.660509][T26809] netlink: 'syz.1.7576': attribute type 2 has an invalid length. [ 1393.672610][T26809] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7576'. [ 1393.900636][T26822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7577'. [ 1394.030186][T26824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7578'. [ 1394.250924][T26828] netlink: 'syz.1.7580': attribute type 19 has an invalid length. [ 1394.302775][T26828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7580'. [ 1394.352335][T26831] netlink: 'syz.2.7581': attribute type 21 has an invalid length. [ 1394.375007][T26831] netlink: 'syz.2.7581': attribute type 1 has an invalid length. [ 1394.398422][T26831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7581'. [ 1394.723057][T26844] netlink: 'syz.1.7586': attribute type 29 has an invalid length. [ 1394.752347][T26844] netlink: 'syz.1.7586': attribute type 3 has an invalid length. [ 1394.760303][T26844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7586'. [ 1395.665185][T26862] sctp: [Deprecated]: syz.2.7592 (pid 26862) Use of int in max_burst socket option deprecated. [ 1395.665185][T26862] Use struct sctp_assoc_value instead [ 1396.897244][T26894] netlink: 'syz.1.7601': attribute type 39 has an invalid length. [ 1398.045657][T26917] FAULT_INJECTION: forcing a failure. [ 1398.045657][T26917] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.175541][T26917] CPU: 1 PID: 26917 Comm: syz.3.7609 Not tainted syzkaller #0 [ 1398.183076][T26917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1398.193163][T26917] Call Trace: [ 1398.196464][T26917] [ 1398.199404][T26917] dump_stack_lvl+0x188/0x24e [ 1398.204104][T26917] ? show_regs_print_info+0x12/0x12 [ 1398.209321][T26917] ? load_image+0x400/0x400 [ 1398.213853][T26917] ? __might_sleep+0xd0/0xd0 [ 1398.218455][T26917] ? __lock_acquire+0x7d10/0x7d10 [ 1398.223504][T26917] should_fail_ex+0x399/0x4d0 [ 1398.228219][T26917] should_failslab+0x5/0x20 [ 1398.232743][T26917] slab_pre_alloc_hook+0x59/0x310 [ 1398.237787][T26917] kmem_cache_alloc+0x56/0x2f0 [ 1398.242568][T26917] ? __alloc_file+0x25/0x230 [ 1398.247180][T26917] __alloc_file+0x25/0x230 [ 1398.251617][T26917] alloc_empty_file+0x90/0x180 [ 1398.256396][T26917] alloc_file+0x5c/0x5f0 [ 1398.260663][T26917] alloc_file_pseudo+0x180/0x200 [ 1398.265617][T26917] ? alloc_empty_file_noaccount+0x80/0x80 [ 1398.271349][T26917] ? _raw_spin_unlock+0x24/0x40 [ 1398.276217][T26917] anon_inode_getfd+0xc6/0x1c0 [ 1398.280998][T26917] map_create+0xbe8/0x1000 [ 1398.285461][T26917] __sys_bpf+0x38b/0x780 [ 1398.289817][T26917] ? bpf_link_show_fdinfo+0x380/0x380 [ 1398.295217][T26917] ? lock_chain_count+0x20/0x20 [ 1398.300088][T26917] __x64_sys_bpf+0x78/0x90 [ 1398.304521][T26917] do_syscall_64+0x4c/0xa0 [ 1398.308956][T26917] ? clear_bhb_loop+0x60/0xb0 [ 1398.313668][T26917] ? clear_bhb_loop+0x60/0xb0 [ 1398.318362][T26917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1398.324270][T26917] RIP: 0033:0x7f4b3f19bf79 [ 1398.328701][T26917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.348333][T26917] RSP: 002b:00007f4b4000d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1398.356977][T26917] RAX: ffffffffffffffda RBX: 00007f4b3f415fa0 RCX: 00007f4b3f19bf79 [ 1398.364987][T26917] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000000 [ 1398.372988][T26917] RBP: 00007f4b4000d090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.380984][T26917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1398.388967][T26917] R13: 00007f4b3f416038 R14: 00007f4b3f415fa0 R15: 00007ffd7f8b1378 [ 1398.396964][T26917] [ 1398.600283][T26929] sctp: [Deprecated]: syz.4.7611 (pid 26929) Use of int in max_burst socket option deprecated. [ 1398.600283][T26929] Use struct sctp_assoc_value instead [ 1398.761429][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 1399.481924][ T4328] Bluetooth: hci3: command 0x0406 tx timeout [ 1400.469570][T26982] netlink: 'syz.3.7629': attribute type 21 has an invalid length. [ 1400.491603][T26982] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1400.895525][T27002] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7634'. [ 1402.771632][T23270] wlan1: Trigger new scan to find an IBSS to join [ 1402.876393][T27044] netlink: 'syz.2.7649': attribute type 10 has an invalid length. [ 1402.926604][T27044] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7649'. [ 1402.944375][T27042] netlink: 'syz.5.7648': attribute type 1 has an invalid length. [ 1403.024673][T27042] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.7648'. [ 1403.494486][T27054] netlink: 'syz.1.7651': attribute type 29 has an invalid length. [ 1403.576326][T27054] netlink: 'syz.1.7651': attribute type 29 has an invalid length. [ 1403.612456][T27058] netlink: 'syz.1.7651': attribute type 29 has an invalid length. [ 1403.679430][T27059] netlink: 'syz.1.7651': attribute type 29 has an invalid length. [ 1403.729844][T27062] netlink: 'syz.1.7651': attribute type 29 has an invalid length. [ 1403.794457][T27058] netlink: 'syz.1.7651': attribute type 29 has an invalid length. [ 1404.254865][T27075] FAULT_INJECTION: forcing a failure. [ 1404.254865][T27075] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.291472][T27075] CPU: 0 PID: 27075 Comm: syz.3.7656 Not tainted syzkaller #0 [ 1404.299068][T27075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1404.309146][T27075] Call Trace: [ 1404.312493][T27075] [ 1404.315457][T27075] dump_stack_lvl+0x188/0x24e [ 1404.320175][T27075] ? show_regs_print_info+0x12/0x12 [ 1404.325393][T27075] ? load_image+0x400/0x400 [ 1404.329917][T27075] ? __might_sleep+0xd0/0xd0 [ 1404.334519][T27075] ? __lock_acquire+0x7d10/0x7d10 [ 1404.339593][T27075] should_fail_ex+0x399/0x4d0 [ 1404.344306][T27075] should_failslab+0x5/0x20 [ 1404.348832][T27075] slab_pre_alloc_hook+0x59/0x310 [ 1404.353866][T27075] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1404.359690][T27075] kmem_cache_alloc+0x56/0x2f0 [ 1404.364466][T27075] ? getname_flags+0xb7/0x500 [ 1404.369169][T27075] getname_flags+0xb7/0x500 [ 1404.373719][T27075] do_sys_openat2+0xdd/0x4b0 [ 1404.378332][T27075] ? ct_nmi_exit+0x145/0x1c0 [ 1404.382944][T27075] ? ct_irq_exit_irqson+0x113/0x170 [ 1404.388169][T27075] ? do_sys_open+0xe0/0xe0 [ 1404.392609][T27075] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1404.398703][T27075] ? lock_chain_count+0x20/0x20 [ 1404.403581][T27075] __x64_sys_openat+0x135/0x160 [ 1404.408467][T27075] do_syscall_64+0x4c/0xa0 [ 1404.412902][T27075] ? clear_bhb_loop+0x60/0xb0 [ 1404.417600][T27075] ? clear_bhb_loop+0x60/0xb0 [ 1404.422294][T27075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.428210][T27075] RIP: 