last executing test programs: 8.393512201s ago: executing program 3 (id=1246): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0004000070738b6b000000f834a3d5e979517babf9008500046f1cf111000000950000009515ad7cb50784f3c8505375cd1105f391d8bb04b9b84a959e383d56d5d72f6565ca22dfd972677ee3eb91974ceb4bc50a55a0fff8aa2321d2017d6a8c0f1e505a53d106ae7a668ec11432abb846b9905b1321d9ceb72ed5fc8fa48c8f8e1cc92468cbb652a96d12fdbaad0c55a525d93fd82662dc2c4d830e0a19902e10de68690859f5c890a7450080"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002380)=ANY=[@ANYBLOB="611230000000000061138c0000000000bf2000000000000015000000084f63122d0301000000000087030000000000006916000000000000bf67000000000000660605000fff07206706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000dd0000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000cfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000000000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e4727ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdeb70dc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339542302902949f6a793a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0280000000000000000ecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26f27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5dc8639fe2514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d2f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84966023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d19f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527ffd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a44fde045ad64d88d26e5aee61128872c5b9fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d97b33f32a99c990d8a75af010ba093f8a13b771182a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f891f547c7e69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683e46b686401d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f01cccee889e2d255b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd30}, 0x56) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a40), 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf3ced4ff6962dd23, @perf_bp={&(0x7f0000000040), 0x2}, 0x40, 0x8000000000000000, 0x0, 0x8, 0x2, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 6.844823096s ago: executing program 2 (id=1259): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x481}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd0600ce81ea032c00fe08000e40000200875a65ef54969ff57b00ff020000000000000000000000000001e2607e"], 0x47b1) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRESOCT=r5], 0x0, 0x4a}, 0x28) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="14dc157b4730b884aa59c36ed77f1d9810016f2a7467c222fe8220b0c1ef8c77e28d3da06cd25a35742477aff3ad3b911f652018f02c656adcfcb9dc", 0x3c}, {&(0x7f0000000240)="0ce51f181e92e56cabcf0b5af3c8f70e3e9d527c928aa93c8f881997cb2561469bee88fed37afbf30e3adec55bcc203edfe40b0e7e7a8fde436751ed56bc7b41b935b95a78e08a4f6f5965a6dadea7140cfb983e8439167debfa08ea9eb793b37cb0772fe41974db91a29f7de068c64caea8083b3594fd605e232f42f8b94482cd7a9e88dca71a3ad2ae9d74", 0x8c}, {&(0x7f0000000300)="787663564300beee2b718d312e42ca6674e2e3378c632f3c1f80acdc4980f9b50184b587ad28e8e0116386d8a4e200c5d233e229b70e88e0281779f5cef2d53fc4e2e35da8fe60df3e8049bc3dbe71c37e653d3fe508b7df4a788726ffd110ccc4d37d2d07fc959c713b4ff32ea264cf437bd3fdb44bfa8bd768b8b3b29ac3758623e880d10027e9", 0x88}, {&(0x7f00000003c0)="d96ee0480a8c9dc3194d86759725465a5f201736dd0ec410d3e6e4cec566c09bf6429631d6ee4adf8c20406fe548c7b6d98e723fb5328439bcb46464ded257724e70", 0x42}, {&(0x7f0000000480)="4a63473e2fd342c4fedc78fcec3045d6fb16cec7a093b694469b2f89d1f4c3774306a54ee7ce048a56bd82c5228950aa2b67c9209bb2f78f3abcfbf657c32593ad15c350eb6ee213ed8326300d6c640b70ca6c0c291a189d76376110f454df692e531ef465705ebcabc4a261f73980f0d080ea4e105c7085fa5a01534806b19b00fefc1931df6de6fc4847465f65a29c9e3343c1ee38b923c97a0fe106c255f1524d7353b728fadae512a6", 0xab}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000000000001000000070000000000000014000000000000000000000001000000faffffff00000000140000000000001416000000000002000000000000000000000080000000000000000000000007000000862e000000030008196d9b78d909011055163b9adc3a4b3a9d70173e4fba05051b9cac141428ffffffffac1414150000000064010101e00000018307b97f000001070aa456ca49b444713b8913caac1414aae0000002e0000001ac1414bb00000014000000000000000000000002000000bd0400"/224], 0xe0}, 0x4008090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6.502201224s ago: executing program 2 (id=1262): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r2) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) 6.296816301s ago: executing program 2 (id=1266): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$sock(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44810) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0201000902000000e4a17c45c8d260c9", 0x10}], 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fdfffe05e8fe55a1bc0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) 6.072250059s ago: executing program 2 (id=1269): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.921028471s ago: executing program 2 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f00000004c0)="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", &(0x7f0000000280)=""/255, &(0x7f0000000080)="fdcdd56c76d2df699c3720963efcb62ca358f001974af7e7f1a32e7321d31433", &(0x7f00000014c0)="865e4d6db8c0abcdc82f0b389615a334e8a916bb86d9f2d5767ef6eb5e7bc41308da1106162805752d8f12bf5f7ecfa61bc496ef66031cef3eeb7fe1660341d98e0bdbf39d19fd7723544a89bc88653c847dd0f57947ac768815642ec4c957f3d4beb3be2f5fb5c6e33ca31ee6fc1f65d30a08b7d0886da50413263124588deedd0e81a4a0fedf119263b6d84d87186d8fb4d9de91d99f4513c7b972772b05", 0x401, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.552902931s ago: executing program 2 (id=1275): socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xdf94ef76ade032eb, 0x4, 0x208, 0x1e}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000000c0), 0x4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 5.415556872s ago: executing program 1 (id=1276): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r2) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) 5.006415425s ago: executing program 0 (id=1277): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18bd0c00000000000000000000000000850000002c000000850000002a0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001500)={&(0x7f0000000180)="290d9439a2cb558eb9ec", &(0x7f0000000240)=""/138, &(0x7f0000000300)="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", &(0x7f0000000500)="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", 0xfffffff8, r2, 0x4}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x14, &(0x7f0000000040)=r5, 0x3b) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x8, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_clone(0x10808000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x4c0}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001580)={0x0, 0x80, 0x2, 0x85, 0xc, 0x8, 0x0, 0x1000003, 0x80000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000001540), 0x3}, 0x29080, 0x0, 0x100, 0x1, 0xffffffff00000001, 0x5, 0xff, 0x0, 0x800, 0x0, 0x6401}, r6, 0x2, r0, 0x9) 4.734649657s ago: executing program 1 (id=1278): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xdf94ef76ade032eb, 0x4, 0x208, 0x1e}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000000c0), 0x4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 4.071934501s ago: executing program 0 (id=1280): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.964459959s ago: executing program 0 (id=1281): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="3f00230c1120"}) 3.793123143s ago: executing program 0 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 3) 3.395003576s ago: executing program 1 (id=1283): socket$kcm(0xa, 0x3, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d0800fe007c05e8fe55", 0x1c}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000fffff7000095000015f7cf23109ea5deaf7cdcb8000088e9d851fd0f0b45c1c398008000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000e1f93d3c052b49eafe748a9e865efb000000000000000000000000d98fd215686ef727767a3e4eba7cd6248c58c55f580f1f3d6b09049bbc563ffc8c9aff0850d8e0aaa7b54e1a21ea909c5c80773df2acba033a1f2adca03f45549cb699a65f"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000800)}], 0x3, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf0500050012", 0x2d}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, r9, 0x0, 0x10, &(0x7f0000000540)='kmem_cache_free\x00'}, 0x30) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f0000000740)=""/206, 0xce}], 0x3}, 0x40010020) 2.493937219s ago: executing program 3 (id=1289): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r2) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) 2.383372178s ago: executing program 4 (id=1290): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r1, @ANYRES32], 0xfffffffffffffe13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000100)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @generic={0x8, 0x9, 0x8, 0xe1, 0x10}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xffffffffffffffe9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.273363786s ago: executing program 1 (id=1291): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) (fail_nth: 7) 2.256525448s ago: executing program 3 (id=1292): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.072982673s ago: executing program 4 (id=1293): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10415, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) 2.072376202s ago: executing program 3 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0xef, 0x1af1ed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x109901, 0x20000001, 0x6, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000440), 0x4) close(r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)=@x25, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000980)=[{0x10, 0x189, 0x401}, {0x20, 0x11, 0x1, "6bc8e39111269d8073f58368"}, {0xd8, 0x0, 0x9, "56d4f5c5b1c3c73fa3a263bd77dc2ee14d1c17be976629c6b6530a623ecd815869ac7ba3f8acbcc152f4c73927483e9f08b7bb0ba3b47ca7f84419c39fdfbd6bbb5e1f46f93e0475169e6221d4324e19bbc08cf50c00b9d538b5c1b396c6628acfc8013ccc5f25ea9a7987a7418a37eb21364bd52c8e45946970e915858fe45f6d7cb9914b8547f0ee13c1ac1579b93bab12d1f56444cf3f67f44dc2179bd6ebf62f21e09f834fb14a285c69150fbefc18ff8bd57f974c94dd3927781009249c76"}, {0xb0, 0x118, 0x1, "361faede6aa31a6848a62b15badfe1d4e808e9e306b7f9ad1e11f64b41fb0d57bb8595358541d423f4014b0ff9ec032ba93bfa00600587a1f363a2003cff9e61ecef7559985384ec93a28af13a4b803e5314ed9aed9163acb3539e6c27d7d516bfde0e0cba75bb656f59000db6abd8ad7a4160dd4d7a0a51c79cc3b561441f94e6f3112e179be52b9a28234f94bbfb734626f84bdabfbf67f82a27a3"}], 0x1b8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) 1.221898911s ago: executing program 0 (id=1295): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xdf94ef76ade032eb, 0x4, 0x208, 0x1e}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000000c0), 0x4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 1.221423521s ago: executing program 4 (id=1296): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008", @ANYRES64=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="9ade7c082a9c5d5a45a25a8fc3c1051c5104149a329b5278d6c19c938615de06718d9775e5c5df54e7184362a1ff62a112035373624eecc826cf70e352ffc8e4b72403a8177dee6aa4fb248818190b271f702ceb6a5b68d3ada62b80", @ANYRES64=r0], 0xc0}, 0x0) r1 = getpid() perf_event_open(0x0, r1, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000004c0)='io.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b408000069816679816fcdb951fb5e8514000002000000b700000000000000955e8842f196ed256bab37e6978c98256e00c2000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x39, 'C'}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:'], 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r7, 0x0, 0x0}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) 1.084557222s ago: executing program 1 (id=1297): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000ec3022f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 988.88501ms ago: executing program 3 (id=1298): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000070000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (fail_nth: 9) 976.710951ms ago: executing program 4 (id=1308): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r3}, &(0x7f0000000500), &(0x7f0000001680)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000b0000000100000000020000", @ANYRESOCT=r4, @ANYBLOB="0200000000000000000000ff0000000000000000f92ae4070cdedd28d50a5cae66678f0f33e5db60432fac39b38cc87e0700000000000000c6cde39c37c105a9708976a4ba1d5f9828c6a1912cef1681a6801171e4ca240364db351f71fae5259137b4", @ANYRES32=0x0, @ANYRES8=r1], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x1, '\x00', r5, r0, 0x5, 0x4, 0x3}, 0xfffffffffffffe13) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r5, r6, 0x0, 0x3, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000500), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xe, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5c}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) 405.980617ms ago: executing program 1 (id=1299): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0004000070738b6b000000f834a3d5e979517babf9008500046f1cf111000000950000009515ad7cb50784f3c8505375cd1105f391d8bb04b9b84a959e383d56d5d72f6565ca22dfd972677ee3eb91974ceb4bc50a55a0fff8aa2321d2017d6a8c0f1e505a53d106ae7a668ec11432abb846b9905b1321d9ceb72ed5fc8fa48c8f8e1cc92468cbb652a96d12fdbaad0c55a525d93fd82662dc2c4d830e0a19902e10de68690859f5c890a7450080"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd30}, 0x56) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a40), 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x6a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf3ced4ff6962dd23, @perf_bp={&(0x7f0000000040), 0x2}, 0x40, 0x8000000000000000, 0x0, 0x8, 0x2, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 405.471387ms ago: executing program 4 (id=1300): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040017010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 340.887353ms ago: executing program 3 (id=1301): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x481}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd0600ce81ea032c00fe08000e40000200875a65ef54969ff57b00ff020000000000000000000000000001e2607e"], 0x47b1) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRESOCT=r5], 0x0, 0x4a}, 0x28) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="14dc157b4730b884aa59c36ed77f1d9810016f2a7467c222fe8220b0c1ef8c77e28d3da06cd25a35742477aff3ad3b911f652018f02c656adcfcb9dc", 0x3c}, {&(0x7f0000000240)="0ce51f181e92e56cabcf0b5af3c8f70e3e9d527c928aa93c8f881997cb2561469bee88fed37afbf30e3adec55bcc203edfe40b0e7e7a8fde436751ed56bc7b41b935b95a78e08a4f6f5965a6dadea7140cfb983e8439167debfa08ea9eb793b37cb0772fe41974db91a29f7de068c64caea8083b3594fd605e232f42f8b94482cd7a9e88dca71a3ad2ae9d74", 0x8c}, {&(0x7f0000000300)="787663564300beee2b718d312e42ca6674e2e3378c632f3c1f80acdc4980f9b50184b587ad28e8e0116386d8a4e200c5d233e229b70e88e0281779f5cef2d53fc4e2e35da8fe60df3e8049bc3dbe71c37e653d3fe508b7df4a788726ffd110ccc4d37d2d07fc959c713b4ff32ea264cf437bd3fdb44bfa8bd768b8b3b29ac3758623e880d10027e9", 0x88}, {&(0x7f00000003c0)="d96ee0480a8c9dc3194d86759725465a5f201736dd0ec410d3e6e4cec566c09bf6429631d6ee4adf8c20406fe548c7b6d98e723fb5328439bcb46464ded257724e70636dee7b1a1fe54f606de9a6bbeda05df3d09fab533b78bfa17d090370f58c1fdf", 0x63}, {&(0x7f0000000480)="4a63473e2fd342c4fedc78fcec3045d6fb16cec7a093b694469b2f89d1f4c3774306a54ee7ce048a56bd82c5228950aa2b67c9209bb2f78f3abcfbf657c32593ad15c350eb6ee213ed8326300d6c640b70ca6c0c291a189d76376110f454df692e531ef465705ebcabc4a261f73980f0d080ea4e105c7085fa5a01534806b19b00fefc1931df6de6fc4847465f65a29c9e3343c1ee38b923c97a0fe106c255f1524d7353b728fadae512a6", 0xab}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000000000001000000070000000000000014000000000000000000000001000000faffffff00000000140000000000001416000000000002000000000000000000000080000000000000000000000007000000862e000000030008196d9b78d909011055163b9adc3a4b3a9d70173e4fba05051b9cac141428ffffffffac1414150000000064010101e00000018307b97f000001070aa456ca49b444713b8913caac1414aae0000002e0000001ac1414bb00000014000000000000000000000002000000bd0400"/224], 0xe0}, 0x4008090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 282.793327ms ago: executing program 4 (id=1302): socket$kcm(0xa, 0x3, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d0800fe007c05e8fe55", 0x1c}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000fffff7000095000015f7cf23109ea5deaf7cdcb8000088e9d851fd0f0b45c1c398008000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000e1f93d3c052b49eafe748a9e865efb000000000000000000000000d98fd215686ef727767a3e4eba7cd6248c58c55f580f1f3d6b09049bbc563ffc8c9aff0850d8e0aaa7b54e1a21ea909c5c80773df2acba033a1f2adca03f45549cb699a65f"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000800)}], 