last executing test programs: 5m26.321495555s ago: executing program 4 (id=2318): r0 = socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/124, 0x7c}, 0x60) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x3, 0x84) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000980)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/176, 0xb0}, {0x0}, {&(0x7f0000000440)=""/95, 0xf}, {0x0}, {&(0x7f0000000640)=""/167, 0xa7}, {0x0}, {&(0x7f0000000700)=""/216, 0xd8}], 0x7}, 0x2040) socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r2}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB="28e5000000000000009b79a3a6f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/21], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0, 0x6}, 0x5000, 0x4, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r5, &(0x7f0000001240)={&(0x7f0000000940)=@l2={0x1f, 0x4, @any, 0x4, 0x3}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='console\x00', r1, 0x0, 0x2}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305828, &(0x7f0000000040)=0x20000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', r3, @fallback=0x1b, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60044084) 5m25.26296778s ago: executing program 0 (id=2323): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x31, 0x0, 0x84) 5m25.208788513s ago: executing program 4 (id=2324): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1}]}, {0x0, [0x5f, 0xb7137f730aac41bb]}}, 0x0, 0x28}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xc, @private1, 0x6}}, 0x80, 0x0}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x110, 0x2, {[@noop]}}}, @ip_ttl={{0x14, 0x110}}], 0x30}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 5m25.158711775s ago: executing program 0 (id=2325): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m25.063846729s ago: executing program 2 (id=2326): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x18}, 0xc) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x90000000, 0x10}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x7, 0x0, 0x5, 0x40, 0xffffffffffffffef}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x83}, @generic={0x6, 0x7, 0x5, 0x3, 0x401}, @jmp={0x5, 0x0, 0xc, 0x7, 0x7, 0xffffffffffffffff, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, 0x0, 0x0) 5m24.893619786s ago: executing program 2 (id=2327): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000800000000000000000000fd900ce9110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd000000"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 5m24.753871132s ago: executing program 2 (id=2328): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa719, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x14105, 0x2e, 0x4, 0x3, 0x1000000, 0x210, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) 5m22.047431829s ago: executing program 2 (id=2331): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x6a) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYRES16=r8], 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffdfffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000020, &(0x7f0000000140)=@base={0x0, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18a181450dd104750d000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 5m22.043131839s ago: executing program 0 (id=2332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m22.01437394s ago: executing program 4 (id=2333): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 5m21.902765255s ago: executing program 0 (id=2335): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (fail_nth: 2) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 5m21.460663754s ago: executing program 4 (id=2338): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000800000000000000000000fd900ce9110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd000000"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 5m21.202434075s ago: executing program 2 (id=2340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m21.196814986s ago: executing program 4 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 3) 5m20.913447398s ago: executing program 0 (id=2342): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m20.782748323s ago: executing program 0 (id=2343): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa719, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x14105, 0x2e, 0x4, 0x3, 0x1000000, 0x210, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) 5m20.769356534s ago: executing program 2 (id=2344): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x16, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m20.537713194s ago: executing program 32 (id=2344): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x16, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m20.493561956s ago: executing program 33 (id=2343): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa719, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x14105, 0x2e, 0x4, 0x3, 0x1000000, 0x210, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) 5m19.441477381s ago: executing program 4 (id=2350): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x6a) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYRES16=r8], 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffdfffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000020, &(0x7f0000000140)=@base={0x0, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18a181450dd104750d000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 5m19.305509317s ago: executing program 34 (id=2350): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x200a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x6a) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYRES16=r8], 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffdfffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000020, &(0x7f0000000140)=@base={0x0, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18a181450dd104750d000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 1m18.467004425s ago: executing program 7 (id=4392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1m18.110523321s ago: executing program 7 (id=4394): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4) socket$kcm(0xa, 