0033:0x7f4b3f15c84e [ 1404.432639][T27075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1404.452262][T27075] RSP: 002b:00007f4b4000cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1404.460690][T27075] RAX: ffffffffffffffda RBX: 00007f4b4000d6c0 RCX: 00007f4b3f15c84e [ 1404.468680][T27075] RDX: 0000000000000002 RSI: 00007f4b4000cf90 RDI: ffffffffffffff9c [ 1404.476665][T27075] RBP: 00007f4b4000d090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.484653][T27075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.492642][T27075] R13: 00007f4b3f416038 R14: 00007f4b3f415fa0 R15: 00007ffd7f8b1378 [ 1404.500665][T27075] [ 1404.842476][T23289] wlan1: Trigger new scan to find an IBSS to join [ 1405.616271][T27097] netlink: 'syz.3.7663': attribute type 10 has an invalid length. [ 1405.632196][T27097] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7663'. [ 1405.801471][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1407.574786][T27157] netlink: 'syz.5.7679': attribute type 29 has an invalid length. [ 1407.601056][T27157] netlink: 'syz.5.7679': attribute type 29 has an invalid length. [ 1407.681278][T27159] netlink: 'syz.5.7679': attribute type 29 has an invalid length. [ 1407.717545][T27157] netlink: 'syz.5.7679': attribute type 29 has an invalid length. [ 1407.798963][T27157] netlink: 'syz.5.7679': attribute type 29 has an invalid length. [ 1408.064614][T27167] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.7683'. [ 1408.415740][T27186] netlink: 'syz.4.7688': attribute type 21 has an invalid length. [ 1408.439396][T27186] netlink: 'syz.4.7688': attribute type 4 has an invalid length. [ 1408.471958][T27187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.738025][T27194] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7691'. [ 1408.782398][T27192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7690'. [ 1408.811496][T27192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7690'. [ 1408.841654][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1409.354814][T27216] netlink: 'syz.4.7700': attribute type 29 has an invalid length. [ 1409.407273][T27216] netlink: 'syz.4.7700': attribute type 29 has an invalid length. [ 1409.522315][T27228] FAULT_INJECTION: forcing a failure. [ 1409.522315][T27228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.551413][T27228] CPU: 1 PID: 27228 Comm: syz.3.7702 Not tainted syzkaller #0 [ 1409.558924][T27228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1409.568989][T27228] Call Trace: [ 1409.572297][T27228] [ 1409.575249][T27228] dump_stack_lvl+0x188/0x24e [ 1409.579954][T27228] ? show_regs_print_info+0x12/0x12 [ 1409.585172][T27228] ? load_image+0x400/0x400 [ 1409.589698][T27228] ? __might_fault+0xa6/0x120 [ 1409.594399][T27228] should_fail_ex+0x399/0x4d0 [ 1409.599096][T27228] copyin+0x1b/0x120 [ 1409.603014][T27228] _copy_from_iter+0x447/0x1130 [ 1409.607898][T27228] ? copyout_mc+0x110/0x110 [ 1409.612425][T27228] ? __virt_addr_valid+0x188/0x540 [ 1409.617599][T27228] ? __virt_addr_valid+0x188/0x540 [ 1409.622738][T27228] ? __virt_addr_valid+0x465/0x540 [ 1409.627877][T27228] ? __check_object_size+0x500/0xa40 [ 1409.633265][T27228] netlink_sendmsg+0x755/0xbd0 [ 1409.638072][T27228] ? netlink_getsockopt+0x550/0x550 [ 1409.643296][T27228] ? aa_sock_msg_perm+0x94/0x150 [ 1409.648254][T27228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1409.653688][T27228] ? security_socket_sendmsg+0x7c/0xa0 [ 1409.659187][T27228] ? netlink_getsockopt+0x550/0x550 [ 1409.664513][T27228] ____sys_sendmsg+0x5be/0x970 [ 1409.669307][T27228] ? __sys_sendmsg_sock+0x30/0x30 [ 1409.674369][T27228] ? __import_iovec+0x315/0x500 [ 1409.679244][T27228] ? import_iovec+0x6f/0xa0 [ 1409.683762][T27228] ___sys_sendmsg+0x2a2/0x360 [ 1409.688486][T27228] ? __sys_sendmsg+0x290/0x290 [ 1409.693284][T27228] ? __lock_acquire+0x7d10/0x7d10 [ 1409.698360][T27228] __se_sys_sendmsg+0x1bb/0x2a0 [ 1409.703240][T27228] ? __x64_sys_sendmsg+0x80/0x80 [ 1409.708229][T27228] ? lockdep_hardirqs_on+0x94/0x140 [ 1409.713452][T27228] do_syscall_64+0x4c/0xa0 [ 1409.717914][T27228] ? clear_bhb_loop+0x60/0xb0 [ 1409.722613][T27228] ? clear_bhb_loop+0x60/0xb0 [ 1409.727317][T27228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1409.733226][T27228] RIP: 0033:0x7f4b3f19bf79 [ 1409.737662][T27228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.757299][T27228] RSP: 002b:00007f4b4000d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1409.765722][T27228] RAX: ffffffffffffffda RBX: 00007f4b3f415fa0 RCX: 00007f4b3f19bf79 [ 1409.773709][T27228] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1409.781701][T27228] RBP: 00007f4b4000d090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.789680][T27228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.797660][T27228] R13: 00007f4b3f416038 R14: 00007f4b3f415fa0 R15: 00007ffd7f8b1378 [ 1409.805654][T27228] [ 1409.819657][ T4342] wlan1: Trigger new scan to find an IBSS to join [ 1409.897042][T27232] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7704'. [ 1409.973889][T23271] wlan1: Creating new IBSS network, BSSID f2:18:29:de:75:0f [ 1410.376168][T27238] FAULT_INJECTION: forcing a failure. [ 1410.376168][T27238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.543155][T27238] CPU: 0 PID: 27238 Comm: syz.1.7705 Not tainted syzkaller #0 [ 1410.550913][T27238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1410.561020][T27238] Call Trace: [ 1410.564342][T27238] [ 1410.567318][T27238] dump_stack_lvl+0x188/0x24e [ 1410.572063][T27238] ? show_regs_print_info+0x12/0x12 [ 1410.577316][T27238] ? load_image+0x400/0x400 [ 1410.581878][T27238] ? __lock_acquire+0x7d10/0x7d10 [ 1410.586963][T27238] ? snprintf+0xe5/0x140 [ 1410.591260][T27238] should_fail_ex+0x399/0x4d0 [ 1410.596006][T27238] _copy_to_user+0x2c/0x130 [ 1410.600566][T27238] simple_read_from_buffer+0xe3/0x150 [ 1410.606001][T27238] proc_fail_nth_read+0x1a6/0x220 [ 1410.611084][T27238] ? proc_fault_inject_write+0x310/0x310 [ 1410.616861][T27238] ? fsnotify_perm+0x248/0x550 [ 1410.621680][T27238] ? proc_fault_inject_write+0x310/0x310 [ 1410.627377][T27238] vfs_read+0x2de/0xa00 [ 1410.631588][T27238] ? kernel_read+0x1e0/0x1e0 [ 1410.636237][T27238] ? __fget_files+0x28/0x4b0 [ 1410.640887][T27238] ? __fget_files+0x28/0x4b0 [ 1410.645533][T27238] ? __fget_files+0x43d/0x4b0 [ 1410.650273][T27238] ? __fdget_pos+0x2ae/0x360 [ 1410.654913][T27238] ? ksys_read+0x71/0x250 [ 1410.659304][T27238] ksys_read+0x14c/0x250 [ 1410.663601][T27238] ? vfs_write+0xa30/0xa30 [ 1410.668068][T27238] ? lockdep_hardirqs_on+0x94/0x140 [ 1410.673317][T27238] do_syscall_64+0x4c/0xa0 [ 1410.677795][T27238] ? clear_bhb_loop+0x60/0xb0 [ 1410.682529][T27238] ? clear_bhb_loop+0x60/0xb0 [ 1410.687266][T27238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1410.693273][T27238] RIP: 0033:0x7fe30435c84e [ 1410.697735][T27238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1410.717385][T27238] RSP: 002b:00007fe305201fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1410.725832][T27238] RAX: ffffffffffffffda RBX: 00007fe3052026c0 RCX: 00007fe30435c84e [ 1410.733832][T27238] RDX: 000000000000000f RSI: 00007fe3052020a0 RDI: 0000000000000009 [ 1410.741845][T27238] RBP: 00007fe305202090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.749848][T27238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.757843][T27238] R13: 00007fe304616038 R14: 00007fe304615fa0 R15: 00007ffd7f90c638 [ 1410.765868][T27238] [ 1410.932188][T23272] wlan1: Creating new IBSS network, BSSID 62:53:32:06:c4:4c [ 1411.270277][T27272] validate_nla: 5 callbacks suppressed [ 1411.270294][T27272] netlink: 'syz.4.7719': attribute type 10 has an invalid length. [ 1411.326881][T27272] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7719'. [ 1411.944031][T27298] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1412.189677][T27311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1412.269513][T27311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1412.299577][T27313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1412.331881][T27307] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7729'. [ 1412.845014][T27328] netlink: 'syz.3.7736': attribute type 10 has an invalid length. [ 1412.869856][T27328] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7736'. [ 1413.263144][T27339] netlink: 'syz.2.7738': attribute type 19 has an invalid length. [ 1413.307510][T27339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7738'. [ 1413.378397][T27345] netlink: 'syz.4.7740': attribute type 11 has an invalid length. [ 1413.524595][T27345] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7740'. [ 1413.581805][T27345] netlink: 'syz.4.7740': attribute type 29 has an invalid length. [ 1413.665141][T27351] netlink: 'syz.2.7743': attribute type 10 has an invalid length. [ 1413.758239][T27351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1413.791003][T27351] bond0: (slave team0): Enslaving as an active interface with an up link [ 1413.823749][T27342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.103802][T27380] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.7747'. [ 1415.190458][T27385] netlink: 'syz.4.7752': attribute type 10 has an invalid length. [ 1415.220527][T27385] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7752'. [ 1415.444289][T27392] netlink: 'syz.3.7753': attribute type 19 has an invalid length. [ 1416.270547][T27419] netlink: 'syz.4.7763': attribute type 21 has an invalid length. [ 1416.407731][T27426] netlink: 'syz.3.7766': attribute type 19 has an invalid length. [ 1416.431319][T27426] __nla_validate_parse: 3 callbacks suppressed [ 1416.431350][T27426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7766'. [ 1416.480715][T27432] netlink: 'syz.4.7768': attribute type 10 has an invalid length. [ 1416.502476][T27432] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7768'. [ 1417.549403][T27475] netlink: 'syz.5.7783': attribute type 29 has an invalid length. [ 1417.559094][T27478] netlink: 'syz.3.7784': attribute type 10 has an invalid length. [ 1417.568357][T27478] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7784'. [ 1417.581393][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7783'. [ 1417.591830][T27480] netlink: 'syz.4.7781': attribute type 19 has an invalid length. [ 1417.610776][T27480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7781'. [ 1417.761919][T27475] netlink: 'syz.5.7783': attribute type 29 has an invalid length. [ 1417.793913][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7783'. [ 1418.940364][T27510] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.7793'. [ 1419.052140][T27513] FAULT_INJECTION: forcing a failure. [ 1419.052140][T27513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1419.100304][T27513] CPU: 1 PID: 27513 Comm: syz.2.7794 Not tainted syzkaller #0 [ 1419.107922][T27513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1419.118005][T27513] Call Trace: [ 1419.121312][T27513] [ 1419.124267][T27513] dump_stack_lvl+0x188/0x24e [ 1419.128997][T27513] ? show_regs_print_info+0x12/0x12 [ 1419.134239][T27513] ? load_image+0x400/0x400 [ 1419.138778][T27513] ? __lock_acquire+0x7d10/0x7d10 [ 1419.143848][T27513] ? __rcu_read_unlock+0x78/0xd0 [ 1419.148825][T27513] should_fail_ex+0x399/0x4d0 [ 1419.153591][T27513] _copy_to_user+0x2c/0x130 [ 1419.158147][T27513] bpf_test_finish+0x4a2/0x600 [ 1419.162956][T27513] ? convert___skb_to_skb+0x580/0x580 [ 1419.168381][T27513] ? convert_skb_to___skb+0x420/0x420 [ 1419.173792][T27513] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1419.179209][T27513] ? cpu_online+0xa0/0xa0 [ 1419.183586][T27513] bpf_prog_test_run+0x31e/0x390 [ 1419.188582][T27513] __sys_bpf+0x62b/0x780 [ 1419.192853][T27513] ? bpf_link_show_fdinfo+0x380/0x380 [ 1419.198264][T27513] ? lock_chain_count+0x20/0x20 [ 1419.203144][T27513] __x64_sys_bpf+0x78/0x90 [ 1419.207625][T27513] do_syscall_64+0x4c/0xa0 [ 1419.212061][T27513] ? clear_bhb_loop+0x60/0xb0 [ 1419.216750][T27513] ? clear_bhb_loop+0x60/0xb0 [ 1419.221442][T27513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.227363][T27513] RIP: 0033:0x7f4fedd9bf79 [ 1419.231800][T27513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.251428][T27513] RSP: 002b:00007f4feec61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1419.259868][T27513] RAX: ffffffffffffffda RBX: 00007f4fee015fa0 RCX: 00007f4fedd9bf79 [ 1419.267897][T27513] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1419.275879][T27513] RBP: 00007f4feec61090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.283868][T27513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.291863][T27513] R13: 00007f4fee016038 R14: 00007f4fee015fa0 R15: 00007ffc1d9de6b8 [ 1419.299855][T27513] [ 1419.432897][T27506] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7792'. [ 1419.465840][T27522] netlink: 'syz.5.7796': attribute type 19 has an invalid length. [ 1419.477167][T27522] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7796'. [ 1419.579118][T27527] netlink: 'syz.4.7798': attribute type 10 has an invalid length. [ 1419.593521][T27527] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7798'. [ 1419.625886][T27528] netlink: 'syz.1.7797': attribute type 10 has an invalid length. [ 1420.279866][T27547] netlink: 