0x3, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf0500050012", 0x2d}], 0x1}, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, r9, 0x0, 0x10, &(0x7f0000000540)='kmem_cache_free\x00'}, 0x30) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f0000000740)=""/206, 0xce}], 0x3}, 0x40010020) 0s ago: executing program 0 (id=1303): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, &(0x7f0000001c40)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r2) sendmsg$unix(r3, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) kernel console output (not intermixed with test programs): x8B1A) too big (33) [ 134.907727][ T155] wlan1: Trigger new scan to find an IBSS to join [ 134.908545][ T9] wlan1: Trigger new scan to find an IBSS to join [ 134.963639][ T9] wlan1: Creating new IBSS network, BSSID 12:57:27:a5:d8:41 [ 135.000932][ T6120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.489104][ T6149] FAULT_INJECTION: forcing a failure. [ 135.489104][ T6149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.503624][ T6149] CPU: 0 PID: 6149 Comm: syz.2.693 Not tainted 5.15.189-syzkaller #0 [ 135.511839][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.521929][ T6149] Call Trace: [ 135.525239][ T6149] [ 135.528188][ T6149] dump_stack_lvl+0x168/0x230 [ 135.532900][ T6149] ? show_regs_print_info+0x20/0x20 [ 135.538131][ T6149] ? load_image+0x3b0/0x3b0 [ 135.542662][ T6149] ? __lock_acquire+0x7c60/0x7c60 [ 135.547719][ T6149] should_fail+0x38c/0x4c0 [ 135.552258][ T6149] _copy_from_user+0x2e/0x170 [ 135.556971][ T6149] __copy_msghdr_from_user+0xaf/0x5e0 [ 135.562372][ T6149] ? verify_lock_unused+0x140/0x140 [ 135.567599][ T6149] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 135.572921][ T6149] ___sys_sendmsg+0x156/0x260 [ 135.577658][ T6149] ? __sys_sendmsg+0x250/0x250 [ 135.582453][ T6149] ? vfs_write+0x84d/0xd00 [ 135.586906][ T6149] ? __fdget+0x18b/0x210 [ 135.591167][ T6149] __se_sys_sendmsg+0x190/0x250 [ 135.596042][ T6149] ? __x64_sys_sendmsg+0x80/0x80 [ 135.600995][ T6149] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 135.607009][ T6149] ? lockdep_hardirqs_on+0x94/0x140 [ 135.612266][ T6149] do_syscall_64+0x4c/0xa0 [ 135.616721][ T6149] ? clear_bhb_loop+0x30/0x80 [ 135.621428][ T6149] ? clear_bhb_loop+0x30/0x80 [ 135.626133][ T6149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.632068][ T6149] RIP: 0033:0x7fc1872eeb69 [ 135.636523][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.656154][ T6149] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.664600][ T6149] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 135.672592][ T6149] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 135.680586][ T6149] RBP: 00007fc185156090 R08: 0000000000000000 R09: 0000000000000000 [ 135.688575][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.696673][ T6149] R13: 0000000000000000 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 135.704767][ T6149] [ 135.993282][ T6159] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 136.901729][ T9] wlan1: Trigger new scan to find an IBSS to join [ 136.967992][ T6194] syz.2.712[6194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.968143][ T6194] syz.2.712[6194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.111180][ T6196] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 137.188611][ T6206] syz.1.716[6206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.188752][ T6206] syz.1.716[6206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.277590][ T6194] netlink: 'syz.2.712': attribute type 3 has an invalid length. [ 137.319019][ T6206] FAULT_INJECTION: forcing a failure. [ 137.319019][ T6206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.341653][ T6194] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.712'. [ 137.380924][ T6206] CPU: 1 PID: 6206 Comm: syz.1.716 Not tainted 5.15.189-syzkaller #0 [ 137.389314][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.399409][ T6206] Call Trace: [ 137.402988][ T6206] [ 137.405952][ T6206] dump_stack_lvl+0x168/0x230 [ 137.410748][ T6206] ? show_regs_print_info+0x20/0x20 [ 137.416070][ T6206] ? load_image+0x3b0/0x3b0 [ 137.420611][ T6206] ? __lock_acquire+0x7c60/0x7c60 [ 137.425676][ T6206] should_fail+0x38c/0x4c0 [ 137.430126][ T6206] _copy_from_user+0x2e/0x170 [ 137.434842][ T6206] __copy_msghdr_from_user+0xaf/0x5e0 [ 137.440263][ T6206] ? verify_lock_unused+0x140/0x140 [ 137.445488][ T6206] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 137.450810][ T6206] ___sys_sendmsg+0x156/0x260 [ 137.455520][ T6206] ? __sys_sendmsg+0x250/0x250 [ 137.460318][ T6206] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 137.466511][ T6206] ? __fdget+0x18b/0x210 [ 137.470798][ T6206] __se_sys_sendmsg+0x190/0x250 [ 137.475678][ T6206] ? __x64_sys_sendmsg+0x80/0x80 [ 137.480640][ T6206] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 137.486661][ T6206] ? lockdep_hardirqs_on+0x94/0x140 [ 137.491886][ T6206] do_syscall_64+0x4c/0xa0 [ 137.496324][ T6206] ? clear_bhb_loop+0x30/0x80 [ 137.501021][ T6206] ? clear_bhb_loop+0x30/0x80 [ 137.505730][ T6206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.511651][ T6206] RIP: 0033:0x7fea2a1a3b69 [ 137.516093][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.536083][ T6206] RSP: 002b:00007fea2800b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.544624][ T6206] RAX: ffffffffffffffda RBX: 00007fea2a3cafa0 RCX: 00007fea2a1a3b69 [ 137.552620][ T6206] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 137.560619][ T6206] RBP: 00007fea2800b090 R08: 0000000000000000 R09: 0000000000000000 [ 137.568617][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.576637][ T6206] R13: 0000000000000000 R14: 00007fea2a3cafa0 R15: 00007fff076e71f8 [ 137.584650][ T6206] [ 137.633150][ T6208] syz.3.717[6208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.634749][ T6208] syz.3.717[6208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.009448][ T6229] FAULT_INJECTION: forcing a failure. [ 138.009448][ T6229] name failslab, interval 1, probability 0, space 0, times 0 [ 138.092368][ T6229] CPU: 1 PID: 6229 Comm: syz.4.725 Not tainted 5.15.189-syzkaller #0 [ 138.100610][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.110714][ T6229] Call Trace: [ 138.114033][ T6229] [ 138.117002][ T6229] dump_stack_lvl+0x168/0x230 [ 138.121731][ T6229] ? show_regs_print_info+0x20/0x20 [ 138.126970][ T6229] ? load_image+0x3b0/0x3b0 [ 138.131524][ T6229] ? __lock_acquire+0x7c60/0x7c60 [ 138.136600][ T6229] should_fail+0x38c/0x4c0 [ 138.141076][ T6229] should_failslab+0x5/0x20 [ 138.145971][ T6229] slab_pre_alloc_hook+0x51/0xc0 [ 138.150964][ T6229] __kmalloc+0x6b/0x330 [ 138.155176][ T6229] ? kernfs_fop_write_iter+0x155/0x4c0 [ 138.160681][ T6229] ? end_current_label_crit_section+0x14b/0x170 [ 138.167300][ T6229] kernfs_fop_write_iter+0x155/0x4c0 [ 138.172645][ T6229] ? iov_iter_init+0xb4/0x170 [ 138.177380][ T6229] vfs_write+0x712/0xd00 [ 138.181682][ T6229] ? file_end_write+0x250/0x250 [ 138.186589][ T6229] ? __fget_files+0x40f/0x480 [ 138.191319][ T6229] ? mutex_lock_nested+0x17/0x20 [ 138.196309][ T6229] ? __fdget_pos+0x2bf/0x370 [ 138.200950][ T6229] ? ksys_write+0x71/0x250 [ 138.205421][ T6229] ksys_write+0x14d/0x250 [ 138.209802][ T6229] ? __ia32_sys_read+0x80/0x80 [ 138.214617][ T6229] ? lockdep_hardirqs_on+0x94/0x140 [ 138.219861][ T6229] do_syscall_64+0x4c/0xa0 [ 138.224319][ T6229] ? clear_bhb_loop+0x30/0x80 [ 138.229030][ T6229] ? clear_bhb_loop+0x30/0x80 [ 138.233757][ T6229] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.239698][ T6229] RIP: 0033:0x7fd1763b1b69 [ 138.244291][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.263946][ T6229] RSP: 002b:00007fd174219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.272422][ T6229] RAX: ffffffffffffffda RBX: 00007fd1765d8fa0 RCX: 00007fd1763b1b69 [ 138.280435][ T6229] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 138.288449][ T6229] RBP: 00007fd174219090 R08: 0000000000000000 R09: 0000000000000000 [ 138.296722][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.304769][ T6229] R13: 0000000000000000 R14: 00007fd1765d8fa0 R15: 00007fff72cce0b8 [ 138.312863][ T6229] [ 138.797341][ T6241] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 138.947830][ T6254] FAULT_INJECTION: forcing a failure. [ 138.947830][ T6254] name failslab, interval 1, probability 0, space 0, times 0 [ 139.036823][ T6254] CPU: 0 PID: 6254 Comm: syz.1.734 Not tainted 5.15.189-syzkaller #0 [ 139.044960][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.055048][ T6254] Call Trace: [ 139.058365][ T6254] [ 139.061316][ T6254] dump_stack_lvl+0x168/0x230 [ 139.066026][ T6254] ? show_regs_print_info+0x20/0x20 [ 139.071257][ T6254] ? load_image+0x3b0/0x3b0 [ 139.075785][ T6254] ? __might_sleep+0xf0/0xf0 [ 139.080395][ T6254] ? __lock_acquire+0x7c60/0x7c60 [ 139.085453][ T6254] should_fail+0x38c/0x4c0 [ 139.089899][ T6254] should_failslab+0x5/0x20 [ 139.094559][ T6254] slab_pre_alloc_hook+0x51/0xc0 [ 139.099531][ T6254] __kmalloc_node_track_caller+0x68/0x3a0 [ 139.105285][ T6254] ? ppp_write+0xb0/0x3d0 [ 139.109649][ T6254] ? kmem_cache_alloc_node+0x162/0x2d0 [ 139.115140][ T6254] ? __alloc_skb+0xf4/0x750 [ 139.119684][ T6254] ? ppp_write+0xb0/0x3d0 [ 139.124203][ T6254] __alloc_skb+0x22c/0x750 [ 139.128658][ T6254] ppp_write+0xb0/0x3d0 [ 139.132832][ T6254] ? vfs_write+0x2eb/0xd00 [ 139.137261][ T6254] ? ppp_read+0xa10/0xa10 [ 139.141613][ T6254] vfs_write+0x300/0xd00 [ 139.145882][ T6254] ? file_end_write+0x250/0x250 [ 139.150752][ T6254] ? __fget_files+0x40f/0x480 [ 139.155447][ T6254] ? __fdget_pos+0x1e2/0x370 [ 139.160046][ T6254] ? ksys_write+0x71/0x250 [ 139.164526][ T6254] ksys_write+0x14d/0x250 [ 139.168869][ T6254] ? __ia32_sys_read+0x80/0x80 [ 139.173646][ T6254] ? lockdep_hardirqs_on+0x94/0x140 [ 139.178855][ T6254] do_syscall_64+0x4c/0xa0 [ 139.183278][ T6254] ? clear_bhb_loop+0x30/0x80 [ 139.187961][ T6254] ? clear_bhb_loop+0x30/0x80 [ 139.192644][ T6254] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.198556][ T6254] RIP: 0033:0x7fea2a1a3b69 [ 139.202989][ T6254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.222714][ T6254] RSP: 002b:00007fea2800b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.231135][ T6254] RAX: ffffffffffffffda RBX: 00007fea2a3cafa0 RCX: 00007fea2a1a3b69 [ 139.239119][ T6254] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000005 [ 139.247140][ T6254] RBP: 00007fea2800b090 R08: 0000000000000000 R09: 0000000000000000 [ 139.255120][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.263118][ T6254] R13: 0000000000000000 R14: 00007fea2a3cafa0 R15: 00007fff076e71f8 [ 139.271212][ T6254] [ 139.640289][ T6272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'. [ 139.862400][ T154] wlan1: Trigger new scan to find an IBSS to join [ 139.869436][ T9] wlan1: Trigger new scan to find an IBSS to join [ 139.876120][ T155] wlan1: Trigger new scan to find an IBSS to join [ 139.990817][ T6281] netlink: 'syz.1.745': attribute type 21 has an invalid length. [ 140.243439][ T6290] FAULT_INJECTION: forcing a failure. [ 140.243439][ T6290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.301433][ T6290] CPU: 1 PID: 6290 Comm: syz.3.748 Not tainted 5.15.189-syzkaller #0 [ 140.309575][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.319660][ T6290] Call Trace: [ 140.323063][ T6290] [ 140.326015][ T6290] dump_stack_lvl+0x168/0x230 [ 140.330817][ T6290] ? show_regs_print_info+0x20/0x20 [ 140.336049][ T6290] ? load_image+0x3b0/0x3b0 [ 140.340690][ T6290] ? __lock_acquire+0x7c60/0x7c60 [ 140.345857][ T6290] should_fail+0x38c/0x4c0 [ 140.350309][ T6290] _copy_to_iter+0x22a/0x1160 [ 140.355022][ T6290] ? __lock_acquire+0x7c60/0x7c60 [ 140.360093][ T6290] ? iov_iter_init+0x170/0x170 [ 140.364911][ T6290] ? __virt_addr_valid+0x3c6/0x470 [ 140.370057][ T6290] ? __phys_addr+0xb6/0x170 [ 140.374594][ T6290] ? __phys_addr_symbol+0x2b/0x70 [ 140.379652][ T6290] ? __check_object_size+0x30c/0x410 [ 140.385160][ T6290] __skb_datagram_iter+0xde/0x740 [ 140.390301][ T6290] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 140.395889][ T6290] skb_copy_datagram_iter+0xad/0x1f0 [ 140.401348][ T6290] netlink_recvmsg+0x2bb/0xdb0 [ 140.406160][ T6290] ? netlink_sendmsg+0xbc0/0xbc0 [ 140.411194][ T6290] ? aa_sk_perm+0x7b4/0x8f0 [ 140.415734][ T6290] ? aa_af_perm+0x2b0/0x2b0 [ 140.420393][ T6290] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 140.425710][ T6290] ? security_socket_recvmsg+0x85/0xb0 [ 140.431385][ T6290] ? netlink_sendmsg+0xbc0/0xbc0 [ 140.436375][ T6290] ____sys_recvmsg+0x291/0x580 [ 140.441179][ T6290] ? __might_fault+0xb3/0x110 [ 140.445904][ T6290] ? __sys_recvmsg_sock+0x40/0x40 [ 140.451162][ T6290] ? import_iovec+0x6f/0xa0 [ 140.455844][ T6290] ___sys_recvmsg+0x1af/0x4f0 [ 140.461157][ T6290] ? __sys_recvmsg+0x250/0x250 [ 140.466141][ T6290] ? __lock_acquire+0x7c60/0x7c60 [ 140.471356][ T6290] ? __fdget+0x18b/0x210 [ 140.475688][ T6290] __x64_sys_recvmsg+0x1dd/0x2a0 [ 140.480710][ T6290] ? ___sys_recvmsg+0x4f0/0x4f0 [ 140.485604][ T6290] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 140.491651][ T6290] ? lockdep_hardirqs_on+0x94/0x140 [ 140.497004][ T6290] do_syscall_64+0x4c/0xa0 [ 140.501471][ T6290] ? clear_bhb_loop+0x30/0x80 [ 140.506189][ T6290] ? clear_bhb_loop+0x30/0x80 [ 140.510915][ T6290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.516858][ T6290] RIP: 0033:0x7f84f11b4b69 [ 140.521311][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.541349][ T6290] RSP: 002b:00007f84ef01c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 140.549817][ T6290] RAX: ffffffffffffffda RBX: 00007f84f13dbfa0 RCX: 00007f84f11b4b69 [ 140.557876][ T6290] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 140.565886][ T6290] RBP: 00007f84ef01c090 R08: 0000000000000000 R09: 0000000000000000 [ 140.573903][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.582048][ T6290] R13: 0000000000000000 R14: 00007f84f13dbfa0 R15: 00007fff78bba3a8 [ 140.590074][ T6290] [ 140.821554][ T144] wlan1: Trigger new scan to find an IBSS to join [ 140.828821][ T155] wlan1: Creating new IBSS network, BSSID 1e:14:04:51:00:28 [ 141.841243][ T6314] netlink: 'syz.1.757': attribute type 19 has an invalid length. [ 141.849564][ T6314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.757'. [ 141.881249][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 142.004815][ T6316] netlink: 'syz.4.758': attribute type 6 has an invalid length. [ 142.089456][ T6314] sctp: [Deprecated]: syz.1.757 (pid 6314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.089456][ T6314] Use struct sctp_sack_info instead [ 142.198166][ T6322] FAULT_INJECTION: forcing a failure. [ 142.198166][ T6322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.234332][ T6322] CPU: 0 PID: 6322 Comm: syz.3.760 Not tainted 5.15.189-syzkaller #0 [ 142.242558][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.252642][ T6322] Call Trace: [ 142.256039][ T6322] [ 142.259038][ T6322] dump_stack_lvl+0x168/0x230 [ 142.263749][ T6322] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 142.270123][ T6322] ? show_regs_print_info+0x20/0x20 [ 142.275364][ T6322] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 142.281555][ T6322] should_fail+0x38c/0x4c0 [ 142.285993][ T6322] _copy_from_user+0x2e/0x170 [ 142.290681][ T6322] __copy_msghdr_from_user+0x448/0x5e0 [ 142.296153][ T6322] ? verify_lock_unused+0x140/0x140 [ 142.301373][ T6322] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 142.306685][ T6322] ___sys_sendmsg+0x156/0x260 [ 142.311384][ T6322] ? __sys_sendmsg+0x250/0x250 [ 142.316256][ T6322] ? ktime_get_real_ts64+0x420/0x420 [ 142.321565][ T6322] ? __fdget+0x18b/0x210 [ 142.325816][ T6322] __se_sys_sendmsg+0x190/0x250 [ 142.330676][ T6322] ? __x64_sys_sendmsg+0x80/0x80 [ 142.335623][ T6322] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 142.341629][ T6322] ? lockdep_hardirqs_on+0x94/0x140 [ 142.346846][ T6322] do_syscall_64+0x4c/0xa0 [ 142.351271][ T6322] ? clear_bhb_loop+0x30/0x80 [ 142.355977][ T6322] ? clear_bhb_loop+0x30/0x80 [ 142.360664][ T6322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.366576][ T6322] RIP: 0033:0x7f84f11b4b69 [ 142.371006][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.390618][ T6322] RSP: 002b:00007f84ef01c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.399072][ T6322] RAX: ffffffffffffffda RBX: 00007f84f13dbfa0 RCX: 00007f84f11b4b69 [ 142.407059][ T6322] RDX: 0000000024048015 RSI: 0000200000000040 RDI: 0000000000000005 [ 142.415370][ T6322] RBP: 00007f84ef01c090 R08: 0000000000000000 R09: 0000000000000000 [ 142.423345][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.431328][ T6322] R13: 0000000000000000 R14: 00007f84f13dbfa0 R15: 00007fff78bba3a8 [ 142.439325][ T6322] [ 142.508110][ T6322] netlink: 180 bytes leftover after parsing attributes in process `syz.3.760'. [ 142.680848][ T6332] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 142.901809][ T144] wlan1: Trigger new scan to find an IBSS to join [ 142.984369][ T144] wlan1: Creating new IBSS network, BSSID 9a:a9:db:26:a8:cd [ 143.240913][ T6350] FAULT_INJECTION: forcing a failure. [ 143.240913][ T6350] name failslab, interval 1, probability 0, space 0, times 0 [ 143.294601][ T6350] CPU: 1 PID: 6350 Comm: syz.0.769 Not tainted 5.15.189-syzkaller #0 [ 143.302851][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.312944][ T6350] Call Trace: [ 143.316251][ T6350] [ 143.319212][ T6350] dump_stack_lvl+0x168/0x230 [ 143.323926][ T6350] ? show_regs_print_info+0x20/0x20 [ 143.329172][ T6350] ? load_image+0x3b0/0x3b0 [ 143.333902][ T6350] ? __might_sleep+0xf0/0xf0 [ 143.338520][ T6350] ? __lock_acquire+0x7c60/0x7c60 [ 143.343618][ T6350] ? mark_lock+0x94/0x320 [ 143.347994][ T6350] should_fail+0x38c/0x4c0 [ 143.352497][ T6350] should_failslab+0x5/0x20 [ 143.357063][ T6350] slab_pre_alloc_hook+0x51/0xc0 [ 143.362054][ T6350] __kmalloc+0x6b/0x330 [ 143.366250][ T6350] ? tomoyo_realpath_from_path+0x118/0x610 [ 143.372122][ T6350] tomoyo_realpath_from_path+0x118/0x610 [ 143.377946][ T6350] tomoyo_path_number_perm+0x1d5/0x5d0 [ 143.383579][ T6350] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 143.389089][ T6350] ? perf_trace_lock+0xdf/0x370 [ 143.393989][ T6350] ? perf_trace_lock+0xdf/0x370 [ 143.398953][ T6350] security_file_ioctl+0x6c/0xa0 [ 143.403940][ T6350] __se_sys_ioctl+0x48/0x170 [ 143.408585][ T6350] do_syscall_64+0x4c/0xa0 [ 143.413060][ T6350] ? clear_bhb_loop+0x30/0x80 [ 143.417858][ T6350] ? clear_bhb_loop+0x30/0x80 [ 143.422583][ T6350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.428530][ T6350] RIP: 0033:0x7fbe87d94b69 [ 143.433074][ T6350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.452813][ T6350] RSP: 002b:00007fbe85bdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.461260][ T6350] RAX: ffffffffffffffda RBX: 00007fbe87fbc080 RCX: 00007fbe87d94b69 [ 143.469264][ T6350] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000e [ 143.477265][ T6350] RBP: 00007fbe85bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 143.485345][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.493338][ T6350] R13: 0000000000000000 R14: 00007fbe87fbc080 R15: 00007fff65959998 [ 143.501468][ T6350] [ 143.556464][ T6350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.861596][ T154] wlan1: Trigger new scan to find an IBSS to join [ 143.878355][ T1272] wlan1: Creating new IBSS network, BSSID e2:5e:b2:0b:c4:ba [ 144.241995][ T6378] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.777'. [ 144.359259][ T6379] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 144.514884][ T6386] FAULT_INJECTION: forcing a failure. [ 144.514884][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.618096][ T6386] CPU: 1 PID: 6386 Comm: syz.1.779 Not tainted 5.15.189-syzkaller #0 [ 144.626411][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.636577][ T6386] Call Trace: [ 144.639893][ T6386] [ 144.642863][ T6386] dump_stack_lvl+0x168/0x230 [ 144.647596][ T6386] ? show_regs_print_info+0x20/0x20 [ 144.652897][ T6386] ? load_image+0x3b0/0x3b0 [ 144.657454][ T6386] ? __lock_acquire+0x7c60/0x7c60 [ 144.662520][ T6386] ? perf_trace_lock+0x2ec/0x370 [ 144.667519][ T6386] should_fail+0x38c/0x4c0 [ 144.671986][ T6386] _copy_from_user+0x2e/0x170 [ 144.676706][ T6386] ___sys_recvmsg+0x129/0x4f0 [ 144.681582][ T6386] ? __sys_recvmsg+0x250/0x250 [ 144.686418][ T6386] ? trace_event_raw_event_lock+0x250/0x250 [ 144.692399][ T6386] ? __fdget+0x18b/0x210 [ 144.696699][ T6386] __x64_sys_recvmsg+0x1dd/0x2a0 [ 144.701731][ T6386] ? ___sys_recvmsg+0x4f0/0x4f0 [ 144.706634][ T6386] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 144.712696][ T6386] ? lockdep_hardirqs_on+0x94/0x140 [ 144.717949][ T6386] do_syscall_64+0x4c/0xa0 [ 144.722399][ T6386] ? clear_bhb_loop+0x30/0x80 [ 144.727312][ T6386] ? clear_bhb_loop+0x30/0x80 [ 144.732036][ T6386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.737969][ T6386] RIP: 0033:0x7fea2a1a3b69 [ 144.742511][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.762563][ T6386] RSP: 002b:00007fea2800b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 144.771013][ T6386] RAX: ffffffffffffffda RBX: 00007fea2a3cafa0 RCX: 00007fea2a1a3b69 [ 144.779019][ T6386] RDX: 0000000000010102 RSI: 0000200000000140 RDI: 0000000000000004 [ 144.787034][ T6386] RBP: 00007fea2800b090 R08: 0000000000000000 R09: 0000000000000000 [ 144.795061][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.803072][ T6386] R13: 0000000000000000 R14: 00007fea2a3cafa0 R15: 00007fff076e71f8 [ 144.811122][ T6386] [ 145.505352][ T6413] FAULT_INJECTION: forcing a failure. [ 145.505352][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 145.561666][ T6413] CPU: 1 PID: 6413 Comm: syz.0.789 Not tainted 5.15.189-syzkaller #0 [ 145.569910][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.579992][ T6413] Call Trace: [ 145.583321][ T6413] [ 145.586268][ T6413] dump_stack_lvl+0x168/0x230 [ 145.590966][ T6413] ? show_regs_print_info+0x20/0x20 [ 145.596181][ T6413] ? load_image+0x3b0/0x3b0 [ 145.600701][ T6413] ? __might_sleep+0xf0/0xf0 [ 145.605331][ T6413] ? __lock_acquire+0x7c60/0x7c60 [ 145.610374][ T6413] should_fail+0x38c/0x4c0 [ 145.614813][ T6413] should_failslab+0x5/0x20 [ 145.619328][ T6413] slab_pre_alloc_hook+0x51/0xc0 [ 145.624425][ T6413] kmem_cache_alloc_node+0x47/0x2d0 [ 145.629641][ T6413] ? __alloc_skb+0xf4/0x750 [ 145.634155][ T6413] __alloc_skb+0xf4/0x750 [ 145.638500][ T6413] alloc_skb_with_frags+0xa7/0x730 [ 145.643625][ T6413] ? mark_lock+0x94/0x320 [ 145.647963][ T6413] ? __lock_acquire+0x12d9/0x7c60 [ 145.653006][ T6413] sock_alloc_send_pskb+0x853/0x980 [ 145.658320][ T6413] ? sock_kzfree_s+0x50/0x50 [ 145.662931][ T6413] ? verify_lock_unused+0x140/0x140 [ 145.668143][ T6413] tun_get_user+0x856/0x38d0 [ 145.672757][ T6413] ? tun_ring_recv+0xc30/0xc30 [ 145.677541][ T6413] ? rcu_lock_release+0x5/0x20 [ 145.682325][ T6413] ? __lock_acquire+0x7c60/0x7c60 [ 145.687375][ T6413] tun_chr_write_iter+0x112/0x1e0 [ 145.692412][ T6413] vfs_write+0x712/0xd00 [ 145.696665][ T6413] ? file_end_write+0x250/0x250 [ 145.701528][ T6413] ? __fget_files+0x40f/0x480 [ 145.706333][ T6413] ? __fdget_pos+0x1e2/0x370 [ 145.710947][ T6413] ? ksys_write+0x71/0x250 [ 145.715382][ T6413] ksys_write+0x14d/0x250 [ 145.719728][ T6413] ? __ia32_sys_read+0x80/0x80 [ 145.724504][ T6413] ? lockdep_hardirqs_on+0x94/0x140 [ 145.729722][ T6413] do_syscall_64+0x4c/0xa0 [ 145.734172][ T6413] ? clear_bhb_loop+0x30/0x80 [ 145.738858][ T6413] ? clear_bhb_loop+0x30/0x80 [ 145.743544][ T6413] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.749483][ T6413] RIP: 0033:0x7fbe87d94b69 [ 145.753929][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.773691][ T6413] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.782124][ T6413] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 145.790107][ T6413] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 145.798086][ T6413] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 145.806066][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.814040][ T6413] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 145.822030][ T6413] [ 145.999524][ T6420] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 146.854160][ T6449] netlink: 180 bytes leftover after parsing attributes in process `syz.3.803'. [ 146.901803][ T155] wlan1: Creating new IBSS network, BSSID d2:1c:77:61:06:e6 [ 147.189924][ T6453] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 147.342213][ T6456] netlink: 180 bytes leftover after parsing attributes in process `syz.1.806'. [ 147.516236][ T6464] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 147.531595][ T6464] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.808'. [ 147.885466][ T6490] netlink: 204732 bytes leftover after parsing attributes in process `syz.4.820'. [ 147.901224][ T6490] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.820'. [ 147.999637][ T6486] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 148.389887][ T6505] FAULT_INJECTION: forcing a failure. [ 148.389887][ T6505] name failslab, interval 1, probability 0, space 0, times 0 [ 148.403273][ T6505] CPU: 0 PID: 6505 Comm: syz.1.827 Not tainted 5.15.189-syzkaller #0 [ 148.411533][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.421617][ T6505] Call Trace: [ 148.425009][ T6505] [ 148.427966][ T6505] dump_stack_lvl+0x168/0x230 [ 148.432682][ T6505] ? show_regs_print_info+0x20/0x20 [ 148.437912][ T6505] ? load_image+0x3b0/0x3b0 [ 148.442452][ T6505] ? __might_sleep+0xf0/0xf0 [ 148.447074][ T6505] ? __lock_acquire+0x7c60/0x7c60 [ 148.452131][ T6505] should_fail+0x38c/0x4c0 [ 148.456560][ T6505] should_failslab+0x5/0x20 [ 148.461065][ T6505] slab_pre_alloc_hook+0x51/0xc0 [ 148.466010][ T6505] __kmalloc_node+0x6e/0x3b0 [ 148.470609][ T6505] ? memcg_alloc_page_obj_cgroups+0x81/0x120 [ 148.476604][ T6505] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 148.482421][ T6505] slab_post_alloc_hook+0xba/0x380 [ 148.487540][ T6505] kmem_cache_alloc_node+0x12d/0x2d0 [ 148.492840][ T6505] ? __alloc_skb+0xf4/0x750 [ 148.497363][ T6505] __alloc_skb+0xf4/0x750 [ 148.501797][ T6505] alloc_skb_with_frags+0xa7/0x730 [ 148.506950][ T6505] sock_alloc_send_pskb+0x853/0x980 [ 148.512182][ T6505] ? sock_kzfree_s+0x50/0x50 [ 148.516775][ T6505] ? do_raw_spin_lock+0x11d/0x280 [ 148.521805][ T6505] ? __rwlock_init+0x140/0x140 [ 148.526660][ T6505] ? do_raw_spin_unlock+0x11d/0x230 [ 148.531876][ T6505] unix_dgram_sendmsg+0x5ef/0x1890 [ 148.537007][ T6505] ? aa_sk_perm+0x7b4/0x8f0 [ 148.541531][ T6505] ? unix_dgram_poll+0x660/0x660 [ 148.546470][ T6505] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 148.552986][ T6505] ? aa_sock_msg_perm+0x94/0x150 [ 148.557937][ T6505] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 148.563256][ T6505] ? security_socket_sendmsg+0x7c/0xa0 [ 148.568817][ T6505] ? unix_dgram_poll+0x660/0x660 [ 148.573760][ T6505] ____sys_sendmsg+0x5a2/0x8c0 [ 148.578576][ T6505] ? memset+0x1e/0x40 [ 148.582565][ T6505] ? __sys_sendmsg_sock+0x30/0x30 [ 148.587606][ T6505] ? import_iovec+0x6f/0xa0 [ 148.592237][ T6505] ___sys_sendmsg+0x1f0/0x260 [ 148.596928][ T6505] ? __sys_sendmsg+0x250/0x250 [ 148.601726][ T6505] ? vfs_write+0x84d/0xd00 [ 148.606244][ T6505] ? __fdget+0x18b/0x210 [ 148.610503][ T6505] __se_sys_sendmsg+0x190/0x250 [ 148.615480][ T6505] ? __x64_sys_sendmsg+0x80/0x80 [ 148.620447][ T6505] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 148.626457][ T6505] ? lockdep_hardirqs_on+0x94/0x140 [ 148.631771][ T6505] do_syscall_64+0x4c/0xa0 [ 148.636217][ T6505] ? clear_bhb_loop+0x30/0x80 [ 148.641076][ T6505] ? clear_bhb_loop+0x30/0x80 [ 148.645773][ T6505] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.651678][ T6505] RIP: 0033:0x7fea2a1a3b69 [ 148.656097][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.675710][ T6505] RSP: 002b:00007fea2800b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.684227][ T6505] RAX: ffffffffffffffda RBX: 00007fea2a3cafa0 RCX: 00007fea2a1a3b69 [ 148.692220][ T6505] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 148.700209][ T6505] RBP: 00007fea2800b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.708237][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.716317][ T6505] R13: 0000000000000000 R14: 00007fea2a3cafa0 R15: 00007fff076e71f8 [ 148.724327][ T6505] [ 148.731877][ T6506] FAULT_INJECTION: forcing a failure. [ 148.731877][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 148.752721][ T6506] CPU: 1 PID: 6506 Comm: syz.0.826 Not tainted 5.15.189-syzkaller #0 [ 148.760851][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.771016][ T6506] Call Trace: [ 148.774334][ T6506] [ 148.777288][ T6506] dump_stack_lvl+0x168/0x230 [ 148.781996][ T6506] ? show_regs_print_info+0x20/0x20 [ 148.787211][ T6506] ? load_image+0x3b0/0x3b0 [ 148.791734][ T6506] ? __might_sleep+0xf0/0xf0 [ 148.796340][ T6506] ? __lock_acquire+0x7c60/0x7c60 [ 148.801476][ T6506] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 148.807839][ T6506] should_fail+0x38c/0x4c0 [ 148.812277][ T6506] should_failslab+0x5/0x20 [ 148.816788][ T6506] slab_pre_alloc_hook+0x51/0xc0 [ 148.821737][ T6506] __kmalloc+0x6b/0x330 [ 148.825896][ T6506] ? tomoyo_encode+0x27e/0x540 [ 148.830683][ T6506] tomoyo_encode+0x27e/0x540 [ 148.835286][ T6506] tomoyo_realpath_from_path+0x5cd/0x610 [ 148.841114][ T6506] tomoyo_path_number_perm+0x1d5/0x5d0 [ 148.846695][ T6506] ? verify_lock_unused+0x140/0x140 [ 148.851918][ T6506] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 148.857392][ T6506] ? ksys_write+0x1c7/0x250 [ 148.861959][ T6506] security_file_ioctl+0x6c/0xa0 [ 148.866999][ T6506] __se_sys_ioctl+0x48/0x170 [ 148.871609][ T6506] do_syscall_64+0x4c/0xa0 [ 148.876152][ T6506] ? clear_bhb_loop+0x30/0x80 [ 148.880849][ T6506] ? clear_bhb_loop+0x30/0x80 [ 148.885674][ T6506] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.891720][ T6506] RIP: 0033:0x7fbe87d94b69 [ 148.896231][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.915983][ T6506] RSP: 002b:00007fbe85bdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.924630][ T6506] RAX: ffffffffffffffda RBX: 00007fbe87fbc080 RCX: 00007fbe87d94b69 [ 148.932787][ T6506] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000005 [ 148.940947][ T6506] RBP: 00007fbe85bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 148.949709][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.957796][ T6506] R13: 0000000000000000 R14: 00007fbe87fbc080 R15: 00007fff65959998 [ 148.966070][ T6506] [ 148.977208][ T6506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.405841][ T6523] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 149.626419][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.637559][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.747733][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.755726][ T6523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.765796][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.773858][ T6523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.827672][ T6523] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 149.853286][ T6522] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.862017][ T144] wlan1: Trigger new scan to find an IBSS to join [ 149.966670][ T6547] FAULT_INJECTION: forcing a failure. [ 149.966670][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 150.056310][ T6547] CPU: 1 PID: 6547 Comm: syz.4.839 Not tainted 5.15.189-syzkaller #0 [ 150.064545][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.074810][ T6547] Call Trace: [ 150.078121][ T6547] [ 150.081079][ T6547] dump_stack_lvl+0x168/0x230 [ 150.085793][ T6547] ? show_regs_print_info+0x20/0x20 [ 150.091029][ T6547] ? load_image+0x3b0/0x3b0 [ 150.095562][ T6547] ? __might_sleep+0xf0/0xf0 [ 150.100181][ T6547] ? __lock_acquire+0x7c60/0x7c60 [ 150.105286][ T6547] ? __lock_acquire+0x7c60/0x7c60 [ 150.110338][ T6547] should_fail+0x38c/0x4c0 [ 150.114789][ T6547] should_failslab+0x5/0x20 [ 150.119318][ T6547] slab_pre_alloc_hook+0x51/0xc0 [ 150.124281][ T6547] ? __sys_setsockopt+0x2bf/0x3d0 [ 150.129331][ T6547] __kmalloc_track_caller+0x69/0x330 [ 150.134644][ T6547] ? __sys_setsockopt+0x2bf/0x3d0 [ 150.139704][ T6547] sctp_setsockopt+0x7d/0xf80 [ 150.144409][ T6547] ? sock_common_recvmsg+0x1b0/0x1b0 [ 150.149729][ T6547] __sys_setsockopt+0x2bf/0x3d0 [ 150.154613][ T6547] __x64_sys_setsockopt+0xb1/0xc0 [ 150.159669][ T6547] do_syscall_64+0x4c/0xa0 [ 150.164190][ T6547] ? clear_bhb_loop+0x30/0x80 [ 150.168918][ T6547] ? clear_bhb_loop+0x30/0x80 [ 150.173616][ T6547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.179531][ T6547] RIP: 0033:0x7fd1763b1b69 [ 150.183972][ T6547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.203685][ T6547] RSP: 002b:00007fd174219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.212129][ T6547] RAX: ffffffffffffffda RBX: 00007fd1765d8fa0 RCX: 00007fd1763b1b69 [ 150.220125][ T6547] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000008 [ 150.228123][ T6547] RBP: 00007fd174219090 R08: 0000000000000010 R09: 0000000000000000 [ 150.236131][ T6547] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.244309][ T6547] R13: 0000000000000000 R14: 00007fd1765d8fa0 R15: 00007fff72cce0b8 [ 150.252403][ T6547] [ 150.348857][ T6558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.843'. [ 150.450037][ T6564] netlink: 'syz.3.845': attribute type 3 has an invalid length. [ 150.458544][ T6564] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.845'. [ 151.110534][ T6582] FAULT_INJECTION: forcing a failure. [ 151.110534][ T6582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.158050][ T6577] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.172564][ T6582] CPU: 0 PID: 6582 Comm: syz.2.853 Not tainted 5.15.189-syzkaller #0 [ 151.180691][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.190790][ T6582] Call Trace: [ 151.194110][ T6582] [ 151.197075][ T6582] dump_stack_lvl+0x168/0x230 [ 151.201801][ T6582] ? show_regs_print_info+0x20/0x20 [ 151.207038][ T6582] ? load_image+0x3b0/0x3b0 [ 151.211584][ T6582] ? __lock_acquire+0x7c60/0x7c60 [ 151.216655][ T6582] should_fail+0x38c/0x4c0 [ 151.221118][ T6582] _copy_from_user+0x2e/0x170 [ 151.225851][ T6582] ___sys_recvmsg+0x129/0x4f0 [ 151.230590][ T6582] ? __sys_recvmsg+0x250/0x250 [ 151.235414][ T6582] ? trace_event_raw_event_lock+0x250/0x250 [ 151.241509][ T6582] ? __fdget+0x18b/0x210 [ 151.245877][ T6582] __x64_sys_recvmsg+0x1dd/0x2a0 [ 151.250857][ T6582] ? ___sys_recvmsg+0x4f0/0x4f0 [ 151.255730][ T6582] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 151.261750][ T6582] ? lockdep_hardirqs_on+0x94/0x140 [ 151.266968][ T6582] do_syscall_64+0x4c/0xa0 [ 151.271397][ T6582] ? clear_bhb_loop+0x30/0x80 [ 151.276085][ T6582] ? clear_bhb_loop+0x30/0x80 [ 151.280777][ T6582] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.286688][ T6582] RIP: 0033:0x7fc1872eeb69 [ 151.291149][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.310935][ T6582] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 151.319502][ T6582] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 151.327572][ T6582] RDX: 0000000000010102 RSI: 0000200000000140 RDI: 0000000000000004 [ 151.335639][ T6582] RBP: 00007fc185156090 R08: 0000000000000000 R09: 0000000000000000 [ 151.343803][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.351793][ T6582] R13: 0000000000000000 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 151.359801][ T6582] [ 151.623486][ T6596] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 151.633513][ T6596] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 151.643206][ T6596] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 151.861747][ T144] wlan1: Trigger new scan to find an IBSS to join [ 151.871464][ T9] wlan1: Trigger new scan to find an IBSS to join [ 152.115892][ T6615] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 152.492506][ T6626] FAULT_INJECTION: forcing a failure. [ 152.492506][ T6626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.513195][ T6626] CPU: 1 PID: 6626 Comm: syz.2.871 Not tainted 5.15.189-syzkaller #0 [ 152.521327][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.531495][ T6626] Call Trace: [ 152.534796][ T6626] [ 152.537747][ T6626] dump_stack_lvl+0x168/0x230 [ 152.542450][ T6626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.548753][ T6626] ? show_regs_print_info+0x20/0x20 [ 152.554065][ T6626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.560276][ T6626] should_fail+0x38c/0x4c0 [ 152.564744][ T6626] _copy_from_user+0x2e/0x170 [ 152.569456][ T6626] __copy_msghdr_from_user+0xaf/0x5e0 [ 152.574863][ T6626] ? verify_lock_unused+0x140/0x140 [ 152.580110][ T6626] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 152.585542][ T6626] ? trace_event_raw_event_lock+0x250/0x250 [ 152.591480][ T6626] ___sys_sendmsg+0x156/0x260 [ 152.596200][ T6626] ? __sys_sendmsg+0x250/0x250 [ 152.600995][ T6626] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 152.607010][ T6626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.613460][ T6626] ? __se_sys_sendmsg+0x41/0x250 [ 152.618427][ T6626] ? __se_sys_sendmsg+0xbf/0x250 [ 152.623390][ T6626] ? kasan_check_range+0x77/0x290 [ 152.628449][ T6626] __se_sys_sendmsg+0x190/0x250 [ 152.633374][ T6626] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 152.639599][ T6626] ? __x64_sys_sendmsg+0x80/0x80 [ 152.644577][ T6626] ? syscall_enter_from_user_mode+0x2a/0x70 [ 152.650503][ T6626] do_syscall_64+0x4c/0xa0 [ 152.654948][ T6626] ? clear_bhb_loop+0x30/0x80 [ 152.659645][ T6626] ? clear_bhb_loop+0x30/0x80 [ 152.664344][ T6626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.670261][ T6626] RIP: 0033:0x7fc1872eeb69 [ 152.674834][ T6626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.694582][ T6626] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.703036][ T6626] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 152.711031][ T6626] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 152.719033][ T6626] RBP: 00007fc185156090 R08: 0000000000000000 R09: 0000000000000000 [ 152.727037][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.735036][ T6626] R13: 0000000000000000 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 152.743056][ T6626] [ 153.861707][ T144] wlan1: Trigger new scan to find an IBSS to join [ 154.064921][ T6646] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.879'. [ 154.105019][ T6643] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 154.278427][ T6658] FAULT_INJECTION: forcing a failure. [ 154.278427][ T6658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.293098][ T6658] CPU: 0 PID: 6658 Comm: syz.4.884 Not tainted 5.15.189-syzkaller #0 [ 154.301297][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.311453][ T6658] Call Trace: [ 154.314825][ T6658] [ 154.317853][ T6658] dump_stack_lvl+0x168/0x230 [ 154.322684][ T6658] ? show_regs_print_info+0x20/0x20 [ 154.327995][ T6658] ? load_image+0x3b0/0x3b0 [ 154.332676][ T6658] ? __lock_acquire+0x7c60/0x7c60 [ 154.337893][ T6658] should_fail+0x38c/0x4c0 [ 154.342627][ T6658] _copy_from_user+0x2e/0x170 [ 154.347445][ T6658] __copy_msghdr_from_user+0xaf/0x5e0 [ 154.353092][ T6658] ? verify_lock_unused+0x140/0x140 [ 154.358437][ T6658] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 154.364081][ T6658] ? trace_event_raw_event_lock+0x250/0x250 [ 154.370142][ T6658] ___sys_sendmsg+0x156/0x260 [ 154.375080][ T6658] ? __sys_sendmsg+0x250/0x250 [ 154.380083][ T6658] ? trace_event_raw_event_lock+0x250/0x250 [ 154.386067][ T6658] ? vfs_write+0x84d/0xd00 [ 154.390978][ T6658] ? __fdget+0x18b/0x210 [ 154.395383][ T6658] __se_sys_sendmsg+0x190/0x250 [ 154.400373][ T6658] ? __x64_sys_sendmsg+0x80/0x80 [ 154.405402][ T6658] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 154.411654][ T6658] ? lockdep_hardirqs_on+0x94/0x140 [ 154.417110][ T6658] do_syscall_64+0x4c/0xa0 [ 154.421617][ T6658] ? clear_bhb_loop+0x30/0x80 [ 154.426384][ T6658] ? clear_bhb_loop+0x30/0x80 [ 154.431180][ T6658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.437161][ T6658] RIP: 0033:0x7fd1763b1b69 [ 154.441680][ T6658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.461386][ T6658] RSP: 002b:00007fd174219038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.469935][ T6658] RAX: ffffffffffffffda RBX: 00007fd1765d8fa0 RCX: 00007fd1763b1b69 [ 154.478002][ T6658] RDX: 0000000000044810 RSI: 00002000000001c0 RDI: 0000000000000004 [ 154.486066][ T6658] RBP: 00007fd174219090 R08: 0000000000000000 R09: 0000000000000000 [ 154.494124][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.502188][ T6658] R13: 0000000000000000 R14: 00007fd1765d8fa0 R15: 00007fff72cce0b8 [ 154.510429][ T6658] [ 154.901708][ T9] wlan1: Trigger new scan to find an IBSS to join [ 155.368372][ T6690] netlink: 1 bytes leftover after parsing attributes in process `syz.2.893'. [ 155.598955][ T6691] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.800998][ T6699] syz.4.897[6699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.801143][ T6699] syz.4.897[6699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.038615][ T6711] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.903'. [ 156.137508][ T6711] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 156.178252][ T6713] FAULT_INJECTION: forcing a failure. [ 156.178252][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 156.216763][ T6713] CPU: 1 PID: 6713 Comm: syz.4.904 Not tainted 5.15.189-syzkaller #0 [ 156.224918][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.235183][ T6713] Call Trace: [ 156.238508][ T6713] [ 156.241478][ T6713] dump_stack_lvl+0x168/0x230 [ 156.246220][ T6713] ? show_regs_print_info+0x20/0x20 [ 156.251485][ T6713] ? load_image+0x3b0/0x3b0 [ 156.256063][ T6713] ? __might_sleep+0xf0/0xf0 [ 156.260842][ T6713] ? __lock_acquire+0x7c60/0x7c60 [ 156.265936][ T6713] should_fail+0x38c/0x4c0 [ 156.270415][ T6713] should_failslab+0x5/0x20 [ 156.274955][ T6713] slab_pre_alloc_hook+0x51/0xc0 [ 156.279948][ T6713] __kmalloc+0x6b/0x330 [ 156.284150][ T6713] ? tomoyo_realpath_from_path+0x118/0x610 [ 156.290112][ T6713] tomoyo_realpath_from_path+0x118/0x610 [ 156.291838][ T6711] netlink: 'syz.1.903': attribute type 10 has an invalid length. [ 156.295823][ T6713] tomoyo_path_number_perm+0x1d5/0x5d0 [ 156.309096][ T6713] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 156.314796][ T6713] security_file_ioctl+0x6c/0xa0 [ 156.320034][ T6713] __se_sys_ioctl+0x48/0x170 [ 156.324765][ T6713] do_syscall_64+0x4c/0xa0 [ 156.329237][ T6713] ? clear_bhb_loop+0x30/0x80 [ 156.333974][ T6713] ? clear_bhb_loop+0x30/0x80 [ 156.338798][ T6713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.344749][ T6713] RIP: 0033:0x7fd1763b1b69 [ 156.349214][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.368866][ T6713] RSP: 002b:00007fd174219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.377378][ T6713] RAX: ffffffffffffffda RBX: 00007fd1765d8fa0 RCX: 00007fd1763b1b69 [ 156.385513][ T6713] RDX: 0000200000000080 RSI: 0000000000008b26 RDI: 0000000000000008 [ 156.393721][ T6713] RBP: 00007fd174219090 R08: 0000000000000000 R09: 0000000000000000 [ 156.401762][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.409790][ T6713] R13: 0000000000000000 R14: 00007fd1765d8fa0 R15: 00007fff72cce0b8 [ 156.417947][ T6713] [ 156.516320][ T6711] team0: Port device wlan1 added [ 156.699797][ T6724] netlink: 'syz.3.906': attribute type 8 has an invalid length. [ 156.737425][ T6724] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.906'. [ 156.943876][ T6730] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 156.979755][ T6713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.988148][ T6730] netlink: 168 bytes leftover after parsing attributes in process `syz.1.909'. [ 157.166282][ T6736] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 157.713703][ T6761] netlink: 'syz.3.922': attribute type 39 has an invalid length. [ 157.888772][ T9] wlan1: Trigger new scan to find an IBSS to join [ 157.912369][ T6768] FAULT_INJECTION: forcing a failure. [ 157.912369][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 157.942084][ T6768] CPU: 0 PID: 6768 Comm: syz.2.924 Not tainted 5.15.189-syzkaller #0 [ 157.950219][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.960310][ T6768] Call Trace: [ 157.963621][ T6768] [ 157.966578][ T6768] dump_stack_lvl+0x168/0x230 [ 157.971294][ T6768] ? show_regs_print_info+0x20/0x20 [ 157.976629][ T6768] ? load_image+0x3b0/0x3b0 [ 157.981183][ T6768] ? __might_sleep+0xf0/0xf0 [ 157.985837][ T6768] ? __lock_acquire+0x7c60/0x7c60 [ 157.991103][ T6768] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 157.997138][ T6768] should_fail+0x38c/0x4c0 [ 158.001599][ T6768] should_failslab+0x5/0x20 [ 158.006243][ T6768] slab_pre_alloc_hook+0x51/0xc0 [ 158.011239][ T6768] kmem_cache_alloc_trace+0x47/0x2a0 [ 158.016738][ T6768] ? nf_nat_masq_schedule+0x22a/0x530 [ 158.022164][ T6768] nf_nat_masq_schedule+0x22a/0x530 [ 158.027411][ T6768] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 158.032910][ T6768] ? masq_inet_event+0x1c0/0x1c0 [ 158.037978][ T6768] ? masq_device_event+0xd0/0xd0 [ 158.042975][ T6768] ? ipvlan_device_event+0x9e0/0x9e0 [ 158.048394][ T6768] masq_inet_event+0x13e/0x1c0 [ 158.053201][ T6768] blocking_notifier_call_chain+0x103/0x1b0 [ 158.059138][ T6768] __inet_del_ifa+0x879/0x1020 [ 158.064043][ T6768] devinet_ioctl+0x8fa/0x1a70 [ 158.068790][ T6768] inet_ioctl+0x2c9/0x400 [ 158.073179][ T6768] ? inet_shutdown+0x370/0x370 [ 158.077998][ T6768] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 158.083510][ T6768] sock_do_ioctl+0xd3/0x2f0 [ 158.088064][ T6768] ? sock_show_fdinfo+0xb0/0xb0 [ 158.092972][ T6768] sock_ioctl+0x4ed/0x6e0 [ 158.097349][ T6768] ? sock_poll+0x3f0/0x3f0 [ 158.101813][ T6768] ? bpf_lsm_file_ioctl+0x5/0x10 [ 158.106781][ T6768] ? security_file_ioctl+0x7c/0xa0 [ 158.112021][ T6768] ? sock_poll+0x3f0/0x3f0 [ 158.116477][ T6768] __se_sys_ioctl+0xfa/0x170 [ 158.121131][ T6768] do_syscall_64+0x4c/0xa0 [ 158.125625][ T6768] ? clear_bhb_loop+0x30/0x80 [ 158.130349][ T6768] ? clear_bhb_loop+0x30/0x80 [ 158.135058][ T6768] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.140989][ T6768] RIP: 0033:0x7fc1872eeb69 [ 158.145451][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.165192][ T6768] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.173660][ T6768] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 158.181671][ T6768] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 158.189700][ T6768] RBP: 00007fc185156090 R08: 0000000000000000 R09: 0000000000000000 [ 158.197795][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.205808][ T6768] R13: 0000000000000000 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 158.213915][ T6768] [ 158.715801][ T6781] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.907730][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 158.953492][ T6790] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.933'. [ 159.070414][ T6807] netlink: 'syz.3.937': attribute type 11 has an invalid length. [ 159.111573][ T6807] netlink: 'syz.3.937': attribute type 5 has an invalid length. [ 159.123753][ T6803] can: request_module (can-proto-0) failed. [ 159.134297][ T6809] can: request_module (can-proto-0) failed. [ 159.193579][ T6807] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 159.217341][ T6807] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.937'. [ 159.372369][ T6820] FAULT_INJECTION: forcing a failure. [ 159.372369][ T6820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.415936][ T6820] CPU: 1 PID: 6820 Comm: syz.2.941 Not tainted 5.15.189-syzkaller #0 [ 159.424169][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.434251][ T6820] Call Trace: [ 159.437560][ T6820] [ 159.440518][ T6820] dump_stack_lvl+0x168/0x230 [ 159.445253][ T6820] ? show_regs_print_info+0x20/0x20 [ 159.450566][ T6820] ? load_image+0x3b0/0x3b0 [ 159.455204][ T6820] ? __lock_acquire+0x7c60/0x7c60 [ 159.460276][ T6820] should_fail+0x38c/0x4c0 [ 159.464720][ T6820] _copy_from_user+0x2e/0x170 [ 159.469422][ T6820] __copy_msghdr_from_user+0xaf/0x5e0 [ 159.474812][ T6820] ? verify_lock_unused+0x140/0x140 [ 159.480051][ T6820] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 159.485364][ T6820] ___sys_sendmsg+0x156/0x260 [ 159.490065][ T6820] ? __sys_sendmsg+0x250/0x250 [ 159.494860][ T6820] ? vfs_write+0x84d/0xd00 [ 159.499299][ T6820] ? __fdget+0x18b/0x210 [ 159.503599][ T6820] __se_sys_sendmsg+0x190/0x250 [ 159.508460][ T6820] ? __x64_sys_sendmsg+0x80/0x80 [ 159.513429][ T6820] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 159.519438][ T6820] ? lockdep_hardirqs_on+0x94/0x140 [ 159.524740][ T6820] do_syscall_64+0x4c/0xa0 [ 159.529172][ T6820] ? clear_bhb_loop+0x30/0x80 [ 159.533942][ T6820] ? clear_bhb_loop+0x30/0x80 [ 159.538653][ T6820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.544613][ T6820] RIP: 0033:0x7fc1872eeb69 [ 159.549035][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.568651][ T6820] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.577076][ T6820] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 159.585057][ T6820] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 159.593130][ T6820] RBP: 00007fc185156090 R08: 0000000000000000 R09: 0000000000000000 [ 159.601124][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.609115][ T6820] R13: 0000000000000000 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 159.617121][ T6820] [ 159.871564][ T155] wlan1: Trigger new scan to find an IBSS to join [ 160.072265][ T155] wlan1: Creating new IBSS network, BSSID ee:9c:d9:ed:53:14 [ 160.154057][ T6839] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 160.232454][ T6845] FAULT_INJECTION: forcing a failure. [ 160.232454][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.271664][ T6845] CPU: 0 PID: 6845 Comm: syz.2.952 Not tainted 5.15.189-syzkaller #0 [ 160.279800][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.289970][ T6845] Call Trace: [ 160.293277][ T6845] [ 160.296217][ T6845] dump_stack_lvl+0x168/0x230 [ 160.300936][ T6845] ? show_regs_print_info+0x20/0x20 [ 160.306145][ T6845] ? load_image+0x3b0/0x3b0 [ 160.310660][ T6845] ? __lock_acquire+0x7c60/0x7c60 [ 160.315695][ T6845] ? vfs_write+0x84d/0xd00 [ 160.320128][ T6845] should_fail+0x38c/0x4c0 [ 160.324554][ T6845] _copy_from_user+0x2e/0x170 [ 160.329237][ T6845] __sys_bpf+0x21b/0x670 [ 160.333510][ T6845] ? bpf_link_show_fdinfo+0x340/0x340 [ 160.338893][ T6845] ? vtime_user_exit+0x2dc/0x400 [ 160.343841][ T6845] __x64_sys_bpf+0x78/0x90 [ 160.348280][ T6845] do_syscall_64+0x4c/0xa0 [ 160.352723][ T6845] ? clear_bhb_loop+0x30/0x80 [ 160.357420][ T6845] ? clear_bhb_loop+0x30/0x80 [ 160.362114][ T6845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.368017][ T6845] RIP: 0033:0x7fc1872eeb69 [ 160.372447][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.392147][ T6845] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.400577][ T6845] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 160.408562][ T6845] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 160.416546][ T6845] RBP: 00007fc185156090 R08: 0000000000000000 R09: 0000000000000000 [ 160.424528][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.432517][ T6845] R13: 0000000000000000 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 160.440612][ T6845] [ 160.901511][ T155] wlan1: Trigger new scan to find an IBSS to join [ 160.982340][ T6874] sctp: [Deprecated]: syz.3.963 (pid 6874) Use of int in maxseg socket option. [ 160.982340][ T6874] Use struct sctp_assoc_value instead [ 161.100351][ T6879] FAULT_INJECTION: forcing a failure. [ 161.100351][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 161.162541][ T6879] CPU: 1 PID: 6879 Comm: syz.2.965 Not tainted 5.15.189-syzkaller #0 [ 161.170773][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.180979][ T6879] Call Trace: [ 161.184290][ T6879] [ 161.187245][ T6879] dump_stack_lvl+0x168/0x230 [ 161.191959][ T6879] ? show_regs_print_info+0x20/0x20 [ 161.197200][ T6879] ? load_image+0x3b0/0x3b0 [ 161.201738][ T6879] ? __might_sleep+0xf0/0xf0 [ 161.206459][ T6879] ? __lock_acquire+0x7c60/0x7c60 [ 161.211545][ T6879] ? rcu_is_watching+0x11/0xa0 [ 161.216349][ T6879] should_fail+0x38c/0x4c0 [ 161.220818][ T6879] should_failslab+0x5/0x20 [ 161.225443][ T6879] slab_pre_alloc_hook+0x51/0xc0 [ 161.230502][ T6879] ? __pmd_alloc+0x11f/0x730 [ 161.235119][ T6879] kmem_cache_alloc+0x3d/0x290 [ 161.239920][ T6879] __pmd_alloc+0x11f/0x730 [ 161.244360][ T6879] ? __lock_acquire+0x7c60/0x7c60 [ 161.249412][ T6879] ? do_raw_spin_lock+0x11d/0x280 [ 161.254555][ T6879] ? __pud_alloc+0x140/0x140 [ 161.259169][ T6879] ? __rwlock_init+0x140/0x140 [ 161.263956][ T6879] ? count_memcg_event_mm+0x311/0x360 [ 161.269358][ T6879] ? do_raw_spin_unlock+0x11d/0x230 [ 161.274591][ T6879] ? _raw_spin_unlock+0x24/0x40 [ 161.279600][ T6879] ? __pud_alloc+0x122/0x140 [ 161.284234][ T6879] handle_mm_fault+0xb92/0x43c0 [ 161.289137][ T6879] ? get_page+0xe0/0xe0 [ 161.293335][ T6879] ? vmacache_find+0x4f0/0x590 [ 161.298219][ T6879] ? vmacache_update+0xa0/0x100 [ 161.303104][ T6879] ? find_vma+0x1df/0x230 [ 161.307559][ T6879] do_user_addr_fault+0x489/0xc80 [ 161.312900][ T6879] exc_page_fault+0x60/0x100 [ 161.317529][ T6879] asm_exc_page_fault+0x22/0x30 [ 161.322407][ T6879] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 161.328167][ T6879] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 161.347908][ T6879] RSP: 0018:ffffc9000344fe80 EFLAGS: 00050293 [ 161.354021][ T6879] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000200000000180 [ 161.362147][ T6879] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 161.370144][ T6879] RBP: 0000000000000004 R08: dffffc0000000000 R09: fffffbfff1ad2dd6 [ 161.378406][ T6879] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 0000000000000000 [ 161.386440][ T6879] R13: 0000200000000180 R14: 0000000000000018 R15: 0000000000000004 [ 161.394554][ T6879] __sys_socketpair+0xb4/0x540 [ 161.399445][ T6879] __x64_sys_socketpair+0x97/0xb0 [ 161.404606][ T6879] do_syscall_64+0x4c/0xa0 [ 161.409109][ T6879] ? clear_bhb_loop+0x30/0x80 [ 161.413822][ T6879] ? clear_bhb_loop+0x30/0x80 [ 161.418548][ T6879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.424576][ T6879] RIP: 0033:0x7fc1872eeb69 [ 161.429121][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.449128][ T6879] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 161.457580][ T6879] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 161.465674][ T6879] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000018 [ 161.473670][ T6879] RBP: 00007fc185156090 R08: 0000000000000000 R09: 0000000000000000 [ 161.481845][ T6879] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 161.489856][ T6879] R13: 0000000000000001 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 161.497898][ T6879] [ 161.523245][ T6882] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.601882][ T6891] netlink: 10 bytes leftover after parsing attributes in process `syz.2.969'. [ 161.647133][ T6889] device syzkaller0 entered promiscuous mode [ 161.873482][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 162.240548][ T6909] FAULT_INJECTION: forcing a failure. [ 162.240548][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 162.285156][ T6909] CPU: 0 PID: 6909 Comm: syz.4.976 Not tainted 5.15.189-syzkaller #0 [ 162.286577][ T6915] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.977'. [ 162.293294][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.293311][ T6909] Call Trace: [ 162.293319][ T6909] [ 162.293329][ T6909] dump_stack_lvl+0x168/0x230 [ 162.293356][ T6909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.293381][ T6909] ? show_regs_print_info+0x20/0x20 [ 162.334952][ T6909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.341263][ T6909] should_fail+0x38c/0x4c0 [ 162.345735][ T6909] should_failslab+0x5/0x20 [ 162.350276][ T6909] slab_pre_alloc_hook+0x51/0xc0 [ 162.355265][ T6909] kmem_cache_alloc_node_trace+0x4a/0x300 [ 162.361016][ T6909] ? __get_vm_area_node+0x119/0x2d0 [ 162.366336][ T6909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.372540][ T6909] __get_vm_area_node+0x119/0x2d0 [ 162.377611][ T6909] __vmalloc_node_range+0xef/0x8b0 [ 162.382752][ T6909] ? netlink_sendmsg+0x5dd/0xbc0 [ 162.387725][ T6909] ? netlink_data_ready+0x10/0x10 [ 162.392791][ T6909] ? netlink_sendmsg+0x5dd/0xbc0 [ 162.397776][ T6909] vmalloc+0x75/0x80 [ 162.401709][ T6909] ? netlink_sendmsg+0x5dd/0xbc0 [ 162.406676][ T6909] netlink_sendmsg+0x5dd/0xbc0 [ 162.411621][ T6909] ? netlink_getsockopt+0x560/0x560 [ 162.416864][ T6909] ? aa_sock_msg_perm+0x94/0x150 [ 162.421846][ T6909] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 162.427172][ T6909] ? security_socket_sendmsg+0x7c/0xa0 [ 162.432790][ T6909] sock_write_iter+0x29c/0x380 [ 162.437593][ T6909] ? sock_read_iter+0x340/0x340 [ 162.442490][ T6909] ? lockdep_hardirqs_on+0x94/0x140 [ 162.447733][ T6909] ? memset+0x1e/0x40 [ 162.451753][ T6909] ? iov_iter_init+0xb4/0x170 [ 162.456467][ T6909] vfs_write+0x712/0xd00 [ 162.460751][ T6909] ? file_end_write+0x250/0x250 [ 162.465640][ T6909] ? preempt_schedule_irq+0xd0/0x150 [ 162.470977][ T6909] ? __fget_files+0x40f/0x480 [ 162.475701][ T6909] ? __fdget_pos+0x1e2/0x370 [ 162.480321][ T6909] ? ksys_write+0x71/0x250 [ 162.484779][ T6909] ksys_write+0x14d/0x250 [ 162.489141][ T6909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 162.495464][ T6909] ? __ia32_sys_read+0x80/0x80 [ 162.500316][ T6909] do_syscall_64+0x4c/0xa0 [ 162.504770][ T6909] ? clear_bhb_loop+0x30/0x80 [ 162.509521][ T6909] ? clear_bhb_loop+0x30/0x80 [ 162.514229][ T6909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.520160][ T6909] RIP: 0033:0x7fd1763b1b69 [ 162.524622][ T6909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.544431][ T6909] RSP: 002b:00007fd174219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.553058][ T6909] RAX: ffffffffffffffda RBX: 00007fd1765d8fa0 RCX: 00007fd1763b1b69 [ 162.561182][ T6909] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000004e [ 162.569216][ T6909] RBP: 00007fd174219090 R08: 0000000000000000 R09: 0000000000000000 [ 162.577234][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.585241][ T6909] R13: 0000000000000000 R14: 00007fd1765d8fa0 R15: 00007fff72cce0b8 [ 162.593272][ T6909] [ 162.991881][ T6909] syz.4.976: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 163.028793][ T6909] CPU: 1 PID: 6909 Comm: syz.4.976 Not tainted 5.15.189-syzkaller #0 [ 163.036926][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.047112][ T6909] Call Trace: [ 163.050420][ T6909] [ 163.053371][ T6909] dump_stack_lvl+0x168/0x230 [ 163.058080][ T6909] ? rcu_lock_release+0x5/0x20 [ 163.062961][ T6909] ? show_regs_print_info+0x20/0x20 [ 163.068209][ T6909] ? load_image+0x3b0/0x3b0 [ 163.072929][ T6909] warn_alloc+0x20e/0x2f0 [ 163.077305][ T6909] ? zone_watermark_ok_safe+0x240/0x240 [ 163.082969][ T6909] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 163.089073][ T6909] ? __get_vm_area_node+0x119/0x2d0 [ 163.094416][ T6909] __vmalloc_node_range+0x2b1/0x8b0 [ 163.099652][ T6909] ? netlink_data_ready+0x10/0x10 [ 163.104728][ T6909] ? netlink_sendmsg+0x5dd/0xbc0 [ 163.109709][ T6909] vmalloc+0x75/0x80 [ 163.113720][ T6909] ? netlink_sendmsg+0x5dd/0xbc0 [ 163.118781][ T6909] netlink_sendmsg+0x5dd/0xbc0 [ 163.123850][ T6909] ? netlink_getsockopt+0x560/0x560 [ 163.129198][ T6909] ? aa_sock_msg_perm+0x94/0x150 [ 163.134282][ T6909] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 163.139655][ T6909] ? security_socket_sendmsg+0x7c/0xa0 [ 163.145288][ T6909] sock_write_iter+0x29c/0x380 [ 163.150110][ T6909] ? sock_read_iter+0x340/0x340 [ 163.155006][ T6909] ? lockdep_hardirqs_on+0x94/0x140 [ 163.160597][ T6909] ? memset+0x1e/0x40 [ 163.164624][ T6909] ? iov_iter_init+0xb4/0x170 [ 163.169341][ T6909] vfs_write+0x712/0xd00 [ 163.173626][ T6909] ? file_end_write+0x250/0x250 [ 163.178606][ T6909] ? preempt_schedule_irq+0xd0/0x150 [ 163.183919][ T6909] ? __fget_files+0x40f/0x480 [ 163.188615][ T6909] ? __fdget_pos+0x1e2/0x370 [ 163.193279][ T6909] ? ksys_write+0x71/0x250 [ 163.197711][ T6909] ksys_write+0x14d/0x250 [ 163.202054][ T6909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 163.208345][ T6909] ? __ia32_sys_read+0x80/0x80 [ 163.213130][ T6909] do_syscall_64+0x4c/0xa0 [ 163.217567][ T6909] ? clear_bhb_loop+0x30/0x80 [ 163.222260][ T6909] ? clear_bhb_loop+0x30/0x80 [ 163.226951][ T6909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.232875][ T6909] RIP: 0033:0x7fd1763b1b69 [ 163.237472][ T6909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.257375][ T6909] RSP: 002b:00007fd174219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.265816][ T6909] RAX: ffffffffffffffda RBX: 00007fd1765d8fa0 RCX: 00007fd1763b1b69 [ 163.273796][ T6909] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000004e [ 163.281772][ T6909] RBP: 00007fd174219090 R08: 0000000000000000 R09: 0000000000000000 [ 163.289746][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.297826][ T6909] R13: 0000000000000000 R14: 00007fd1765d8fa0 R15: 00007fff72cce0b8 [ 163.305822][ T6909] [ 163.353645][ T144] wlan1: Creating new IBSS network, BSSID 3a:d6:cf:a9:2e:de [ 163.506140][ T6909] Mem-Info: [ 163.509452][ T6909] active_anon:268 inactive_anon:5257 isolated_anon:0 [ 163.509452][ T6909] active_file:15044 inactive_file:41148 isolated_file:0 [ 163.509452][ T6909] unevictable:768 dirty:348 writeback:0 [ 163.509452][ T6909] slab_reclaimable:20346 slab_unreclaimable:96085 [ 163.509452][ T6909] mapped:29753 shmem:1629 pagetables:644 bounce:0 [ 163.509452][ T6909] kernel_misc_reclaimable:0 [ 163.509452][ T6909] free:1375649 free_pcp:11752 free_cma:0 [ 163.558902][ T6909] Node 0 active_anon:1040kB inactive_anon:20720kB active_file:59976kB inactive_file:164592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119012kB dirty:1392kB writeback:0kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11508kB pagetables:2576kB all_unreclaimable? no [ 163.592559][ T6940] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 163.608801][ T6909] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 163.639844][ T6937] sctp: [Deprecated]: syz.3.986 (pid 6937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.639844][ T6937] Use struct sctp_sack_info instead [ 163.731713][ T6909] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.831760][ T6909] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 163.837606][ T6909] Node 0 DMA32 free:1565740kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1040kB inactive_anon:22720kB active_file:59976kB inactive_file:164592kB unevictable:1536kB writepending:1392kB present:3129332kB managed:2609004kB mlocked:0kB bounce:0kB free_pcp:41928kB local_pcp:20688kB free_cma:0kB [ 163.868769][ T144] wlan1: Trigger new scan to find an IBSS to join [ 163.961601][ T6909] lowmem_reserve[]: 0 0 0 0 0 [ 163.971448][ T6909] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.151854][ T6909] lowmem_reserve[]: 0 0 0 0 0 [ 164.169124][ T6909] Node 1 Normal free:3921096kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4452kB local_pcp:3268kB free_cma:0kB [ 164.215268][ T6952] netlink: 'syz.3.990': attribute type 39 has an invalid length. [ 164.274764][ T6909] lowmem_reserve[]: 0 0 0 0 0 [ 164.290844][ T6909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.351601][ T6909] Node 0 DMA32: 543*4kB (UME) 188*8kB (UME) 1064*16kB (UME) 894*32kB (UME) 435*64kB (UME) 93*128kB (UM) 27*256kB (UME) 7*512kB (UM) 1*1024kB (U) 1*2048kB (E) 355*4096kB (M) = 1556700kB [ 164.387616][ T6909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 164.435448][ T6909] Node 1 Normal: 196*4kB (UME) 47*8kB (UME) 26*16kB (UME) 139*32kB (UME) 73*64kB (UME) 28*128kB (UE) 13*256kB (UM) 4*512kB (UE) 0*1024kB 1*2048kB (M) 952*4096kB (M) = 3921096kB [ 164.475051][ T6909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.511567][ T6909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.545777][ T6909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.567948][ T6909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.599230][ T6909] 61455 total pagecache pages [ 164.607674][ T6909] 0 pages in swap cache [ 164.617402][ T6909] Swap cache stats: add 0, delete 0, find 0/0 [ 164.628194][ T6909] Free swap = 124996kB [ 164.636620][ T6909] Total swap = 124996kB [ 164.641743][ T6909] 2097051 pages RAM [ 164.647102][ T6909] 0 pages HighMem/MovableOnly [ 164.653181][ T6909] 410813 pages reserved [ 164.657994][ T6909] 0 pages cma reserved [ 164.901904][ T144] wlan1: Trigger new scan to find an IBSS to join [ 165.057353][ T6982] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.132036][ T6979] sctp: [Deprecated]: syz.1.1002 (pid 6979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.132036][ T6979] Use struct sctp_sack_info instead [ 165.217192][ T6984] delete_channel: no stack [ 165.318909][ T6994] FAULT_INJECTION: forcing a failure. [ 165.318909][ T6994] name failslab, interval 1, probability 0, space 0, times 0 [ 165.360869][ T6992] netlink: 'syz.2.1006': attribute type 3 has an invalid length. [ 165.363476][ T6994] CPU: 1 PID: 6994 Comm: syz.1.1005 Not tainted 5.15.189-syzkaller #0 [ 165.376857][ T6994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.387190][ T6994] Call Trace: [ 165.390500][ T6994] [ 165.393577][ T6994] dump_stack_lvl+0x168/0x230 [ 165.398295][ T6994] ? show_regs_print_info+0x20/0x20 [ 165.403529][ T6994] ? load_image+0x3b0/0x3b0 [ 165.408075][ T6994] ? __might_sleep+0xf0/0xf0 [ 165.408911][ T6992] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 165.412711][ T6994] ? __lock_acquire+0x7c60/0x7c60 [ 165.412742][ T6994] ? mark_lock+0x94/0x320 [ 165.412769][ T6994] should_fail+0x38c/0x4c0 [ 165.412800][ T6994] should_failslab+0x5/0x20 [ 165.412819][ T6994] slab_pre_alloc_hook+0x51/0xc0 [ 165.412841][ T6994] __kmalloc+0x6b/0x330 [ 165.412873][ T6994] ? tomoyo_realpath_from_path+0x118/0x610 [ 165.412905][ T6994] tomoyo_realpath_from_path+0x118/0x610 [ 165.412945][ T6994] tomoyo_path_number_perm+0x1d5/0x5d0 [ 165.412969][ T6994] ? verify_lock_unused+0x140/0x140 [ 165.452680][ T6992] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1006'. [ 165.454172][ T6994] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 165.485859][ T6994] ? ksys_write+0x1c7/0x250 [ 165.490465][ T6994] security_file_ioctl+0x6c/0xa0 [ 165.495646][ T6994] __se_sys_ioctl+0x48/0x170 [ 165.500453][ T6994] do_syscall_64+0x4c/0xa0 [ 165.504905][ T6994] ? clear_bhb_loop+0x30/0x80 [ 165.509883][ T6994] ? clear_bhb_loop+0x30/0x80 [ 165.514597][ T6994] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.520539][ T6994] RIP: 0033:0x7fea2a1a3b69 [ 165.524990][ T6994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.544735][ T6994] RSP: 002b:00007fea2800b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.553558][ T6994] RAX: ffffffffffffffda RBX: 00007fea2a3cafa0 RCX: 00007fea2a1a3b69 [ 165.561563][ T6994] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 165.569560][ T6994] RBP: 00007fea2800b090 R08: 0000000000000000 R09: 0000000000000000 [ 165.577553][ T6994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.585742][ T6994] R13: 0000000000000000 R14: 00007fea2a3cafa0 R15: 00007fff076e71f8 [ 165.593751][ T6994] [ 165.792139][ T6994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.873987][ T155] wlan1: Trigger new scan to find an IBSS to join [ 166.071165][ T144] wlan1: Creating new IBSS network, BSSID ce:6a:5e:1f:9e:50 [ 166.748572][ T7017] sctp: [Deprecated]: syz.0.1016 (pid 7017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.748572][ T7017] Use struct sctp_sack_info instead [ 166.833411][ T7023] FAULT_INJECTION: forcing a failure. [ 166.833411][ T7023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.949912][ T7023] CPU: 0 PID: 7023 Comm: syz.2.1015 Not tainted 5.15.189-syzkaller #0 [ 166.958154][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.968350][ T7023] Call Trace: [ 166.971660][ T7023] [ 166.974620][ T7023] dump_stack_lvl+0x168/0x230 [ 166.979337][ T7023] ? show_regs_print_info+0x20/0x20 [ 166.984614][ T7023] ? load_image+0x3b0/0x3b0 [ 166.989171][ T7023] ? __lock_acquire+0x7c60/0x7c60 [ 166.994240][ T7023] ? vfs_write+0x84d/0xd00 [ 166.998710][ T7023] should_fail+0x38c/0x4c0 [ 167.003268][ T7023] _copy_from_user+0x2e/0x170 [ 167.007986][ T7023] __sys_bpf+0x21b/0x670 [ 167.012269][ T7023] ? bpf_link_show_fdinfo+0x340/0x340 [ 167.017827][ T7023] ? rcu_nmi_exit+0x6f/0xf0 [ 167.022401][ T7023] ? vtime_user_exit+0x2dc/0x400 [ 167.027402][ T7023] __x64_sys_bpf+0x78/0x90 [ 167.031988][ T7023] do_syscall_64+0x4c/0xa0 [ 167.036445][ T7023] ? clear_bhb_loop+0x30/0x80 [ 167.041156][ T7023] ? clear_bhb_loop+0x30/0x80 [ 167.046200][ T7023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.052270][ T7023] RIP: 0033:0x7fc1872eeb69 [ 167.056741][ T7023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.076380][ T7023] RSP: 002b:00007fc185135038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.084828][ T7023] RAX: ffffffffffffffda RBX: 00007fc187516080 RCX: 00007fc1872eeb69 [ 167.092830][ T7023] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002 [ 167.100824][ T7023] RBP: 00007fc185135090 R08: 0000000000000000 R09: 0000000000000000 [ 167.108827][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.116824][ T7023] R13: 0000000000000000 R14: 00007fc187516080 R15: 00007ffeb7ff1318 [ 167.124847][ T7023] [ 167.265635][ T7028] delete_channel: no stack [ 167.270601][ T7030] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.317046][ T7051] FAULT_INJECTION: forcing a failure. [ 168.317046][ T7051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.360751][ T7051] CPU: 0 PID: 7051 Comm: syz.0.1028 Not tainted 5.15.189-syzkaller #0 [ 168.369153][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.379327][ T7051] Call Trace: [ 168.382630][ T7051] [ 168.385581][ T7051] dump_stack_lvl+0x168/0x230 [ 168.390291][ T7051] ? show_regs_print_info+0x20/0x20 [ 168.395518][ T7051] ? load_image+0x3b0/0x3b0 [ 168.400061][ T7051] ? __lock_acquire+0x7c60/0x7c60 [ 168.405131][ T7051] ? unix_ioctl+0x250/0x650 [ 168.409662][ T7051] should_fail+0x38c/0x4c0 [ 168.414114][ T7051] _copy_from_user+0x2e/0x170 [ 168.418834][ T7051] sock_do_ioctl+0x178/0x2f0 [ 168.423636][ T7051] ? sock_show_fdinfo+0xb0/0xb0 [ 168.428627][ T7051] sock_ioctl+0x4ed/0x6e0 [ 168.432998][ T7051] ? sock_poll+0x3f0/0x3f0 [ 168.437452][ T7051] ? bpf_lsm_file_ioctl+0x5/0x10 [ 168.442411][ T7051] ? security_file_ioctl+0x7c/0xa0 [ 168.447638][ T7051] ? sock_poll+0x3f0/0x3f0 [ 168.452215][ T7051] __se_sys_ioctl+0xfa/0x170 [ 168.456840][ T7051] do_syscall_64+0x4c/0xa0 [ 168.461282][ T7051] ? clear_bhb_loop+0x30/0x80 [ 168.465986][ T7051] ? clear_bhb_loop+0x30/0x80 [ 168.470696][ T7051] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.476636][ T7051] RIP: 0033:0x7fbe87d94b69 [ 168.481084][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.500916][ T7051] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.509454][ T7051] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 168.517605][ T7051] RDX: 0000200000000080 RSI: 0000000000008910 RDI: 0000000000000004 [ 168.525787][ T7051] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 168.533789][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.541962][ T7051] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 168.550596][ T7051] [ 168.824964][ T7060] sctp: [Deprecated]: syz.2.1030 (pid 7060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.824964][ T7060] Use struct sctp_sack_info instead [ 168.901506][ T1272] wlan1: Trigger new scan to find an IBSS to join [ 168.986701][ T7064] delete_channel: no stack [ 169.861616][ T144] wlan1: Trigger new scan to find an IBSS to join [ 170.154513][ T7089] netlink: 'syz.0.1041': attribute type 39 has an invalid length. [ 170.399575][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 170.778487][ T7097] netlink: 'syz.2.1042': attribute type 4 has an invalid length. [ 171.187429][ T7109] netlink: 'syz.0.1049': attribute type 29 has an invalid length. [ 171.208911][ T7103] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.229251][ T7109] netlink: 'syz.0.1049': attribute type 29 has an invalid length. [ 171.252666][ T7113] netlink: 'syz.0.1049': attribute type 29 has an invalid length. [ 171.281284][ T7109] netlink: 'syz.0.1049': attribute type 29 has an invalid length. [ 171.303259][ T7106] delete_channel: no stack [ 171.867587][ T155] wlan1: Trigger new scan to find an IBSS to join [ 172.140412][ T7133] netlink: 'syz.1.1056': attribute type 39 has an invalid length. [ 172.902484][ T155] wlan1: Creating new IBSS network, BSSID 2a:5b:91:eb:6c:7f [ 173.047763][ T7146] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.199662][ T7155] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 173.270932][ T7155] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 173.354014][ T7156] netlink: 'syz.2.1064': attribute type 29 has an invalid length. [ 173.596685][ T7159] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 173.858153][ T7168] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1069'. [ 173.871420][ T155] wlan1: Trigger new scan to find an IBSS to join [ 174.154465][ T7184] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1075'. [ 174.904621][ T7197] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.175666][ T7209] FAULT_INJECTION: forcing a failure. [ 175.175666][ T7209] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 175.231582][ T7209] CPU: 0 PID: 7209 Comm: syz.2.1083 Not tainted 5.15.189-syzkaller #0 [ 175.240182][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.250267][ T7209] Call Trace: [ 175.253574][ T7209] [ 175.256530][ T7209] dump_stack_lvl+0x168/0x230 [ 175.261240][ T7209] ? show_regs_print_info+0x20/0x20 [ 175.266577][ T7209] ? load_image+0x3b0/0x3b0 [ 175.271110][ T7209] ? verify_lock_unused+0x140/0x140 [ 175.276343][ T7209] should_fail+0x38c/0x4c0 [ 175.280791][ T7209] prepare_alloc_pages+0x1e4/0x5f0 [ 175.285941][ T7209] __alloc_pages+0x10e/0x470 [ 175.290568][ T7209] ? zone_statistics+0x170/0x170 [ 175.295709][ T7209] ? mark_lock+0x94/0x320 [ 175.300078][ T7209] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 175.306096][ T7209] ? alloc_pages+0x438/0x550 [ 175.310730][ T7209] new_slab+0xc0/0x4b0 [ 175.314842][ T7209] ? __kmalloc_node+0x200/0x3b0 [ 175.319722][ T7209] ___slab_alloc+0x81e/0xdf0 [ 175.324340][ T7209] ? kvmalloc_node+0x84/0x130 [ 175.329085][ T7209] __kmalloc_node+0x200/0x3b0 [ 175.333786][ T7209] ? kvmalloc_node+0x84/0x130 [ 175.338533][ T7209] kvmalloc_node+0x84/0x130 [ 175.343079][ T7209] fanout_add+0x6c4/0x11b0 [ 175.347548][ T7209] ? _copy_from_user+0x111/0x170 [ 175.352531][ T7209] packet_setsockopt+0xa9a/0x1860 [ 175.357586][ T7209] ? packet_ioctl+0x240/0x240 [ 175.362291][ T7209] ? rcu_lock_release+0x9/0x20 [ 175.367132][ T7209] ? __lock_acquire+0x7c60/0x7c60 [ 175.372281][ T7209] ? aa_sk_perm+0x7b4/0x8f0 [ 175.376827][ T7209] ? aa_af_perm+0x2b0/0x2b0 [ 175.381365][ T7209] ? __fget_files+0x40f/0x480 [ 175.386105][ T7209] ? aa_sock_opt_perm+0x74/0x100 [ 175.391167][ T7209] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 175.396751][ T7209] ? security_socket_setsockopt+0x7a/0xa0 [ 175.402508][ T7209] ? packet_ioctl+0x240/0x240 [ 175.407240][ T7209] __sys_setsockopt+0x2bf/0x3d0 [ 175.412398][ T7209] __x64_sys_setsockopt+0xb1/0xc0 [ 175.417571][ T7209] do_syscall_64+0x4c/0xa0 [ 175.422038][ T7209] ? clear_bhb_loop+0x30/0x80 [ 175.426782][ T7209] ? clear_bhb_loop+0x30/0x80 [ 175.431501][ T7209] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.437436][ T7209] RIP: 0033:0x7fc1872eeb69 [ 175.441930][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.461659][ T7209] RSP: 002b:00007fc185156038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.470109][ T7209] RAX: ffffffffffffffda RBX: 00007fc187515fa0 RCX: 00007fc1872eeb69 [ 175.478120][ T7209] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 175.486210][ T7209] RBP: 00007fc185156090 R08: 0000000000000004 R09: 0000000000000000 [ 175.494310][ T7209] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 175.502324][ T7209] R13: 0000000000000000 R14: 00007fc187515fa0 R15: 00007ffeb7ff1318 [ 175.510558][ T7209] [ 175.861734][ T9] wlan1: Trigger new scan to find an IBSS to join [ 175.862028][ T155] wlan1: Trigger new scan to find an IBSS to join [ 176.155957][ T7221] FAULT_INJECTION: forcing a failure. [ 176.155957][ T7221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.169621][ T7221] CPU: 0 PID: 7221 Comm: syz.0.1086 Not tainted 5.15.189-syzkaller #0 [ 176.177897][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.188306][ T7221] Call Trace: [ 176.191613][ T7221] [ 176.194566][ T7221] dump_stack_lvl+0x168/0x230 [ 176.199273][ T7221] ? show_regs_print_info+0x20/0x20 [ 176.204577][ T7221] ? load_image+0x3b0/0x3b0 [ 176.209113][ T7221] ? _raw_spin_lock_irq+0xab/0xe0 [ 176.214165][ T7221] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 176.219582][ T7221] should_fail+0x38c/0x4c0 [ 176.224130][ T7221] copy_page_from_iter_atomic+0x436/0x1520 [ 176.230005][ T7221] ? pipe_zero+0x370/0x370 [ 176.234502][ T7221] ? __get_user_nocheck_1+0x6/0x10 [ 176.239655][ T7221] ? shmem_write_begin+0xcd/0x1a0 [ 176.244714][ T7221] generic_perform_write+0x2ff/0x530 [ 176.250176][ T7221] ? grab_cache_page_write_begin+0xa0/0xa0 [ 176.256033][ T7221] ? file_remove_privs+0x590/0x590 [ 176.261185][ T7221] ? read_lock_is_recursive+0x10/0x10 [ 176.266591][ T7221] ? preempt_count_add+0x8d/0x190 [ 176.271654][ T7221] ? rwsem_write_trylock+0x12f/0x1b0 [ 176.277073][ T7221] ? clear_nonspinnable+0x60/0x60 [ 176.282223][ T7221] __generic_file_write_iter+0x25f/0x4e0 [ 176.288078][ T7221] generic_file_write_iter+0xa6/0x1b0 [ 176.293571][ T7221] vfs_write+0x712/0xd00 [ 176.297850][ T7221] ? file_end_write+0x250/0x250 [ 176.302728][ T7221] ? __fget_files+0x40f/0x480 [ 176.307441][ T7221] ? mutex_lock_nested+0x17/0x20 [ 176.312418][ T7221] ? __fdget_pos+0x2bf/0x370 [ 176.317049][ T7221] ? ksys_write+0x71/0x250 [ 176.321584][ T7221] ksys_write+0x14d/0x250 [ 176.325944][ T7221] ? __ia32_sys_read+0x80/0x80 [ 176.330740][ T7221] ? lockdep_hardirqs_on+0x94/0x140 [ 176.335962][ T7221] do_syscall_64+0x4c/0xa0 [ 176.340401][ T7221] ? clear_bhb_loop+0x30/0x80 [ 176.345108][ T7221] ? clear_bhb_loop+0x30/0x80 [ 176.349820][ T7221] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.355747][ T7221] RIP: 0033:0x7fbe87d94b69 [ 176.360276][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.379909][ T7221] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.388480][ T7221] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 176.396566][ T7221] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000003 [ 176.404565][ T7221] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 176.412569][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.420572][ T7221] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 176.428589][ T7221] [ 176.527661][ T7231] FAULT_INJECTION: forcing a failure. [ 176.527661][ T7231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.579177][ T7231] CPU: 1 PID: 7231 Comm: syz.1.1094 Not tainted 5.15.189-syzkaller #0 [ 176.587424][ T7231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.597628][ T7231] Call Trace: [ 176.600947][ T7231] [ 176.603922][ T7231] dump_stack_lvl+0x168/0x230 [ 176.608656][ T7231] ? show_regs_print_info+0x20/0x20 [ 176.613902][ T7231] ? load_image+0x3b0/0x3b0 [ 176.618466][ T7231] ? __lock_acquire+0x7c60/0x7c60 [ 176.623653][ T7231] ? migrate_enable+0x13e/0x200 [ 176.628562][ T7231] should_fail+0x38c/0x4c0 [ 176.633131][ T7231] _copy_from_user+0x2e/0x170 [ 176.638010][ T7231] __sys_bpf+0x21b/0x670 [ 176.642308][ T7231] ? bpf_link_show_fdinfo+0x340/0x340 [ 176.647720][ T7231] ? rcu_nmi_exit+0x6f/0xf0 [ 176.652350][ T7231] ? vtime_user_exit+0x2dc/0x400 [ 176.657356][ T7231] __x64_sys_bpf+0x78/0x90 [ 176.661834][ T7231] do_syscall_64+0x4c/0xa0 [ 176.666285][ T7231] ? clear_bhb_loop+0x30/0x80 [ 176.671089][ T7231] ? clear_bhb_loop+0x30/0x80 [ 176.675814][ T7231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.681758][ T7231] RIP: 0033:0x7fea2a1a3b69 [ 176.686397][ T7231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.706131][ T7231] RSP: 002b:00007fea2800b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.714678][ T7231] RAX: ffffffffffffffda RBX: 00007fea2a3cafa0 RCX: 00007fea2a1a3b69 [ 176.722702][ T7231] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 176.730711][ T7231] RBP: 00007fea2800b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.738723][ T7231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.746734][ T7231] R13: 0000000000000000 R14: 00007fea2a3cafa0 R15: 00007fff076e71f8 [ 176.754782][ T7231] [ 177.080827][ T7241] validate_nla: 3 callbacks suppressed [ 177.080868][ T7241] netlink: 'syz.4.1096': attribute type 39 has an invalid length. [ 177.274716][ T7246] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 177.948786][ T7243] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.967882][ T7246] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 178.300472][ T7260] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.901809][ T1272] wlan1: Trigger new scan to find an IBSS to join [ 179.265388][ T7282] FAULT_INJECTION: forcing a failure. [ 179.265388][ T7282] name failslab, interval 1, probability 0, space 0, times 0 [ 179.278151][ T7282] CPU: 0 PID: 7282 Comm: syz.0.1112 Not tainted 5.15.189-syzkaller #0 [ 179.286354][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.296444][ T7282] Call Trace: [ 179.299755][ T7282] [ 179.302711][ T7282] dump_stack_lvl+0x168/0x230 [ 179.307510][ T7282] ? show_regs_print_info+0x20/0x20 [ 179.312739][ T7282] ? load_image+0x3b0/0x3b0 [ 179.317409][ T7282] ? __might_sleep+0xf0/0xf0 [ 179.322018][ T7282] ? __lock_acquire+0x7c60/0x7c60 [ 179.327064][ T7282] should_fail+0x38c/0x4c0 [ 179.331506][ T7282] should_failslab+0x5/0x20 [ 179.336036][ T7282] slab_pre_alloc_hook+0x51/0xc0 [ 179.341040][ T7282] __kmalloc+0x6b/0x330 [ 179.345214][ T7282] ? bpf_test_init+0xf8/0x1b0 [ 179.349914][ T7282] ? __lock_acquire+0x7c60/0x7c60 [ 179.354965][ T7282] bpf_test_init+0xf8/0x1b0 [ 179.359484][ T7282] bpf_prog_test_run_skb+0x181/0x1180 [ 179.364876][ T7282] ? __fget_files+0x40f/0x480 [ 179.369574][ T7282] ? cpu_online+0x60/0x60 [ 179.373911][ T7282] bpf_prog_test_run+0x31e/0x390 [ 179.378870][ T7282] __sys_bpf+0x535/0x670 [ 179.383154][ T7282] ? bpf_link_show_fdinfo+0x340/0x340 [ 179.388548][ T7282] ? vtime_user_exit+0x2dc/0x400 [ 179.393498][ T7282] __x64_sys_bpf+0x78/0x90 [ 179.397924][ T7282] do_syscall_64+0x4c/0xa0 [ 179.402370][ T7282] ? clear_bhb_loop+0x30/0x80 [ 179.407058][ T7282] ? clear_bhb_loop+0x30/0x80 [ 179.411744][ T7282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.417665][ T7282] RIP: 0033:0x7fbe87d94b69 [ 179.422088][ T7282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.441703][ T7282] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.450128][ T7282] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 179.458111][ T7282] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 179.466100][ T7282] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 179.474086][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.482186][ T7282] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 179.490373][ T7282] [ 179.563659][ T7278] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.035715][ T7290] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.643860][ T7312] syz.1.1121 uses obsolete (PF_INET,SOCK_PACKET) [ 180.902381][ T9] wlan1: Trigger new scan to find an IBSS to join [ 180.970028][ T7318] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.386077][ T7323] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.396432][ T7326] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1128'. [ 182.838394][ T1272] wlan1: Trigger new scan to find an IBSS to join [ 182.845098][ T9] wlan1: Trigger new scan to find an IBSS to join [ 182.892279][ T7337] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 182.925113][ T7329] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.051777][ T7348] delete_channel: no stack [ 183.086929][ T7353] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1136'. [ 183.149019][ T7351] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.863563][ T9] wlan1: Trigger new scan to find an IBSS to join [ 184.842143][ T7398] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.888136][ T7410] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 185.789849][ T7423] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.826395][ T7423] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1163'. [ 185.861973][ T1272] wlan1: Trigger new scan to find an IBSS to join [ 186.758487][ T7440] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.902879][ T155] wlan1: Trigger new scan to find an IBSS to join [ 186.909748][ T155] wlan1: Trigger new scan to find an IBSS to join [ 186.917220][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 187.021262][ T7452] FAULT_INJECTION: forcing a failure. [ 187.021262][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.058943][ T7452] CPU: 0 PID: 7452 Comm: syz.4.1176 Not tainted 5.15.189-syzkaller #0 [ 187.067169][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.077266][ T7452] Call Trace: [ 187.080571][ T7452] [ 187.083524][ T7452] dump_stack_lvl+0x168/0x230 [ 187.088241][ T7452] ? show_regs_print_info+0x20/0x20 [ 187.093464][ T7452] ? load_image+0x3b0/0x3b0 [ 187.097992][ T7452] ? __lock_acquire+0x7c60/0x7c60 [ 187.103052][ T7452] should_fail+0x38c/0x4c0 [ 187.107499][ T7452] _copy_from_user+0x2e/0x170 [ 187.112209][ T7452] __sys_bpf+0x21b/0x670 [ 187.116490][ T7452] ? bpf_link_show_fdinfo+0x340/0x340 [ 187.121909][ T7452] __x64_sys_bpf+0x78/0x90 [ 187.126364][ T7452] do_syscall_64+0x4c/0xa0 [ 187.130802][ T7452] ? clear_bhb_loop+0x30/0x80 [ 187.135499][ T7452] ? clear_bhb_loop+0x30/0x80 [ 187.140209][ T7452] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.146128][ T7452] RIP: 0033:0x7fd1763b1b69 [ 187.150567][ T7452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.170294][ T7452] RSP: 002b:00007fd174219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.178758][ T7452] RAX: ffffffffffffffda RBX: 00007fd1765d8fa0 RCX: 00007fd1763b1b69 [ 187.186785][ T7452] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 187.194781][ T7452] RBP: 00007fd174219090 R08: 0000000000000000 R09: 0000000000000000 [ 187.202875][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.210874][ T7452] R13: 0000000000000000 R14: 00007fd1765d8fa0 R15: 00007fff72cce0b8 [ 187.218892][ T7452] [ 187.644500][ T7466] FAULT_INJECTION: forcing a failure. [ 187.644500][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 187.661527][ T7466] CPU: 1 PID: 7466 Comm: syz.0.1181 Not tainted 5.15.189-syzkaller #0 [ 187.669751][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.679836][ T7466] Call Trace: [ 187.683140][ T7466] [ 187.686193][ T7466] dump_stack_lvl+0x168/0x230 [ 187.691034][ T7466] ? show_regs_print_info+0x20/0x20 [ 187.696405][ T7466] ? load_image+0x3b0/0x3b0 [ 187.700955][ T7466] ? __might_sleep+0xf0/0xf0 [ 187.705586][ T7466] ? __lock_acquire+0x7c60/0x7c60 [ 187.710649][ T7466] should_fail+0x38c/0x4c0 [ 187.715103][ T7466] should_failslab+0x5/0x20 [ 187.719633][ T7466] slab_pre_alloc_hook+0x51/0xc0 [ 187.724608][ T7466] kmem_cache_alloc_node+0x47/0x2d0 [ 187.729833][ T7466] ? __alloc_skb+0xf4/0x750 [ 187.734365][ T7466] ? mark_lock+0x94/0x320 [ 187.738730][ T7466] __alloc_skb+0xf4/0x750 [ 187.743098][ T7466] alloc_skb_with_frags+0xa7/0x730 [ 187.748249][ T7466] sock_alloc_send_pskb+0x853/0x980 [ 187.753637][ T7466] ? sock_kzfree_s+0x50/0x50 [ 187.758564][ T7466] packet_sendmsg+0x3407/0x5110 [ 187.763459][ T7466] ? aa_sk_perm+0x8f0/0x8f0 [ 187.768005][ T7466] ? __lock_acquire+0x12d9/0x7c60 [ 187.773059][ T7466] ? verify_lock_unused+0x140/0x140 [ 187.778290][ T7466] ? __might_sleep+0xf0/0xf0 [ 187.782932][ T7466] ? aa_sk_perm+0x7b4/0x8f0 [ 187.787475][ T7466] ? packet_getsockopt+0x950/0x950 [ 187.793017][ T7466] ? aa_sock_msg_perm+0x94/0x150 [ 187.797995][ T7466] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 187.803606][ T7466] ? security_socket_sendmsg+0x7c/0xa0 [ 187.809227][ T7466] ? packet_getsockopt+0x950/0x950 [ 187.814380][ T7466] ____sys_sendmsg+0x5a2/0x8c0 [ 187.819188][ T7466] ? memset+0x1e/0x40 [ 187.823199][ T7466] ? __sys_sendmsg_sock+0x30/0x30 [ 187.828266][ T7466] ? import_iovec+0x6f/0xa0 [ 187.832822][ T7466] ___sys_sendmsg+0x1f0/0x260 [ 187.837590][ T7466] ? __sys_sendmsg+0x250/0x250 [ 187.842403][ T7466] ? vfs_write+0x84d/0xd00 [ 187.846866][ T7466] ? __fdget+0x18b/0x210 [ 187.851174][ T7466] __se_sys_sendmsg+0x190/0x250 [ 187.856066][ T7466] ? __x64_sys_sendmsg+0x80/0x80 [ 187.861030][ T7466] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 187.867045][ T7466] ? lockdep_hardirqs_on+0x94/0x140 [ 187.872288][ T7466] do_syscall_64+0x4c/0xa0 [ 187.876844][ T7466] ? clear_bhb_loop+0x30/0x80 [ 187.881544][ T7466] ? clear_bhb_loop+0x30/0x80 [ 187.886292][ T7466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 187.892390][ T7466] RIP: 0033:0x7fbe87d94b69 [ 187.896829][ T7466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.916458][ T7466] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.924976][ T7466] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 187.932975][ T7466] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000003 [ 187.941487][ T7466] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 187.949489][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.957480][ T7466] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 187.965490][ T7466] [ 188.432508][ T7486] netlink: 'syz.2.1186': attribute type 11 has an invalid length. [ 188.451007][ T7486] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1186'. [ 188.761585][ T7488] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.901598][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 188.920578][ T7497] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1190'. [ 189.739353][ T7517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1196'. [ 189.771632][ T7520] netlink: 'syz.2.1196': attribute type 10 has an invalid length. [ 189.794368][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.885811][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.893494][ T7520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.966929][ T7520] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 189.995553][ T7524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.003404][ T7524] IPv6: NLM_F_CREATE should be set when creating new route [ 190.010714][ T7524] IPv6: NLM_F_CREATE should be set when creating new route [ 190.018167][ T7524] IPv6: NLM_F_CREATE should be set when creating new route [ 190.346889][ T7528] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 190.511556][ T7538] netlink: 'syz.0.1203': attribute type 39 has an invalid length. [ 190.830398][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 190.902284][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 191.413472][ T7566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1214'. [ 191.450974][ T7568] netlink: 'syz.3.1214': attribute type 10 has an invalid length. [ 191.752040][ T1261] wlan1: Creating new IBSS network, BSSID e6:4a:1a:1c:e8:c8 [ 191.790511][ T7572] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.861764][ T155] wlan1: Trigger new scan to find an IBSS to join [ 192.016751][ T7578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1218'. [ 192.317504][ T7592] FAULT_INJECTION: forcing a failure. [ 192.317504][ T7592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.344966][ T7592] CPU: 1 PID: 7592 Comm: syz.0.1223 Not tainted 5.15.189-syzkaller #0 [ 192.353316][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.363410][ T7592] Call Trace: [ 192.366724][ T7592] [ 192.369684][ T7592] dump_stack_lvl+0x168/0x230 [ 192.374490][ T7592] ? show_regs_print_info+0x20/0x20 [ 192.379723][ T7592] ? load_image+0x3b0/0x3b0 [ 192.384254][ T7592] ? __lock_acquire+0x7c60/0x7c60 [ 192.389320][ T7592] should_fail+0x38c/0x4c0 [ 192.393769][ T7592] _copy_from_user+0x2e/0x170 [ 192.398476][ T7592] bond_do_ioctl+0x14d/0x8c0 [ 192.403102][ T7592] ? bond_eth_ioctl+0x200/0x200 [ 192.407986][ T7592] ? rcu_lock_release+0x20/0x20 [ 192.412860][ T7592] ? lock_chain_count+0x20/0x20 [ 192.417739][ T7592] ? dev_ioctl+0x54e/0xe50 [ 192.422177][ T7592] ? dev_ioctl+0x54e/0xe50 [ 192.426618][ T7592] ? dev_ioctl+0x54e/0xe50 [ 192.431061][ T7592] ? __mutex_lock_common+0x431/0x2390 [ 192.436549][ T7592] ? full_name_hash+0x8e/0xe0 [ 192.441422][ T7592] ? dev_siocbond+0xcf/0x100 [ 192.446041][ T7592] dev_ifsioc+0xc01/0xe70 [ 192.450404][ T7592] ? dev_ioctl+0xe50/0xe50 [ 192.454840][ T7592] ? __lock_acquire+0x7c60/0x7c60 [ 192.459889][ T7592] ? full_name_hash+0x8e/0xe0 [ 192.464611][ T7592] dev_ioctl+0x55f/0xe50 [ 192.469097][ T7592] ? _copy_from_user+0x111/0x170 [ 192.474072][ T7592] sock_do_ioctl+0x222/0x2f0 [ 192.478700][ T7592] ? sock_show_fdinfo+0xb0/0xb0 [ 192.483602][ T7592] sock_ioctl+0x4ed/0x6e0 [ 192.487972][ T7592] ? sock_poll+0x3f0/0x3f0 [ 192.492423][ T7592] ? bpf_lsm_file_ioctl+0x5/0x10 [ 192.497377][ T7592] ? security_file_ioctl+0x7c/0xa0 [ 192.502610][ T7592] ? sock_poll+0x3f0/0x3f0 [ 192.507061][ T7592] __se_sys_ioctl+0xfa/0x170 [ 192.511680][ T7592] do_syscall_64+0x4c/0xa0 [ 192.516123][ T7592] ? clear_bhb_loop+0x30/0x80 [ 192.520820][ T7592] ? clear_bhb_loop+0x30/0x80 [ 192.525534][ T7592] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.531803][ T7592] RIP: 0033:0x7fbe87d94b69 [ 192.536243][ T7592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.555890][ T7592] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.564332][ T7592] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 192.572424][ T7592] RDX: 00002000000002c0 RSI: 0000000000008994 RDI: 0000000000000003 [ 192.580415][ T7592] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 192.588407][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.596410][ T7592] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 192.604688][ T7592] [ 192.822005][ T9] wlan1: Trigger new scan to find an IBSS to join [ 192.927343][ T7599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1226'. [ 193.007963][ T155] wlan1: Creating new IBSS network, BSSID e6:b1:8c:90:cf:eb [ 193.213623][ T7599] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 193.269826][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.278559][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.375541][ T7601] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.862711][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 193.869292][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 194.267210][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273597][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389280][ T7617] delete_channel: no stack [ 195.449794][ T7645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1241'. [ 195.545647][ T7645] netlink: 'syz.4.1241': attribute type 10 has an invalid length. [ 195.563480][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.573313][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.667128][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.674673][ T7645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.683883][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.691538][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.731755][ T7645] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 195.754698][ T7642] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 195.861801][ T1272] wlan1: Trigger new scan to find an IBSS to join [ 195.868548][ T9] wlan1: Trigger new scan to find an IBSS to join [ 196.249296][ T7665] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1248'. [ 196.341661][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 196.357110][ T7483] Bluetooth: hci3: command 0x0406 tx timeout [ 196.363885][ T7483] Bluetooth: hci4: command 0x0406 tx timeout [ 196.387453][ T7483] Bluetooth: hci2: command 0x0406 tx timeout [ 196.410190][ T7483] Bluetooth: hci1: command 0x0406 tx timeout [ 196.831509][ T1261] wlan1: Creating new IBSS network, BSSID 2e:e7:f5:ed:79:6f [ 197.627658][ T7694] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 197.861509][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 198.003835][ T7709] sock: sock_set_timeout: `syz.2.1266' (pid 7709) tries to set negative timeout [ 198.076558][ T7709] netlink: 'syz.2.1266': attribute type 5 has an invalid length. [ 198.618362][ T7724] netlink: 'syz.1.1273': attribute type 10 has an invalid length. [ 198.690166][ T7724] device macvlan0 entered promiscuous mode [ 198.832257][ T144] wlan1: Trigger new scan to find an IBSS to join [ 198.902973][ T155] wlan1: Trigger new scan to find an IBSS to join [ 198.902983][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 198.985593][ T7731] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 199.314467][ T7737] netlink: 'syz.4.1287': attribute type 21 has an invalid length. [ 199.329834][ T7737] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1287'. [ 199.339914][ T7737] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 199.348479][ T7737] netlink: 'syz.4.1287': attribute type 3 has an invalid length. [ 199.357623][ T7737] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1287'. [ 199.753794][ T155] wlan1: Creating new IBSS network, BSSID 1a:b5:4d:45:af:e6 [ 199.778278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.861641][ T154] wlan1: Trigger new scan to find an IBSS to join [ 200.457346][ T7754] FAULT_INJECTION: forcing a failure. [ 200.457346][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 200.501644][ T7754] CPU: 0 PID: 7754 Comm: syz.0.1282 Not tainted 5.15.189-syzkaller #0 [ 200.509863][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.519953][ T7754] Call Trace: [ 200.523263][ T7754] [ 200.526224][ T7754] dump_stack_lvl+0x168/0x230 [ 200.530976][ T7754] ? show_regs_print_info+0x20/0x20 [ 200.536211][ T7754] ? load_image+0x3b0/0x3b0 [ 200.540749][ T7754] ? __might_sleep+0xf0/0xf0 [ 200.545406][ T7754] ? __lock_acquire+0x7c60/0x7c60 [ 200.550466][ T7754] should_fail+0x38c/0x4c0 [ 200.555010][ T7754] should_failslab+0x5/0x20 [ 200.559554][ T7754] slab_pre_alloc_hook+0x51/0xc0 [ 200.564520][ T7754] kmem_cache_alloc_node_trace+0x4a/0x300 [ 200.570273][ T7754] ? __get_vm_area_node+0x119/0x2d0 [ 200.575515][ T7754] __get_vm_area_node+0x119/0x2d0 [ 200.580579][ T7754] __vmalloc_node_range+0xef/0x8b0 [ 200.585724][ T7754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 200.591422][ T7754] ? end_current_label_crit_section+0x170/0x170 [ 200.597803][ T7754] ? __lock_acquire+0x7c60/0x7c60 [ 200.602858][ T7754] ? __lock_acquire+0x13ad/0x7c60 [ 200.607920][ T7754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 200.613498][ T7754] __vmalloc+0x76/0x80 [ 200.617597][ T7754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 200.623182][ T7754] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 200.628591][ T7754] bpf_prog_alloc+0x1a/0x1e0 [ 200.633217][ T7754] bpf_prog_load+0x7b3/0x1550 [ 200.637939][ T7754] ? map_freeze+0x350/0x350 [ 200.642480][ T7754] ? __might_fault+0xb7/0x110 [ 200.647205][ T7754] ? __might_fault+0xb3/0x110 [ 200.651938][ T7754] ? bpf_lsm_bpf+0x5/0x10 [ 200.656386][ T7754] ? security_bpf+0x7a/0xa0 [ 200.661261][ T7754] __sys_bpf+0x4c2/0x670 [ 200.665558][ T7754] ? bpf_link_show_fdinfo+0x340/0x340 [ 200.671256][ T7754] ? vtime_user_exit+0x2dc/0x400 [ 200.676354][ T7754] __x64_sys_bpf+0x78/0x90 [ 200.681253][ T7754] do_syscall_64+0x4c/0xa0 [ 200.685724][ T7754] ? clear_bhb_loop+0x30/0x80 [ 200.690438][ T7754] ? clear_bhb_loop+0x30/0x80 [ 200.695239][ T7754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 200.701182][ T7754] RIP: 0033:0x7fbe87d94b69 [ 200.705716][ T7754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.725549][ T7754] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.734101][ T7754] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 200.742296][ T7754] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 200.750322][ T7754] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 200.758420][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.766426][ T7754] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 200.774623][ T7754] [ 200.791721][ T7754] syz.0.1282: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 200.861608][ T7754] CPU: 1 PID: 7754 Comm: syz.0.1282 Not tainted 5.15.189-syzkaller #0 [ 200.869832][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.879917][ T7754] Call Trace: [ 200.883225][ T7754] [ 200.886183][ T7754] dump_stack_lvl+0x168/0x230 [ 200.890978][ T7754] ? rcu_lock_release+0x5/0x20 [ 200.895773][ T7754] ? show_regs_print_info+0x20/0x20 [ 200.901015][ T7754] ? load_image+0x3b0/0x3b0 [ 200.905592][ T7754] warn_alloc+0x20e/0x2f0 [ 200.909970][ T7754] ? zone_watermark_ok_safe+0x240/0x240 [ 200.915594][ T7754] ? __get_vm_area_node+0x2b5/0x2d0 [ 200.920834][ T7754] __vmalloc_node_range+0x2b1/0x8b0 [ 200.926070][ T7754] ? end_current_label_crit_section+0x170/0x170 [ 200.932352][ T7754] ? __lock_acquire+0x7c60/0x7c60 [ 200.937409][ T7754] ? __lock_acquire+0x13ad/0x7c60 [ 200.942475][ T7754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 200.948144][ T7754] __vmalloc+0x76/0x80 [ 200.952254][ T7754] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 200.957837][ T7754] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 200.963254][ T7754] bpf_prog_alloc+0x1a/0x1e0 [ 200.967887][ T7754] bpf_prog_load+0x7b3/0x1550 [ 200.972720][ T7754] ? map_freeze+0x350/0x350 [ 200.977291][ T7754] ? __might_fault+0xb7/0x110 [ 200.982018][ T7754] ? __might_fault+0xb3/0x110 [ 200.986758][ T7754] ? bpf_lsm_bpf+0x5/0x10 [ 200.991126][ T7754] ? security_bpf+0x7a/0xa0 [ 200.995670][ T7754] __sys_bpf+0x4c2/0x670 [ 200.999955][ T7754] ? bpf_link_show_fdinfo+0x340/0x340 [ 201.005626][ T7754] ? vtime_user_exit+0x2dc/0x400 [ 201.010610][ T7754] __x64_sys_bpf+0x78/0x90 [ 201.015096][ T7754] do_syscall_64+0x4c/0xa0 [ 201.019555][ T7754] ? clear_bhb_loop+0x30/0x80 [ 201.024292][ T7754] ? clear_bhb_loop+0x30/0x80 [ 201.029138][ T7754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.035166][ T7754] RIP: 0033:0x7fbe87d94b69 [ 201.039650][ T7754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.059588][ T7754] RSP: 002b:00007fbe85bfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.068180][ T7754] RAX: ffffffffffffffda RBX: 00007fbe87fbbfa0 RCX: 00007fbe87d94b69 [ 201.076341][ T7754] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 201.084464][ T7754] RBP: 00007fbe85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 201.092552][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.100549][ T7754] R13: 0000000000000000 R14: 00007fbe87fbbfa0 R15: 00007fff65959998 [ 201.108569][ T7754] [ 201.521908][ T7754] Mem-Info: [ 201.525156][ T7754] active_anon:269 inactive_anon:20813 isolated_anon:0 [ 201.525156][ T7754] active_file:17138 inactive_file:41054 isolated_file:0 [ 201.525156][ T7754] unevictable:768 dirty:387 writeback:0 [ 201.525156][ T7754] slab_reclaimable:20372 slab_unreclaimable:95439 [ 201.525156][ T7754] mapped:39749 shmem:17014 pagetables:730 bounce:0 [ 201.525156][ T7754] kernel_misc_reclaimable:0 [ 201.525156][ T7754] free:1363922 free_pcp:5700 free_cma:0 [ 201.592987][ T7770] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 201.651724][ T7754] Node 0 active_anon:1044kB inactive_anon:85044kB active_file:68352kB inactive_file:164216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159596kB dirty:1548kB writeback:0kB shmem:68280kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11720kB pagetables:2920kB all_unreclaimable? no [ 201.772138][ T7754] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 201.869764][ T7754] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.990519][ T7774] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 202.019355][ T7754] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 202.027380][ T7774] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1290'. [ 202.037273][ T7754] Node 0 DMA32 free:1515704kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1040kB inactive_anon:77736kB active_file:68352kB inactive_file:164216kB unevictable:1536kB writepending:1548kB present:3129332kB managed:2609004kB mlocked:0kB bounce:0kB free_pcp:28248kB local_pcp:9816kB free_cma:0kB [ 202.084245][ T7778] FAULT_INJECTION: forcing a failure. [ 202.084245][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 202.157210][ T7754] lowmem_reserve[]: 0 0 0 0 0 [ 202.171958][ T7778] CPU: 1 PID: 7778 Comm: syz.1.1291 Not tainted 5.15.189-syzkaller #0 [ 202.180194][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.190279][ T7778] Call Trace: [ 202.193596][ T7778] [ 202.196548][ T7778] dump_stack_lvl+0x168/0x230 [ 202.201263][ T7778] ? show_regs_print_info+0x20/0x20 [ 202.206489][ T7778] ? load_image+0x3b0/0x3b0 [ 202.211032][ T7778] ? __lock_acquire+0x12d9/0x7c60 [ 202.216093][ T7778] should_fail+0x38c/0x4c0 [ 202.220548][ T7778] should_failslab+0x5/0x20 [ 202.225160][ T7778] slab_pre_alloc_hook+0x51/0xc0 [ 202.230207][ T7778] ? skb_clone+0x1bd/0x350 [ 202.234657][ T7778] kmem_cache_alloc+0x3d/0x290 [ 202.239450][ T7778] skb_clone+0x1bd/0x350 [ 202.243818][ T7778] bpf_clone_redirect+0xa9/0x390 [ 202.248797][ T7778] bpf_prog_5e3b4e18def6d727+0x56/0xe8c [ 202.254362][ T7778] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 202.260488][ T7778] ? lock_chain_count+0x20/0x20 [ 202.265390][ T7778] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 202.271660][ T7778] ? lockdep_hardirqs_on+0x94/0x140 [ 202.276993][ T7778] ? ktime_get+0x7b/0x270 [ 202.281344][ T7778] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 202.287614][ T7778] ? ktime_get_real_ts64+0x420/0x420 [ 202.293002][ T7778] ? read_lock_is_recursive+0x10/0x10 [ 202.298434][ T7778] bpf_test_run+0x498/0x7d0 [ 202.302986][ T7778] ? convert___skb_to_skb+0x4c0/0x4c0 [ 202.308399][ T7778] ? eth_get_headlen+0x1f0/0x1f0 [ 202.313446][ T7778] ? __build_skb+0x1e2/0x2e0 [ 202.318058][ T7778] ? convert___skb_to_skb+0x3d/0x4c0 [ 202.323374][ T7778] bpf_prog_test_run_skb+0x9cc/0x1180 [ 202.328888][ T7778] ? cpu_online+0x60/0x60 [ 202.333232][ T7778] bpf_prog_test_run+0x31e/0x390 [ 202.338192][ T7778] __sys_bpf+0x535/0x670 [ 202.342465][ T7778] ? bpf_link_show_fdinfo+0x340/0x340 [ 202.347874][ T7778] ? vtime_user_exit+0x2dc/0x400 [ 202.352967][ T7778] __x64_sys_bpf+0x78/0x90 [ 202.357542][ T7778] do_syscall_64+0x4c/0xa0 [ 202.362001][ T7778] ? clear_bhb_loop+0x30/0x80 [ 202.366797][ T7778] ? clear_bhb_loop+0x30/0x80 [ 202.371582][ T7778] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.377498][ T7778] RIP: 0033:0x7fea2a1a3b69 [ 202.381932][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.401750][ T7778] RSP: 002b:00007fea2800b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.410190][ T7778] RAX: ffffffffffffffda RBX: 00007fea2a3cafa0 RCX: 00007fea2a1a3b69 [ 202.418306][ T7778] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 202.426318][ T7778] RBP: 00007fea2800b090 R08: 0000000000000000 R09: 0000000000000000 [ 202.434333][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.442424][ T7778] R13: 0000000000000000 R14: 00007fea2a3cafa0 R15: 00007fff076e71f8 [ 202.450450][ T7778] [ 202.456656][ T7754] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.564705][ T7754] lowmem_reserve[]: 0 0 0 0 0 [ 202.569622][ T7754] Node 1 Normal free:3921096kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4452kB local_pcp:3268kB free_cma:0kB [ 202.655983][ T7754] lowmem_reserve[]: 0 0 0 0 0 [ 202.668003][ T7754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 202.698246][ T7754] Node 0 DMA32: 318*4kB (UM) 312*8kB (UE) 86*16kB (UE) 559*32kB (UE) 185*64kB (UME) 99*128kB (UM) 40*256kB (UME) 9*512kB (UM) 1*1024kB (U) 1*2048kB (E) 354*4096kB (M) = 1515448kB [ 202.736603][ T7754] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 202.761926][ T7754] Node 1 Normal: 196*4kB (UME) 47*8kB (UME) 26*16kB (UME) 139*32kB (UME) 73*64kB (UME) 28*128kB (UE) 13*256kB (UM) 4*512kB (UE) 0*1024kB 1*2048kB (M) 952*4096kB (M) = 3921096kB [ 202.804222][ T7754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.824024][ T7754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.843768][ T7754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.863807][ T7754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.885014][ T7754] 71990 total pagecache pages [ 202.895672][ T7754] 0 pages in swap cache [ 202.901578][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 202.914916][ T7754] Swap cache stats: add 0, delete 0, find 0/0 [ 202.930105][ T7754] Free swap = 124996kB [ 202.938974][ T7754] Total swap = 124996kB [ 202.947910][ T7754] 2097051 pages RAM [ 202.956421][ T7754] 0 pages HighMem/MovableOnly [ 202.966849][ T7754] 410813 pages reserved [ 202.976056][ T7754] 0 pages cma reserved [ 203.274204][ T7791] FAULT_INJECTION: forcing a failure. [ 203.274204][ T7791] name failslab, interval 1, probability 0, space 0, times 0 [ 203.331879][ T7791] CPU: 1 PID: 7791 Comm: syz.3.1298 Not tainted 5.15.189-syzkaller #0 [ 203.340107][ T7791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.350202][ T7791] Call Trace: [ 203.353510][ T7791] [ 203.356465][ T7791] dump_stack_lvl+0x168/0x230 [ 203.361310][ T7791] ? show_regs_print_info+0x20/0x20 [ 203.366561][ T7791] ? load_image+0x3b0/0x3b0 [ 203.371139][ T7791] ? __might_sleep+0xf0/0xf0 [ 203.375786][ T7791] ? __lock_acquire+0x7c60/0x7c60 [ 203.380856][ T7791] should_fail+0x38c/0x4c0 [ 203.385317][ T7791] should_failslab+0x5/0x20 [ 203.389862][ T7791] slab_pre_alloc_hook+0x51/0xc0 [ 203.394857][ T7791] __kmalloc_node_track_caller+0x68/0x3a0 [ 203.400738][ T7791] ? ovs_ct_limit_cmd_set+0xf7/0xae0 [ 203.406204][ T7791] ? kmem_cache_alloc_node+0x162/0x2d0 [ 203.411694][ T7791] ? __alloc_skb+0xf4/0x750 [ 203.416328][ T7791] ? ovs_ct_limit_cmd_set+0xf7/0xae0 [ 203.421672][ T7791] __alloc_skb+0x22c/0x750 [ 203.426307][ T7791] ovs_ct_limit_cmd_set+0xf7/0xae0 [ 203.431667][ T7791] ? __nla_parse+0x3c/0x50 [ 203.436132][ T7791] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 203.442494][ T7791] ? genl_family_rcv_msg_attrs_parse+0x20a/0x290 [ 203.448853][ T7791] genl_rcv_msg+0xbc6/0xf40 [ 203.453376][ T7791] ? genl_bind+0x370/0x370 [ 203.457825][ T7791] ? verify_lock_unused+0x140/0x140 [ 203.463135][ T7791] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 203.468447][ T7791] ? dev_queue_xmit+0x20/0x20 [ 203.473251][ T7791] ? rcu_lock_release+0x20/0x20 [ 203.478131][ T7791] netlink_rcv_skb+0x1e0/0x430 [ 203.482911][ T7791] ? genl_bind+0x370/0x370 [ 203.487372][ T7791] ? netlink_ack+0xb60/0xb60 [ 203.491991][ T7791] ? __lock_acquire+0x7c60/0x7c60 [ 203.497033][ T7791] ? preempt_count_add+0x8d/0x190 [ 203.502071][ T7791] ? down_read+0x1aa/0x2e0 [ 203.506503][ T7791] genl_rcv+0x24/0x40 [ 203.510494][ T7791] netlink_unicast+0x774/0x920 [ 203.515378][ T7791] netlink_sendmsg+0x8ab/0xbc0 [ 203.520162][ T7791] ? netlink_getsockopt+0x560/0x560 [ 203.525374][ T7791] ? aa_sock_msg_perm+0x94/0x150 [ 203.530514][ T7791] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 203.535894][ T7791] ? security_socket_sendmsg+0x7c/0xa0 [ 203.541378][ T7791] ? netlink_getsockopt+0x560/0x560 [ 203.546593][ T7791] ____sys_sendmsg+0x5a2/0x8c0 [ 203.551393][ T7791] ? memset+0x1e/0x40 [ 203.555386][ T7791] ? __sys_sendmsg_sock+0x30/0x30 [ 203.560423][ T7791] ? import_iovec+0x6f/0xa0 [ 203.564949][ T7791] ___sys_sendmsg+0x1f0/0x260 [ 203.569643][ T7791] ? __sys_sendmsg+0x250/0x250 [ 203.574426][ T7791] ? vfs_write+0x84d/0xd00 [ 203.578869][ T7791] ? __fdget+0x18b/0x210 [ 203.583121][ T7791] __se_sys_sendmsg+0x190/0x250 [ 203.587981][ T7791] ? __x64_sys_sendmsg+0x80/0x80 [ 203.592950][ T7791] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 203.598956][ T7791] ? lockdep_hardirqs_on+0x94/0x140 [ 203.604184][ T7791] do_syscall_64+0x4c/0xa0 [ 203.608615][ T7791] ? clear_bhb_loop+0x30/0x80 [ 203.613400][ T7791] ? clear_bhb_loop+0x30/0x80 [ 203.618107][ T7791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 203.624136][ T7791] RIP: 0033:0x7f84f11b4b69 [ 203.628576][ T7791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.648379][ T7791] RSP: 002b:00007f84ef01c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.656805][ T7791] RAX: ffffffffffffffda RBX: 00007f84f13dbfa0 RCX: 00007f84f11b4b69 [ 203.664806][ T7791] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 203.672782][ T7791] RBP: 00007f84ef01c090 R08: 0000000000000000 R09: 0000000000000000 [ 203.680766][ T7791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.688969][ T7791] R13: 0000000000000000 R14: 00007f84f13dbfa0 R15: 00007fff78bba3a8 [ 203.696977][ T7791] [ 203.871665][ T1261] wlan1: Trigger new scan to find an IBSS to join [ 203.878603][ T154] wlan1: Trigger new scan to find an IBSS to join [ 203.885339][ T1272] wlan1: Trigger new scan to find an IBSS to join [ 204.207630][ T154] wlan1: Creating new IBSS network, BSSID 26:fb:72:7c:2d:53 [ 204.254807][ T7800] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 204.256555][ T1261] ------------[ cut here ]------------ [ 204.289948][ T1261] WARNING: CPU: 1 PID: 1261 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x418/0x4a0 [ 204.324332][ T1261] Modules linked in: [ 204.343189][ T1261] CPU: 1 PID: 1261 Comm: kworker/u4:4 Not tainted 5.15.189-syzkaller #0 [ 204.371238][ T1261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.398266][ T1261] Workqueue: cfg80211 cfg80211_event_work [ 204.418234][ T1261] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 204.437331][ T1261] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 51 7f 54 f8 0f 0b eb c3 e8 48 7f 54 f8 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 3a 7f 54 f8 0f 0b e9 7a fd ff ff e8 [ 204.546706][ T1261] RSP: 0018:ffffc9000575faa0 EFLAGS: 00010293 [ 204.585528][ T1261] RAX: ffffffff892344d8 RBX: dffffc0000000000 RCX: ffff8880224e1dc0 [ 204.603984][ T1261] RDX: 0000000000000000 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 204.623282][ T1261] RBP: ffffc9000575fb70 R08: dffffc0000000000 R09: fffffbfff1ff6e26 [ 204.640535][ T1261] R10: fffffbfff1ff6e26 R11: 1ffffffff1ff6e25 R12: ffff888074c3b550 [ 204.659101][ T1261] R13: 1ffff92000aebf5c R14: 000000000000001f R15: ffff888060f08c90 [ 204.676464][ T1261] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 204.695960][ T1261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.711099][ T1261] CR2: 00007fc1874e3ad8 CR3: 00000000601e9000 CR4: 00000000003506e0 [ 204.728554][ T1261] DR0: 0000200000000380 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.762475][ T1261] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 204.779743][ T1261] Call Trace: [ 204.786826][ T1261] [ 204.793292][ T1261] ? trace_rdev_return_void+0x1c0/0x1c0 [ 204.805777][ T1261] ? cfg80211_event_work+0x23/0x40 [ 204.822935][ T1261] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 204.836943][ T1261] cfg80211_process_rdev_events+0x9d/0x110 [ 204.872227][ T1261] cfg80211_event_work+0x2b/0x40 [ 204.877545][ T9] wlan1: Creating new IBSS network, BSSID 4a:82:eb:30:fc:c4 [ 204.885252][ T1261] process_one_work+0x863/0x1000 [ 204.890278][ T1261] ? worker_detach_from_pool+0x240/0x240 [ 204.942083][ T1261] ? lockdep_hardirqs_off+0x70/0x100 [ 204.947540][ T1261] ? _raw_spin_lock_irq+0xab/0xe0 [ 204.971444][ T1261] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 204.976989][ T1261] ? wq_worker_running+0x97/0x170 [ 204.991370][ T1261] worker_thread+0xaa8/0x12a0 [ 204.996190][ T1261] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 205.011370][ T1261] ? lockdep_hardirqs_on+0x94/0x140 [ 205.017248][ T1261] ? lockdep_hardirqs_on+0x94/0x140 [ 205.022579][ T1261] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 205.028805][ T1261] kthread+0x436/0x520 [ 205.051425][ T1261] ? rcu_lock_release+0x20/0x20 [ 205.056618][ T1261] ? kthread_blkcg+0xd0/0xd0 [ 205.061618][ T1261] ret_from_fork+0x1f/0x30 [ 205.066364][ T1261] [ 205.070091][ T1261] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.077487][ T1261] CPU: 1 PID: 1261 Comm: kworker/u4:4 Not tainted 5.15.189-syzkaller #0 [ 205.086049][ T1261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.096162][ T1261] Workqueue: cfg80211 cfg80211_event_work [ 205.101929][ T1261] Call Trace: [ 205.105247][ T1261] [ 205.108218][ T1261] dump_stack_lvl+0x168/0x230 [ 205.113032][ T1261] ? show_regs_print_info+0x20/0x20 [ 205.118297][ T1261] ? load_image+0x3b0/0x3b0 [ 205.122943][ T1261] panic+0x2c9/0x7f0 [ 205.126892][ T1261] ? bpf_jit_dump+0xd0/0xd0 [ 205.131444][ T1261] ? ret_from_fork+0x1f/0x30 [ 205.136117][ T1261] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 205.141863][ T1261] __warn+0x248/0x2b0 [ 205.145940][ T1261] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 205.151553][ T1261] report_bug+0x1b7/0x2e0 [ 205.156013][ T1261] handle_bug+0x3a/0x70 [ 205.160184][ T1261] exc_invalid_op+0x16/0x40 [ 205.164704][ T1261] asm_exc_invalid_op+0x16/0x20 [ 205.169759][ T1261] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 205.176025][ T1261] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 51 7f 54 f8 0f 0b eb c3 e8 48 7f 54 f8 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 3a 7f 54 f8 0f 0b e9 7a fd ff ff e8 [ 205.195647][ T1261] RSP: 0018:ffffc9000575faa0 EFLAGS: 00010293 [ 205.201728][ T1261] RAX: ffffffff892344d8 RBX: dffffc0000000000 RCX: ffff8880224e1dc0 [ 205.209716][ T1261] RDX: 0000000000000000 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 205.217713][ T1261] RBP: ffffc9000575fb70 R08: dffffc0000000000 R09: fffffbfff1ff6e26 [ 205.225828][ T1261] R10: fffffbfff1ff6e26 R11: 1ffffffff1ff6e25 R12: ffff888074c3b550 [ 205.233828][ T1261] R13: 1ffff92000aebf5c R14: 000000000000001f R15: ffff888060f08c90 [ 205.241829][ T1261] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 205.247411][ T1261] ? trace_rdev_return_void+0x1c0/0x1c0 [ 205.253043][ T1261] ? cfg80211_event_work+0x23/0x40 [ 205.258178][ T1261] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 205.264095][ T1261] cfg80211_process_rdev_events+0x9d/0x110 [ 205.269917][ T1261] cfg80211_event_work+0x2b/0x40 [ 205.274868][ T1261] process_one_work+0x863/0x1000 [ 205.279825][ T1261] ? worker_detach_from_pool+0x240/0x240 [ 205.285559][ T1261] ? lockdep_hardirqs_off+0x70/0x100 [ 205.290878][ T1261] ? _raw_spin_lock_irq+0xab/0xe0 [ 205.296032][ T1261] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 205.301415][ T1261] ? wq_worker_running+0x97/0x170 [ 205.306457][ T1261] worker_thread+0xaa8/0x12a0 [ 205.311141][ T1261] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 205.317049][ T1261] ? lockdep_hardirqs_on+0x94/0x140 [ 205.322256][ T1261] ? lockdep_hardirqs_on+0x94/0x140 [ 205.327463][ T1261] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 205.333401][ T1261] kthread+0x436/0x520 [ 205.337483][ T1261] ? rcu_lock_release+0x20/0x20 [ 205.342338][ T1261] ? kthread_blkcg+0xd0/0xd0 [ 205.346967][ T1261] ret_from_fork+0x1f/0x30 [ 205.351402][ T1261] [ 205.354662][ T1261] Kernel Offset: disabled [ 205.359188][ T1261] Rebooting in 86400 seconds..