0x3, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f0000000540)='ns/cgroup\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff8d, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d3f020a000000040000a1180002000000000084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100030300080000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) 1m17.872487871s ago: executing program 7 (id=4398): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2c00, 0x1) 1m17.718958998s ago: executing program 7 (id=4402): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m16.792219168s ago: executing program 7 (id=4408): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x78, 0xd, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xcfcf}, 0x303b2, 0x32, 0xfffffbff, 0x5, 0x802, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1m16.236579591s ago: executing program 7 (id=4418): perf_event_open$cgroup(&(0x7f00000005c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x40000000000008, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) syz_clone(0xc0004000, &(0x7f0000000140)="3c40c1af96f2d2bf0e29a68ef181df09d5ee44d9858b70b1092e855e8fd0b436b1c0d8adfaf30481d730b40db761ebb45a80b0fa295ad990298f1b542466ef5ffb5c957c40e223468ccf8b9c6d7648ac5a126c7715569ecabde38634226a0d2c98f7b77d35b3adb1f71454a4b66cd57f0789a84777deae51c1401e6ef8fce136c06436ad3e92a62fb696faf8dd7bde53f33df0dff73558abff763f594611896cc60d0b2ef9259e9837e4dbd59c2b9cbf4d97ea89d01795d013af446a0eb0c310a902a92acf18b7498ded199af31d6792261e667668a3633a0c501430fe28b371fc18590d4b7be67c1c53187317bec568", 0xf0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)="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") bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 1m1.129535983s ago: executing program 35 (id=4418): perf_event_open$cgroup(&(0x7f00000005c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x40000000000008, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) syz_clone(0xc0004000, &(0x7f0000000140)="3c40c1af96f2d2bf0e29a68ef181df09d5ee44d9858b70b1092e855e8fd0b436b1c0d8adfaf30481d730b40db761ebb45a80b0fa295ad990298f1b542466ef5ffb5c957c40e223468ccf8b9c6d7648ac5a126c7715569ecabde38634226a0d2c98f7b77d35b3adb1f71454a4b66cd57f0789a84777deae51c1401e6ef8fce136c06436ad3e92a62fb696faf8dd7bde53f33df0dff73558abff763f594611896cc60d0b2ef9259e9837e4dbd59c2b9cbf4d97ea89d01795d013af446a0eb0c310a902a92acf18b7498ded199af31d6792261e667668a3633a0c501430fe28b371fc18590d4b7be67c1c53187317bec568", 0xf0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)="1d816733ae695fa1554bcce551762d26c2d77664a654640a84aff4dcfff005f389d4eea43910108d41a2fcba8160763ae9115feda3d204ebbd29a42b7ffb510cf004bc364b0090c70e3648a59980a20e59f992105b96240b6e8aa393d1bcb609fac78a5ea006a4c585bbd63780e7eacbc575462921447f15a0081f410b86cef40bbc5a82ae2977b5c3677972df9a0ecf1f5e91dd360e639470f2a7572c57a0498d105f0d86dca86f6f28979df41e8e6c9102604a7cfd210851e829247141916747b3301f27915ac04f24ea3a8b5dd2f5bdc405db992b60d39aab2204eb8b13717b0d15bae4fb2f59bf3a7899be418bd4bb4d93dfe89073273049") bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 8.043653993s ago: executing program 6 (id=5019): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffc00}, 0x2000, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) (async) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x31, 0x0, 0xfcd8) (async) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) 7.965514636s ago: executing program 6 (id=5020): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x78, 0xd, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xcfcf}, 0x303b2, 0x32, 0xfffffbff, 0x5, 0x802, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 7.733893487s ago: executing program 6 (id=5021): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x2, 0xfffff004}, {0x6, 0x5d, 0x44, 0x80000001}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.66106129s ago: executing program 6 (id=5023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 7.567435803s ago: executing program 6 (id=5025): r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe10d6540, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 7.445526269s ago: executing program 6 (id=5026): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2}}, 0x80, 0x0}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x100}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x3a, &(0x7f0000000240)=""/58, 0x40f00, 0xc, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x9, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r0, r0, r0, r2, r0, r0, r0, r0], &(0x7f0000000580)=[{0x1, 0x1, 0x8, 0xc}, {0x3, 0x3, 0x9, 0xa}, {0x3, 0x3, 0x2, 0x5}], 0x10, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x10, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.707697633s ago: executing program 1 (id=5081): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x78, 0xd, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xcfcf}, 0x303b2, 0x32, 0xfffffbff, 0x5, 0x802, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.257444392s ago: executing program 1 (id=5089): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000", @ANYRES32=0x1, @ANYBLOB="000000f54279e645765f2e"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000100000100da"], 0x0, 0x52}, 0x23) sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x2, 0xe23, @broadcast}, 0x10, 0x0}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x19, &(0x7f0000000000)=r4, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xba, 0xba, 0x3, [@datasec={0x5, 0x7, 0x0, 0xf, 0x2, [{0x3, 0x5, 0x6}, {0x4, 0x6, 0x4e1a}, {0x2, 0x5, 0x9}, {0x5, 0x5, 0x9a}, {0x5, 0xc, 0xffffffc0}, {0x2, 0x6, 0x4}, {0x5, 0x7, 0xc}], "1510"}, @fwd={0xf}, @func={0x6, 0x0, 0x0, 0xc, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @restrict={0xa, 0x0, 0x0, 0xb, 0x2}, @const={0x8}, @var={0x8, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/33, 0xd7, 0x21, 0x1, 0x9c, 0x10000, @value=r4}, 0x28) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='cE** '], 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfffffffffffff800) 2.017355233s ago: executing program 5 (id=5092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.958771145s ago: executing program 5 (id=5094): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) 1.839060771s ago: executing program 5 (id=5096): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4) socket$kcm(0xa, 