'syz.3.7801': attribute type 10 has an invalid length. [ 1421.612606][T27570] netlink: 'syz.1.7809': attribute type 19 has an invalid length. [ 1421.651052][T27570] __nla_validate_parse: 1 callbacks suppressed [ 1421.651070][T27570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7809'. [ 1421.935337][T27581] netlink: 'syz.4.7815': attribute type 10 has an invalid length. [ 1421.962480][T27581] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7815'. [ 1422.028792][T27584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1422.212663][T27587] netlink: 'syz.3.7813': attribute type 10 has an invalid length. [ 1422.495930][T27587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.537431][T27587] bond0: (slave team0): Enslaving as an active interface with an up link [ 1422.565956][T27598] netlink: 'syz.1.7818': attribute type 21 has an invalid length. [ 1422.773193][T27606] FAULT_INJECTION: forcing a failure. [ 1422.773193][T27606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.803642][T27606] CPU: 0 PID: 27606 Comm: syz.1.7819 Not tainted syzkaller #0 [ 1422.811266][T27606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1422.821355][T27606] Call Trace: [ 1422.824660][T27606] [ 1422.827612][T27606] dump_stack_lvl+0x188/0x24e [ 1422.832324][T27606] ? show_regs_print_info+0x12/0x12 [ 1422.837568][T27606] ? load_image+0x400/0x400 [ 1422.842099][T27606] ? __lock_acquire+0x7d10/0x7d10 [ 1422.847163][T27606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1422.853359][T27606] should_fail_ex+0x399/0x4d0 [ 1422.858089][T27606] _copy_to_user+0x2c/0x130 [ 1422.862630][T27606] simple_read_from_buffer+0xe3/0x150 [ 1422.868053][T27606] proc_fail_nth_read+0x1a6/0x220 [ 1422.873106][T27606] ? proc_fault_inject_write+0x310/0x310 [ 1422.878765][T27606] ? vfs_read+0x2c9/0xa00 [ 1422.883126][T27606] ? proc_fault_inject_write+0x310/0x310 [ 1422.888791][T27606] vfs_read+0x2de/0xa00 [ 1422.892977][T27606] ? kernel_read+0x1e0/0x1e0 [ 1422.897601][T27606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1422.903789][T27606] ? lockdep_hardirqs_on+0x94/0x140 [ 1422.909016][T27606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1422.915194][T27606] ksys_read+0x14c/0x250 [ 1422.919488][T27606] ? vfs_write+0xa30/0xa30 [ 1422.923934][T27606] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1422.929864][T27606] do_syscall_64+0x4c/0xa0 [ 1422.934307][T27606] ? clear_bhb_loop+0x60/0xb0 [ 1422.938997][T27606] ? clear_bhb_loop+0x60/0xb0 [ 1422.943704][T27606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1422.949611][T27606] RIP: 0033:0x7fe30435c84e [ 1422.954040][T27606] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1422.973774][T27606] RSP: 002b:00007fe3051e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1422.982207][T27606] RAX: ffffffffffffffda RBX: 00007fe3051e16c0 RCX: 00007fe30435c84e [ 1422.990204][T27606] RDX: 000000000000000f RSI: 00007fe3051e10a0 RDI: 0000000000000006 [ 1422.998181][T27606] RBP: 00007fe3051e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1423.006162][T27606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1423.014242][T27606] R13: 00007fe304616128 R14: 00007fe304616090 R15: 00007ffd7f90c638 [ 1423.022271][T27606] [ 1423.026061][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.032404][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.136456][T27610] netlink: 'syz.4.7822': attribute type 10 has an invalid length. [ 1423.177619][T27610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.227460][T27610] bond0: (slave team0): Enslaving as an active interface with an up link [ 1423.255714][T27611] netlink: 'syz.2.7821': attribute type 11 has an invalid length. [ 1423.314438][T27611] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7821'. [ 1423.455121][T27620] netlink: 'syz.3.7823': attribute type 19 has an invalid length. [ 1423.498624][T27620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1423.770175][T27608] netlink: 'syz.2.7821': attribute type 29 has an invalid length. [ 1423.785414][T27624] netlink: 'syz.5.7824': attribute type 9 has an invalid length. [ 1423.810701][T27624] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.7824'. [ 1423.896578][T27625] netlink: 'syz.5.7824': attribute type 21 has an invalid length. [ 1423.954105][T27607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.016008][T27644] netlink: 'syz.3.7831': attribute type 10 has an invalid length. [ 1425.050667][T27644] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7831'. [ 1425.691065][T27658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7836'. [ 1425.792868][T27661] FAULT_INJECTION: forcing a failure. [ 1425.792868][T27661] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.807769][T23271] wlan1: Trigger new scan to find an IBSS to join [ 1425.850990][T27661] CPU: 0 PID: 27661 Comm: syz.1.7837 Not tainted syzkaller #0 [ 1425.858616][T27661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1425.868705][T27661] Call Trace: [ 1425.872012][T27661] [ 1425.874976][T27661] dump_stack_lvl+0x188/0x24e [ 1425.879694][T27661] ? show_regs_print_info+0x12/0x12 [ 1425.884939][T27661] ? load_image+0x400/0x400 [ 1425.889485][T27661] ? __might_sleep+0xd0/0xd0 [ 1425.894112][T27661] ? __lock_acquire+0x7d10/0x7d10 [ 1425.899221][T27661] should_fail_ex+0x399/0x4d0 [ 1425.903962][T27661] should_failslab+0x5/0x20 [ 1425.908517][T27661] slab_pre_alloc_hook+0x59/0x310 [ 1425.913584][T27661] ? page_pool_create+0x6d/0x5c0 [ 1425.918562][T27661] __kmem_cache_alloc_node+0x4f/0x260 [ 1425.923972][T27661] ? page_pool_create+0x6d/0x5c0 [ 1425.928938][T27661] kmalloc_node_trace+0x22/0xe0 [ 1425.933832][T27661] page_pool_create+0x6d/0x5c0 [ 1425.938640][T27661] bpf_test_run_xdp_live+0x223/0x1a90 [ 1425.944063][T27661] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1425.949379][T27661] ? text_poke_copy+0x79/0x90 [ 1425.954091][T27661] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1425.959409][T27661] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1425.965368][T27661] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1425.970692][T27661] ? xdp_convert_md_to_buff+0x330/0x330 [ 1425.976299][T27661] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1425.982611][T27661] ? bpf_test_init+0x119/0x140 [ 1425.987407][T27661] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1425.992905][T27661] bpf_prog_test_run_xdp+0x736/0xf10 [ 1425.998242][T27661] ? dev_put+0x80/0x80 [ 1426.002348][T27661] ? dev_put+0x80/0x80 [ 1426.006446][T27661] bpf_prog_test_run+0x31e/0x390 [ 1426.011420][T27661] __sys_bpf+0x62b/0x780 [ 1426.015702][T27661] ? bpf_link_show_fdinfo+0x380/0x380 [ 