last executing test programs: 8.122675508s ago: executing program 2 (id=2668): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$kcm(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x2000}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) socketpair(0x22, 0x3, 0x8, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, 0x0) socket$kcm(0x29, 0x4, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8004) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) recvmsg$unix(r1, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1bc000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 7.18024901s ago: executing program 2 (id=2680): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x21, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x0, 0x0, 0x2, 0x9, 0x96, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d606234e000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000000)=r6, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 6.534090664s ago: executing program 2 (id=2689): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r0, @ANYBLOB="00000000030000000200"/28], 0x50) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x5, 0x2, 0xfa, 0xff, 0x0, 0x8, 0x800, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x140, 0x5, 0x0, 0x0, 0x3, 0xfffffff6, 0x1ff, 0x0, 0x81, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, r6, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) r7 = socket$kcm(0xa, 0x1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00ff0000000000", @ANYRES32, @ANYBLOB='l\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="c42fcba4b40c7292ad5506629f94309b1c913f4eb4b043fb6234a1bdb38a0951d9fadc3b7d29e524c709b425521bc8a7d7bbf8a941318ede48b4adb7802642be9573acc15f77"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)={r8}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e}, 0x8000) 5.302696792s ago: executing program 4 (id=2699): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x21, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x0, 0x0, 0x2, 0x9, 0x96, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x16, &(0x7f0000000200), 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40012100) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d606234e000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000000)=r6, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 5.079374646s ago: executing program 1 (id=2702): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'geneve0\x00', @multicast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) r5 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e24, 0x9, @private2, 0x8}}, 0x80, 0x0, 0x0, 0x0, 0x20}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0)=r11, 0x4) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r10, 0xa, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0]}, 0x40) setsockopt$sock_attach_bpf(r5, 0x29, 0x2f, &(0x7f0000000100), 0x120) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r4, &(0x7f00000001c0)="f29c65897d7174d5396eb68062afbb2151912b238dc6671aa3acd275c835d04ad1d6c40d50c6461b7db5c5f7ba23d67a101867be2dba3dbdd804e643314e1fd89c213949a9c4687e814e7262ea8c7d35524c237ae3455b4babc0ae7dfe2b06126ba0d7c2aa76bc43464f65e2b6e800fe8db8eb26e01d7e1cbecf2532969920fb51827f97ac8a78924b66b6301a93a136f4a307e3c218767be1debff400cb69f70814767019bbbaaf8734534fd0879308b33d1c81d58fab64ded5a171b2d6a7f901c85b86c5df98b90bfa22", &(0x7f00000002c0)=""/138}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x28) 4.715235384s ago: executing program 3 (id=2703): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xec0) r1 = getpid() r2 = gettid() r3 = syz_clone(0x800, &(0x7f0000001940)="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", 0x1000, &(0x7f0000002940), &(0x7f0000002980), &(0x7f00000029c0)="850ea44c58b8a182f75cc8987b1e718d511bf1a9cf7325cf66c38bf8737ec7575df93c9f03147d2f46f4afb35d4e3af6") sendmsg$unix(r0, &(0x7f0000002a80)={&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000002a00)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xee00}}}], 0x80, 0x4090}, 0x4844) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x31, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000080)="d59b60fa24527e382685712832d321d149a077cdc0ebc0a85d45f4a7a5f31525f707e2bd6af193a1adc28f66f3076cb96955b5b4558a492912f35a9e62d5c6ec49", &(0x7f0000000100)=""/250, &(0x7f00000002c0)="e5bf0da85e9ae2ac550f422992e45ac9c68251d6d38805b662343e4949d9f32efa705f7a588c56a38666b651c038dc8c0d5ce4aa57ace1540c4c6d34446a2f8a3ed16b807b75fe65425359a6377209141376f236d888fa5fa8ea349416ab515e9d4a0c57035277d603647b2fe6f08cafaf70e79797efb5d126d3e69d7c9f255c6c2f9f3432ae0f95c92743a3e43b60a96801c372de2ff6a74fd3fa1062c7c13b4846fe7318b9f6d1758eb5f44c13c39f42eb6c376fcacc99e213876fa2461168ce4a02247d4f9b41a32cf8924ab56c612ad38305c9e408501eea9e58b28bdbbc4bf31a8bd5cebb2577ea24cb712b5089", &(0x7f00000003c0)="1579cf2d6bb23a8a6cf9ec41d220d5716fa39a866015441f778336b04e559e918a7a0f85a142a72709fb6f5935e3c08e9a928f7082af1cea03eaca9635c225be2bc3590085573156cd812e363d2ad7783826a135941ccaefea4907b7eeae669d0f0a0fb0488e832094bb0e0ab379d06a62cb91b0efce5fa4791b9e3e39762804e32d02fd5c00c2e91e58ff0b0cf2579257461b73af9c49cea2cec349aaf7404c815ee1021f7cbeb85b75366a45fe0e81bd396b8dbd7420b50fa3bbce", 0x5, r6, 0x4}, 0x38) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) r11 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x10000000000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x113000, 0x7, 0x8, 0x3, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000200)='./file0\x00', r6, 0x4000, r4}, 0x18) 4.293531834s ago: executing program 3 (id=2704): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96d24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.163834097s ago: executing program 1 (id=2705): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x1, @mcast1, 0x4}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)="250ebf854d53c403362865ffc8f4ac7f82440030ddc3d184ec0a7971585139f78b2efdaa8fb62590", 0x28}], 0x1}, 0x12) 4.162851997s ago: executing program 4 (id=2706): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x25c56}], 0x1}, 0x3e8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x1, 0x3a0, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1800, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r5, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1851830060000000000000000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000000000850000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)}, 0x4) 4.082231939s ago: executing program 3 (id=2708): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fd00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x5c8}, 0xf7e5) write$cgroup_subtree(r1, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/170, 0x32, 0xaa, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$kcm(0x2, 0x2, 0x73) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x54b}], 0x1}, 0x0) 4.077545689s ago: executing program 1 (id=2709): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x5, 0xd, 0x4, 0x0, 0x7fffefff, 0x7a5d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x2, @perf_config_ext={0x73, 0x11}, 0x2, 0xffffffffffffffff, 0x7, 0x1, 0x7fffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) 3.800447015s ago: executing program 1 (id=2711): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x104b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92df", 0x2}], 0x1}, 0x5) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/249, 0xf9}], 0x1}, 0x40) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) sendmsg$inet(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x8000000, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.754572596s ago: executing program 4 (id=2712): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={&(0x7f00000003c0), &(0x7f0000000400)=""/51, &(0x7f0000000780)="e242ecc5de9d575166a09adb62ddb8367999b8d909e15db70ab31f6a89c12d2a0a7c3ddfcb5cc5e1cb18120ed45b34ccc27f2bafdb46980a934e908b22909d1b7bebf26e9d63adb99817478055519abbf6fca7e7201d4238ea25906ea2e1e87ae663cdc7f04c95bed53b4862ed99dd61bcbe251c3c04cf2efa9c17705f7d98a71c124f6424378a163dced142c465eeec7e1c66ca05d8def9cb02bed93dad637e70bcbaf1336671d5a3ddfe2252d81636ae0c8e8610d18a431d0713f8692f22ba8ae00ef9c4e43bcda362e4ebba9e", &(0x7f0000000880)="e28da89b55bf9f9964d7e95dbc61b956e404bda1c8f01d23e8a5cad5f0aafe4ebb8874e9d63db56a33", 0x6, r3}, 0x38) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x30, 0x0, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x17, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000007000000000000000b000000b7080000000000007b8af8ff00000000b7080000000058017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32=r3, @ANYBLOB="0000000000180000185700000c000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000000000095000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe239c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r8) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.752889856s ago: executing program 3 (id=2713): syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={&(0x7f00000003c0), &(0x7f0000000400)=""/51, &(0x7f0000000780)="e242ecc5de9d575166a09adb62ddb8367999b8d909e15db70ab31f6a89c12d2a0a7c3ddfcb5cc5e1cb18120ed45b34ccc27f2bafdb46980a934e908b22909d1b7bebf26e9d63adb99817478055519abbf6fca7e7201d4238ea25906ea2e1e87ae663cdc7f04c95bed53b4862ed99dd61bcbe251c3c04cf2efa9c17705f7d98a71c124f6424378a163dced142c465eeec7e1c66ca05d8def9cb02bed93dad637e70bcbaf1336671d5a3ddfe2252d81636ae0c8e8610d18a431d0713f8692f22ba8ae00ef9c4e43bcda362e4ebba9eabb7fa1a45113a", &(0x7f0000000880)="e28da89b55bf9f9964d7e95dbc61b956e404bda1c8f01d23e8a5cad5f0aafe4ebb8874e9d63db56a33", 0x6, r3}, 0x38) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x30, 0x0, 0x20000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x17, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000007000000000000000b000000b7080000000000007b8af8ff00000000b7080000000058017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018180000", @ANYRES32=r3, @ANYBLOB="0000000000180000185700000c000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000000000095000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe239c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r8) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.706610857s ago: executing program 0 (id=2714): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="959144e853ff06d58ac5a570b4f889240b57dd11ccb9c9f296ee3b674b5df9b3dd49d630848caa67ef92e9b681a4a1d90006e215bb8d5d4675d7e1e48600cd912059663ce6f579ac742f", @ANYRES64=0x0], 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x80000000000}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000000100)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 2.409628486s ago: executing program 2 (id=2715): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fe00fe05e8fe55a10a000700110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x5421, 0x604000000000000) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000001240)=ANY=[@ANYBLOB, @ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB], 0x50) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)}], 0x1}, 0x4000081) 691.153514ms ago: executing program 0 (id=2716): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000180800000000000000", @ANYRES32, @ANYBLOB="0000fdffffffffffffeffffffffd5f", @ANYRES16], 0x48) 622.780516ms ago: executing program 0 (id=2717): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 592.072456ms ago: executing program 2 (id=2718): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96d24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 570.203647ms ago: executing program 1 (id=2719): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) write$cgroup_subtree(r1, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/170, 0x32, 0xaa, 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000042144ba05fc89f2f59d1ab"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x54b}], 0x1}, 0x0) 517.591388ms ago: executing program 3 (id=2720): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x9, 0x3, 0x9, 0x0, 0x7, 0x20, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0xffff, 0x3ff}, 0x408, 0x8d69, 0x400, 0x6, 0xfffffffffffffffe, 0x401, 0x3855, 0x0, 0x472}, r0, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b6f800000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa1000000000000070100958dc842ffb702000008ec8a35fbfc16559f4b2a6d2a000000b703000000000000850000000800000095bbbc4028ded278ac16f69671deaa24bc0304c07c4fb4af1a3800c236db4581692c980336f67e9267176bd4c3c8d572bfd739fdd48e5064dd1bd2c3796d5bc7a3a4b7f2ab626281"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910d7a253eb8102e15b632b03078d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0xa, 0x1, 0x2, 0x0, 0x0, 0x63, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20000000, 0x0, @perf_config_ext={0x40, 0x401}, 0x0, 0x2, 0x4, 0x2, 0xad, 0x1, 0x400, 0x0, 0x6000000, 0x0, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x100) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 515.635678ms ago: executing program 4 (id=2721): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe"], 0xfe33) 457.94572ms ago: executing program 0 (id=2722): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000013c0)="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"/627, 0x273}, {&(0x7f0000000380)="b0fef28adda42f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb289", 0x61}, {&(0x7f00000004c0)="e64df5ed05", 0x5}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0, 0x2000000}, 0x0) close(r0) 371.068681ms ago: executing program 2 (id=2723): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18, r0}, 0x18) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000140)="2e6ac7a5271777975d91c6544cab5d10c75a92ff8565d12b18b0ef2688dbe9ecc39b27999263025edb40b454140ac76841a3e67ce68bf8f39132a30de1360344a386f1df11ba87502430a1", 0x4b}, {&(0x7f0000000280)="b0ef14ac857646a9c37b02583f95ed218d5d7eafa49d72aeea356a502b3a9d8828db26175d9b089fa56755dbb68f994446ffc764218b1c0368700f7cfc268fc9504792ea4316a06d48760bd86961498ff9f0aaa95a149a99a07113b9c75fc4c0b814233e397964c9791ce1ac9b9ffa82c849685f9d56048a2e1b60b1dff60c072a2ec3cbfdd7c655baa6bbdcf5fb3f632d1dda1645842c8231bfdea747e7e76970c69c56e3b6ffe3f0b4748c227961f0663a1de087f74a8fc9fd79de8a8a638825d761a7d41892", 0xc7}, {&(0x7f0000000380)="12dd723f6c43defe7a4a9b880ba566008fd55635d6a225114899565a65d48683b3a12a9790ab38d33012869994a5", 0x2e}, {&(0x7f00000003c0)="4483c59ca5fba6c1b397ff7aec4d41c2be642cf770f0d5eb7e6c5648e54fee269142c49f2b05be257ad4a11e60c1c98084d3e7322ab4603b73bb9ebeef68c747e6cc28e6", 0x44}, {&(0x7f0000000440)="e0f85b43a0b57bf6bed0ff12e98491e45859c4412e4b94024ec74bb77f496a988c86bedaf071cd33fe74029425ed7ff0780fd8ee44556d0b084bdffd0114dfd0e97e31b8a4c9ad18f7f60e79f04e", 0x4e}, {&(0x7f0000000640)="f74ae10fc2ea0033ca97559851345f4ef56d127ef82021d2dbc9748c57f17c7bfbf178605dd4d722e6858e00e967cc5834d778ac281de2a01c218367648d76e5337e98af5189b3ae274e6a2c6b34317265c23aa677876ffb36c62c9e015f46196cb003ce1f13eed56ae4786d41e1bb376685062cf02a118859be17f183aad28813b0d75580b7307d7ef1bc", 0x8b}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="50000000000000000000000007000000440c3f236401010000000004830b74e0000002ac14142e830523f38f940400000000441c3e51ac1414190000079c7f00a078b2ea05d823adc8b7000161439735a3cf7543768d00000008ffffffff00000e240000140000000000000000000000010000000400000000000000140000000000000000000000010000000200000000000000"], 0x80}, 0x48884) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) 340.711612ms ago: executing program 4 (id=2724): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xf2a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb080600017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 296.457523ms ago: executing program 0 (id=2725): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x40, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11}, 0xa) 226.165045ms ago: executing program 3 (id=2726): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x9, 0x3, 0x9, 0x0, 0x7, 0x20, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0xffff, 0x3ff}, 0x408, 0x8d69, 0x400, 0x6, 0xfffffffffffffffe, 0x401, 0x3855, 0x0, 0x472}, r0, 0x8, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x101035, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910d7a253eb8102e15b632b03078d900000000000630ac0ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0xa, 0x1, 0x2, 0x0, 0x0, 0x63, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x20000000, 0x0, @perf_config_ext={0x40, 0x401}, 0x0, 0x2, 0x4, 0x2, 0xad, 0x1, 0x400, 0x0, 0x6000000, 0x0, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x1) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x100) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 184.762695ms ago: executing program 1 (id=2727): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=0x0, @ANYBLOB="959144e853ff06d58ac5a570b4f889240b57dd11ccb9c9f296ee3b674b5df9b3dd49d630848caa67ef92e9b681a4a1d90006e215bb8d5d4675d7e1e48600cd912059663ce6f579ac742f", @ANYRES64=0x0], 