0x3, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = gettid() syz_open_procfs$namespace(r7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d3f020a000000040000a1180002000000000084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100030300080000cb090000001fb79164", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) 1.837560881s ago: executing program 3 (id=5097): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, r0, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) sendmsg$inet(r5, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, 0x0, 0x200008c0) 1.648905539s ago: executing program 5 (id=5099): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x78, 0xd, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xcfcf}, 0x303b2, 0x32, 0xfffffbff, 0x5, 0x802, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.453487507s ago: executing program 3 (id=5100): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2}}, 0x80, 0x0}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x100}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x3a, &(0x7f0000000240)=""/58, 0x40f00, 0xc, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x9, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r0, r0, r0, r2, r0, r0, r0, r0], &(0x7f0000000580)=[{0x1, 0x1, 0x8, 0xc}, {0x3, 0x3, 0x9, 0xa}, {0x3, 0x3, 0x2, 0x5}], 0x10, 0x2}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000000500000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.452790007s ago: executing program 8 (id=5101): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0xffffffff, 0x0, 0x0, 0x7ac}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000140)='}\xdf-(*\xe8\\\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000000000000000000000000d02000042e69d9f31"], 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f9ffffffffffffffdcd5635f2e"], 0x48) r9 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r9, 0x0, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 1.303735534s ago: executing program 3 (id=5102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.296888374s ago: executing program 8 (id=5103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.225602207s ago: executing program 1 (id=5104): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 992.454187ms ago: executing program 8 (id=5105): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) 931.39674ms ago: executing program 1 (id=5106): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, r0, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000003006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0x200008c0) 927.87723ms ago: executing program 5 (id=5107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x21100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10806, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000940)='rxrpc_skb\x00', r8}, 0x18) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x37) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 869.848803ms ago: executing program 8 (id=5108): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4) socket$kcm(0xa, 0x3, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = gettid() syz_open_procfs$namespace(r7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d3f020a000000040000a1180002000000000084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100030300080000cb090000001fb79164", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) 869.175712ms ago: executing program 3 (id=5109): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0xf8, 0x6, 0xbd, 0xbd, 0x0, 0x0, 0x21203, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x10, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfa, 0x53, 0x0, 0x9, 0x0, 0xfffffffffffff3ef, 0x20000, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7b, 0x2, @perf_config_ext={0x79, 0x7}, 0x10000, 0x6, 0x1ff, 0x1, 0xb, 0xfffffff7, 0x7ff, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x3, r0, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x40000000b, 0xffffffffffffffff, 0xe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0xd, 0x0, 0x0) 693.00819ms ago: executing program 8 (id=5110): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x6, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0x1000, 0x121c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x2, 0xfffffffc, 0x6, 0x8, 0x5, 0x806, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4cfb}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000500000085000000ad00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400fce630ef17f400004400000002ff", @ANYRES32=0x1, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e9ff00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbd0}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0}, 0x200ce0c0) r8 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x8, &(0x7f00000000c0), 0x8) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2c000044) recvmsg$kcm(r8, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) close(r7) 577.317745ms ago: executing program 1 (id=5111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) 573.356855ms ago: executing program 3 (id=5112): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0xffffffff, 0x0, 0x0, 0x7ac}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000000000000000000000000d02000042e69d9f31"], 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="f9ffffffffffffffdcd5635f2e"], 0x48) r9 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r9, 0x0, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 533.540997ms ago: executing program 5 (id=5113): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) (fail_nth: 4) 434.268251ms ago: executing program 8 (id=5114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x21100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10806, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000940)='rxrpc_skb\x00', r8}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 427.070532ms ago: executing program 1 (id=5115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x21100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10806, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000940)='rxrpc_skb\x00', r8}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 0s ago: executing program 3 (id=5116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000020e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) kernel console output (not