1426.021125][T27661] ? lock_chain_count+0x20/0x20 [ 1426.026012][T27661] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1426.032030][T27661] __x64_sys_bpf+0x78/0x90 [ 1426.036483][T27661] do_syscall_64+0x4c/0xa0 [ 1426.040931][T27661] ? clear_bhb_loop+0x60/0xb0 [ 1426.045639][T27661] ? clear_bhb_loop+0x60/0xb0 [ 1426.050347][T27661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1426.056272][T27661] RIP: 0033:0x7fe30439bf79 [ 1426.060722][T27661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.080368][T27661] RSP: 002b:00007fe305202028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1426.088878][T27661] RAX: ffffffffffffffda RBX: 00007fe304615fa0 RCX: 00007fe30439bf79 [ 1426.096894][T27661] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1426.104904][T27661] RBP: 00007fe305202090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.112907][T27661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.120915][T27661] R13: 00007fe304616038 R14: 00007fe304615fa0 R15: 00007ffd7f90c638 [ 1426.128924][T27661] [ 1426.286342][T27671] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7839'. [ 1426.937272][T27689] netlink: 'syz.5.7840': attribute type 11 has an invalid length. [ 1426.984282][T27689] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7840'. [ 1427.148413][T27682] validate_nla: 1 callbacks suppressed [ 1427.148433][T27682] netlink: 'syz.3.7842': attribute type 10 has an invalid length. [ 1427.254764][T27680] netlink: 'syz.5.7840': attribute type 29 has an invalid length. [ 1427.265280][T27677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.347825][T27699] netlink: 'syz.1.7848': attribute type 29 has an invalid length. [ 1427.366401][T27699] netlink: 'syz.1.7848': attribute type 29 has an invalid length. [ 1427.387713][T27699] netlink: 'syz.1.7848': attribute type 29 has an invalid length. [ 1427.407757][T27699] netlink: 'syz.1.7848': attribute type 29 has an invalid length. [ 1429.506712][T27717] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7851'. [ 1429.801598][T23272] wlan1: Trigger new scan to find an IBSS to join [ 1430.766287][T23269] wlan1: Creating new IBSS network, BSSID c6:ae:42:4f:bb:6e [ 1431.253997][T27736] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1431.919357][T27739] delete_channel: no stack [ 1432.005151][T27744] netlink: 'syz.2.7861': attribute type 10 has an invalid length. [ 1432.244645][T27755] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7865'. [ 1434.879691][T27765] netlink: 'syz.3.7876': attribute type 19 has an invalid length. [ 1434.913973][T27765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1435.463359][T27784] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.7868'. [ 1437.545066][T27776] netlink: 'syz.5.7866': attribute type 10 has an invalid length. [ 1437.590714][T27776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1437.613589][T27776] bond0: (slave team0): Enslaving as an active interface with an up link [ 1437.738864][T27790] device syzkaller0 entered promiscuous mode [ 1439.802469][T23270] wlan1: Trigger new scan to find an IBSS to join [ 1440.035414][T27802] Â: renamed from pim6reg1 [ 1440.173576][T27824] netlink: 'syz.1.7880': attribute type 10 has an invalid length. [ 1440.348855][T27830] netlink: 'syz.4.7883': attribute type 19 has an invalid length. [ 1440.375227][T27830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1440.583872][T27836] netlink: 'syz.1.7887': attribute type 10 has an invalid length. [ 1440.994010][T27848] FAULT_INJECTION: forcing a failure. [ 1440.994010][T27848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.089034][T27848] CPU: 1 PID: 27848 Comm: syz.2.7892 Not tainted syzkaller #0 [ 1441.096583][T27848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1441.106668][T27848] Call Trace: [ 1441.109982][T27848] [ 1441.112970][T27848] dump_stack_lvl+0x188/0x24e [ 1441.117736][T27848] ? show_regs_print_info+0x12/0x12 [ 1441.122985][T27848] ? load_image+0x400/0x400 [ 1441.127526][T27848] ? __lock_acquire+0x7d10/0x7d10 [ 1441.132601][T27848] should_fail_ex+0x399/0x4d0 [ 1441.137339][T27848] _copy_to_user+0x2c/0x130 [ 1441.141893][T27848] bpf_test_finish+0x198/0x600 [ 1441.146693][T27848] ? convert___skb_to_skb+0x580/0x580 [ 1441.152096][T27848] ? convert_skb_to___skb+0x420/0x420 [ 1441.157503][T27848] ? __build_skb+0x257/0x3c0 [ 1441.162140][T27848] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1441.167568][T27848] ? cpu_online+0xa0/0xa0 [ 1441.171930][T27848] bpf_prog_test_run+0x31e/0x390 [ 1441.176910][T27848] __sys_bpf+0x62b/0x780 [ 1441.181190][T27848] ? bpf_link_show_fdinfo+0x380/0x380 [ 1441.186613][T27848] ? lock_chain_count+0x20/0x20 [ 1441.191509][T27848] __x64_sys_bpf+0x78/0x90 [ 1441.195986][T27848] do_syscall_64+0x4c/0xa0 [ 1441.200448][T27848] ? clear_bhb_loop+0x60/0xb0 [ 1441.205152][T27848] ? clear_bhb_loop+0x60/0xb0 [ 1441.209864][T27848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.215784][T27848] RIP: 0033:0x7f4fedd9bf79 [ 1441.220224][T27848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.239862][T27848] RSP: 002b:00007f4feec61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1441.248310][T27848] RAX: ffffffffffffffda RBX: 00007f4fee015fa0 RCX: 00007f4fedd9bf79 [ 1441.256314][T27848] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1441.264310][T27848] RBP: 00007f4feec61090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.272338][T27848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.280338][T27848] R13: 00007f4fee016038 R14: 00007f4fee015fa0 R15: 00007ffc1d9de6b8 [ 1441.288376][T27848] [ 1442.578381][T27859] netlink: 'syz.2.7895': attribute type 10 has an invalid length. [ 1442.588943][T27859] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7895'. [ 1442.646911][T27863] netlink: 'syz.4.7896': attribute type 10 has an invalid length. [ 1442.821021][T27867] netlink: 'syz.5.7899': attribute type 19 has an invalid length. [ 1442.836030][T27867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7899'. [ 1442.976306][T27878] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7904'. [ 1444.799928][T23268] wlan1: Trigger new scan to find an IBSS to join [ 1445.731998][T23270] wlan1: Creating new IBSS network, BSSID a2:28:62:a8:df:7b [ 1445.853597][T27918] netlink: 'syz.2.7917': attribute type 19 has an invalid length. [ 1445.881650][T27918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7917'. [ 1446.224954][T27923] netlink: 'syz.1.7919': attribute type 3 has an invalid length. [ 1446.252912][T27923] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1446.389898][T27930] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7922'. [ 