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x80000000000}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000000100)}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000030000000200"/28], 0x50) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 131.269587ms ago: executing program 4 (id=2728): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r3], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value=0x600000}, 0x48) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 0s ago: executing program 0 (id=2729): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x7, 0x7, 0xa, 0x30, 0xffffffffffffffec}, @call={0x85, 0x0, 0x0, 0x4a}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x31, &(0x7f0000000240)=""/49, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x7, 0x0, 0x400}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x1, 0x1, 0xc, 0xa}], 0x10, 0x9}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7040000080000008500000095", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x300440f1) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000d80)=""/4096, 0x1000}, 0x10023) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x21, &(0x7f0000000200), 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x15, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x401, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x3, 0xa, 0x7, 0xfffffffa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000500)=r4, 0x4) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 3) [ 506.395020][ T8664] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 506.506365][ T8667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1584'. [ 506.558618][ T8671] netlink: 'syz.0.1586': attribute type 3 has an invalid length. [ 506.567490][ T8669] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1585'. [ 506.588593][ T8671] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1586'. [ 506.663809][ T9] wlan1: Creating new IBSS network, BSSID ee:a3:f8:31:8a:8d [ 506.716373][ T8677] tipc: Started in network mode [ 506.721519][ T8677] tipc: Node identity e, cluster identity 4711 [ 506.752959][ T8677] tipc: Node number set to 14 [ 506.807508][ T8680] IPv6: Can't replace route, no match found [ 506.857716][ T8681] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 507.847080][ T8687] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 508.040247][ T8692] device syzkaller0 entered promiscuous mode [ 508.119868][ T8707] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 508.254069][ T8715] netlink: 'syz.4.1603': attribute type 3 has an invalid length. [ 508.379599][ T8719] device veth0_macvtap left promiscuous mode [ 508.529323][ T8720] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 508.648708][ T8726] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 508.781519][ T8731] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 509.034082][ T8744] validate_nla: 2 callbacks suppressed [ 509.034126][ T8744] netlink: 'syz.4.1615': attribute type 3 has an invalid length. [ 509.069202][ T8741] device syzkaller0 entered promiscuous mode [ 509.095985][ T8744] __nla_validate_parse: 7 callbacks suppressed [ 509.096027][ T8744] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1615'. [ 509.400785][ T8758] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.1617'. [ 509.472956][ T8758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1617'. [ 509.579767][ T8761] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 509.627384][ T8763] netlink: 'syz.4.1621': attribute type 39 has an invalid length. [ 509.695751][ T8772] netlink: 'syz.4.1621': attribute type 2 has an invalid length. [ 509.751294][ T8772] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1621'. [ 509.754870][ T8763] device veth0_macvtap left promiscuous mode [ 509.822611][ T8775] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1625'. [ 509.877273][ T8773] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 510.064197][ T8787] netlink: 'syz.2.1629': attribute type 3 has an invalid length. [ 510.097161][ T8787] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1629'. [ 510.287896][ T8790] device syzkaller0 entered promiscuous mode [ 510.400726][ T8801] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 510.981904][ T8827] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 511.010457][ T8830] netlink: 'syz.4.1644': attribute type 3 has an invalid length. [ 511.054376][ T8830] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1644'. [ 511.063584][ T8832] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 511.092293][ T8831] netlink: 'syz.3.1645': attribute type 39 has an invalid length. [ 511.115439][ T8834] netlink: 'syz.0.1646': attribute type 11 has an invalid length. [ 511.142620][ T8831] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 511.161848][ T8834] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1646'. [ 511.172712][ T8831] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1645'. [ 511.246760][ T8836] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 511.670988][ T8840] device syzkaller0 entered promiscuous mode [ 511.700140][ T8854] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1652'. [ 511.719739][ T8854] ksmbd: Unknown IPC event: 0, ignore. [ 512.014411][ T8866] netlink: 'syz.3.1657': attribute type 3 has an invalid length. [ 512.324129][ T8878] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 512.453178][ T8884] FAULT_INJECTION: forcing a failure. [ 512.453178][ T8884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.539323][ T8884] CPU: 1 PID: 8884 Comm: syz.0.1663 Not tainted syzkaller #0 [ 512.546740][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.556971][ T8884] Call Trace: [ 512.560341][ T8884] [ 512.563267][ T8884] dump_stack_lvl+0x188/0x250 [ 512.567951][ T8884] ? show_regs_print_info+0x20/0x20 [ 512.573430][ T8884] ? load_image+0x410/0x410 [ 512.577939][ T8884] ? __lock_acquire+0x7b50/0x7b50 [ 512.582974][ T8884] should_fail+0x383/0x4b0 [ 512.587397][ T8884] _copy_to_user+0x2e/0x130 [ 512.591908][ T8884] simple_read_from_buffer+0xe3/0x150 [ 512.597288][ T8884] proc_fail_nth_read+0x1a6/0x220 [ 512.602331][ T8884] ? proc_fault_inject_write+0x310/0x310 [ 512.608076][ T8884] ? fsnotify_perm+0x254/0x560 [ 512.612861][ T8884] ? proc_fault_inject_write+0x310/0x310 [ 512.618619][ T8884] vfs_read+0x2ff/0xd50 [ 512.622784][ T8884] ? __lock_acquire+0x7b50/0x7b50 [ 512.627909][ T8884] ? kernel_read+0x1e0/0x1e0 [ 512.632520][ T8884] ? mutex_lock_nested+0x17/0x20 [ 512.637477][ T8884] ? __fdget_pos+0x2bf/0x370 [ 512.642071][ T8884] ? ksys_read+0x70/0x260 [ 512.646501][ T8884] ksys_read+0x153/0x260 [ 512.650760][ T8884] ? vfs_write+0xd70/0xd70 [ 512.655282][ T8884] ? lockdep_hardirqs_on+0x94/0x140 [ 512.660583][ T8884] do_syscall_64+0x4c/0xa0 [ 512.665010][ T8884] ? clear_bhb_loop+0x30/0x80 [ 512.669699][ T8884] ? clear_bhb_loop+0x30/0x80 [ 512.674387][ T8884] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 512.680286][ T8884] RIP: 0033:0x7f6f4733868e [ 512.684818][ T8884] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 512.704512][ T8884] RSP: 002b:00007f6f455cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.712924][ T8884] RAX: ffffffffffffffda RBX: 00007f6f455d06c0 RCX: 00007f6f4733868e [ 512.721062][ T8884] RDX: 000000000000000f RSI: 00007f6f455d00a0 RDI: 0000000000000004 [ 512.729106][ T8884] RBP: 00007f6f455d0090 R08: 0000000000000000 R09: 0000000000000000 [ 512.737165][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.745131][ T8884] R13: 00007f6f47600038 R14: 00007f6f475fffa0 R15: 00007ffc72f20708 [ 512.753150][ T8884] [ 512.786766][ T8892] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 513.153705][ T8887] device syzkaller0 entered promiscuous mode [ 513.733876][ T4255] wlan1: Trigger new scan to find an IBSS to join [ 514.694848][ T5323] wlan1: Trigger new scan to find an IBSS to join [ 516.452785][ T8918] device syzkaller0 entered promiscuous mode [ 516.506708][ T8919] __nla_validate_parse: 8 callbacks suppressed [ 516.506725][ T8919] netlink: 12030 bytes leftover after parsing attributes in process `syz.1.1671'. [ 516.529429][ T8924] bridge0: port 3(ip6gretap0) entered blocking state [ 516.550831][ T8924] bridge0: port 3(ip6gretap0) entered disabled state [ 516.582528][ T8924] device ip6gretap0 entered promiscuous mode [ 516.589853][ T8924] bridge0: port 3(ip6gretap0) entered blocking state [ 516.596856][ T8924] bridge0: port 3(ip6gretap0) entered listening state [ 516.607325][ T8929] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.737532][ T8939] validate_nla: 6 callbacks suppressed [ 516.737573][ T8939] netlink: 'syz.1.1682': attribute type 3 has an invalid length. [ 516.751539][ T8939] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1682'. [ 516.770470][ T8934] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 517.017195][ T8945] device syzkaller0 entered promiscuous mode [ 517.033448][ T8947] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 517.234368][ T8966] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 517.248544][ T8969] netlink: 12030 bytes leftover after parsing attributes in process `syz.1.1688'. [ 517.272550][ T8973] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1692'. [ 517.283186][ T8973] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1692'. [ 517.325082][ T8972] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1692'. [ 517.440520][ T8980] netlink: 'syz.3.1695': attribute type 3 has an invalid length. [ 517.458366][ T8980] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1695'. [ 517.519298][ T8986] netlink: 'syz.0.1694': attribute type 11 has an invalid length. [ 517.543421][ T8986] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1694'. [ 517.554045][ T8984] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1697'. [ 517.597331][ T8984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1697'. [ 518.215584][ T9004] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.324016][ T9006] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.544375][ T9002] device syzkaller0 entered promiscuous mode [ 518.707467][ T9032] device macsec0 entered promiscuous mode [ 518.902368][ T9025] device syzkaller0 entered promiscuous mode [ 518.939595][ T9027] device syzkaller0 entered promiscuous mode [ 519.075433][ T9049] FAULT_INJECTION: forcing a failure. [ 519.075433][ T9049] name failslab, interval 1, probability 0, space 0, times 0 [ 519.088379][ T9049] CPU: 0 PID: 9049 Comm: syz.4.1714 Not tainted syzkaller #0 [ 519.095767][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.105825][ T9049] Call Trace: [ 519.109104][ T9049] [ 519.112038][ T9049] dump_stack_lvl+0x188/0x250 [ 519.116723][ T9049] ? show_regs_print_info+0x20/0x20 [ 519.121924][ T9049] ? load_image+0x410/0x410 [ 519.126528][ T9049] ? rcu_lock_release+0x5/0x20 [ 519.131434][ T9049] should_fail+0x383/0x4b0 [ 519.135873][ T9049] should_failslab+0x5/0x20 [ 519.140380][ T9049] slab_pre_alloc_hook+0x51/0xc0 [ 519.145324][ T9049] ? __nf_conntrack_alloc+0x93/0x370 [ 519.150717][ T9049] kmem_cache_alloc+0x3d/0x280 [ 519.155580][ T9049] __nf_conntrack_alloc+0x93/0x370 [ 519.160802][ T9049] init_conntrack+0x2fd/0x1530 [ 519.165580][ T9049] ? get_l4proto+0x670/0x670 [ 519.170174][ T9049] ? early_drop+0x800/0x800 [ 519.174681][ T9049] ? nf_conntrack_find_get+0x640/0x640 [ 519.180576][ T9049] ? __siphash_unaligned+0x286/0x3d0 [ 519.186225][ T9049] nf_conntrack_in+0xd76/0x17b0 [ 519.191169][ T9049] ? nf_ct_pernet+0x240/0x240 [ 519.195878][ T9049] ? ip6t_alloc_initial_table+0x640/0x640 [ 519.201700][ T9049] ? ipv6_defrag+0x2d2/0x3a0 [ 519.206305][ T9049] ? ipv4_confirm+0x220/0x220 [ 519.211077][ T9049] nf_hook_slow+0xb9/0x200 [ 519.215516][ T9049] ? refcount_add+0x80/0x80 [ 519.220114][ T9049] NF_HOOK+0x1f2/0x390 [ 519.224190][ T9049] ? refcount_add+0x80/0x80 [ 519.228703][ T9049] ? ip6_rcv_core+0x1600/0x1600 [ 519.233652][ T9049] ? refcount_add+0x80/0x80 [ 519.238264][ T9049] ? ip6_rcv_finish_core+0x420/0x420 [ 519.243676][ T9049] __netif_receive_skb+0xcc/0x290 [ 519.248717][ T9049] ? ktime_get_with_offset+0x2d7/0x320 [ 519.254192][ T9049] netif_receive_skb+0x19e/0x700 [ 519.259146][ T9049] ? __bpf_trace_softirq+0x10/0x10 [ 519.264353][ T9049] ? netif_receive_skb_core+0x210/0x210 [ 519.269916][ T9049] tun_rx_batched+0x606/0x760 [ 519.274765][ T9049] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 519.280945][ T9049] ? local_bh_enable+0x20/0x20 [ 519.285716][ T9049] ? __local_bh_enable_ip+0x136/0x1c0 [ 519.291101][ T9049] ? read_lock_is_recursive+0x10/0x10 [ 519.296481][ T9049] ? __local_bh_enable_ip+0x136/0x1c0 [ 519.301857][ T9049] ? _local_bh_enable+0xa0/0xa0 [ 519.306730][ T9049] tun_get_user+0x25bf/0x3b40 [ 519.311422][ T9049] ? trace_event_raw_event_lock+0x250/0x250 [ 519.317329][ T9049] ? tun_ring_recv+0xc90/0xc90 [ 519.322113][ T9049] ? rcu_lock_release+0x5/0x20 [ 519.326883][ T9049] ? __lock_acquire+0x7b50/0x7b50 [ 519.331910][ T9049] ? trace_event_raw_event_lock+0x250/0x250 [ 519.337822][ T9049] tun_chr_write_iter+0x112/0x1e0 [ 519.342867][ T9049] vfs_write+0x748/0xd70 [ 519.347126][ T9049] ? file_end_write+0x250/0x250 [ 519.351997][ T9049] ? __fget_files+0x402/0x470 [ 519.356694][ T9049] ? __fdget_pos+0x1e2/0x370 [ 519.361285][ T9049] ? ksys_write+0x70/0x260 [ 519.365715][ T9049] ksys_write+0x153/0x260 [ 519.370054][ T9049] ? __ia32_sys_read+0x80/0x80 [ 519.374836][ T9049] ? trace_sys_enter+0x1f/0x80 [ 519.379608][ T9049] do_syscall_64+0x4c/0xa0 [ 519.384026][ T9049] ? clear_bhb_loop+0x30/0x80 [ 519.388797][ T9049] ? clear_bhb_loop+0x30/0x80 [ 519.393491][ T9049] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.399396][ T9049] RIP: 0033:0x7f5277da3e59 [ 519.403824][ T9049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.423440][ T9049] RSP: 002b:00007f5275ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 519.431887][ T9049] RAX: ffffffffffffffda RBX: 00007f527802bfa0 RCX: 00007f5277da3e59 [ 519.439873][ T9049] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 519.447855][ T9049] RBP: 00007f5275ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 519.455832][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.463809][ T9049] R13: 00007f527802c038 R14: 00007f527802bfa0 R15: 00007ffcc7ac1208 [ 519.471813][ T9049] [ 519.498098][ T9050] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 519.665465][ T9058] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 519.979623][ T9071] netlink: 'syz.2.1722': attribute type 11 has an invalid length. [ 520.690929][ T9076] device syzkaller0 entered promiscuous mode [ 520.858625][ T9078] device syzkaller0 entered promiscuous mode [ 521.240126][ T9093] device syzkaller0 entered promiscuous mode [ 521.251065][ T9104] netlink: 'syz.3.1730': attribute type 10 has an invalid length. [ 521.439376][ T9115] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 521.614006][ T9121] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 521.941747][ T9138] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 522.019618][ T9140] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 522.052811][ T9138] netlink: 'syz.1.1743': attribute type 9 has an invalid length. [ 522.066426][ T9138] __nla_validate_parse: 3 callbacks suppressed [ 522.066441][ T9138] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1743'. [ 522.161615][ T9133] device syzkaller0 entered promiscuous mode [ 522.496689][ T9160] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 522.667635][ T9158] device syzkaller0 entered promiscuous mode [ 523.432989][ T9193] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 523.734228][ T4282] wlan1: Trigger new scan to find an IBSS to join [ 524.242995][ T9219] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.1767'. [ 524.331393][ T9219] netlink: 'syz.1.1767': attribute type 11 has an invalid length. [ 524.377802][ T9219] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1767'. [ 524.648521][ T9231] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 524.751052][ T9242] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 524.847983][ T9245] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1778'. [ 524.947992][ T9256] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1778'. [ 524.967897][ T9247] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 525.356246][ T9269] raw_sendmsg: syz.4.1786 forgot to set AF_INET. Fix it! [ 525.389955][ T9269] netlink: 'syz.4.1786': attribute type 10 has an invalid length. [ 525.401767][ T9269] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.409862][ T9269] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.142123][ T9288] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 526.191677][ T9290] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 527.000588][ T9321] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 527.240655][ T9336] FAULT_INJECTION: forcing a failure. [ 527.240655][ T9336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.264125][ T9336] CPU: 0 PID: 9336 Comm: syz.4.1812 Not tainted syzkaller #0 [ 527.271678][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.281927][ T9336] Call Trace: [ 527.285225][ T9336] [ 527.288160][ T9336] dump_stack_lvl+0x188/0x250 [ 527.292841][ T9336] ? show_regs_print_info+0x20/0x20 [ 527.298308][ T9336] ? load_image+0x410/0x410 [ 527.302830][ T9336] ? __lock_acquire+0x7b50/0x7b50 [ 527.307866][ T9336] should_fail+0x383/0x4b0 [ 527.312409][ T9336] _copy_from_user+0x2e/0x170 [ 527.317102][ T9336] bpf_test_init+0x136/0x1b0 [ 527.321711][ T9336] bpf_prog_test_run_skb+0x181/0x1190 [ 527.327095][ T9336] ? __fget_files+0x402/0x470 [ 527.331902][ T9336] ? cpu_online+0x60/0x60 [ 527.336407][ T9336] bpf_prog_test_run+0x31c/0x390 [ 527.341356][ T9336] __sys_bpf+0x5a5/0x6f0 [ 527.345609][ T9336] ? bpf_link_show_fdinfo+0x380/0x380 [ 527.351007][ T9336] __x64_sys_bpf+0x78/0x90 [ 527.355430][ T9336] do_syscall_64+0x4c/0xa0 [ 527.359853][ T9336] ? clear_bhb_loop+0x30/0x80 [ 527.364627][ T9336] ? clear_bhb_loop+0x30/0x80 [ 527.369406][ T9336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 527.375316][ T9336] RIP: 0033:0x7f5277da3e59 [ 527.379737][ T9336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.399968][ T9336] RSP: 002b:00007f5275ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.408399][ T9336] RAX: ffffffffffffffda RBX: 00007f527802bfa0 RCX: 00007f5277da3e59 [ 527.416386][ T9336] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 527.424454][ T9336] RBP: 00007f5275ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 527.432521][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.440490][ T9336] R13: 00007f527802c038 R14: 00007f527802bfa0 R15: 00007ffcc7ac1208 [ 527.448572][ T9336] [ 527.488956][ T9339] netlink: 12030 bytes leftover after parsing attributes in process `syz.1.1813'. [ 528.180856][ T9349] netlink: 'syz.4.1817': attribute type 29 has an invalid length. [ 528.240036][ T9349] netlink: 'syz.4.1817': attribute type 29 has an invalid length. [ 528.330239][ T9356] netlink: 'syz.4.1817': attribute type 29 has an invalid length. [ 528.695901][ T9] wlan1: Trigger new scan to find an IBSS to join [ 529.025434][ T9383] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.625892][ T9395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1833'. [ 529.733779][ T4255] wlan1: Trigger new scan to find an IBSS to join [ 530.044905][ T9409] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 530.236865][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 530.294144][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 530.303523][ T9418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'. [ 530.334462][ T9415] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1839'. [ 530.359673][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 530.389236][ T9415] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1839'. [ 530.420844][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 530.439675][ T9415] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1839'. [ 530.791861][ T9437] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 530.885718][ T9437] bridge0: port 3(ip6gretap0) entered disabled state [ 530.892662][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.900045][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.058750][ T9437] bridge0: port 3(ip6gretap0) entered blocking state [ 531.065564][ T9437] bridge0: port 3(ip6gretap0) entered listening state [ 531.072518][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.079633][ T9437] bridge0: port 2(bridge_slave_1) entered listening state [ 531.087061][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.094317][ T9437] bridge0: port 1(bridge_slave_0) entered listening state [ 531.116458][ T9437] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 531.216909][ T9447] netlink: 'syz.2.1851': attribute type 2 has an invalid length. [ 531.233370][ T9447] netlink: 'syz.2.1851': attribute type 8 has an invalid length. [ 531.256336][ T9449] netlink: 'syz.2.1851': attribute type 2 has an invalid length. [ 531.280853][ T9449] netlink: 'syz.2.1851': attribute type 8 has an invalid length. [ 531.304262][ T9460] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 531.350372][ T9460] team0: Device vxcan0 is of different type [ 531.734650][ T9] wlan1: Trigger new scan to find an IBSS to join [ 532.137602][ T9485] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.251432][ T9487] netlink: 'syz.3.1864': attribute type 9 has an invalid length. [ 532.691174][ T9514] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.761751][ T9515] tap0: tun_chr_ioctl cmd 2148553947 [ 533.050780][ T9530] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 533.273683][ T9536] __nla_validate_parse: 17 callbacks suppressed [ 533.273728][ T9536] netlink: 12030 bytes leftover after parsing attributes in process `syz.0.1882'. [ 533.299175][ T9534] validate_nla: 10 callbacks suppressed [ 533.299215][ T9534] netlink: 'syz.3.1881': attribute type 2 has an invalid length. [ 533.316671][ T9534] netlink: 'syz.3.1881': attribute type 8 has an invalid length. [ 533.324875][ T9534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1881'. [ 533.356077][ T9541] netlink: 'syz.3.1881': attribute type 2 has an invalid length. [ 533.367464][ T9541] netlink: 'syz.3.1881': attribute type 8 has an invalid length. [ 533.375870][ T9541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1881'. [ 533.489440][ T9549] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 533.498137][ T9549] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1886'. [ 533.514678][ T9548] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 533.568533][ T9548] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1886'. [ 533.708091][ T9558] FAULT_INJECTION: forcing a failure. [ 533.708091][ T9558] name failslab, interval 1, probability 0, space 0, times 0 [ 533.721079][ T9558] CPU: 1 PID: 9558 Comm: syz.3.1890 Not tainted syzkaller #0 [ 533.728461][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.738683][ T9558] Call Trace: [ 533.741966][ T9558] [ 533.744886][ T9558] dump_stack_lvl+0x188/0x250 [ 533.749572][ T9558] ? show_regs_print_info+0x20/0x20 [ 533.754771][ T9558] ? load_image+0x410/0x410 [ 533.759276][ T9558] ? lookup+0x560/0x5e0 [ 533.763513][ T9558] should_fail+0x383/0x4b0 [ 533.767923][ T9558] should_failslab+0x5/0x20 [ 533.772413][ T9558] slab_pre_alloc_hook+0x51/0xc0 [ 533.777345][ T9558] ? inet_getpeer+0x553/0xc60 [ 533.782015][ T9558] kmem_cache_alloc+0x3d/0x280 [ 533.786765][ T9558] inet_getpeer+0x553/0xc60 [ 533.791347][ T9558] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 533.797057][ T9558] ? icmpv6_xrlim_allow+0x363/0x4b0 [ 533.802276][ T9558] ? inet_peer_base_init+0x100/0x100 [ 533.807573][ T9558] ? icmpv6_xrlim_allow+0x353/0x4b0 [ 533.812854][ T9558] icmpv6_xrlim_allow+0x363/0x4b0 [ 533.817868][ T9558] ? dev_put+0x60/0x60 [ 533.821925][ T9558] ? bpf_lsm_xfrm_decode_session+0x5/0x10 [ 533.827634][ T9558] icmp6_send+0xe7d/0x19a0 [ 533.832153][ T9558] ? icmpv6_push_pending_frames+0x440/0x440 [ 533.838054][ T9558] ? __lock_acquire+0x22b0/0x7b50 [ 533.843419][ T9558] ? verify_lock_unused+0x140/0x140 [ 533.848604][ T9558] ? __lock_acquire+0x1305/0x7b50 [ 533.853626][ T9558] icmpv6_param_prob+0x28/0x40 [ 533.858484][ T9558] ip6_parse_tlv+0x1d73/0x20d0 [ 533.863663][ T9558] ipv6_parse_hopopts+0x290/0x570 [ 533.868739][ T9558] ip6_rcv_core+0xf43/0x1600 [ 533.873347][ T9558] ipv6_rcv+0x6e/0xb0 [ 533.877341][ T9558] ? ip6_rcv_finish_core+0x420/0x420 [ 533.882647][ T9558] __netif_receive_skb+0xcc/0x290 [ 533.887674][ T9558] ? ktime_get_with_offset+0x2d7/0x320 [ 533.893125][ T9558] netif_receive_skb+0x19e/0x700 [ 533.898052][ T9558] ? __bpf_trace_softirq+0x10/0x10 [ 533.903164][ T9558] ? _copy_from_iter+0x5bf/0x1160 [ 533.908274][ T9558] ? netif_receive_skb_core+0x210/0x210 [ 533.913829][ T9558] tun_rx_batched+0x606/0x760 [ 533.918502][ T9558] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 533.924477][ T9558] ? local_bh_enable+0x20/0x20 [ 533.929225][ T9558] ? __local_bh_enable_ip+0x136/0x1c0 [ 533.934579][ T9558] ? read_lock_is_recursive+0x10/0x10 [ 533.939941][ T9558] ? __local_bh_enable_ip+0x136/0x1c0 [ 533.945556][ T9558] ? _local_bh_enable+0xa0/0xa0 [ 533.950571][ T9558] tun_get_user+0x25bf/0x3b40 [ 533.955244][ T9558] ? tun_ring_recv+0xc90/0xc90 [ 533.960088][ T9558] ? rcu_lock_release+0x5/0x20 [ 533.964833][ T9558] ? __lock_acquire+0x7b50/0x7b50 [ 533.969859][ T9558] tun_chr_write_iter+0x112/0x1e0 [ 533.974870][ T9558] vfs_write+0x748/0xd70 [ 533.979190][ T9558] ? file_end_write+0x250/0x250 [ 533.984040][ T9558] ? __fget_files+0x402/0x470 [ 533.988707][ T9558] ? __fdget_pos+0x1e2/0x370 [ 533.994004][ T9558] ? ksys_write+0x70/0x260 [ 533.999276][ T9558] ksys_write+0x153/0x260 [ 534.003605][ T9558] ? __ia32_sys_read+0x80/0x80 [ 534.008358][ T9558] ? lockdep_hardirqs_on+0x94/0x140 [ 534.013545][ T9558] do_syscall_64+0x4c/0xa0 [ 534.017943][ T9558] ? clear_bhb_loop+0x30/0x80 [ 534.022606][ T9558] ? clear_bhb_loop+0x30/0x80 [ 534.027355][ T9558] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.033239][ T9558] RIP: 0033:0x7f2219d9fe59 [ 534.037651][ T9558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.057252][ T9558] RSP: 002b:00007f2217ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.065653][ T9558] RAX: ffffffffffffffda RBX: 00007f221a027fa0 RCX: 00007f2219d9fe59 [ 534.073695][ T9558] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 534.081736][ T9558] RBP: 00007f2217ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 534.089784][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.097825][ T9558] R13: 00007f221a028038 R14: 00007f221a027fa0 R15: 00007ffd49777358 [ 534.105791][ T9558] [ 534.369467][ T9572] netlink: 'syz.2.1895': attribute type 7 has an invalid length. [ 534.387276][ T9577] netlink: 12030 bytes leftover after parsing attributes in process `syz.0.1896'. [ 534.393345][ T9572] netlink: 163736 bytes leftover after parsing attributes in process `syz.2.1895'. [ 534.694520][ T9] wlan1: Creating new IBSS network, BSSID 56:eb:d8:64:94:8e [ 534.745684][ T9586] netlink: 'syz.0.1899': attribute type 2 has an invalid length. [ 534.757128][ T9586] netlink: 'syz.0.1899': attribute type 8 has an invalid length. [ 534.769812][ T9594] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 534.783374][ T4282] wlan1: Trigger new scan to find an IBSS to join [ 534.783850][ T9586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1899'. [ 534.806563][ T9594] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1902'. [ 534.824196][ T9594] openvswitch: netlink: Flow key attr not present in new flow. [ 534.875680][ T9597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1899'. [ 534.961346][ T9601] FAULT_INJECTION: forcing a failure. [ 534.961346][ T9601] name failslab, interval 1, probability 0, space 0, times 0 [ 535.014607][ T9601] CPU: 0 PID: 9601 Comm: syz.1.1904 Not tainted syzkaller #0 [ 535.022025][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.032088][ T9601] Call Trace: [ 535.035378][ T9601] [ 535.038307][ T9601] dump_stack_lvl+0x188/0x250 [ 535.042997][ T9601] ? show_regs_print_info+0x20/0x20 [ 535.048196][ T9601] ? load_image+0x410/0x410 [ 535.052704][ T9601] ? __might_sleep+0xf0/0xf0 [ 535.057474][ T9601] ? __lock_acquire+0x7b50/0x7b50 [ 535.062502][ T9601] should_fail+0x383/0x4b0 [ 535.066927][ T9601] should_failslab+0x5/0x20 [ 535.071519][ T9601] slab_pre_alloc_hook+0x51/0xc0 [ 535.076571][ T9601] kmem_cache_alloc_trace+0x47/0x290 [ 535.081991][ T9601] ? __request_module+0x300/0x980 [ 535.087111][ T9601] __request_module+0x300/0x980 [ 535.092238][ T9601] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 535.097091][ T9601] ? umd_cleanup+0x110/0x110 [ 535.101674][ T9601] ? aa_get_newest_label+0xf5/0x5a0 [ 535.106869][ T9601] ? end_current_label_crit_section+0x170/0x170 [ 535.113111][ T9601] ? apparmor_capable+0x12c/0x190 [ 535.118220][ T9601] ? bpf_lsm_capable+0x5/0x10 [ 535.122892][ T9601] ? security_capable+0x85/0xb0 [ 535.127746][ T9601] ? capable+0x84/0xe0 [ 535.131985][ T9601] dev_ioctl+0x52f/0xe30 [ 535.136245][ T9601] ? _copy_from_user+0x111/0x170 [ 535.141192][ T9601] sock_do_ioctl+0x245/0x320 [ 535.145792][ T9601] ? sock_show_fdinfo+0xb0/0xb0 [ 535.150662][ T9601] sock_ioctl+0x48a/0x700 [ 535.155000][ T9601] ? sock_poll+0x420/0x420 [ 535.159431][ T9601] ? bpf_lsm_file_ioctl+0x5/0x10 [ 535.164372][ T9601] ? security_file_ioctl+0x7c/0xa0 [ 535.169479][ T9601] ? sock_poll+0x420/0x420 [ 535.173892][ T9601] __se_sys_ioctl+0xfa/0x170 [ 535.178501][ T9601] do_syscall_64+0x4c/0xa0 [ 535.182917][ T9601] ? clear_bhb_loop+0x30/0x80 [ 535.187587][ T9601] ? clear_bhb_loop+0x30/0x80 [ 535.192251][ T9601] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.198129][ T9601] RIP: 0033:0x7f4ec3e3ce59 [ 535.202669][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.222275][ T9601] RSP: 002b:00007f4ec2095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.230683][ T9601] RAX: ffffffffffffffda RBX: 00007f4ec40c4fa0 RCX: 00007f4ec3e3ce59 [ 535.238735][ T9601] RDX: 0000200000000080 RSI: 0000000000008930 RDI: 0000000000000004 [ 535.246700][ T9601] RBP: 00007f4ec2095090 R08: 0000000000000000 R09: 0000000000000000 [ 535.254673][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.262631][ T9601] R13: 00007f4ec40c5038 R14: 00007f4ec40c4fa0 R15: 00007fff4749b9e8 [ 535.270686][ T9601] [ 535.994287][ T9641] device ipvlan1 entered promiscuous mode [ 535.996557][ T9642] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 536.007604][ T9642] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 536.013145][ T9641] bridge0: port 4(ipvlan1) entered blocking state [ 536.062210][ T9641] bridge0: port 4(ipvlan1) entered disabled state [ 536.082261][ T9641] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 538.154033][ T9721] device hsr_slave_0 left promiscuous mode [ 538.173517][ T9721] device hsr_slave_1 left promiscuous mode [ 538.456029][ T9727] validate_nla: 9 callbacks suppressed [ 538.456087][ T9727] netlink: 'syz.1.1952': attribute type 9 has an invalid length. [ 538.509217][ T9727] __nla_validate_parse: 12 callbacks suppressed [ 538.509265][ T9727] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1952'. [ 538.693820][ T4319] wlan1: Trigger new scan to find an IBSS to join [ 538.701844][ T9741] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 538.770178][ T9745] netlink: 'syz.2.1959': attribute type 29 has an invalid length. [ 538.797460][ T9745] netlink: 'syz.2.1959': attribute type 29 has an invalid length. [ 538.851473][ T9746] netlink: 'syz.2.1959': attribute type 29 has an invalid length. [ 538.881135][ T9745] netlink: 'syz.2.1959': attribute type 4 has an invalid length. [ 538.889404][ T9745] netlink: 205320 bytes leftover after parsing attributes in process `syz.2.1959'. [ 538.918833][ T9748] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 538.925657][ T9748] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 539.542082][ T9770] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.1966'. [ 539.585336][ T9769] device syzkaller0 entered promiscuous mode [ 539.697307][ T4255] wlan1: Creating new IBSS network, BSSID 4a:36:6e:cd:b7:78 [ 539.924448][ T9780] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 539.950699][ T9782] netlink: 'syz.4.1973': attribute type 29 has an invalid length. [ 539.993982][ T9782] netlink: 'syz.4.1973': attribute type 29 has an invalid length. [ 540.032179][ T9782] netlink: 'syz.4.1973': attribute type 29 has an invalid length. [ 540.120962][ T9782] netlink: 'syz.4.1973': attribute type 4 has an invalid length. [ 540.170363][ T9782] netlink: 205184 bytes leftover after parsing attributes in process `syz.4.1973'. [ 540.491743][ T9798] netlink: 'syz.2.1979': attribute type 4 has an invalid length. [ 540.533073][ T9798] netlink: 163168 bytes leftover after parsing attributes in process `syz.2.1979'. [ 540.655330][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.672508][ T9807] device syzkaller0 entered promiscuous mode [ 540.687836][ T9805] netlink: 12030 bytes leftover after parsing attributes in process `syz.3.1981'. [ 540.832174][ T9809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1983'. [ 540.948023][ T9817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.970764][ T9814] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 541.176819][ T9823] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 541.442265][ T9828] netlink: 205184 bytes leftover after parsing attributes in process `syz.3.1990'. [ 541.892220][ T9844] device syzkaller0 entered promiscuous mode [ 541.957279][ T9848] FAULT_INJECTION: forcing a failure. [ 541.957279][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 541.980260][ T9848] CPU: 0 PID: 9848 Comm: syz.3.1999 Not tainted syzkaller #0 [ 541.987683][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.997747][ T9848] Call Trace: [ 542.001134][ T9848] [ 542.004075][ T9848] dump_stack_lvl+0x188/0x250 [ 542.008771][ T9848] ? show_regs_print_info+0x20/0x20 [ 542.013979][ T9848] ? load_image+0x410/0x410 [ 542.018501][ T9848] ? __might_sleep+0xf0/0xf0 [ 542.023100][ T9848] ? __lock_acquire+0x7b50/0x7b50 [ 542.028136][ T9848] should_fail+0x383/0x4b0 [ 542.032650][ T9848] should_failslab+0x5/0x20 [ 542.037254][ T9848] slab_pre_alloc_hook+0x51/0xc0 [ 542.042292][ T9848] kmem_cache_alloc_trace+0x47/0x290 [ 542.047575][ T9848] ? __request_module+0x300/0x980 [ 542.052678][ T9848] __request_module+0x300/0x980 [ 542.057597][ T9848] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 542.062524][ T9848] ? umd_cleanup+0x110/0x110 [ 542.067096][ T9848] ? aa_get_newest_label+0xf5/0x5a0 [ 542.072301][ T9848] ? end_current_label_crit_section+0x170/0x170 [ 542.078544][ T9848] ? apparmor_capable+0x12c/0x190 [ 542.083638][ T9848] ? bpf_lsm_capable+0x5/0x10 [ 542.088302][ T9848] ? security_capable+0x85/0xb0 [ 542.093155][ T9848] ? capable+0x84/0xe0 [ 542.097214][ T9848] dev_ioctl+0x444/0xe30 [ 542.101440][ T9848] ? _copy_from_user+0x111/0x170 [ 542.106454][ T9848] sock_do_ioctl+0x245/0x320 [ 542.111119][ T9848] ? sock_show_fdinfo+0xb0/0xb0 [ 542.116045][ T9848] sock_ioctl+0x48a/0x700 [ 542.120367][ T9848] ? sock_poll+0x420/0x420 [ 542.124857][ T9848] ? bpf_lsm_file_ioctl+0x5/0x10 [ 542.129863][ T9848] ? security_file_ioctl+0x7c/0xa0 [ 542.135066][ T9848] ? sock_poll+0x420/0x420 [ 542.139464][ T9848] __se_sys_ioctl+0xfa/0x170 [ 542.144044][ T9848] do_syscall_64+0x4c/0xa0 [ 542.148451][ T9848] ? clear_bhb_loop+0x30/0x80 [ 542.153112][ T9848] ? clear_bhb_loop+0x30/0x80 [ 542.157770][ T9848] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 542.163650][ T9848] RIP: 0033:0x7f2219d9fe59 [ 542.168174][ T9848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.188944][ T9848] RSP: 002b:00007f2217ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.197367][ T9848] RAX: ffffffffffffffda RBX: 00007f221a027fa0 RCX: 00007f2219d9fe59 [ 542.205418][ T9848] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002f [ 542.213382][ T9848] RBP: 00007f2217ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 542.221534][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.229603][ T9848] R13: 00007f221a028038 R14: 00007f221a027fa0 R15: 00007ffd49777358 [ 542.237681][ T9848] [ 542.556357][ T9858] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2002'. [ 542.939036][ T9867] device syzkaller0 entered promiscuous mode [ 543.183844][ T9870] netlink: 205320 bytes leftover after parsing attributes in process `syz.1.2005'. [ 543.345158][ T9883] device syzkaller0 entered promiscuous mode [ 543.470510][ T9889] validate_nla: 12 callbacks suppressed [ 543.470528][ T9889] netlink: 'syz.2.2012': attribute type 9 has an invalid length. [ 543.576686][ T9889] __nla_validate_parse: 2 callbacks suppressed [ 543.576703][ T9889] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2012'. [ 543.734798][ T4282] wlan1: Trigger new scan to find an IBSS to join [ 543.819053][ T9895] sctp: [Deprecated]: syz.4.2018 (pid 9895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.819053][ T9895] Use struct sctp_sack_info instead [ 544.006352][ T9908] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 544.388464][ T9918] device syzkaller0 entered promiscuous mode [ 544.860176][ T9930] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2032'. [ 544.887087][ T9929] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2031'. [ 545.131742][ T9942] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 545.537730][ T9949] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 545.551510][ T9955] netlink: 15866 bytes leftover after parsing attributes in process `syz.4.2041'. [ 545.565390][ T9951] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 545.676118][ T9959] device syzkaller0 entered promiscuous mode [ 545.942971][ T9973] netlink: 'syz.4.2045': attribute type 9 has an invalid length. [ 545.971217][ T9973] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2045'. [ 546.026093][ T9974] netlink: 147988 bytes leftover after parsing attributes in process `syz.1.2044'. [ 546.134468][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 546.141958][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 546.149124][ C1] bridge0: port 3(ip6gretap0) entered learning state [ 546.423956][ T9987] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2052'. [ 546.661002][ T9996] netlink: 'syz.1.2056': attribute type 3 has an invalid length. [ 546.722930][ T9996] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2056'. [ 547.133629][T10016] netlink: 13822 bytes leftover after parsing attributes in process `syz.0.2060'. [ 547.162816][T10012] netlink: 'syz.3.2059': attribute type 3 has an invalid length. [ 547.250744][T10015] netlink: 'syz.3.2059': attribute type 9 has an invalid length. [ 547.301004][T10012] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2059'. [ 547.351516][T10021] device syzkaller0 entered promiscuous mode [ 547.521534][T10026] netlink: 'syz.3.2059': attribute type 9 has an invalid length. [ 547.743705][ T9] wlan1: Trigger new scan to find an IBSS to join [ 548.346504][T10045] netlink: 'syz.4.2070': attribute type 3 has an invalid length. [ 548.512672][T10054] netlink: 'syz.1.2073': attribute type 11 has an invalid length. [ 548.558039][T10054] netlink: 'syz.1.2073': attribute type 2 has an invalid length. [ 548.599912][T10054] __nla_validate_parse: 4 callbacks suppressed [ 548.599926][T10054] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.2073'. [ 548.678539][T10064] netlink: 14078 bytes leftover after parsing attributes in process `syz.0.2075'. [ 548.777899][T10062] netlink: 'syz.1.2073': attribute type 11 has an invalid length. [ 548.855983][T10066] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 549.029876][T10073] netlink: 'syz.0.2078': attribute type 3 has an invalid length. [ 549.091930][T10073] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2078'. [ 549.132586][T10078] netlink: 'syz.0.2078': attribute type 9 has an invalid length. [ 549.145831][T10078] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2078'. [ 549.162458][T10080] device syzkaller0 entered promiscuous mode [ 549.171190][T10082] netlink: 'syz.1.2082': attribute type 2 has an invalid length. [ 549.204754][T10082] netlink: 'syz.1.2082': attribute type 4 has an invalid length. [ 549.212525][T10082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2082'. [ 549.513790][T10085] netlink: 'syz.0.2078': attribute type 9 has an invalid length. [ 549.535544][T10085] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2078'. [ 549.595852][T10104] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 549.812378][T10116] TCP: TCP_TX_DELAY enabled [ 549.952335][T10122] netlink: 'syz.4.2095': attribute type 2 has an invalid length. [ 549.971328][T10122] netlink: 'syz.4.2095': attribute type 8 has an invalid length. [ 549.979757][T10122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2095'. [ 550.028083][T10111] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 550.270183][T10131] device syzkaller0 entered promiscuous mode [ 550.417748][T10139] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 550.561408][T10151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2108'. [ 550.609515][T10154] FAULT_INJECTION: forcing a failure. [ 550.609515][T10154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.664198][T10154] CPU: 1 PID: 10154 Comm: syz.3.2109 Not tainted syzkaller #0 [ 550.671936][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.683225][T10154] Call Trace: [ 550.686524][T10154] [ 550.689449][T10154] dump_stack_lvl+0x188/0x250 [ 550.694210][T10154] ? show_regs_print_info+0x20/0x20 [ 550.699791][T10154] ? load_image+0x410/0x410 [ 550.704425][T10154] ? __lock_acquire+0x7b50/0x7b50 [ 550.709446][T10154] should_fail+0x383/0x4b0 [ 550.714030][T10154] _copy_from_user+0x2e/0x170 [ 550.718701][T10154] perf_copy_attr+0x167/0x820 [ 550.723481][T10154] __se_sys_perf_event_open+0xf5/0x1bb0 [ 550.729141][T10154] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 550.734878][T10154] ? lockdep_hardirqs_on+0x94/0x140 [ 550.740067][T10154] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 550.746906][T10154] do_syscall_64+0x4c/0xa0 [ 550.751504][T10154] ? clear_bhb_loop+0x30/0x80 [ 550.756270][T10154] ? clear_bhb_loop+0x30/0x80 [ 550.761050][T10154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.767057][T10154] RIP: 0033:0x7f2219d9fe59 [ 550.771560][T10154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.791335][T10154] RSP: 002b:00007f2217ff8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 550.799913][T10154] RAX: ffffffffffffffda RBX: 00007f221a027fa0 RCX: 00007f2219d9fe59 [ 550.808309][T10154] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 550.816962][T10154] RBP: 00007f2217ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 550.825197][T10154] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 550.833239][T10154] R13: 00007f221a028038 R14: 00007f221a027fa0 R15: 00007ffd49777358 [ 550.841296][T10154] [ 550.863349][ T144] wlan1: Trigger new scan to find an IBSS to join [ 550.864443][ T4258] wlan1: Trigger new scan to find an IBSS to join [ 551.515332][T10183] device syzkaller0 entered promiscuous mode [ 551.559609][T10187] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 552.608822][T10198] device veth0_vlan left promiscuous mode [ 552.635931][T10198] device veth0_vlan entered promiscuous mode [ 552.686405][T10198] team0: Device veth0_vlan failed to register rx_handler [ 552.883419][T10224] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 552.938021][T10226] FAULT_INJECTION: forcing a failure. [ 552.938021][T10226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.950148][T10221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2130'. [ 552.996566][T10226] CPU: 1 PID: 10226 Comm: syz.4.2132 Not tainted syzkaller #0 [ 553.004071][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.014128][T10226] Call Trace: [ 553.017407][T10226] [ 553.020344][T10226] dump_stack_lvl+0x188/0x250 [ 553.025381][T10226] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 553.031636][T10226] ? show_regs_print_info+0x20/0x20 [ 553.036836][T10226] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 553.043006][T10226] should_fail+0x383/0x4b0 [ 553.047427][T10226] _copy_from_user+0x2e/0x170 [ 553.052109][T10226] __sys_bpf+0x26d/0x6f0 [ 553.056348][T10226] ? bpf_link_show_fdinfo+0x380/0x380 [ 553.061941][T10226] __x64_sys_bpf+0x78/0x90 [ 553.066639][T10226] do_syscall_64+0x4c/0xa0 [ 553.071057][T10226] ? clear_bhb_loop+0x30/0x80 [ 553.075730][T10226] ? clear_bhb_loop+0x30/0x80 [ 553.080406][T10226] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 553.086295][T10226] RIP: 0033:0x7f5277da3e59 [ 553.090756][T10226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.111312][T10226] RSP: 002b:00007f5275ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.119985][T10226] RAX: ffffffffffffffda RBX: 00007f527802bfa0 RCX: 00007f5277da3e59 [ 553.128300][T10226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 553.136341][T10226] RBP: 00007f5275ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 553.144559][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.152708][T10226] R13: 00007f527802c038 R14: 00007f527802bfa0 R15: 00007ffcc7ac1208 [ 553.160710][T10226] [ 553.389455][T10239] device syzkaller0 entered promiscuous mode [ 553.399410][T10241] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 553.733427][ T4255] wlan1: Creating new IBSS network, BSSID 1a:a1:bd:ef:48:93 [ 553.745106][T10251] validate_nla: 1 callbacks suppressed [ 553.745122][T10251] netlink: 'syz.0.2140': attribute type 3 has an invalid length. [ 553.844055][T10258] netlink: 'syz.1.2143': attribute type 3 has an invalid length. [ 553.852102][T10258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2143'. [ 553.873715][T10251] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2140'. [ 553.996488][T10263] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 554.152431][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 554.228454][T10254] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 554.667540][T10287] device syzkaller0 entered promiscuous mode [ 554.985368][T10308] netlink: 'syz.3.2159': attribute type 3 has an invalid length. [ 555.028935][T10308] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2159'. [ 555.345278][T10320] device syzkaller0 entered promiscuous mode [ 555.632012][T10337] device syzkaller0 entered promiscuous mode [ 555.745033][ T4255] wlan1: Trigger new scan to find an IBSS to join [ 556.119398][T10361] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2179'. [ 556.355401][T10365] device syzkaller0 entered promiscuous mode [ 556.441043][T10373] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2185'. [ 556.487490][T10380] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2186'. [ 556.812097][T10385] device syzkaller0 entered promiscuous mode [ 557.730992][T10420] device syzkaller0 entered promiscuous mode [ 557.960001][T10432] device syzkaller0 entered promiscuous mode [ 559.437175][T10481] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 559.458155][T10484] netlink: 'syz.1.2221': attribute type 3 has an invalid length. [ 559.487155][T10484] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2221'. [ 559.493701][T10483] device syzkaller0 entered promiscuous mode [ 559.719468][T10494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2222'. [ 559.976865][T10492] device syzkaller0 entered promiscuous mode [ 560.008645][T10497] netlink: 'syz.4.2226': attribute type 39 has an invalid length. [ 560.822960][T10518] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 560.884180][T10524] netlink: 'syz.1.2235': attribute type 3 has an invalid length. [ 560.892039][T10524] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2235'. [ 560.912704][T10525] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2234'. [ 560.930738][T10522] netlink: 'syz.4.2234': attribute type 10 has an invalid length. [ 560.989448][T10522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2234'. [ 561.006562][T10522] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 561.031714][T10522] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.059261][T10522] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 561.080582][T10530] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 561.128484][T10530] netlink: 'syz.3.2237': attribute type 4 has an invalid length. [ 561.149552][T10530] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2237'. [ 561.356324][T10529] device syzkaller0 entered promiscuous mode [ 561.493315][ C1] bridge0: port 3(ip6gretap0) entered forwarding state [ 561.500237][ C1] bridge0: topology change detected, propagating [ 561.507057][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.514320][ C1] bridge0: topology change detected, propagating [ 561.520763][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.528020][ C1] bridge0: topology change detected, propagating [ 561.720503][T10547] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.812224][T10554] netlink: 'syz.1.2246': attribute type 39 has an invalid length. [ 562.466192][T10557] device syzkaller0 entered promiscuous mode [ 562.602627][T10565] device syzkaller0 entered promiscuous mode [ 562.621376][T10573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2249'. [ 562.783071][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.789698][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.918306][T10580] device syzkaller0 entered promiscuous mode [ 563.091221][T10591] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2257'. [ 563.131829][T10591] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 563.168640][T10596] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2258'. [ 563.215957][T10599] FAULT_INJECTION: forcing a failure. [ 563.215957][T10599] name failslab, interval 1, probability 0, space 0, times 0 [ 563.279742][T10599] CPU: 1 PID: 10599 Comm: syz.0.2261 Not tainted syzkaller #0 [ 563.287334][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.297575][T10599] Call Trace: [ 563.300920][T10599] [ 563.303850][T10599] dump_stack_lvl+0x188/0x250 [ 563.308634][T10599] ? show_regs_print_info+0x20/0x20 [ 563.314033][T10599] ? load_image+0x410/0x410 [ 563.318562][T10599] ? __might_sleep+0xf0/0xf0 [ 563.323177][T10599] ? __lock_acquire+0x7b50/0x7b50 [ 563.328214][T10599] ? __local_bh_enable_ip+0x136/0x1c0 [ 563.333592][T10599] should_fail+0x383/0x4b0 [ 563.338011][T10599] should_failslab+0x5/0x20 [ 563.342692][T10599] slab_pre_alloc_hook+0x51/0xc0 [ 563.347703][T10599] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 563.353670][T10599] ? __get_vm_area_node+0x119/0x2d0 [ 563.359123][T10599] __get_vm_area_node+0x119/0x2d0 [ 563.364137][T10599] __vmalloc_node_range+0xef/0x8b0 [ 563.369415][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 563.374519][T10599] ? netlink_data_ready+0x10/0x10 [ 