intermixed with test programs): cess `syz.3.3858'. [ 549.273029][T14751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3858'. [ 549.580897][T14760] device syzkaller0 entered promiscuous mode [ 550.125716][T14791] device wlan0 left promiscuous mode [ 550.163035][T14791] device wlan0 entered promiscuous mode [ 551.838233][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 551.895442][T14864] validate_nla: 5 callbacks suppressed [ 551.895463][T14864] netlink: 'syz.1.3905': attribute type 10 has an invalid length. [ 551.966274][T14864] team0: Device ipvlan1 failed to register rx_handler [ 552.133040][T14879] __nla_validate_parse: 10 callbacks suppressed [ 552.133061][T14879] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3908'. [ 552.181133][T14880] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3912'. [ 552.204283][T14883] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3912'. [ 552.247500][T14882] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3908'. [ 552.527111][T14899] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3920'. [ 552.638154][T14904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3920'. [ 552.830426][T14911] netlink: 'syz.6.3924': attribute type 10 has an invalid length. [ 552.868127][T14911] netlink: 208708 bytes leftover after parsing attributes in process `syz.6.3924'. [ 552.890699][T14911] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 552.944425][T14911] netlink: 'syz.6.3924': attribute type 10 has an invalid length. [ 554.023361][T14929] netlink: 'syz.1.3930': attribute type 3 has an invalid length. [ 554.103293][T14929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3930'. [ 554.181175][T14926] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3927'. [ 554.203843][T14936] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3927'. [ 554.422773][T14953] netlink: 'syz.3.3938': attribute type 10 has an invalid length. [ 554.431263][T14953] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 554.455832][T14956] netlink: 'syz.5.3937': attribute type 8 has an invalid length. [ 554.484591][T14958] netlink: 'syz.1.3940': attribute type 21 has an invalid length. [ 554.497142][T14953] netlink: 'syz.3.3938': attribute type 10 has an invalid length. [ 554.883631][ T144] wlan1: Trigger new scan to find an IBSS to join [ 555.732478][T14999] netlink: 'syz.3.3956': attribute type 4 has an invalid length. [ 555.740293][T14999] netlink: 'syz.3.3956': attribute type 7 has an invalid length. [ 555.850841][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 556.086101][T15014] team0: Port device team_slave_0 removed [ 556.128209][T15014] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 557.079954][T15037] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 557.167214][T15037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.387246][T15050] validate_nla: 3 callbacks suppressed [ 557.387266][T15050] netlink: 'syz.5.3974': attribute type 10 has an invalid length. [ 557.437598][T15050] __nla_validate_parse: 10 callbacks suppressed [ 557.437618][T15050] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3974'. [ 559.201115][T15137] netlink: 'syz.5.3980': attribute type 8 has an invalid length. [ 559.211485][T15136] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.3982'. [ 559.226143][T15137] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3980'. [ 559.251735][T15142] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3985'. [ 559.339411][T15145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3985'. [ 559.368799][T15146] netlink: 'syz.7.3986': attribute type 3 has an invalid length. [ 559.393967][T15146] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3986'. [ 560.125675][T15163] netlink: 'syz.1.3992': attribute type 10 has an invalid length. [ 560.151781][T15163] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3992'. [ 560.882751][T15180] netlink: 'syz.3.4000': attribute type 29 has an invalid length. [ 560.930194][T15180] netlink: 'syz.3.4000': attribute type 29 has an invalid length. [ 560.982259][T15188] netlink: 'syz.6.4002': attribute type 8 has an invalid length. [ 560.990513][T15188] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4002'. [ 561.043311][T15186] team0: Port device team_slave_0 removed [ 561.049749][T15186] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 561.094704][T15182] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4003'. [ 561.106942][T15187] netlink: 'syz.3.4000': attribute type 29 has an invalid length. [ 561.130191][T15180] netlink: 'syz.3.4000': attribute type 29 has an invalid length. [ 561.144753][T15190] netlink: 'syz.3.4000': attribute type 29 has an invalid length. [ 561.164956][T15192] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4004'. [ 561.857600][T15214] FAULT_INJECTION: forcing a failure. [ 561.857600][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 561.911495][T15214] CPU: 1 PID: 15214 Comm: syz.7.4013 Not tainted syzkaller #0 [ 561.919037][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.929128][T15214] Call Trace: [ 561.932443][T15214] [ 561.935400][T15214] dump_stack_lvl+0x168/0x230 [ 561.940122][T15214] ? show_regs_print_info+0x20/0x20 [ 561.945375][T15214] ? load_image+0x3b0/0x3b0 [ 561.949928][T15214] ? __might_sleep+0xf0/0xf0 [ 561.954555][T15214] ? __lock_acquire+0x7c60/0x7c60 [ 561.959625][T15214] should_fail+0x38c/0x4c0 [ 561.964087][T15214] should_failslab+0x5/0x20 [ 561.968628][T15214] slab_pre_alloc_hook+0x51/0xc0 [ 561.973608][T15214] kmem_cache_alloc_trace+0x47/0x2a0 [ 561.978934][T15214] ? apparmor_sk_alloc_security+0x74/0x100 [ 561.984787][T15214] apparmor_sk_alloc_security+0x74/0x100 [ 561.990458][T15214] security_sk_alloc+0x6a/0xa0 [ 561.995259][T15214] sk_prot_alloc+0x101/0x210 [ 561.999882][T15214] ? sk_alloc+0x1d/0x310 [ 562.004171][T15214] sk_alloc+0x2f/0x310 [ 562.008292][T15214] bpf_prog_test_run_skb+0x240/0x1180 [ 562.013703][T15214] ? __fget_files+0x40f/0x480 [ 562.018425][T15214] ? cpu_online+0x60/0x60 [ 562.022801][T15214] bpf_prog_test_run+0x31e/0x390 [ 562.027776][T15214] __sys_bpf+0x535/0x670 [ 562.032149][T15214] ? bpf_link_show_fdinfo+0x340/0x340 [ 562.037585][T15214] __x64_sys_bpf+0x78/0x90 [ 562.042041][T15214] do_syscall_64+0x4c/0xa0 [ 562.046491][T15214] ? clear_bhb_loop+0x30/0x80 [ 562.051200][T15214] ? clear_bhb_loop+0x30/0x80 [ 