1446.558255][T27934] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.7923'. [ 1446.637700][T27934] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 1446.686571][T27934] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.7923'. [ 1446.758127][T27933] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 1446.807223][T27933] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.7923'. [ 1447.914819][T27959] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7934'. [ 1448.749910][T27963] IPv6: Can't replace route, no match found [ 1448.787058][T27963] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1449.283757][T27979] delete_channel: no stack [ 1452.761817][T23289] wlan1: Trigger new scan to find an IBSS to join [ 1454.041994][T28057] device bond_slave_1 entered promiscuous mode [ 1454.117521][T28059] netlink: 'syz.2.7966': attribute type 21 has an invalid length. [ 1454.161277][T28059] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7966'. [ 1454.183608][T28059] netlink: 'syz.2.7966': attribute type 4 has an invalid length. [ 1454.199992][T28059] netlink: 'syz.2.7966': attribute type 5 has an invalid length. [ 1454.213997][T28059] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7966'. [ 1454.393557][T28068] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1454.882391][T28079] netlink: 'syz.3.7970': attribute type 10 has an invalid length. [ 1454.890380][T28079] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7970'. [ 1455.378189][T28103] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.7976'. [ 1455.804135][T23270] wlan1: Trigger new scan to find an IBSS to join [ 1456.272283][T23270] wlan1: Creating new IBSS network, BSSID 2a:3a:2b:90:c5:d5 [ 1456.761690][T28142] netlink: 'syz.3.7991': attribute type 10 has an invalid length. [ 1456.769685][T28142] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7991'. [ 1457.001291][T28150] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1459.110482][T28150] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1460.806727][T23268] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1461.085904][T28203] netlink: 'syz.3.8007': attribute type 10 has an invalid length. [ 1461.111722][T28203] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8007'. [ 1461.206358][T28211] netlink: 'syz.2.8010': attribute type 8 has an invalid length. [ 1461.238613][T28211] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1461.761058][T28231] FAULT_INJECTION: forcing a failure. [ 1461.761058][T28231] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.815196][T28231] CPU: 0 PID: 28231 Comm: syz.2.8018 Not tainted syzkaller #0 [ 1461.822727][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1461.832820][T28231] Call Trace: [ 1461.836132][T28231] [ 1461.839096][T28231] dump_stack_lvl+0x188/0x24e [ 1461.843827][T28231] ? show_regs_print_info+0x12/0x12 [ 1461.849078][T28231] ? load_image+0x400/0x400 [ 1461.853636][T28231] ? __lock_acquire+0x7d10/0x7d10 [ 1461.858703][T28231] should_fail_ex+0x399/0x4d0 [ 1461.863426][T28231] should_failslab+0x5/0x20 [ 1461.867982][T28231] slab_pre_alloc_hook+0x59/0x310 [ 1461.873049][T28231] ? memcg_alloc_slab_cgroups+0x83/0x120 [ 1461.878736][T28231] __kmem_cache_alloc_node+0x4f/0x260 [ 1461.884160][T28231] ? memcg_alloc_slab_cgroups+0x83/0x120 [ 1461.889831][T28231] __kmalloc_node+0xa0/0x240 [ 1461.894468][T28231] memcg_alloc_slab_cgroups+0x83/0x120 [ 1461.899966][T28231] slab_post_alloc_hook+0xba/0x480 [ 1461.905124][T28231] kmem_cache_alloc_node+0x14d/0x320 [ 1461.910443][T28231] ? __alloc_skb+0xfc/0x7e0 [ 1461.914985][T28231] __alloc_skb+0xfc/0x7e0 [ 1461.919358][T28231] alloc_skb_with_frags+0xa7/0x710 [ 1461.924504][T28231] ? verify_lock_unused+0x140/0x140 [ 1461.929757][T28231] sock_alloc_send_pskb+0x87f/0x9a0 [ 1461.935003][T28231] ? sock_kzfree_s+0x50/0x50 [ 1461.939618][T28231] ? do_raw_spin_lock+0x128/0x2f0 [ 1461.944701][T28231] ? __rwlock_init+0x140/0x140 [ 1461.949504][T28231] ? do_raw_spin_unlock+0x11d/0x230 [ 1461.954735][T28231] unix_dgram_sendmsg+0x539/0x16e0 [ 1461.959884][T28231] ? is_dynamic_key+0x260/0x260 [ 1461.964781][T28231] ? aa_sk_perm+0x81f/0x950 [ 1461.969331][T28231] ? unix_dgram_poll+0x680/0x680 [ 1461.974309][T28231] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1461.980770][T28231] ? aa_sock_msg_perm+0x94/0x150 [ 1461.985746][T28231] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 1461.991328][T28231] ? unix_dgram_peer_wake_me+0x430/0x430 [ 1461.997004][T28231] ____sys_sendmsg+0x5be/0x970 [ 1462.001826][T28231] ? __sys_sendmsg_sock+0x30/0x30 [ 1462.006908][T28231] ? __import_iovec+0x315/0x500 [ 1462.011813][T28231] ? import_iovec+0x6f/0xa0 [ 1462.016361][T28231] ___sys_sendmsg+0x2a2/0x360 [ 1462.021092][T28231] ? __sys_sendmsg+0x290/0x290 [ 1462.025922][T28231] ? __lock_acquire+0x7d10/0x7d10 [ 1462.031012][T28231] __se_sys_sendmsg+0x1bb/0x2a0 [ 1462.035914][T28231] ? ct_nmi_exit+0x145/0x1c0 [ 1462.040541][T28231] ? __x64_sys_sendmsg+0x80/0x80 [ 1462.045528][T28231] ? lockdep_hardirqs_on+0x94/0x140 [ 1462.050761][T28231] do_syscall_64+0x4c/0xa0 [ 1462.055222][T28231] ? clear_bhb_loop+0x60/0xb0 [ 1462.059943][T28231] ? clear_bhb_loop+0x60/0xb0 [ 1462.064657][T28231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1462.070587][T28231] RIP: 0033:0x7f4fedd9bf79 [ 1462.075038][T28231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.094680][T28231] RSP: 002b:00007f4feec61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1462.103136][T28231] RAX: ffffffffffffffda RBX: 00007f4fee015fa0 RCX: 00007f4fedd9bf79 [ 1462.111145][T28231] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1462.119158][T28231] RBP: 00007f4feec61090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.127170][T28231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.135177][T28231] R13: 00007f4fee016038 R14: 00007f4fee015fa0 R15: 00007ffc1d9de6b8 [ 1462.143198][T28231] [ 1462.726786][T28248] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8022'. [ 1462.832992][T28256] netlink: 'syz.2.8026': attribute type 10 has an invalid length. [ 1462.871286][T28256] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8026'. [ 1463.375132][T28272] tipc: Started in network mode [ 1463.380239][T28272] tipc: Node identity 9215a268, cluster identity 4711 [ 1463.397645][T28272] tipc: Node number set to 2450891368 [ 1463.550764][T28278] FAULT_INJECTION: forcing a failure. [ 1463.550764][T28278] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.563869][T28278] CPU: 1 PID: 28278 Comm: syz.5.8034 Not tainted syzkaller #0 [ 1463.571454][T28278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1463.581542][T28278] Call Trace: [ 