563.380244][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 563.386212][T10599] vmalloc+0x75/0x80 [ 563.390269][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 563.395799][T10599] netlink_sendmsg+0x5ec/0xbe0 [ 563.400553][T10599] ? netlink_getsockopt+0x570/0x570 [ 563.405846][T10599] ? aa_sock_msg_perm+0x94/0x150 [ 563.410768][T10599] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 563.416049][T10599] ? security_socket_sendmsg+0x7c/0xa0 [ 563.421581][T10599] ? netlink_getsockopt+0x570/0x570 [ 563.426767][T10599] ____sys_sendmsg+0x5be/0x8f0 [ 563.431517][T10599] ? __sys_sendmsg_sock+0x30/0x30 [ 563.436529][T10599] ? import_iovec+0x6f/0xa0 [ 563.441031][T10599] ___sys_sendmsg+0x236/0x2e0 [ 563.445714][T10599] ? __sys_sendmsg+0x290/0x290 [ 563.450505][T10599] __se_sys_sendmsg+0x1b7/0x2a0 [ 563.455367][T10599] ? __x64_sys_sendmsg+0x80/0x80 [ 563.460553][T10599] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 563.466620][T10599] ? lockdep_hardirqs_on+0x94/0x140 [ 563.471809][T10599] do_syscall_64+0x4c/0xa0 [ 563.476214][T10599] ? clear_bhb_loop+0x30/0x80 [ 563.481139][T10599] ? clear_bhb_loop+0x30/0x80 [ 563.485801][T10599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 563.491678][T10599] RIP: 0033:0x7f6f47377e59 [ 563.496514][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.516982][T10599] RSP: 002b:00007f6f455d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.525584][T10599] RAX: ffffffffffffffda RBX: 00007f6f475fffa0 RCX: 00007f6f47377e59 [ 563.533577][T10599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 563.541547][T10599] RBP: 00007f6f455d0090 R08: 0000000000000000 R09: 0000000000000000 [ 563.549537][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.557503][T10599] R13: 00007f6f47600038 R14: 00007f6f475fffa0 R15: 00007ffc72f20708 [ 563.565667][T10599] [ 563.592642][T10599] syz.0.2261: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 563.653997][T10599] CPU: 0 PID: 10599 Comm: syz.0.2261 Not tainted syzkaller #0 [ 563.661502][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.671656][T10599] Call Trace: [ 563.674942][T10599] [ 563.677882][T10599] dump_stack_lvl+0x188/0x250 [ 563.682573][T10599] ? rcu_lock_release+0x5/0x20 [ 563.687531][T10599] ? show_regs_print_info+0x20/0x20 [ 563.692927][T10599] ? load_image+0x410/0x410 [ 563.697459][T10599] warn_alloc+0x245/0x320 [ 563.701806][T10599] ? zone_watermark_ok_safe+0x250/0x250 [ 563.707374][T10599] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 563.713376][T10599] ? __get_vm_area_node+0x119/0x2d0 [ 563.718690][T10599] __vmalloc_node_range+0x2b1/0x8b0 [ 563.723900][T10599] ? netlink_data_ready+0x10/0x10 [ 563.728946][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 563.733898][T10599] vmalloc+0x75/0x80 [ 563.737801][T10599] ? netlink_sendmsg+0x5ec/0xbe0 [ 563.742743][T10599] netlink_sendmsg+0x5ec/0xbe0 [ 563.747536][T10599] ? netlink_getsockopt+0x570/0x570 [ 563.752771][T10599] ? aa_sock_msg_perm+0x94/0x150 [ 563.757814][T10599] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 563.763111][T10599] ? security_socket_sendmsg+0x7c/0xa0 [ 563.768579][T10599] ? netlink_getsockopt+0x570/0x570 [ 563.773826][T10599] ____sys_sendmsg+0x5be/0x8f0 [ 563.778964][T10599] ? __sys_sendmsg_sock+0x30/0x30 [ 563.778977][T10604] netlink: 'syz.2.2263': attribute type 39 has an invalid length. [ 563.784009][T10599] ? import_iovec+0x6f/0xa0 [ 563.784038][T10599] ___sys_sendmsg+0x236/0x2e0 [ 563.784065][T10599] ? __sys_sendmsg+0x290/0x290 [ 563.784123][T10599] __se_sys_sendmsg+0x1b7/0x2a0 [ 563.784146][T10599] ? __x64_sys_sendmsg+0x80/0x80 [ 563.784163][T10599] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 563.784199][T10599] ? lockdep_hardirqs_on+0x94/0x140 [ 563.784223][T10599] do_syscall_64+0x4c/0xa0 [ 563.784239][T10599] ? clear_bhb_loop+0x30/0x80 [ 563.784255][T10599] ? clear_bhb_loop+0x30/0x80 [ 563.784274][T10599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 563.784292][T10599] RIP: 0033:0x7f6f47377e59 [ 563.784311][T10599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.784326][T10599] RSP: 002b:00007f6f455d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.784347][T10599] RAX: ffffffffffffffda RBX: 00007f6f475fffa0 RCX: 00007f6f47377e59 [ 563.784361][T10599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 563.784373][T10599] RBP: 00007f6f455d0090 R08: 0000000000000000 R09: 0000000000000000 [ 563.784385][T10599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.784396][T10599] R13: 00007f6f47600038 R14: 00007f6f475fffa0 R15: 00007ffc72f20708 [ 563.784428][T10599] [ 564.793794][T10622] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 564.923767][T10599] Mem-Info: [ 564.936602][T10599] active_anon:272 inactive_anon:9105 isolated_anon:0 [ 564.936602][T10599] active_file:24974 inactive_file:35951 isolated_file:0 [ 564.936602][T10599] unevictable:768 dirty:241 writeback:0 [ 564.936602][T10599] slab_reclaimable:20510 slab_unreclaimable:96060 [ 564.936602][T10599] mapped:29614 shmem:3580 pagetables:644 bounce:0 [ 564.936602][T10599] kernel_misc_reclaimable:0 [ 564.936602][T10599] free:1364180 free_pcp:10357 free_cma:0 [ 565.066704][T10599] Node 0 active_anon:1056kB inactive_anon:32608kB active_file:99692kB inactive_file:143804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118456kB dirty:960kB writeback:0kB shmem:9040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11272kB pagetables:2676kB all_unreclaimable? no [ 565.104879][T10623] device syzkaller0 entered promiscuous mode [ 565.125060][T10599] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 565.190375][T10630] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 565.217905][T10599] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.247597][T10599] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 565.261148][T10599] Node 0 DMA32 free:1520552kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:28108kB active_file:99692kB inactive_file:143804kB unevictable:1536kB writepending:960kB present:3129332kB managed:2606524kB mlocked:0kB bounce:0kB free_pcp:42864kB local_pcp:21640kB free_cma:0kB [ 565.291751][T10599] lowmem_reserve[]: 0 0 0 0 0 [ 565.297330][T10599] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 565.324969][T10599] lowmem_reserve[]: 0 0 0 0 0 [ 565.329736][T10599] Node 1 Normal free:3925908kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.361393][T10599] lowmem_reserve[]: 0 0 0 0 0 [ 565.366954][T10599] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 565.388802][T10599] Node 0 DMA32: 2684*4kB (UM) 1746*8kB (UME) 786*16kB (UME) 973*32kB (UME) 571*64kB (UME) 249*128kB (UME) 36*256kB (UM) 31*512kB (UME) 7*1024kB (ME) 2*2048kB (ME) 330*4096kB (M) = 1524864kB [ 565.444451][T10599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 565.486847][T10599] Node 1 Normal: 223*4kB (UME) 47*8kB (UME) 30*16kB (UME) 174*32kB (UME) 72*64kB (UME) 26*128kB (UE) 14*256kB (UME) 3*512kB (U) 0*1024kB 3*2048kB (UME) 952*4096kB (M) = 3925908kB [ 565.541232][T10599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.551352][T10599] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 565.593723][T10599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.623299][T10599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 565.653001][T10599] 62580 total pagecache pages [ 565.689706][T10646] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2274'. [ 565.713575][T10599] 0 pages in swap cache [ 565.734322][T10599] Swap cache stats: add 0, delete 0, find 0/0 [ 565.780190][T10599] Free swap = 124996kB [ 565.803309][T10599] Total swap = 124996kB [ 565.808051][T10599] 2097051 pages RAM [ 565.811859][T10599] 0 pages HighMem/MovableOnly [ 565.826829][T10599] 411497 pages reserved [ 565.832160][T10599] 0 pages cma reserved [ 566.045735][T10658] syz.0.2278[10658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.045838][T10658] syz.0.2278[10658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.120341][T10662] netlink: 'syz.4.2284': attribute type 3 has an invalid length. [ 566.172682][T10662] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2284'. [ 566.285526][T10656] netlink: 'syz.0.2278': attribute type 17 has an invalid length. [ 566.310464][T10656] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2278'. [ 566.396294][T10670] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 566.480802][T10677] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2289'. [ 566.877676][T10696] netlink: 'syz.2.2297': attribute type 21 has an invalid length. [ 566.935738][T10698] netlink: 'syz.3.2298': attribute type 3 has an invalid length. [ 566.959993][T10698] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2298'. [ 567.160940][T10705] syz.1.2301[10705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.161317][T10705] syz.1.2301[10705] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.390157][T10707] netlink: 'syz.1.2301': attribute type 17 has an invalid length. [ 567.442583][T10707] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2301'. [ 567.580228][T10718] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2306'. [ 567.633403][T10719] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.2307'. [ 567.699285][T10726] netlink: 'syz.1.2310': attribute type 3 has an invalid length. [ 567.716947][T10726] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2310'. [ 567.746999][ T4258] wlan1: Trigger new scan to find an IBSS to join [ 567.769750][T10721] device syzkaller0 entered promiscuous mode [ 568.347901][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'. [ 568.377689][T10744] FAULT_INJECTION: forcing a failure. [ 568.377689][T10744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.409510][T10744] CPU: 0 PID: 10744 Comm: syz.2.2315 Not tainted syzkaller #0 [ 568.417022][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.425609][T10746] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 568.427086][T10744] Call Trace: [ 568.427117][T10744] [ 568.442806][T10744] dump_stack_lvl+0x188/0x250 [ 568.448373][T10744] ? show_regs_print_info+0x20/0x20 [ 568.453871][T10744] ? load_image+0x410/0x410 [ 568.458508][T10744] ? __lock_acquire+0x7b50/0x7b50 [ 568.463637][T10744] should_fail+0x383/0x4b0 [ 568.468081][T10744] _copy_to_user+0x2e/0x130 [ 568.472611][T10744] simple_read_from_buffer+0xe3/0x150 [ 568.478596][T10744] proc_fail_nth_read+0x1a6/0x220 [ 568.483785][T10744] ? proc_fault_inject_write+0x310/0x310 [ 568.489414][T10744] ? fsnotify_perm+0x254/0x560 [ 568.494182][T10744] ? proc_fault_inject_write+0x310/0x310 [ 568.499802][T10744] vfs_read+0x2ff/0xd50 [ 568.504043][T10744] ? __lock_acquire+0x7b50/0x7b50 [ 568.509411][T10744] ? kernel_read+0x1e0/0x1e0 [ 568.514179][T10744] ? mutex_lock_nested+0x17/0x20 [ 568.519141][T10744] ? __fdget_pos+0x2bf/0x370 [ 568.523724][T10744] ? ksys_read+0x70/0x260 [ 568.528047][T10744] ksys_read+0x153/0x260 [ 568.532289][T10744] ? vfs_write+0xd70/0xd70 [ 568.536694][T10744] ? lockdep_hardirqs_on+0x94/0x140 [ 568.541886][T10744] do_syscall_64+0x4c/0xa0 [ 568.546462][T10744] ? clear_bhb_loop+0x30/0x80 [ 568.551122][T10744] ? clear_bhb_loop+0x30/0x80 [ 568.555782][T10744] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 568.561657][T10744] RIP: 0033:0x7fcfe235468e [ 568.566057][T10744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 568.585741][T10744] RSP: 002b:00007fcfe05ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 568.594317][T10744] RAX: ffffffffffffffda RBX: 00007fcfe05ec6c0 RCX: 00007fcfe235468e [ 568.603528][T10744] RDX: 000000000000000f RSI: 00007fcfe05ec0a0 RDI: 0000000000000004 [ 568.611852][T10744] RBP: 00007fcfe05ec090 R08: 0000000000000000 R09: 0000000000000000 [ 568.619948][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.628114][T10744] R13: 00007fcfe261c038 R14: 00007fcfe261bfa0 R15: 00007ffc73a5d648 [ 568.636203][T10744] [ 569.168664][T10773] device syzkaller0 entered promiscuous mode [ 569.300042][T10792] FAULT_INJECTION: forcing a failure. [ 569.300042][T10792] name failslab, interval 1, probability 0, space 0, times 0 [ 569.366616][T10792] CPU: 0 PID: 10792 Comm: syz.2.2334 Not tainted syzkaller #0 [ 569.374118][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 569.384176][T10792] Call Trace: [ 569.387460][T10792] [ 569.390573][T10792] dump_stack_lvl+0x188/0x250 [ 569.395352][T10792] ? show_regs_print_info+0x20/0x20 [ 569.400570][T10792] ? load_image+0x410/0x410 [ 569.405089][T10792] ? __lock_acquire+0x7b50/0x7b50 [ 569.410141][T10792] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 569.416229][T10792] should_fail+0x383/0x4b0 [ 569.420662][T10792] should_failslab+0x5/0x20 [ 569.425381][T10792] slab_pre_alloc_hook+0x51/0xc0 [ 569.430329][T10792] kmem_cache_alloc_trace+0x47/0x290 [ 569.435616][T10792] ? apparmor_sk_alloc_security+0x74/0x100 [ 569.441432][T10792] apparmor_sk_alloc_security+0x74/0x100 [ 569.447072][T10792] security_sk_alloc+0x6a/0xa0 [ 569.451935][T10792] sk_prot_alloc+0x101/0x210 [ 569.456567][T10792] ? sk_alloc+0x1d/0x310 [ 569.460816][T10792] sk_alloc+0x2f/0x310 [ 569.464887][T10792] bpf_prog_test_run_skb+0x23c/0x1190 [ 569.470267][T10792] ? bpf_prog_test_run+0x251/0x390 [ 569.475420][T10792] ? cpu_online+0x60/0x60 [ 569.479755][T10792] bpf_prog_test_run+0x31c/0x390 [ 569.484700][T10792] __sys_bpf+0x5a5/0x6f0 [ 569.488951][T10792] ? bpf_link_show_fdinfo+0x380/0x380 [ 569.494348][T10792] __x64_sys_bpf+0x78/0x90 [ 569.498768][T10792] do_syscall_64+0x4c/0xa0 [ 569.503197][T10792] ? clear_bhb_loop+0x30/0x80 [ 569.507870][T10792] ? clear_bhb_loop+0x30/0x80 [ 569.512543][T10792] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 569.518431][T10792] RIP: 0033:0x7fcfe2393e59 [ 569.522933][T10792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.542712][T10792] RSP: 002b:00007fcfe05ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.551136][T10792] RAX: ffffffffffffffda RBX: 00007fcfe261bfa0 RCX: 00007fcfe2393e59 [ 569.559102][T10792] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 569.567068][T10792] RBP: 00007fcfe05ec090 R08: 0000000000000000 R09: 0000000000000000 [ 569.575034][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.582996][T10792] R13: 00007fcfe261c038 R14: 00007fcfe261bfa0 R15: 00007ffc73a5d648 [ 569.590980][T10792] [ 570.389159][T10821] syz.2.2344[10821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.389372][T10821] syz.2.2344[10821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.701565][T10821] netlink: 'syz.2.2344': attribute type 17 has an invalid length. [ 570.736094][T10821] __nla_validate_parse: 3 callbacks suppressed [ 570.736141][T10821] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2344'. [ 571.086027][T10837] device syzkaller0 entered promiscuous mode [ 571.187294][T10853] netlink: 'syz.2.2358': attribute type 3 has an invalid length. [ 571.196761][T10853] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2358'. [ 571.711697][T10869] syz.3.2364[10869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.711956][T10869] syz.3.2364[10869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.927401][T10883] netlink: 'syz.1.2370': attribute type 3 has an invalid length. [ 572.003669][T10883] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2370'. [ 572.033827][T10888] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2371'. [ 572.139369][T10894] FAULT_INJECTION: forcing a failure. [ 572.139369][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 572.142229][ T4255] tipc: Subscription rejected, illegal request [ 572.179860][T10894] CPU: 1 PID: 10894 Comm: syz.1.2375 Not tainted syzkaller #0 [ 572.187449][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.197609][T10894] Call Trace: [ 572.200980][T10894] [ 572.203911][T10894] dump_stack_lvl+0x188/0x250 [ 572.208600][T10894] ? show_regs_print_info+0x20/0x20 [ 572.213805][T10894] ? load_image+0x410/0x410 [ 572.218401][T10894] ? __might_sleep+0xf0/0xf0 [ 572.222999][T10894] ? __lock_acquire+0x7b50/0x7b50 [ 572.228118][T10894] should_fail+0x383/0x4b0 [ 572.232544][T10894] should_failslab+0x5/0x20 [ 572.237043][T10894] slab_pre_alloc_hook+0x51/0xc0 [ 572.241980][T10894] kmem_cache_alloc_node+0x47/0x2c0 [ 572.247350][T10894] ? __alloc_skb+0xf4/0x750 [ 572.251860][T10894] __alloc_skb+0xf4/0x750 [ 572.256195][T10894] alloc_skb_with_frags+0xa7/0x720 [ 572.261500][T10894] sock_alloc_send_pskb+0x87f/0x9a0 [ 572.266890][T10894] ? verify_lock_unused+0x140/0x140 [ 572.272106][T10894] ? sock_kzfree_s+0x50/0x50 [ 572.276713][T10894] rawv6_send_hdrinc+0x2f4/0x1650 [ 572.281753][T10894] ? rcu_lock_release+0x5/0x20 [ 572.286634][T10894] ? rawv6_probe_proto_opt+0x300/0x300 [ 572.292172][T10894] rawv6_sendmsg+0x11a6/0x1710 [ 572.296975][T10894] ? compat_rawv6_ioctl+0x60/0x60 [ 572.303096][T10894] ? aa_af_perm+0x340/0x340 [ 572.307631][T10894] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 572.314777][T10894] ? sock_rps_record_flow+0x17/0x3b0 [ 572.320126][T10894] ? inet_sendmsg+0x7a/0x2a0 [ 572.324725][T10894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 