562.055928][T15214] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 562.061856][T15214] RIP: 0033:0x7f2e2d85d749 [ 562.066301][T15214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.085940][T15214] RSP: 002b:00007f2e2bac4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.094412][T15214] RAX: ffffffffffffffda RBX: 00007f2e2dab3fa0 RCX: 00007f2e2d85d749 [ 562.102430][T15214] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 562.110437][T15214] RBP: 00007f2e2bac4090 R08: 0000000000000000 R09: 0000000000000000 [ 562.118469][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.126478][T15214] R13: 00007f2e2dab4038 R14: 00007f2e2dab3fa0 R15: 00007ffc1fbcf748 [ 562.134498][T15214] [ 562.441353][T15223] FAULT_INJECTION: forcing a failure. [ 562.441353][T15223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.512640][T15223] CPU: 1 PID: 15223 Comm: syz.6.4015 Not tainted syzkaller #0 [ 562.520274][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.530366][T15223] Call Trace: [ 562.533672][T15223] [ 562.536637][T15223] dump_stack_lvl+0x168/0x230 [ 562.541368][T15223] ? show_regs_print_info+0x20/0x20 [ 562.546602][T15223] ? load_image+0x3b0/0x3b0 [ 562.551140][T15223] ? __lock_acquire+0x7c60/0x7c60 [ 562.556205][T15223] should_fail+0x38c/0x4c0 [ 562.560664][T15223] _copy_to_user+0x2e/0x130 [ 562.565201][T15223] simple_read_from_buffer+0xe3/0x150 [ 562.570607][T15223] proc_fail_nth_read+0x19a/0x210 [ 562.575665][T15223] ? proc_fault_inject_write+0x2f0/0x2f0 [ 562.581340][T15223] ? fsnotify_perm+0x254/0x560 [ 562.586138][T15223] ? proc_fault_inject_write+0x2f0/0x2f0 [ 562.591790][T15223] vfs_read+0x2f6/0xcf0 [ 562.595983][T15223] ? kernel_read+0x1e0/0x1e0 [ 562.600607][T15223] ? __fget_files+0x40f/0x480 [ 562.605318][T15223] ? mutex_lock_nested+0x17/0x20 [ 562.610301][T15223] ? __fdget_pos+0x2bf/0x370 [ 562.614918][T15223] ? ksys_read+0x71/0x250 [ 562.619279][T15223] ksys_read+0x14d/0x250 [ 562.623552][T15223] ? vfs_write+0xd00/0xd00 [ 562.628000][T15223] ? lockdep_hardirqs_on+0x94/0x140 [ 562.633233][T15223] do_syscall_64+0x4c/0xa0 [ 562.637684][T15223] ? clear_bhb_loop+0x30/0x80 [ 562.642397][T15223] ? clear_bhb_loop+0x30/0x80 [ 562.647118][T15223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 562.653055][T15223] RIP: 0033:0x7f7f9062f15c [ 562.657535][T15223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 562.677170][T15223] RSP: 002b:00007f7f8e876030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 562.685623][T15223] RAX: ffffffffffffffda RBX: 00007f7f90887090 RCX: 00007f7f9062f15c [ 562.693728][T15223] RDX: 000000000000000f RSI: 00007f7f8e8760a0 RDI: 0000000000000007 [ 562.701923][T15223] RBP: 00007f7f8e876090 R08: 0000000000000000 R09: 0000000000000000 [ 562.709939][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.717945][T15223] R13: 00007f7f90887128 R14: 00007f7f90887090 R15: 00007ffe14da0c78 [ 562.725970][T15223] [ 562.863445][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.869915][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.896123][T15226] __nla_validate_parse: 3 callbacks suppressed [ 562.896142][T15226] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4017'. [ 563.116360][T15231] validate_nla: 1 callbacks suppressed [ 563.116378][T15231] netlink: 'syz.7.4019': attribute type 10 has an invalid length. [ 563.152724][T15231] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4019'. [ 563.177196][T15233] FAULT_INJECTION: forcing a failure. [ 563.177196][T15233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.226956][T15233] CPU: 1 PID: 15233 Comm: syz.1.4029 Not tainted syzkaller #0 [ 563.234498][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 563.244588][T15233] Call Trace: [ 563.247890][T15233] [ 563.250841][T15233] dump_stack_lvl+0x168/0x230 [ 563.255577][T15233] ? show_regs_print_info+0x20/0x20 [ 563.260811][T15233] ? load_image+0x3b0/0x3b0 [ 563.265350][T15233] ? __lock_acquire+0x7c60/0x7c60 [ 563.270397][T15233] ? perf_trace_lock+0xdf/0x370 [ 563.275284][T15233] should_fail+0x38c/0x4c0 [ 563.279733][T15233] _copy_from_user+0x2e/0x170 [ 563.284438][T15233] br_dev_siocdevprivate+0xee/0x14c0 [ 563.289756][T15233] ? br_handle_local_finish+0x20/0x20 [ 563.295165][T15233] ? __lock_acquire+0x7c60/0x7c60 [ 563.300216][T15233] ? do_raw_spin_lock+0x11d/0x280 [ 563.305274][T15233] ? __rwlock_init+0x140/0x140 [ 563.310065][T15233] ? do_raw_spin_unlock+0x11d/0x230 [ 563.315293][T15233] ? __mutex_lock_common+0x14d8/0x2390 [ 563.320779][T15233] ? full_name_hash+0x8e/0xe0 [ 563.325488][T15233] dev_ifsioc+0xaf5/0xe70 [ 563.329833][T15233] ? dev_ioctl+0x5e8/0xe50 [ 563.334280][T15233] ? dev_ioctl+0xe50/0xe50 [ 563.338721][T15233] ? full_name_hash+0x8e/0xe0 [ 563.343450][T15233] dev_ioctl+0x5f9/0xe50 [ 563.347709][T15233] ? get_user_ifreq+0xc7/0x170 [ 563.352499][T15233] sock_ioctl+0x67b/0x6e0 [ 563.356861][T15233] ? sock_poll+0x3f0/0x3f0 [ 563.361312][T15233] ? bpf_lsm_file_ioctl+0x5/0x10 [ 563.366267][T15233] ? security_file_ioctl+0x7c/0xa0 [ 563.371405][T15233] ? sock_poll+0x3f0/0x3f0 [ 563.375846][T15233] __se_sys_ioctl+0xfa/0x170 [ 563.380466][T15233] do_syscall_64+0x4c/0xa0 [ 563.384896][T15233] ? clear_bhb_loop+0x30/0x80 [ 563.389601][T15233] ? clear_bhb_loop+0x30/0x80 [ 563.394305][T15233] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 563.400227][T15233] RIP: 0033:0x7f56e3b76749 [ 563.404698][T15233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.424329][T15233] RSP: 002b:00007f56e1ddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.432776][T15233] RAX: ffffffffffffffda RBX: 00007f56e3dccfa0 RCX: 00007f56e3b76749 [ 563.440773][T15233] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000d [ 563.448764][T15233] RBP: 00007f56e1ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 563.456768][T15233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.464794][T15233] R13: 00007f56e3dcd038 R14: 00007f56e3dccfa0 R15: 00007ffc2ef54c78 [ 563.472817][T15233] [ 563.560534][T15239] device team_slave_0 left promiscuous mode [ 564.016857][T15239] team0: Port device team_slave_0 removed [ 564.066947][T15239] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 564.137526][T15245] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 564.285806][T15260] netlink: 'syz.5.4026': attribute type 8 has an invalid length. [ 564.324548][T15260] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4026'. [ 