1463.584846][T28278] [ 1463.587809][T28278] dump_stack_lvl+0x188/0x24e [ 1463.592546][T28278] ? verify_lock_unused+0x140/0x140 [ 1463.597789][T28278] ? show_regs_print_info+0x12/0x12 [ 1463.603028][T28278] ? load_image+0x400/0x400 [ 1463.607578][T28278] should_fail_ex+0x399/0x4d0 [ 1463.612297][T28278] should_failslab+0x5/0x20 [ 1463.616859][T28278] slab_pre_alloc_hook+0x59/0x310 [ 1463.621928][T28278] kmem_cache_alloc+0x56/0x2f0 [ 1463.626716][T28278] ? __nf_conntrack_alloc+0x99/0x380 [ 1463.632032][T28278] __nf_conntrack_alloc+0x99/0x380 [ 1463.637173][T28278] init_conntrack+0x25b/0x11a0 [ 1463.641975][T28278] ? early_drop+0x870/0x870 [ 1463.646508][T28278] ? nf_conntrack_find_get+0x670/0x670 [ 1463.651987][T28278] ? __siphash_unaligned+0x25b/0x3a0 [ 1463.657296][T28278] nf_conntrack_in+0xd3e/0x17b0 [ 1463.662184][T28278] ? nf_ct_pernet+0x270/0x270 [ 1463.666899][T28278] ? ip6t_alloc_initial_table+0x640/0x640 [ 1463.672645][T28278] ? ipv6_defrag+0x2d2/0x3a0 [ 1463.677258][T28278] ? ipv4_confirm+0x380/0x380 [ 1463.681969][T28278] nf_hook_slow+0xb9/0x200 [ 1463.686418][T28278] NF_HOOK+0x219/0x3b0 [ 1463.690503][T28278] ? sk_setup_caps+0xaa0/0xaa0 [ 1463.695280][T28278] ? net_zcopy_put_abort+0x90/0x90 [ 1463.700428][T28278] ? NF_HOOK+0x9b/0x3b0 [ 1463.704602][T28278] ? ip6_rcv_core+0x1750/0x1750 [ 1463.709505][T28278] ? net_zcopy_put_abort+0x90/0x90 [ 1463.714635][T28278] ? ip6_rcv_finish_core+0x420/0x420 [ 1463.719962][T28278] __netif_receive_skb+0xcc/0x290 [ 1463.725020][T28278] ? netif_receive_skb+0x11e/0x830 [ 1463.730143][T28278] netif_receive_skb+0x1d4/0x830 [ 1463.735094][T28278] ? enqueue_to_backlog+0xd30/0xd30 [ 1463.740311][T28278] ? ct_irq_exit_irqson+0x113/0x170 [ 1463.745522][T28278] ? tun_rx_batched+0x182/0x790 [ 1463.750389][T28278] tun_rx_batched+0x1db/0x790 [ 1463.755085][T28278] ? pskb_may_pull+0xf0/0xf0 [ 1463.759688][T28278] ? __local_bh_enable_ip+0x136/0x1c0 [ 1463.765068][T28278] ? lockdep_hardirqs_on+0x94/0x140 [ 1463.770297][T28278] ? read_lock_is_recursive+0x10/0x10 [ 1463.775686][T28278] ? __local_bh_enable_ip+0x136/0x1c0 [ 1463.781078][T28278] ? _local_bh_enable+0xa0/0xa0 [ 1463.785943][T28278] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 1463.791940][T28278] tun_get_user+0x286f/0x3c70 [ 1463.796634][T28278] ? tun_get_user+0x249b/0x3c70 [ 1463.801507][T28278] ? rcu_read_unlock+0xa0/0xa0 [ 1463.806295][T28278] ? tun_get+0x1c/0x2e0 [ 1463.810468][T28278] ? __lock_acquire+0x7d10/0x7d10 [ 1463.815508][T28278] ? tun_get+0x1c/0x2e0 [ 1463.819681][T28278] tun_chr_write_iter+0x112/0x1f0 [ 1463.824736][T28278] vfs_write+0x4b1/0xa30 [ 1463.829009][T28278] ? file_end_write+0x250/0x250 [ 1463.833914][T28278] ? __fget_files+0x43d/0x4b0 [ 1463.838630][T28278] ? __fdget_pos+0x1d4/0x360 [ 1463.843252][T28278] ? ksys_write+0x71/0x250 [ 1463.847691][T28278] ksys_write+0x14c/0x250 [ 1463.852047][T28278] ? __ia32_sys_read+0x80/0x80 [ 1463.856831][T28278] ? lockdep_hardirqs_on+0x94/0x140 [ 1463.862042][T28278] do_syscall_64+0x4c/0xa0 [ 1463.866470][T28278] ? clear_bhb_loop+0x60/0xb0 [ 1463.871161][T28278] ? clear_bhb_loop+0x60/0xb0 [ 1463.875864][T28278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1463.881778][T28278] RIP: 0033:0x7f6255b9bf79 [ 1463.886231][T28278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.905861][T28278] RSP: 002b:00007f6256a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1463.914305][T28278] RAX: ffffffffffffffda RBX: 00007f6255e15fa0 RCX: 00007f6255b9bf79 [ 1463.922305][T28278] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1463.930290][T28278] RBP: 00007f6256a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.938269][T28278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1463.946250][T28278] R13: 00007f6255e16038 R14: 00007f6255e15fa0 R15: 00007ffc3e4b4d38 [ 1463.954243][T28278] [ 1463.965436][T23270] wlan1: Trigger new scan to find an IBSS to join [ 1464.835306][T28307] netlink: 'syz.1.8043': attribute type 10 has an invalid length. [ 1464.854272][T28307] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8043'. [ 1465.908000][T28323] netlink: 'syz.2.8047': attribute type 10 has an invalid length. [ 1466.024110][T28323] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1466.601401][T28350] netlink: 'syz.4.8057': attribute type 10 has an invalid length. [ 1468.842374][T23289] wlan1: Trigger new scan to find an IBSS to join [ 1468.950645][T28382] netlink: 'syz.5.8064': attribute type 10 has an invalid length. [ 1468.959234][T28382] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8064'. [ 1469.190794][T28402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8075'. [ 1469.433127][T28414] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8080'. [ 1469.504592][T28410] netlink: 'syz.5.8078': attribute type 10 has an invalid length. [ 1469.866231][T28428] FAULT_INJECTION: forcing a failure. [ 1469.866231][T28428] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.900579][T28428] CPU: 1 PID: 28428 Comm: syz.2.8086 Not tainted syzkaller #0 [ 1469.908216][T28428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1469.918312][T28428] Call Trace: [ 1469.921632][T28428] [ 1469.924602][T28428] dump_stack_lvl+0x188/0x24e [ 1469.929342][T28428] ? show_regs_print_info+0x12/0x12 [ 1469.934622][T28428] ? load_image+0x400/0x400 [ 1469.939191][T28428] ? __might_sleep+0xd0/0xd0 [ 1469.943819][T28428] ? __lock_acquire+0x7d10/0x7d10 [ 1469.948895][T28428] should_fail_ex+0x399/0x4d0 [ 1469.953626][T28428] should_failslab+0x5/0x20 [ 1469.958202][T28428] slab_pre_alloc_hook+0x59/0x310 [ 1469.963281][T28428] kmem_cache_alloc_node+0x5a/0x320 [ 1469.968520][T28428] ? __alloc_skb+0xfc/0x7e0 [ 1469.973077][T28428] __alloc_skb+0xfc/0x7e0 [ 1469.977452][T28428] ? netlink_autobind+0xda/0x300 [ 1469.982438][T28428] netlink_sendmsg+0x654/0xbd0 [ 1469.987274][T28428] ? netlink_getsockopt+0x550/0x550 [ 1469.992530][T28428] ? aa_sock_msg_perm+0x94/0x150 [ 1469.997516][T28428] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1470.002848][T28428] ? security_socket_sendmsg+0x7c/0xa0 [ 1470.008361][T28428] ? netlink_getsockopt+0x550/0x550 [ 1470.013609][T28428] ____sys_sendmsg+0x5be/0x970 [ 1470.018439][T28428] ? __sys_sendmsg_sock+0x30/0x30 [ 1470.023506][T28428] ? __import_iovec+0x315/0x500 [ 1470.028414][T28428] ? import_iovec+0x6f/0xa0 [ 1470.032962][T28428] ___sys_sendmsg+0x2a2/0x360 [ 1470.037732][T28428] ? __sys_sendmsg+0x290/0x290 [ 1470.042574][T28428] ? __lock_acquire+0x7d10/0x7d10 [ 1470.047684][T28428] __se_sys_sendmsg+0x1bb/0x2a0 [ 1470.052587][T28428] ? __x64_sys_sendmsg+0x80/0x80 [ 1470.057601][T28428] ? lockdep_hardirqs_on+0x94/0x140 [ 1470.062840][T28428] do_syscall_64+0x4c/0xa0 [ 1470.067305][T28428] ? clear_bhb_loop+0x60/0xb0 [ 1470.072107][T28428] ? clear_bhb_loop+0x60/0xb0 [ 1470.076837][T28428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.082771][T28428] RIP: 0033:0x7f4fedd9bf79 [ 1470.087309][T28428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.106974][T28428] RSP: 002b:00007f4feec61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.115427][T28428] RAX: ffffffffffffffda RBX: 00007f4fee015fa0 RCX: 00007f4fedd9bf79 [ 1470.123440][T28428] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1470.131446][T28428] RBP: 00007f4feec61090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.139447][T28428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.147451][T28428] R13: 00007f4fee016038 R14: 00007f4fee015fa0 R15: 00007ffc1d9de6b8 [ 1470.155475][T28428] [ 1470.783014][T23273] wlan1: Creating new IBSS network, BSSID d2:2b:c9:f1:b6:02 [ 1470.814122][T23289] ------------[ cut here ]------------ [ 1470.819902][T23289] WARNING: CPU: 1 PID: 23289 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 1470.830472][T23289] Modules linked in: [ 1470.834461][T23289] CPU: 1 PID: 23289 Comm: kworker/u4:35 Not tainted syzkaller #0 [ 1470.842252][T23289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1470.852411][T23289] Workqueue: cfg80211 cfg80211_event_work [ 1470.858215][T23289] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1470.864619][T23289] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b1 b2 ee f7 0f 0b eb bb e8 a8 b2 ee f7 <0f> 0b eb b2 e8 9f b2 ee f7 0f 0b e9 77 fd ff ff e8 93 b2 ee f7 0f [ 1470.884325][T23289] RSP: 0018:ffffc90003597aa0 EFLAGS: 00010293 [ 1470.890447][T23289] RAX: ffffffff8993c108 RBX: dffffc0000000000 RCX: ffff88807de69dc0 [ 1470.898600][T23289] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 1470.906722][T23289] RBP: ffffc90003597b70 R08: ffffffff90af52a7 R09: 1ffffffff215ea54 [ 1470.914811][T23289] R10: dffffc0000000000 R11: fffffbfff215ea55 R12: ffff88804983b5d8 [ 1470.922855][T23289] R13: 1ffff920006b2f5c R14: 000000000000001f R15: ffff88807d570c90 [ 1470.930870][T23289] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1470.939883][T23289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1470.946533][T23289] CR2: 000056543c40f168 CR3: 0000000053a3c000 CR4: 00000000003506e0 [ 1470.954605][T23289] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1470.962669][T23289] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1470.970695][T23289] Call Trace: [ 1470.974060][T23289] [ 1470.977028][T23289] ? mutex_lock_nested+0x10/0x10 [ 1470.982077][T23289] ? trace_rdev_return_void+0x240/0x240 [ 1470.987707][T23289] cfg80211_process_wdev_events+0x3ad/0x550 [ 1470.993741][T23289] cfg80211_process_rdev_events+0x9d/0x110 [ 1470.999608][T23289] ? process_one_work+0x7b0/0x1160 [ 1471.004814][T23289] cfg80211_event_work+0x2b/0x40 [ 1471.009805][T23289] process_one_work+0x8a2/0x1160 [ 1471.014857][T23289] ? worker_detach_from_pool+0x240/0x240 [ 1471.020556][T23289] ? _raw_spin_lock_irq+0x86/0xf0 [ 1471.025676][T23289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1471.030756][T23289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1471.036407][T23289] ? kthread_data+0x4b/0xc0 [ 1471.040973][T23289] worker_thread+0xaa2/0x1270 [ 1471.045780][T23289] ? __kthread_parkme+0x162/0x1c0 [ 1471.050886][T23289] kthread+0x29d/0x330 [ 1471.055025][T23289] ? worker_clr_flags+0x1a0/0x1a0 [ 1471.060113][T23289] ? kthread_blkcg+0xd0/0xd0 [ 1471.064799][T23289] ret_from_fork+0x1f/0x30 [ 1471.069291][T23289] [ 1471.072412][T23289] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1471.079722][T23289] CPU: 1 PID: 23289 Comm: kworker/u4:35 Not tainted syzkaller #0 [ 1471.087480][T23289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1471.097564][T23289] Workqueue: cfg80211 cfg80211_event_work [ 1471.103317][T23289] Call Trace: [ 1471.106612][T23289] [ 1471.109568][T23289] dump_stack_lvl+0x188/0x24e [ 1471.114276][T23289] ? memcpy+0x3c/0x60 [ 1471.118287][T23289] ? show_regs_print_info+0x12/0x12 [ 1471.123538][T23289] ? load_image+0x400/0x400 [ 1471.128084][T23289] panic+0x2e5/0x730 [ 1471.132002][T23289] ? bpf_jit_dump+0xd0/0xd0 [ 1471.136535][T23289] ? ret_from_fork+0x1f/0x30 [ 1471.141165][T23289] __warn+0x2f8/0x4f0 [ 1471.145158][T23289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1471.150735][T23289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1471.156332][T23289] report_bug+0x2ba/0x4f0 [ 1471.160679][T23289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1471.166247][T23289] handle_bug+0x3a/0x70 [ 1471.170419][T23289] exc_invalid_op+0x16/0x40 [ 1471.174937][T23289] asm_exc_invalid_op+0x16/0x20 [ 1471.179801][T23289] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 1471.185976][T23289] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b1 b2 ee f7 0f 0b eb bb e8 a8 b2 ee f7 <0f> 0b eb b2 e8 9f b2 ee f7 0f 0b e9 77 fd ff ff e8 93 b2 ee f7 0f [ 1471.205593][T23289] RSP: 0018:ffffc90003597aa0 EFLAGS: 00010293 [ 1471.211674][T23289] RAX: ffffffff8993c108 RBX: dffffc0000000000 RCX: ffff88807de69dc0 [ 1471.219653][T23289] RDX: 0000000000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 1471.227630][T23289] RBP: ffffc90003597b70 R08: ffffffff90af52a7 R09: 1ffffffff215ea54 [ 1471.235612][T23289] R10: dffffc0000000000 R11: fffffbfff215ea55 R12: ffff88804983b5d8 [ 1471.243591][T23289] R13: 1ffff920006b2f5c R14: 000000000000001f R15: ffff88807d570c90 [ 1471.251583][T23289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 1471.257162][T23289] ? mutex_lock_nested+0x10/0x10 [ 1471.262115][T23289] ? trace_rdev_return_void+0x240/0x240 [ 1471.267704][T23289] cfg80211_process_wdev_events+0x3ad/0x550 [ 1471.273623][T23289] cfg80211_process_rdev_events+0x9d/0x110 [ 1471.279466][T23289] ? process_one_work+0x7b0/0x1160 [ 1471.284599][T23289] cfg80211_event_work+0x2b/0x40 [ 1471.289553][T23289] process_one_work+0x8a2/0x1160 [ 1471.294521][T23289] ? worker_detach_from_pool+0x240/0x240 [ 1471.300165][T23289] ? _raw_spin_lock_irq+0x86/0xf0 [ 1471.305213][T23289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1471.310252][T23289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1471.315819][T23289] ? kthread_data+0x4b/0xc0 [ 1471.320348][T23289] worker_thread+0xaa2/0x1270 [ 1471.325061][T23289] ? __kthread_parkme+0x162/0x1c0 [ 1471.330104][T23289] kthread+0x29d/0x330 [ 1471.334182][T23289] ? worker_clr_flags+0x1a0/0x1a0 [ 1471.339217][T23289] ? kthread_blkcg+0xd0/0xd0 [ 1471.343871][T23289] ret_from_fork+0x1f/0x30 [ 1471.348322][T23289] [ 1471.351917][T23289] Kernel Offset: disabled [ 1471.356320][T23289] Rebooting in 86400 seconds..