572.330015][T10894] ? inet_send_prepare+0x250/0x250 [ 572.335131][T10894] ____sys_sendmsg+0x5be/0x8f0 [ 572.339920][T10894] ? __sys_sendmsg_sock+0x30/0x30 [ 572.345047][T10894] ? import_iovec+0x6f/0xa0 [ 572.349639][T10894] ___sys_sendmsg+0x236/0x2e0 [ 572.354335][T10894] ? __sys_sendmsg+0x290/0x290 [ 572.359139][T10894] __se_sys_sendmsg+0x1b7/0x2a0 [ 572.363997][T10894] ? __x64_sys_sendmsg+0x80/0x80 [ 572.368928][T10894] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 572.374923][T10894] ? lockdep_hardirqs_on+0x94/0x140 [ 572.380127][T10894] do_syscall_64+0x4c/0xa0 [ 572.384542][T10894] ? clear_bhb_loop+0x30/0x80 [ 572.389213][T10894] ? clear_bhb_loop+0x30/0x80 [ 572.393892][T10894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.399786][T10894] RIP: 0033:0x7f4ec3e3ce59 [ 572.404211][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.423908][T10894] RSP: 002b:00007f4ec2095028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.432419][T10894] RAX: ffffffffffffffda RBX: 00007f4ec40c4fa0 RCX: 00007f4ec3e3ce59 [ 572.440388][T10894] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 572.448359][T10894] RBP: 00007f4ec2095090 R08: 0000000000000000 R09: 0000000000000000 [ 572.456590][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.464563][T10894] R13: 00007f4ec40c5038 R14: 00007f4ec40c4fa0 R15: 00007fff4749b9e8 [ 572.472555][T10894] [ 572.580584][T10890] device syzkaller0 entered promiscuous mode [ 572.614965][T10900] netlink: 'syz.0.2377': attribute type 10 has an invalid length. [ 572.693373][ T144] wlan1: Trigger new scan to find an IBSS to join [ 572.933118][T10912] netlink: 'syz.4.2381': attribute type 9 has an invalid length. [ 572.951773][T10912] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2381'. [ 573.531712][T10929] netlink: 'syz.0.2386': attribute type 3 has an invalid length. [ 573.584859][T10929] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2386'. [ 573.704098][ T9] wlan1: Creating new IBSS network, BSSID 72:4f:a4:69:45:7f [ 573.947852][T10944] device syzkaller0 entered promiscuous mode [ 574.905316][T10966] netlink: 'syz.4.2401': attribute type 3 has an invalid length. [ 574.933387][T10966] netlink: 'syz.4.2401': attribute type 1 has an invalid length. [ 574.953731][T10966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2401'. [ 575.090112][T10975] FAULT_INJECTION: forcing a failure. [ 575.090112][T10975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.115082][T10976] netlink: 'syz.3.2405': attribute type 3 has an invalid length. [ 575.125420][T10976] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2405'. [ 575.143955][T10975] CPU: 0 PID: 10975 Comm: syz.1.2404 Not tainted syzkaller #0 [ 575.151450][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.161595][T10975] Call Trace: [ 575.164887][T10975] [ 575.167994][T10975] dump_stack_lvl+0x188/0x250 [ 575.173040][T10975] ? show_regs_print_info+0x20/0x20 [ 575.178333][T10975] ? load_image+0x410/0x410 [ 575.182865][T10975] ? __lock_acquire+0x7b50/0x7b50 [ 575.187978][T10975] should_fail+0x383/0x4b0 [ 575.192414][T10975] _copy_to_user+0x2e/0x130 [ 575.196926][T10975] simple_read_from_buffer+0xe3/0x150 [ 575.202312][T10975] proc_fail_nth_read+0x1a6/0x220 [ 575.207347][T10975] ? proc_fault_inject_write+0x310/0x310 [ 575.213014][T10975] ? fsnotify_perm+0x254/0x560 [ 575.217779][T10975] ? proc_fault_inject_write+0x310/0x310 [ 575.223415][T10975] vfs_read+0x2ff/0xd50 [ 575.227752][T10975] ? __lock_acquire+0x7b50/0x7b50 [ 575.233397][T10975] ? kernel_read+0x1e0/0x1e0 [ 575.238011][T10975] ? mutex_lock_nested+0x17/0x20 [ 575.243042][T10975] ? __fdget_pos+0x2bf/0x370 [ 575.247676][T10975] ? ksys_read+0x70/0x260 [ 575.252024][T10975] ksys_read+0x153/0x260 [ 575.256272][T10975] ? vfs_write+0xd70/0xd70 [ 575.260711][T10975] ? lockdep_hardirqs_on+0x94/0x140 [ 575.265915][T10975] do_syscall_64+0x4c/0xa0 [ 575.270329][T10975] ? clear_bhb_loop+0x30/0x80 [ 575.275009][T10975] ? clear_bhb_loop+0x30/0x80 [ 575.279773][T10975] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 575.285668][T10975] RIP: 0033:0x7f4ec3dfd68e [ 575.290202][T10975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 575.309809][T10975] RSP: 002b:00007f4ec2094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 575.318229][T10975] RAX: ffffffffffffffda RBX: 00007f4ec20956c0 RCX: 00007f4ec3dfd68e [ 575.326212][T10975] RDX: 000000000000000f RSI: 00007f4ec20950a0 RDI: 0000000000000005 [ 575.334186][T10975] RBP: 00007f4ec2095090 R08: 0000000000000000 R09: 0000000000000000 [ 575.342163][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.350653][T10975] R13: 00007f4ec40c5038 R14: 00007f4ec40c4fa0 R15: 00007fff4749b9e8 [ 575.358649][T10975] [ 575.725447][T10991] device syzkaller0 entered promiscuous mode [ 576.094061][T11010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2418'. [ 576.098514][T11012] netlink: 'syz.4.2419': attribute type 3 has an invalid length. [ 576.239132][T11012] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2419'. [ 576.267104][ T4255] tipc: Subscription rejected, illegal request [ 576.368329][T11021] FAULT_INJECTION: forcing a failure. [ 576.368329][T11021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.495453][T11021] CPU: 0 PID: 11021 Comm: syz.1.2424 Not tainted syzkaller #0 [ 576.502958][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.513199][T11021] Call Trace: [ 576.516482][T11021] [ 576.519419][T11021] dump_stack_lvl+0x188/0x250 [ 576.524110][T11021] ? show_regs_print_info+0x20/0x20 [ 576.529324][T11021] ? load_image+0x410/0x410 [ 576.534051][T11021] ? __lock_acquire+0x7b50/0x7b50 [ 576.539196][T11021] should_fail+0x383/0x4b0 [ 576.543638][T11021] _copy_to_user+0x2e/0x130 [ 576.548598][T11021] simple_read_from_buffer+0xe3/0x150 [ 576.553984][T11021] proc_fail_nth_read+0x1a6/0x220 [ 576.559023][T11021] ? proc_fault_inject_write+0x310/0x310 [ 576.564674][T11021] ? fsnotify_perm+0x254/0x560 [ 576.569512][T11021] ? proc_fault_inject_write+0x310/0x310 [ 576.575352][T11021] vfs_read+0x2ff/0xd50 [ 576.579519][T11021] ? __lock_acquire+0x7b50/0x7b50 [ 576.584555][T11021] ? kernel_read+0x1e0/0x1e0 [ 576.589603][T11021] ? mutex_lock_nested+0x17/0x20 [ 576.594553][T11021] ? __fdget_pos+0x2bf/0x370 [ 576.599145][T11021] ? ksys_read+0x70/0x260 [ 576.603495][T11021] ksys_read+0x153/0x260 [ 576.607747][T11021] ? vfs_write+0xd70/0xd70 [ 576.612181][T11021] ? lockdep_hardirqs_on+0x94/0x140 [ 576.617392][T11021] do_syscall_64+0x4c/0xa0 [ 576.621824][T11021] ? clear_bhb_loop+0x30/0x80 [ 576.626505][T11021] ? clear_bhb_loop+0x30/0x80 [ 576.631193][T11021] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 576.637086][T11021] RIP: 0033:0x7f4ec3dfd68e [ 576.641508][T11021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 576.661555][T11021] RSP: 002b:00007f4ec2094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 576.669985][T11021] RAX: ffffffffffffffda RBX: 00007f4ec20956c0 RCX: 00007f4ec3dfd68e [ 576.677965][T11021] RDX: 000000000000000f RSI: 00007f4ec20950a0 RDI: 0000000000000004 [ 576.685943][T11021] RBP: 00007f4ec2095090 R08: 0000000000000000 R09: 0000000000000000 [ 576.693923][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.701993][T11021] R13: 00007f4ec40c5038 R14: 00007f4ec40c4fa0 R15: 00007fff4749b9e8 [ 576.709990][T11021] [ 576.729397][T11033] netlink: 'syz.3.2429': attribute type 21 has an invalid length. [ 576.924377][T11037] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.060929][T11040] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.181599][T11052] netlink: 'syz.1.2436': attribute type 3 has an invalid length. [ 577.207968][T11054] netlink: 'syz.2.2438': attribute type 1 has an invalid length. [ 577.219141][T11052] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2436'. [ 577.244558][T11054] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2438'. [ 577.262363][T11051] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.278561][T11057] netlink: 'syz.2.2438': attribute type 2 has an invalid length. [ 577.287457][T11056] netlink: 'syz.0.2439': attribute type 10 has an invalid length. [ 577.296284][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2439'. [ 577.308232][T11056] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 577.315274][T11056] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.349310][T11059] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2450'. [ 577.373404][T11059] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 577.393327][T11056] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 577.481374][T11065] netlink: 'syz.3.2443': attribute type 9 has an invalid length. [ 577.528234][T11065] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2443'. [ 577.596724][T11072] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 580.190903][T11089] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 580.224351][T11090] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 580.342171][T11095] netlink: 'syz.2.2452': attribute type 3 has an invalid length. [ 580.377423][T11094] FAULT_INJECTION: forcing a failure. [ 580.377423][T11094] name failslab, interval 1, probability 0, space 0, times 0 [ 580.394011][T11095] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2452'. [ 580.415718][T11098] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2455'. [ 580.453045][T11094] CPU: 1 PID: 11094 Comm: syz.4.2453 Not tainted syzkaller #0 [ 580.460551][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.470608][T11094] Call Trace: [ 580.473884][T11094] [ 580.476815][T11094] dump_stack_lvl+0x188/0x250 [ 580.481503][T11094] ? show_regs_print_info+0x20/0x20 [ 580.486704][T11094] ? load_image+0x410/0x410 [ 580.491209][T11094] ? __might_sleep+0xf0/0xf0 [ 580.495884][T11094] ? __lock_acquire+0x7b50/0x7b50 [ 580.500924][T11094] should_fail+0x383/0x4b0 [ 580.505353][T11094] should_failslab+0x5/0x20 [ 580.509853][T11094] slab_pre_alloc_hook+0x51/0xc0 [ 580.514790][T11094] __kmalloc+0x6b/0x340 [ 580.519048][T11094] ? kernfs_fop_write_iter+0x14f/0x500 [ 580.524695][T11094] kernfs_fop_write_iter+0x14f/0x500 [ 580.529992][T11094] ? iov_iter_init+0xb4/0x170 [ 580.534674][T11094] vfs_write+0x748/0xd70 [ 580.538935][T11094] ? file_end_write+0x250/0x250 [ 580.543815][T11094] ? mutex_lock_nested+0x17/0x20 [ 580.548767][T11094] ? __fdget_pos+0x2bf/0x370 [ 580.553363][T11094] ? ksys_write+0x70/0x260 [ 580.557796][T11094] ksys_write+0x153/0x260 [ 580.562146][T11094] ? __ia32_sys_read+0x80/0x80 [ 580.566921][T11094] ? lockdep_hardirqs_on+0x94/0x140 [ 580.572149][T11094] do_syscall_64+0x4c/0xa0 [ 580.576678][T11094] ? clear_bhb_loop+0x30/0x80 [ 580.581366][T11094] ? clear_bhb_loop+0x30/0x80 [ 580.586052][T11094] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 580.591946][T11094] RIP: 0033:0x7f5277da3e59 [ 580.596363][T11094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.616054][T11094] RSP: 002b:00007f5275ffc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 580.624472][T11094] RAX: ffffffffffffffda RBX: 00007f527802bfa0 RCX: 00007f5277da3e59 [ 580.632617][T11094] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000009 [ 580.640582][T11094] RBP: 00007f5275ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 580.648548][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.656774][T11094] R13: 00007f527802c038 R14: 00007f527802bfa0 R15: 00007ffcc7ac1208 [ 580.664783][T11094] [ 580.693503][T11098] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 580.846939][T11106] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2458'. [ 580.936775][T11106] openvswitch: netlink: Message has 20476 unknown bytes. [ 581.021708][T11110] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 581.359311][ T4282] tipc: Subscription rejected, illegal request [ 581.360381][T11126] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 581.665302][T11136] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 581.736491][T11142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2468'. [ 582.774635][ T144] wlan1: Trigger new scan to find an IBSS to join [ 584.612573][T11148] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2469'. [ 584.622338][T11148] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 584.769602][T11154] netlink: 'syz.2.2472': attribute type 3 has an invalid length. [ 584.799752][T11154] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2472'. [ 584.949314][T11162] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 584.976047][T11168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2478'. [ 585.253609][T11180] syz.1.2483[11180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.253901][T11180] syz.1.2483[11180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.475986][T11186] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2484'. [ 585.535234][T11196] netlink: 'syz.3.2484': attribute type 3 has an invalid length. [ 585.560504][T11196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2484'. [ 585.583583][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.664042][T11181] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 585.747571][T11203] netlink: 'syz.4.2489': attribute type 3 has an invalid length. [ 585.758480][T11203] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2489'. [ 586.783548][ T4258] wlan1: Trigger new scan to find an IBSS to join [ 588.522309][ T4258] wlan1: Creating new IBSS network, BSSID 3e:c1:f3:f7:89:0e [ 588.664352][T11209] syz.4.2491[11209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.664433][T11209] syz.4.2491[11209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 588.846237][T11215] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 588.862564][T11221] netlink: 'syz.4.2497': attribute type 1 has an invalid length. [ 588.888795][T11221] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2497'. [ 588.932091][T11221] netlink: 'syz.4.2497': attribute type 1 has an invalid length. [ 588.989940][T11219] netlink: 'syz.3.2498': attribute type 9 has an invalid length. [ 589.006295][T11225] device syzkaller0 entered promiscuous mode [ 589.013665][T11219] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2498'. [ 589.693644][T11242] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 590.072233][T11263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2506'. [ 590.221599][T11259] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 590.344413][T11248] netlink: 'syz.1.2506': attribute type 3 has an invalid length. [ 590.393046][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2506'. [ 590.867275][T11284] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2516'. [ 591.344680][T11297] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 591.382145][T11299] FAULT_INJECTION: forcing a failure. [ 591.382145][T11299] name failslab, interval 1, probability 0, space 0, times 0 [ 591.572302][T11299] CPU: 1 PID: 11299 Comm: syz.1.2521 Not tainted syzkaller #0 [ 591.579809][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.589953][T11299] Call Trace: [ 591.593243][T11299] [ 591.596177][T11299] dump_stack_lvl+0x188/0x250 [ 591.600863][T11299] ? show_regs_print_info+0x20/0x20 [ 591.606072][T11299] ? load_image+0x410/0x410 [ 591.610673][T11299] ? __might_sleep+0xf0/0xf0 [ 591.615270][T11299] ? __lock_acquire+0x7b50/0x7b50 [ 591.620399][T11299] should_fail+0x383/0x4b0 [ 591.624830][T11299] should_failslab+0x5/0x20 [ 591.629336][T11299] slab_pre_alloc_hook+0x51/0xc0 [ 591.634452][T11299] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 591.640179][T11299] ? __get_vm_area_node+0x119/0x2d0 [ 591.645439][T11299] __get_vm_area_node+0x119/0x2d0 [ 591.650474][T11299] __vmalloc_node_range+0xef/0x8b0 [ 591.655604][T11299] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.661158][T11299] ? end_current_label_crit_section+0x170/0x170 [ 591.667406][T11299] ? __lock_acquire+0x7b50/0x7b50 [ 591.672445][T11299] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.678005][T11299] __vmalloc+0x76/0x80 [ 591.682080][T11299] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.687732][T11299] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 591.693116][T11299] bpf_prog_alloc+0x1a/0x1e0 [ 591.697726][T11299] bpf_prog_load+0x7d1/0x14e0 [ 591.702424][T11299] ? map_freeze+0x360/0x360 [ 591.706935][T11299] ? __might_fault+0xb7/0x110 [ 591.711810][T11299] ? __might_fault+0xb3/0x110 [ 591.716496][T11299] ? bpf_lsm_bpf+0x5/0x10 [ 591.720839][T11299] ? security_bpf+0x7a/0xa0 [ 591.725440][T11299] __sys_bpf+0x532/0x6f0 [ 591.729707][T11299] ? bpf_link_show_fdinfo+0x380/0x380 [ 591.735225][T11299] __x64_sys_bpf+0x78/0x90 [ 591.739649][T11299] do_syscall_64+0x4c/0xa0 [ 591.744345][T11299] ? clear_bhb_loop+0x30/0x80 [ 591.749031][T11299] ? clear_bhb_loop+0x30/0x80 [ 591.753732][T11299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 591.759637][T11299] RIP: 0033:0x7f4ec3e3ce59 [ 591.760556][T11302] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 591.764059][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.764077][T11299] RSP: 002b:00007f4ec2095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.764097][T11299] RAX: ffffffffffffffda RBX: 00007f4ec40c4fa0 RCX: 00007f4ec3e3ce59 [ 591.764109][T11299] RDX: 000000000000003c RSI: 000020000000e000 RDI: 0000000000000005 [ 591.764119][T11299] RBP: 00007f4ec2095090 R08: 0000000000000000 R09: 0000000000000000 [ 591.764129][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.764138][T11299] R13: 00007f4ec40c5038 R14: 00007f4ec40c4fa0 R15: 00007fff4749b9e8 [ 591.764164][T11299] [ 591.830117][T11299] syz.1.2521: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 591.889797][T11304] netlink: 170988 bytes leftover after parsing attributes in process `syz.4.2523'. [ 591.933997][T11299] CPU: 1 PID: 11299 Comm: syz.1.2521 Not tainted syzkaller #0 [ 591.940799][T11304] netlink: zone id is out of range [ 591.941524][T11299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.956875][T11299] Call Trace: [ 591.960173][T11299] [ 591.963117][T11299] dump_stack_lvl+0x188/0x250 [ 591.967812][T11299] ? rcu_lock_release+0x5/0x20 [ 591.972612][T11299] ? show_regs_print_info+0x20/0x20 [ 591.977821][T11299] ? load_image+0x410/0x410 [ 591.982349][T11299] warn_alloc+0x245/0x320 [ 591.986750][T11299] ? zone_watermark_ok_safe+0x250/0x250 [ 591.992418][T11299] ? __get_vm_area_node+0x2b5/0x2d0 [ 591.998079][T11299] __vmalloc_node_range+0x2b1/0x8b0 [ 592.003281][T11299] ? end_current_label_crit_section+0x170/0x170 [ 592.009522][T11299] ? __lock_acquire+0x7b50/0x7b50 [ 592.014643][T11299] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.020272][T11299] __vmalloc+0x76/0x80 [ 592.024434][T11299] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.029978][T11299] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 592.035524][T11299] bpf_prog_alloc+0x1a/0x1e0 [ 592.040115][T11299] bpf_prog_load+0x7d1/0x14e0 [ 592.044809][T11299] ? map_freeze+0x360/0x360 [ 592.049328][T11299] ? __might_fault+0xb7/0x110 [ 592.054027][T11299] ? __might_fault+0xb3/0x110 [ 592.058719][T11299] ? bpf_lsm_bpf+0x5/0x10 [ 592.063044][T11299] ? security_bpf+0x7a/0xa0 [ 592.067778][T11299] __sys_bpf+0x532/0x6f0 [ 592.072112][T11299] ? bpf_link_show_fdinfo+0x380/0x380 [ 592.077531][T11299] __x64_sys_bpf+0x78/0x90 [ 592.081978][T11299] do_syscall_64+0x4c/0xa0 [ 592.086385][T11299] ? clear_bhb_loop+0x30/0x80 [ 592.091067][T11299] ? clear_bhb_loop+0x30/0x80 [ 592.095738][T11299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 592.101723][T11299] RIP: 0033:0x7f4ec3e3ce59 [ 592.106136][T11299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.125734][T11299] RSP: 002b:00007f4ec2095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.134231][T11299] RAX: ffffffffffffffda RBX: 00007f4ec40c4fa0 RCX: 00007f4ec3e3ce59 [ 592.142200][T11299] RDX: 000000000000003c RSI: 000020000000e000 RDI: 0000000000000005 [ 592.150182][T11299] RBP: 00007f4ec2095090 R08: 0000000000000000 R09: 0000000000000000 [ 592.158142][T11299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.166291][T11299] R13: 00007f4ec40c5038 R14: 00007f4ec40c4fa0 R15: 00007fff4749b9e8 [ 592.174283][T11299] [ 592.191319][T11307] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 592.234147][T11299] Mem-Info: [ 592.237316][T11299] active_anon:272 inactive_anon:7119 isolated_anon:0 [ 592.237316][T11299] active_file:24990 inactive_file:35971 isolated_file:0 [ 592.237316][T11299] unevictable:768 dirty:193 writeback:0 [ 592.237316][T11299] slab_reclaimable:20393 slab_unreclaimable:94972 [ 592.237316][T11299] mapped:29671 shmem:1631 pagetables:631 bounce:0 [ 592.237316][T11299] kernel_misc_reclaimable:0 [ 592.237316][T11299] free:1368026 free_pcp:10687 free_cma:0 [ 592.261403][T11304] netlink: zone id is out of range [ 592.360730][T11299] Node 0 active_anon:1056kB inactive_anon:27964kB active_file:99756kB inactive_file:143884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118584kB dirty:768kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:2524kB all_unreclaimable? no [ 592.453477][T11299] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 592.523673][T11304] netlink: zone id is out of range [ 592.529141][T11304] netlink: zone id is out of range [ 592.543527][T11304] netlink: zone id is out of range [ 592.616775][T11299] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.717638][T11313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2526'. [ 592.728667][T11299] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 592.755082][T11299] Node 0 DMA32 free:1530076kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:27880kB active_file:99756kB inactive_file:143884kB unevictable:1536kB writepending:776kB present:3129332kB managed:2606524kB mlocked:0kB bounce:0kB free_pcp:42720kB local_pcp:21444kB free_cma:0kB [ 592.802129][T11304] netlink: zone id is out of range [ 592.815854][T11322] netlink: 'syz.2.2526': attribute type 3 has an invalid length. [ 592.833416][T11304] netlink: zone id is out of range [ 592.838726][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2526'. [ 592.857084][T11304] netlink: zone id is out of range [ 592.880171][T11304] netlink: zone id is out of range [ 592.885690][T11299] lowmem_reserve[]: 0 0 0 0 0 [ 592.890882][T11299] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 592.944873][T11304] netlink: zone id is out of range [ 592.983392][T11299] lowmem_reserve[]: 0 0 0 0 0 [ 592.988364][T11299] Node 1 Normal free:3925908kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 593.000995][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.065840][T11299] lowmem_reserve[]: 0 0 0 0 0 [ 593.081460][T11299] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 593.157566][T11299] Node 0 DMA32: 1862*4kB (UME) 1682*8kB (UME) 739*16kB (UME) 752*32kB (UME) 942*64kB (UME) 390*128kB (UME) 108*256kB (UM) 72*512kB (UME) 40*1024kB (UME) 14*2048kB (UME) 300*4096kB (UM) = 1529944kB [ 593.243680][T11299] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 593.275649][T11299] Node 1 Normal: 223*4kB (UME) 47*8kB (UME) 30*16kB (UME) 174*32kB (UME) 72*64kB (UME) 26*128kB (UE) 14*256kB (UME) 3*512kB (U) 0*1024kB 3*2048kB (UME) 952*4096kB (M) = 3925908kB [ 593.376595][T11299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.453407][T11299] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.547861][T11299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.571242][T11299] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.591166][T11299] 62592 total pagecache pages [ 593.601284][T11299] 0 pages in swap cache [ 593.610088][T11299] Swap cache stats: add 0, delete 0, find 0/0 [ 593.636771][T11299] Free swap = 124996kB [ 593.655169][T11299] Total swap = 124996kB [ 593.671773][T11299] 2097051 pages RAM [ 593.684859][T11299] 0 pages HighMem/MovableOnly [ 593.700365][T11299] 411497 pages reserved [ 593.712613][T11299] 0 pages cma reserved [ 594.156838][T11346] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.612462][T11359] device syzkaller0 entered promiscuous mode [ 595.279032][T11375] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2544'. [ 595.378788][T11381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2546'. [ 596.170594][T11402] netlink: 'syz.2.2554': attribute type 28 has an invalid length. [ 596.339679][T11418] netlink: 'syz.2.2559': attribute type 21 has an invalid length. [ 596.347852][T11418] IPv6: NLM_F_CREATE should be specified when creating new route [ 596.357118][T11418] IPv6: Can't replace route, no match found [ 596.400778][T11416] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2558'. [ 596.433066][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'. [ 596.621812][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 596.872413][T11441] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2567'. [ 596.959065][T11444] netlink: 'syz.0.2568': attribute type 29 has an invalid length. [ 596.966317][T11440] device syzkaller0 entered promiscuous mode [ 597.005097][T11446] netlink: 'syz.1.2569': attribute type 29 has an invalid length. [ 597.044793][T11434] delete_channel: no stack [ 597.049657][T11434] delete_channel: no stack [ 597.091531][T11444] netlink: 'syz.0.2568': attribute type 29 has an invalid length. [ 597.100253][T11446] netlink: 'syz.1.2569': attribute type 29 has an invalid length. [ 597.116957][T11450] netlink: 'syz.0.2568': attribute type 29 has an invalid length. [ 597.260261][T11460] netlink: 'syz.1.2573': attribute type 3 has an invalid length. [ 597.279685][T11460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2573'. [ 597.501796][T11471] net_ratelimit: 92 callbacks suppressed [ 597.501826][T11471] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 597.644530][T11478] delete_channel: no stack [ 597.749129][T11477] delete_channel: no stack [ 597.861074][T11492] netlink: 'syz.2.2587': attribute type 3 has an invalid length. [ 597.875355][T11494] FAULT_INJECTION: forcing a failure. [ 597.875355][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 597.900361][T11492] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2587'. [ 597.921219][T11494] CPU: 1 PID: 11494 Comm: syz.0.2585 Not tainted syzkaller #0 [ 597.928715][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.938925][T11494] Call Trace: [ 597.942234][T11494] [ 597.945185][T11494] dump_stack_lvl+0x188/0x250 [ 597.949889][T11494] ? show_regs_print_info+0x20/0x20 [ 597.955110][T11494] ? load_image+0x410/0x410 [ 597.959664][T11494] should_fail+0x383/0x4b0 [ 597.964200][T11494] should_failslab+0x5/0x20 [ 597.968739][T11494] slab_pre_alloc_hook+0x51/0xc0 [ 597.973697][T11494] kmem_cache_alloc_trace+0x47/0x290 [ 597.979001][T11494] ? sctp_add_bind_addr+0x89/0x350 [ 597.984414][T11494] sctp_add_bind_addr+0x89/0x350 [ 597.989394][T11494] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 597.995168][T11494] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 598.001363][T11494] ? sctp_v6_is_any+0x60/0x70 [ 598.006175][T11494] ? sctp_copy_one_addr+0x93/0x660 [ 598.011412][T11494] sctp_bind_addr_copy+0xaf/0x3c0 [ 598.016476][T11494] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 598.022957][T11494] sctp_connect_new_asoc+0x2f5/0x6a0 [ 598.028280][T11494] ? __sctp_connect+0xd80/0xd80 [ 598.033146][T11494] ? __local_bh_enable_ip+0x136/0x1c0 [ 598.038562][T11494] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 598.044310][T11494] ? security_sctp_bind_connect+0x85/0xb0 [ 598.050073][T11494] sctp_sendmsg+0x15e1/0x2940 [ 598.054811][T11494] ? sctp_getsockopt+0x8a0/0x8a0 [ 598.059779][T11494] ? aa_af_perm+0x340/0x340 [ 598.064306][T11494] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 598.071022][T11494] ? sock_rps_record_flow+0x17/0x3b0 [ 598.076345][T11494] ? inet_sendmsg+0xca/0x2a0 [ 598.081143][T11494] ? inet_send_prepare+0x250/0x250 [ 598.086294][T11494] ____sys_sendmsg+0x5be/0x8f0 [ 598.091803][T11494] ? __sys_sendmsg_sock+0x30/0x30 [ 598.096962][T11494] ? import_iovec+0x6f/0xa0 [ 598.101513][T11494] ___sys_sendmsg+0x236/0x2e0 [ 598.106697][T11494] ? __sys_sendmsg+0x290/0x290 [ 598.111833][T11494] __se_sys_sendmsg+0x1b7/0x2a0 [ 598.117152][T11494] ? __x64_sys_sendmsg+0x80/0x80 [ 598.122108][T11494] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 598.128213][T11494] ? lockdep_hardirqs_on+0x94/0x140 [ 598.133452][T11494] do_syscall_64+0x4c/0xa0 [ 598.137881][T11494] ? clear_bhb_loop+0x30/0x80 [ 598.142666][T11494] ? clear_bhb_loop+0x30/0x80 [ 598.147462][T11494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.153473][T11494] RIP: 0033:0x7f6f47377e59 [ 598.157916][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.178250][T11494] RSP: 002b:00007f6f455d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.186703][T11494] RAX: ffffffffffffffda RBX: 00007f6f475fffa0 RCX: 00007f6f47377e59 [ 598.195222][T11494] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000004 [ 598.203218][T11494] RBP: 00007f6f455d0090 R08: 0000000000000000 R09: 0000000000000000 [ 598.211421][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.219429][T11494] R13: 00007f6f47600038 R14: 00007f6f475fffa0 R15: 00007ffc72f20708 [ 598.227598][T11494] [ 598.295615][T11506] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2590'. [ 598.521664][T11510] Ÿë: port 1(gretap0) entered blocking state [ 598.581893][T11510] Ÿë: port 1(gretap0) entered disabled state [ 598.639300][T11510] device gretap0 entered promiscuous mode [ 598.850458][T11521] netlink: 'syz.1.2596': attribute type 1 has an invalid length. [ 598.893667][T11521] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2596'. [ 599.522730][T11539] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 599.747169][T11546] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 599.840941][T11553] device veth0_to_bridge entered promiscuous mode [ 599.848029][T11553] bridge0: port 3(veth0_to_bridge) entered blocking state [ 599.873435][T11553] bridge0: port 3(veth0_to_bridge) entered disabled state [ 600.819211][T11572] device syzkaller0 entered promiscuous mode [ 600.900152][T11575] __nla_validate_parse: 2 callbacks suppressed [ 600.900167][T11575] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2614'. [ 601.346662][T11593] validate_nla: 5 callbacks suppressed [ 601.346682][T11593] netlink: 'syz.2.2621': attribute type 10 has an invalid length. [ 601.480733][T11601] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 601.601127][T11604] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2624'. [ 601.631488][T11608] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2625'. [ 601.820065][T11614] netlink: 'syz.1.2627': attribute type 3 has an invalid length. [ 601.851916][T11614] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2627'. [ 602.154277][T11637] device syzkaller0 entered promiscuous mode [ 602.161797][T11633] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 603.573331][T11633] device veth1_macvtap left promiscuous mode [ 603.836267][ T9] wlan1: Trigger new scan to find an IBSS to join [ 603.871224][T11650] syz.2.2638[11650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.871486][T11650] syz.2.2638[11650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.914205][T11647] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.040754][T11657] netlink: 'syz.0.2642': attribute type 1 has an invalid length. [ 604.070395][T11660] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.084257][T11657] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2642'. [ 604.187004][T11671] netlink: 'syz.4.2647': attribute type 3 has an invalid length. [ 604.200725][T11669] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.235404][T11671] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2647'. [ 604.276198][T11672] device syzkaller0 entered promiscuous mode [ 604.437739][T11681] device syzkaller0 entered promiscuous mode [ 604.727017][T11684] delete_channel: no stack [ 604.779859][T11684] delete_channel: no stack [ 604.796823][T11692] syz.0.2654[11692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.797063][T11692] syz.0.2654[11692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.829829][T11687] device syzkaller0 entered promiscuous mode [ 605.154532][T11705] netlink: 'syz.3.2660': attribute type 3 has an invalid length. [ 605.173022][T11705] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2660'. [ 605.410155][T11710] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 605.428831][T11710] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2661'. [ 605.518741][T11720] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2664'. [ 605.565564][T11713] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 605.669102][T11720] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2664'. [ 605.701478][T11727] syz.4.2666[11727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.701720][T11727] syz.4.2666[11727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.718836][T11720] netlink: zone id is out of range [ 605.759395][T11720] netlink: zone id is out of range [ 605.777532][T11720] netlink: zone id is out of range [ 605.784080][T11720] netlink: zone id is out of range [ 605.790507][T11720] netlink: zone id is out of range [ 605.906222][T11720] netlink: zone id is out of range [ 605.957253][T11720] netlink: zone id is out of range [ 605.963946][T11720] netlink: zone id is out of range [ 605.979976][T11735] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2669'. [ 605.984024][T11720] netlink: zone id is out of range [ 606.012206][T11720] netlink: zone id is out of range [ 606.280590][T11746] netlink: 'syz.1.2673': attribute type 3 has an invalid length. [ 606.303428][T11746] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2673'. [ 606.424856][T11754] netlink: 'syz.4.2676': attribute type 1 has an invalid length. [ 606.439408][T11754] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2676'. [ 606.560351][T11758] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 606.584729][T11759] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.2678'. [ 606.595246][T11758] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2677'. [ 606.654138][T11761] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 