564.396893][T15263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 564.486277][T15263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.562789][T15266] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4030'. [ 564.881334][T15272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4031'. [ 565.515456][T15318] netlink: 'syz.5.4034': attribute type 29 has an invalid length. [ 565.559942][T15318] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4034'. [ 565.667344][T15318] netlink: 'syz.5.4034': attribute type 29 has an invalid length. [ 565.736728][T15318] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4034'. [ 565.873403][T15323] IPv6: Can't replace route, no match found [ 566.029664][T15331] IPv6: Can't replace route, no match found [ 566.592949][T15358] FAULT_INJECTION: forcing a failure. [ 566.592949][T15358] name failslab, interval 1, probability 0, space 0, times 0 [ 566.605604][T15358] CPU: 0 PID: 15358 Comm: syz.7.4048 Not tainted syzkaller #0 [ 566.613089][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.623305][T15358] Call Trace: [ 566.626618][T15358] [ 566.629653][T15358] dump_stack_lvl+0x168/0x230 [ 566.634363][T15358] ? show_regs_print_info+0x20/0x20 [ 566.639588][T15358] ? load_image+0x3b0/0x3b0 [ 566.644142][T15358] should_fail+0x38c/0x4c0 [ 566.648602][T15358] should_failslab+0x5/0x20 [ 566.653134][T15358] slab_pre_alloc_hook+0x51/0xc0 [ 566.658118][T15358] ? __sigqueue_alloc+0x3a6/0x4b0 [ 566.663182][T15358] kmem_cache_alloc+0x3d/0x290 [ 566.667976][T15358] __sigqueue_alloc+0x3a6/0x4b0 [ 566.673177][T15358] __send_signal+0x203/0xdb0 [ 566.677827][T15358] force_sig_info_to_task+0x2fd/0x3d0 [ 566.683270][T15358] force_sig+0xb7/0x100 [ 566.687473][T15358] ? send_sig+0xf0/0xf0 [ 566.691657][T15358] ? show_signal+0x1a0/0x1a0 [ 566.696290][T15358] ? lockdep_hardirqs_on+0x94/0x140 [ 566.701532][T15358] exc_general_protection+0xee/0x270 [ 566.706863][T15358] ? __context_tracking_enter+0x60/0x90 [ 566.712465][T15358] ? do_syscall_64+0x58/0xa0 [ 566.717093][T15358] asm_exc_general_protection+0x22/0x30 [ 566.722662][T15358] RIP: 0033:0x7f2e2d836179 [ 566.727133][T15358] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 566.746993][T15358] RSP: 002b:00007f2e2bac37c8 EFLAGS: 00010283 [ 566.753089][T15358] RAX: 0000000000000999 RBX: 00007f2e2bac3d30 RCX: 00007f2e2da79120 [ 566.761258][T15358] RDX: 9999999999999999 RSI: 00007f2e2d8e1ca9 RDI: 9999999999999999 [ 566.769257][T15358] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 566.777279][T15358] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 566.785404][T15358] R13: 00007f2e2bac3eb0 R14: 9999999999999999 R15: 0000000000000000 [ 566.793411][T15358] [ 567.081951][T15376] netlink: 'syz.6.4054': attribute type 10 has an invalid length. [ 567.101208][T15376] bridge0: port 3(dummy0) entered disabled state [ 567.107761][T15376] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.115274][T15376] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.165708][T15376] bridge0: port 3(dummy0) entered blocking state [ 567.172228][T15376] bridge0: port 3(dummy0) entered forwarding state [ 567.179016][T15376] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.186200][T15376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.193664][T15376] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.200829][T15376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.254600][T15376] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 567.284094][T15386] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4056'. [ 567.347656][T15390] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4058'. [ 567.444246][T15395] FAULT_INJECTION: forcing a failure. [ 567.444246][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 567.467226][T15395] CPU: 0 PID: 15395 Comm: syz.5.4061 Not tainted syzkaller #0 [ 567.474785][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.484882][T15395] Call Trace: [ 567.488196][T15395] [ 567.491150][T15395] dump_stack_lvl+0x168/0x230 [ 567.495865][T15395] ? show_regs_print_info+0x20/0x20 [ 567.501112][T15395] ? load_image+0x3b0/0x3b0 [ 567.505791][T15395] ? __might_sleep+0xf0/0xf0 [ 567.510435][T15395] ? __lock_acquire+0x7c60/0x7c60 [ 567.515494][T15395] should_fail+0x38c/0x4c0 [ 567.519953][T15395] should_failslab+0x5/0x20 [ 567.524477][T15395] slab_pre_alloc_hook+0x51/0xc0 [ 567.529456][T15395] kmem_cache_alloc_node+0x47/0x2d0 [ 567.534678][T15395] ? __alloc_skb+0xf4/0x750 [ 567.539210][T15395] ? perf_tp_event+0xa3b/0xb50 [ 567.544006][T15395] __alloc_skb+0xf4/0x750 [ 567.548373][T15395] alloc_skb_with_frags+0xa7/0x730 [ 567.553505][T15395] ? __lock_acquire+0x12d9/0x7c60 [ 567.558572][T15395] sock_alloc_send_pskb+0x853/0x980 [ 567.563828][T15395] ? sock_kzfree_s+0x50/0x50 [ 567.568432][T15395] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 567.574083][T15395] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 567.580702][T15395] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 567.586436][T15395] __ip6_append_data+0x257b/0x3810 [ 567.591591][T15395] ? ip6_setup_cork+0x11e0/0x11e0 [ 567.596628][T15395] ? ip6_setup_cork+0xc63/0x11e0 [ 567.601578][T15395] ip6_make_skb+0x3af/0x4c0 [ 567.606113][T15395] ? udpv6_sendmsg+0x2320/0x2320 [ 567.611067][T15395] ? udpv6_sendmsg+0x2320/0x2320 [ 567.616014][T15395] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 567.621973][T15395] udpv6_sendmsg+0x1b67/0x2320 [ 567.626760][T15395] ? udpv6_sendmsg+0x2320/0x2320 [ 567.631712][T15395] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 567.637460][T15395] ? udp_v6_early_demux+0xe90/0xe90 [ 567.642672][T15395] ? rcu_nmi_exit+0x6f/0xf0 [ 567.647202][T15395] ? __local_bh_enable_ip+0x12a/0x1b0 [ 567.652579][T15395] ? lockdep_hardirqs_on+0x94/0x140 [ 567.657812][T15395] ? inet_send_prepare+0x1af/0x260 [ 567.662932][T15395] ? inet6_compat_ioctl+0x380/0x380 [ 567.668140][T15395] ? inet6_sendmsg+0x5b/0xd0 [ 567.672767][T15395] ? inet6_compat_ioctl+0x380/0x380 [ 567.677995][T15395] ____sys_sendmsg+0x5a2/0x8c0 [ 567.682781][T15395] ? memset+0x1e/0x40 [ 567.686794][T15395] ? __sys_sendmsg_sock+0x30/0x30 [ 567.691854][T15395] ? import_iovec+0x6f/0xa0 [ 567.696524][T15395] ___sys_sendmsg+0x1f0/0x260 [ 567.701374][T15395] ? __sys_sendmsg+0x250/0x250 [ 567.706186][T15395] ? __fdget+0x18b/0x210 [ 567.710437][T15395] __se_sys_sendmsg+0x190/0x250 [ 567.715338][T15395] ? __x64_sys_sendmsg+0x80/0x80 [ 567.720309][T15395] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 567.726333][T15395] ? lockdep_hardirqs_on+0x94/0x140 [ 567.731546][T15395] do_syscall_64+0x4c/0xa0 [ 567.735976][T15395] ? clear_bhb_loop+0x30/0x80 [ 567.740656][T15395] ? clear_bhb_loop+0x30/0x80 [ 567.745349][T15395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 567.751259][T15395] RIP: 0033:0x7f07ebd7e749 [ 567.755688][T15395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.775426][T15395] RSP: 002b:00007f07e9fe5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.783865][T15395] RAX: ffffffffffffffda RBX: 00007f07ebfd4fa0 RCX: 00007f07ebd7e749 [ 567.791939][T15395] RDX: 0000000004000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 567.799925][T15395] RBP: 00007f07e9fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 567.807904][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.816110][T15395] R13: 00007f07ebfd5038 R14: 00007f07ebfd4fa0 R15: 00007fffcc399a28 [ 567.824123][T15395] [ 567.861115][T15392] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4058'. [ 568.034253][T15408] device batadv0 entered promiscuous mode [ 568.363117][T15422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4072'. [ 568.608058][T15430] -1: renamed from syzkaller0 [ 569.182835][T15440] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 569.201232][T15444] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 569.267589][T15444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.391094][T15447] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 570.672640][T15499] netlink: 'syz.7.4086': attribute type 10 has an invalid length. [ 570.700143][T15499] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4086'. [ 571.053312][T15513] netlink: 'syz.6.4090': attribute type 10 has an invalid length. [ 571.099709][T15513] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4090'. [ 571.142533][T15516] netlink: 'syz.7.4092': attribute type 30 has an invalid length. [ 571.274317][T15521] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 571.346149][T15525] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 571.615444][T15534] netlink: 2220 bytes leftover after parsing attributes in process `syz.1.4100'. [ 571.702673][T15539] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 571.838524][T15089] wlan1: Trigger new scan to find an IBSS to join [ 572.403377][T15559] netlink: 'syz.5.4110': attribute type 10 has an invalid length. [ 572.480999][T15559] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4110'. [ 572.699902][T15564] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 572.908708][T15570] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 573.099366][T15556] FAULT_INJECTION: forcing a failure. [ 573.099366][T15556] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 573.175017][T15573] device batadv0 entered promiscuous mode [ 573.191679][T15556] CPU: 1 PID: 15556 Comm: syz.3.4108 Not tainted syzkaller #0 [ 573.199234][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 573.209351][T15556] Call Trace: [ 573.212695][T15556] [ 573.215670][T15556] dump_stack_lvl+0x168/0x230 [ 573.220428][T15556] ? show_regs_print_info+0x20/0x20 [ 573.225694][T15556] ? load_image+0x3b0/0x3b0 [ 573.230366][T15556] ? __lock_acquire+0x7c60/0x7c60 [ 573.235455][T15556] ? trace_event_raw_event_lock+0x250/0x250 [ 573.241430][T15556] should_fail+0x38c/0x4c0 [ 573.245914][T15556] prepare_alloc_pages+0x1e4/0x5f0 [ 573.251099][T15556] __alloc_pages+0x10e/0x470 [ 573.255758][T15556] ? zone_statistics+0x170/0x170 [ 573.260883][T15556] ? count_memcg_event_mm+0x311/0x360 [ 573.266316][T15556] ? remove_device_exclusive_entry+0xa70/0xa70 [ 573.272969][T15556] alloc_pages_vma+0x393/0x7c0 [ 573.277823][T15556] handle_mm_fault+0x237f/0x43b0 [ 573.282935][T15556] ? get_page+0xe0/0xe0 [ 573.287154][T15556] ? vmacache_find+0x238/0x590 [ 573.291960][T15556] ? find_vma+0xd2/0x230 [ 573.296275][T15556] do_user_addr_fault+0x489/0xc80 [ 573.301380][T15556] exc_page_fault+0x60/0x100 [ 573.306001][T15556] ? clear_bhb_loop+0x30/0x80 [ 573.310710][T15556] asm_exc_page_fault+0x22/0x30 [ 573.315597][T15556] RIP: 0033:0x7fac749b1c5b [ 573.320040][T15556] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 573.339703][T15556] RSP: 002b:00007fac72c68e10 EFLAGS: 00010246 [ 573.345804][T15556] RAX: 00007fac72c6af30 RBX: 00007fac74c2f640 RCX: 0000000000000000 [ 573.353805][T15556] RDX: 00007fac72c6af78 RSI: 00007fac74a65df8 RDI: 00007fac72c68e30 [ 573.361796][T15556] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 573.369782][T15556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.377770][T15556] R13: 00007fac74c5b038 R14: 00007fac74c5afa0 R15: 00007ffdf042d208 [ 573.385801][T15556] [ 573.501493][T15556] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 573.540379][T15576] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 573.842870][T15594] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4122'. [ 574.018895][T15596] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4122'. [ 574.073250][T15603] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 574.418357][T15617] netlink: 14207 bytes leftover after parsing attributes in process `syz.7.4131'. [ 574.503775][T15623] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 574.898456][T15627] -1: renamed from syzkaller0 [ 574.958792][T15640] device wlan1 entered promiscuous mode [ 575.190818][ T4226] Bluetooth: hci5: command 0x0406 tx timeout [ 575.232792][T15653] netlink: 'syz.7.4141': attribute type 8 has an invalid length. [ 575.268158][T15653] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4141'. [ 575.415320][T15662] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4145'. [ 575.490302][T15665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4145'. [ 575.653501][T15670] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 575.829009][T15114] wlan1: Trigger new scan to find an IBSS to join [ 576.091548][T15681] netlink: 'syz.5.4150': attribute type 10 has an invalid length. [ 576.099529][T15681] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4150'. [ 576.858441][T15702] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 576.886113][T15688] -1: renamed from syzkaller0 [ 577.077187][T15709] FAULT_INJECTION: forcing a