606.814921][T11766] syz.0.2682[11766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.815159][T11766] syz.0.2682[11766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.843493][T11769] netlink: 'syz.2.2680': attribute type 29 has an invalid length. [ 606.954837][T11767] device syzkaller0 entered promiscuous mode [ 606.973136][T11769] netlink: 'syz.2.2680': attribute type 29 has an invalid length. [ 607.042415][T11763] netlink: 'syz.2.2680': attribute type 29 has an invalid length. [ 607.126508][T11780] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2687'. [ 607.212440][T11782] netlink: 'syz.4.2688': attribute type 3 has an invalid length. [ 607.213563][T11780] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2687'. [ 607.297143][T11782] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2688'. [ 607.382635][T11789] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2690'. [ 607.403344][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'. [ 607.654600][T11798] FAULT_INJECTION: forcing a failure. [ 607.654600][T11798] name failslab, interval 1, probability 0, space 0, times 0 [ 607.729785][T11798] CPU: 1 PID: 11798 Comm: syz.0.2694 Not tainted syzkaller #0 [ 607.737297][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 607.747357][T11798] Call Trace: [ 607.750653][T11798] [ 607.753595][T11798] dump_stack_lvl+0x188/0x250 [ 607.758281][T11798] ? show_regs_print_info+0x20/0x20 [ 607.763483][T11798] ? load_image+0x410/0x410 [ 607.767995][T11798] ? __might_sleep+0xf0/0xf0 [ 607.772601][T11798] ? __lock_acquire+0x7b50/0x7b50 [ 607.777646][T11798] ? __local_bh_enable_ip+0x136/0x1c0 [ 607.783038][T11798] should_fail+0x383/0x4b0 [ 607.787463][T11798] should_failslab+0x5/0x20 [ 607.791970][T11798] slab_pre_alloc_hook+0x51/0xc0 [ 607.796912][T11798] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 607.802642][T11798] ? __get_vm_area_node+0x119/0x2d0 [ 607.807852][T11798] __get_vm_area_node+0x119/0x2d0 [ 607.812881][T11798] __vmalloc_node_range+0xef/0x8b0 [ 607.817987][T11798] ? netlink_sendmsg+0x5ec/0xbe0 [ 607.822926][T11798] ? netlink_data_ready+0x10/0x10 [ 607.828041][T11798] ? netlink_sendmsg+0x5ec/0xbe0 [ 607.832975][T11798] vmalloc+0x75/0x80 [ 607.836878][T11798] ? netlink_sendmsg+0x5ec/0xbe0 [ 607.841818][T11798] netlink_sendmsg+0x5ec/0xbe0 [ 607.846592][T11798] ? netlink_getsockopt+0x570/0x570 [ 607.851790][T11798] ? aa_sock_msg_perm+0x94/0x150 [ 607.856737][T11798] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 607.862019][T11798] ? security_socket_sendmsg+0x7c/0xa0 [ 607.867475][T11798] ? netlink_getsockopt+0x570/0x570 [ 607.872671][T11798] ____sys_sendmsg+0x5be/0x8f0 [ 607.877443][T11798] ? __sys_sendmsg_sock+0x30/0x30 [ 607.882471][T11798] ? import_iovec+0x6f/0xa0 [ 607.886984][T11798] ___sys_sendmsg+0x236/0x2e0 [ 607.891755][T11798] ? __sys_sendmsg+0x290/0x290 [ 607.896530][T11798] ? trace_event_raw_event_lock+0x250/0x250 [ 607.902447][T11798] __se_sys_sendmsg+0x1b7/0x2a0 [ 607.907296][T11798] ? __x64_sys_sendmsg+0x80/0x80 [ 607.912226][T11798] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 607.918212][T11798] ? lockdep_hardirqs_on+0x94/0x140 [ 607.923405][T11798] do_syscall_64+0x4c/0xa0 [ 607.927810][T11798] ? clear_bhb_loop+0x30/0x80 [ 607.932479][T11798] ? clear_bhb_loop+0x30/0x80 [ 607.937149][T11798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.943035][T11798] RIP: 0033:0x7f6f47377e59 [ 607.947448][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.967047][T11798] RSP: 002b:00007f6f455d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.975478][T11798] RAX: ffffffffffffffda RBX: 00007f6f475fffa0 RCX: 00007f6f47377e59 [ 607.983446][T11798] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 607.992024][T11798] RBP: 00007f6f455d0090 R08: 0000000000000000 R09: 0000000000000000 [ 607.999990][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.007964][T11798] R13: 00007f6f47600038 R14: 00007f6f475fffa0 R15: 00007ffc72f20708 [ 608.015959][T11798] [ 608.046972][T11798] syz.0.2694: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 608.082080][T11798] CPU: 0 PID: 11798 Comm: syz.0.2694 Not tainted syzkaller #0 [ 608.089588][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 608.099749][T11798] Call Trace: [ 608.103044][T11798] [ 608.105989][T11798] dump_stack_lvl+0x188/0x250 [ 608.110686][T11798] ? rcu_lock_release+0x5/0x20 [ 608.115911][T11798] ? show_regs_print_info+0x20/0x20 [ 608.121233][T11798] ? load_image+0x410/0x410 [ 608.125778][T11798] warn_alloc+0x245/0x320 [ 608.130137][T11798] ? zone_watermark_ok_safe+0x250/0x250 [ 608.135705][T11798] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 608.141794][T11798] ? __get_vm_area_node+0x119/0x2d0 [ 608.147048][T11798] __vmalloc_node_range+0x2b1/0x8b0 [ 608.152264][T11798] ? netlink_data_ready+0x10/0x10 [ 608.157325][T11798] ? netlink_sendmsg+0x5ec/0xbe0 [ 608.162292][T11798] vmalloc+0x75/0x80 [ 608.166298][T11798] ? netlink_sendmsg+0x5ec/0xbe0 [ 608.171350][T11798] netlink_sendmsg+0x5ec/0xbe0 [ 608.176155][T11798] ? netlink_getsockopt+0x570/0x570 [ 608.181986][T11798] ? aa_sock_msg_perm+0x94/0x150 [ 608.188072][T11798] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 608.194081][T11798] ? security_socket_sendmsg+0x7c/0xa0 [ 608.200610][T11798] ? netlink_getsockopt+0x570/0x570 [ 608.205848][T11798] ____sys_sendmsg+0x5be/0x8f0 [ 608.210751][T11798] ? __sys_sendmsg_sock+0x30/0x30 [ 608.215998][T11798] ? import_iovec+0x6f/0xa0 [ 608.220546][T11798] ___sys_sendmsg+0x236/0x2e0 [ 608.225257][T11798] ? __sys_sendmsg+0x290/0x290 [ 608.230059][T11798] ? trace_event_raw_event_lock+0x250/0x250 [ 608.235985][T11798] __se_sys_sendmsg+0x1b7/0x2a0 [ 608.240832][T11798] ? __x64_sys_sendmsg+0x80/0x80 [ 608.246059][T11798] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 608.252071][T11798] ? lockdep_hardirqs_on+0x94/0x140 [ 608.257361][T11798] do_syscall_64+0x4c/0xa0 [ 608.261944][T11798] ? clear_bhb_loop+0x30/0x80 [ 608.266716][T11798] ? clear_bhb_loop+0x30/0x80 [ 608.271385][T11798] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 608.277356][T11798] RIP: 0033:0x7f6f47377e59 [ 608.281849][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.301893][T11798] RSP: 002b:00007f6f455d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.310311][T11798] RAX: ffffffffffffffda RBX: 00007f6f475fffa0 RCX: 00007f6f47377e59 [ 608.318274][T11798] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 608.326236][T11798] RBP: 00007f6f455d0090 R08: 0000000000000000 R09: 0000000000000000 [ 608.334222][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.342194][T11798] R13: 00007f6f47600038 R14: 00007f6f475fffa0 R15: 00007ffc72f20708 [ 608.350308][T11798] [ 608.372894][T11798] Mem-Info: [ 608.426371][T11798] active_anon:272 inactive_anon:7084 isolated_anon:0 [ 608.426371][T11798] active_file:25016 inactive_file:35970 isolated_file:0 [ 608.426371][T11798] unevictable:768 dirty:269 writeback:0 [ 608.426371][T11798] slab_reclaimable:20387 slab_unreclaimable:96938 [ 608.426371][T11798] mapped:29656 shmem:1631 pagetables:632 bounce:0 [ 608.426371][T11798] kernel_misc_reclaimable:0 [ 608.426371][T11798] free:1367932 free_pcp:4816 free_cma:0 [ 608.498070][T11810] syz.3.2697[11810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.498306][T11810] syz.3.2697[11810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.531052][T11798] Node 0 active_anon:1056kB inactive_anon:27824kB active_file:99860kB inactive_file:143880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118624kB dirty:1072kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11140kB pagetables:2628kB all_unreclaimable? no [ 608.590835][T11798] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 608.706385][T11798] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.732312][T11816] device syzkaller0 entered promiscuous mode [ 608.773516][ T4255] wlan1: Trigger new scan to find an IBSS to join [ 608.790310][T11798] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 608.829014][T11798] Node 0 DMA32 free:1496832kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:28024kB active_file:99860kB inactive_file:143880kB unevictable:1536kB writepending:1072kB present:3129332kB managed:2606524kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:8540kB free_cma:0kB [ 608.873426][T11798] lowmem_reserve[]: 0 0 0 0 0 [ 608.878289][T11798] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 608.910353][T11798] lowmem_reserve[]: 0 0 0 0 0 [ 608.915851][T11798] Node 1 Normal free:3925908kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.003473][T11798] lowmem_reserve[]: 0 0 0 0 0 [ 609.008239][T11798] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 609.196837][T11798] Node 0 DMA32: 1434*4kB (UME) 1183*8kB (ME) 596*16kB (UME) 683*32kB (UME) 366*64kB (ME) 244*128kB (UME) 112*256kB (UM) 74*512kB (UME) 42*1024kB (UME) 16*2048kB (UME) 300*4096kB (UM) = 1472384kB [ 609.246078][T11798] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 609.323502][T11798] Node 1 Normal: 223*4kB (UME) 47*8kB (UME) 30*16kB (UME) 174*32kB (UME) 72*64kB (UME) 26*128kB (UE) 14*256kB (UME) 3*512kB (U) 0*1024kB 3*2048kB (UME) 952*4096kB (M) = 3925908kB [ 609.408180][T11813] netlink: 'syz.4.2699': attribute type 29 has an invalid length. [ 609.443898][T11798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.456679][T11813] netlink: 'syz.4.2699': attribute type 29 has an invalid length. [ 609.468743][T11798] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 609.483491][T11824] netlink: 'syz.4.2699': attribute type 29 has an invalid length. [ 609.504952][T11798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.539840][T11798] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 609.552996][T11798] 62642 total pagecache pages [ 609.563540][T11798] 0 pages in swap cache [ 609.567770][T11798] Swap cache stats: add 0, delete 0, find 0/0 [ 609.574908][T11798] Free swap = 124996kB [ 609.579284][T11798] Total swap = 124996kB [ 609.583929][T11798] 2097051 pages RAM [ 609.587993][T11798] 0 pages HighMem/MovableOnly [ 609.593716][T11798] 411497 pages reserved [ 609.607370][T11830] netlink: 'syz.3.2704': attribute type 3 has an invalid length. [ 609.623382][T11798] 0 pages cma reserved [ 610.300288][T11849] device syzkaller0 entered promiscuous mode [ 610.340057][T11851] device bridge_slave_1 left promiscuous mode [ 610.353451][T11851] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.773452][ T4282] wlan1: Trigger new scan to find an IBSS to join [ 613.024736][T11851] device bridge_slave_0 left promiscuous mode [ 613.031701][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.096206][T11847] device syzkaller0 entered promiscuous mode [ 613.103509][T11852] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 613.186270][T11861] validate_nla: 1 callbacks suppressed [ 613.186286][T11861] netlink: 'syz.2.2715': attribute type 7 has an invalid length. [ 613.287177][T11872] netlink: 'syz.2.2718': attribute type 3 has an invalid length. [ 613.310042][T11872] __nla_validate_parse: 8 callbacks suppressed [ 613.310056][T11872] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2718'. [ 613.428716][T11877] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 613.635127][T11888] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 613.776538][T11888] net_ratelimit: 728 callbacks suppressed [ 613.776556][T11888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.851070][ T9] wlan1: Creating new IBSS network, BSSID 6e:46:ad:f0:8b:63 [ 613.929807][T11893] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 613.934024][ T5323] ------------[ cut here ]------------ [ 614.061984][ T5323] WARNING: CPU: 0 PID: 5323 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 614.100390][ T5323] Modules linked in: [ 614.119221][ T5323] CPU: 0 PID: 5323 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 614.157557][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.186587][ T5323] Workqueue: cfg80211 cfg80211_event_work [ 614.192752][ T5323] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 614.199443][ T5323] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 a0 40 f8 0f 0b eb bf e8 d7 a0 40 f8 <0f> 0b eb b6 e8 ce a0 40 f8 0f 0b e9 82 fd ff ff e8 c2 a0 40 f8 0f [ 614.250169][ T5323] RSP: 0018:ffffc9000327fac0 EFLAGS: 00010293 [ 614.271526][ T5323] RAX: ffffffff893851c9 RBX: 1ffff9200064ff5c RCX: ffff888020b2d940 [ 614.284187][ T5323] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a2a40 [ 614.292622][ T5323] RBP: ffffc9000327fb70 R08: ffffffff901e912f R09: 1ffffffff203d225 [ 614.304271][ T5323] R10: dffffc0000000000 R11: fffffbfff203d226 R12: ffff88802adeb5b0 [ 614.319137][T11900] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.337287][ T5323] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807a8d0c90 [ 614.363460][ T5323] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 614.379820][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.387620][ T5323] CR2: 00007fcfe0189000 CR3: 0000000048182000 CR4: 00000000003506e0 [ 614.397294][ T5323] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 614.405606][ T5323] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 614.413826][ T5323] Call Trace: [ 614.417462][ T5323] [ 614.420475][ T5323] ? trace_rdev_return_void+0x1c0/0x1c0 [ 614.426616][ T5323] cfg80211_process_wdev_events+0x373/0x490 [ 614.438947][ T5323] cfg80211_process_rdev_events+0x9d/0x110 [ 614.439315][T11903] device syzkaller0 entered promiscuous mode [ 614.451703][ T5323] cfg80211_event_work+0x2b/0x40 [ 614.493691][ T5323] process_one_work+0x867/0xff0 [ 614.498871][ T5323] ? worker_detach_from_pool+0x240/0x240 [ 614.527016][ T5323] ? lockdep_hardirqs_off+0x70/0x100 [ 614.540407][ T5323] ? _raw_spin_lock_irq+0xb7/0xf0 [ 614.545935][ T5323] ? _raw_spin_lock_irqsave+0x100/0x100 [ 614.551615][ T5323] ? wq_worker_running+0x97/0x170 [ 614.562052][ T5323] worker_thread+0xad7/0x12a0 [ 614.572206][ T5323] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 614.583550][ T5323] kthread+0x42e/0x520 [ 614.587721][ T5323] ? rcu_lock_release+0x20/0x20 [ 614.592687][ T5323] ? kthread_blkcg+0xd0/0xd0 [ 614.601730][ T5323] ret_from_fork+0x1f/0x30 [ 614.607432][ T5323] [ 614.610542][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 614.617904][ T5323] CPU: 1 PID: 5323 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 614.625451][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.635516][ T5323] Workqueue: cfg80211 cfg80211_event_work [ 614.641256][ T5323] Call Trace: [ 614.644535][ T5323] [ 614.647462][ T5323] dump_stack_lvl+0x188/0x250 [ 614.652145][ T5323] ? show_regs_print_info+0x20/0x20 [ 614.657339][ T5323] ? load_image+0x410/0x410 [ 614.661856][ T5323] panic+0x2f8/0x850 [ 614.665765][ T5323] ? bpf_jit_dump+0xd0/0xd0 [ 614.670283][ T5323] ? ret_from_fork+0x1f/0x30 [ 614.674873][ T5323] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 614.680427][ T5323] __warn+0x248/0x2b0 [ 614.684407][ T5323] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 614.689948][ T5323] report_bug+0x1b9/0x2e0 [ 614.694287][ T5323] handle_bug+0x3a/0x70 [ 614.698522][ T5323] exc_invalid_op+0x16/0x40 [ 614.703025][ T5323] asm_exc_invalid_op+0x16/0x20 [ 614.707870][ T5323] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 614.714194][ T5323] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 a0 40 f8 0f 0b eb bf e8 d7 a0 40 f8 <0f> 0b eb b6 e8 ce a0 40 f8 0f 0b e9 82 fd ff ff e8 c2 a0 40 f8 0f [ 614.734045][ T5323] RSP: 0018:ffffc9000327fac0 EFLAGS: 00010293 [ 614.740139][ T5323] RAX: ffffffff893851c9 RBX: 1ffff9200064ff5c RCX: ffff888020b2d940 [ 614.748116][ T5323] RDX: 0000000000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a2a40 [ 614.756187][ T5323] RBP: ffffc9000327fb70 R08: ffffffff901e912f R09: 1ffffffff203d225 [ 614.764178][ T5323] R10: dffffc0000000000 R11: fffffbfff203d226 R12: ffff88802adeb5b0 [ 614.772166][ T5323] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88807a8d0c90 [ 614.780167][ T5323] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 614.785744][ T5323] ? trace_rdev_return_void+0x1c0/0x1c0 [ 614.791307][ T5323] cfg80211_process_wdev_events+0x373/0x490 [ 614.797220][ T5323] cfg80211_process_rdev_events+0x9d/0x110 [ 614.803113][ T5323] cfg80211_event_work+0x2b/0x40 [ 614.808060][ T5323] process_one_work+0x867/0xff0 [ 614.812939][ T5323] ? worker_detach_from_pool+0x240/0x240 [ 614.818580][ T5323] ? lockdep_hardirqs_off+0x70/0x100 [ 614.823888][ T5323] ? _raw_spin_lock_irq+0xb7/0xf0 [ 614.828918][ T5323] ? _raw_spin_lock_irqsave+0x100/0x100 [ 614.834466][ T5323] ? wq_worker_running+0x97/0x170 [ 614.839488][ T5323] worker_thread+0xad7/0x12a0 [ 614.844187][ T5323] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 614.850090][ T5323] kthread+0x42e/0x520 [ 614.854239][ T5323] ? rcu_lock_release+0x20/0x20 [ 614.859198][ T5323] ? kthread_blkcg+0xd0/0xd0 [ 614.863793][ T5323] ret_from_fork+0x1f/0x30 [ 614.868233][ T5323] [ 614.871478][ T5323] Kernel Offset: disabled [ 614.876016][ T5323] Rebooting in 86400 seconds..