failure. [ 577.077187][T15709] name failslab, interval 1, probability 0, space 0, times 0 [ 577.122579][T15709] CPU: 0 PID: 15709 Comm: syz.1.4163 Not tainted syzkaller #0 [ 577.130137][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.140217][T15709] Call Trace: [ 577.143517][T15709] [ 577.146470][T15709] dump_stack_lvl+0x168/0x230 [ 577.151183][T15709] ? show_regs_print_info+0x20/0x20 [ 577.156414][T15709] ? load_image+0x3b0/0x3b0 [ 577.160954][T15709] ? __might_sleep+0xf0/0xf0 [ 577.165571][T15709] ? __lock_acquire+0x7c60/0x7c60 [ 577.170752][T15709] should_fail+0x38c/0x4c0 [ 577.175213][T15709] should_failslab+0x5/0x20 [ 577.179745][T15709] slab_pre_alloc_hook+0x51/0xc0 [ 577.184716][T15709] kmem_cache_alloc_node_trace+0x4a/0x300 [ 577.190462][T15709] ? __get_vm_area_node+0x119/0x2d0 [ 577.195707][T15709] __get_vm_area_node+0x119/0x2d0 [ 577.200858][T15709] __vmalloc_node_range+0xef/0x8b0 [ 577.205989][T15709] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 577.211571][T15709] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 577.217790][T15709] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 577.223362][T15709] __vmalloc+0x76/0x80 [ 577.227545][T15709] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 577.233116][T15709] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 577.238543][T15709] bpf_prog_alloc+0x1a/0x1e0 [ 577.243162][T15709] bpf_prog_load+0x7b3/0x1550 [ 577.247896][T15709] ? map_freeze+0x350/0x350 [ 577.252428][T15709] ? lockdep_hardirqs_on+0x94/0x140 [ 577.257688][T15709] ? kasan_check_range+0x89/0x290 [ 577.262838][T15709] ? bpf_lsm_bpf+0x5/0x10 [ 577.267189][T15709] ? security_bpf+0x7a/0xa0 [ 577.271754][T15709] __sys_bpf+0x4c2/0x670 [ 577.276032][T15709] ? bpf_link_show_fdinfo+0x340/0x340 [ 577.281479][T15709] __x64_sys_bpf+0x78/0x90 [ 577.285924][T15709] do_syscall_64+0x4c/0xa0 [ 577.290375][T15709] ? clear_bhb_loop+0x30/0x80 [ 577.295089][T15709] ? clear_bhb_loop+0x30/0x80 [ 577.299791][T15709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.305712][T15709] RIP: 0033:0x7f56e3b76749 [ 577.310146][T15709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.329956][T15709] RSP: 002b:00007f56e1ddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.338401][T15709] RAX: ffffffffffffffda RBX: 00007f56e3dccfa0 RCX: 00007f56e3b76749 [ 577.346396][T15709] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 577.354402][T15709] RBP: 00007f56e1ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 577.362394][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.370399][T15709] R13: 00007f56e3dcd038 R14: 00007f56e3dccfa0 R15: 00007ffc2ef54c78 [ 577.378693][T15709] [ 577.403175][T15713] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4164'. [ 577.405320][T15709] syz.1.4163: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 577.440533][T15709] CPU: 0 PID: 15709 Comm: syz.1.4163 Not tainted syzkaller #0 [ 577.448141][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.458229][T15709] Call Trace: [ 577.461531][T15709] [ 577.464514][T15709] dump_stack_lvl+0x168/0x230 [ 577.469233][T15709] ? rcu_lock_release+0x5/0x20 [ 577.474008][T15709] ? show_regs_print_info+0x20/0x20 [ 577.479223][T15709] ? load_image+0x3b0/0x3b0 [ 577.483757][T15709] warn_alloc+0x20e/0x2f0 [ 577.488107][T15709] ? zone_watermark_ok_safe+0x240/0x240 [ 577.493670][T15709] ? __get_vm_area_node+0x2b5/0x2d0 [ 577.498892][T15709] __vmalloc_node_range+0x2b1/0x8b0 [ 577.504107][T15709] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 577.510327][T15709] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 577.515923][T15709] __vmalloc+0x76/0x80 [ 577.520050][T15709] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 577.525638][T15709] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 577.531055][T15709] bpf_prog_alloc+0x1a/0x1e0 [ 577.535683][T15709] bpf_prog_load+0x7b3/0x1550 [ 577.540393][T15709] ? map_freeze+0x350/0x350 [ 577.544920][T15709] ? lockdep_hardirqs_on+0x94/0x140 [ 577.550168][T15709] ? kasan_check_range+0x89/0x290 [ 577.555242][T15709] ? bpf_lsm_bpf+0x5/0x10 [ 577.559606][T15709] ? security_bpf+0x7a/0xa0 [ 577.564150][T15709] __sys_bpf+0x4c2/0x670 [ 577.568425][T15709] ? bpf_link_show_fdinfo+0x340/0x340 [ 577.573844][T15709] __x64_sys_bpf+0x78/0x90 [ 577.578297][T15709] do_syscall_64+0x4c/0xa0 [ 577.582732][T15709] ? clear_bhb_loop+0x30/0x80 [ 577.587427][T15709] ? clear_bhb_loop+0x30/0x80 [ 577.592125][T15709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 577.598041][T15709] RIP: 0033:0x7f56e3b76749 [ 577.602480][T15709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.622199][T15709] RSP: 002b:00007f56e1ddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.630648][T15709] RAX: ffffffffffffffda RBX: 00007f56e3dccfa0 RCX: 00007f56e3b76749 [ 577.638654][T15709] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 577.646646][T15709] RBP: 00007f56e1ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 577.654782][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.662781][T15709] R13: 00007f56e3dcd038 R14: 00007f56e3dccfa0 R15: 00007ffc2ef54c78 [ 577.670817][T15709] [ 577.703825][T15715] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4164'. [ 577.736809][T15717] device wlan0 left promiscuous mode [ 577.815588][T15709] Mem-Info: [ 577.818832][T15709] active_anon:270 inactive_anon:6201 isolated_anon:0 [ 577.818832][T15709] active_file:26079 inactive_file:39549 isolated_file:0 [ 577.818832][T15709] unevictable:768 dirty:254 writeback:0 [ 577.818832][T15709] slab_reclaimable:21140 slab_unreclaimable:94462 [ 577.818832][T15709] mapped:29816 shmem:1629 pagetables:563 bounce:0 [ 577.818832][T15709] kernel_misc_reclaimable:0 [ 577.818832][T15709] free:1365609 free_pcp:11989 free_cma:0 [ 577.876645][T15709] Node 0 active_anon:1048kB inactive_anon:24212kB active_file:104116kB inactive_file:158196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119264kB dirty:996kB writeback:24kB shmem:4440kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11584kB pagetables:2212kB all_unreclaimable? no [ 577.911650][T15717] device wlan0 entered promiscuous mode [ 577.963788][T15723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4167'. [ 577.980652][T15709] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 578.086398][T15709] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.140976][T15729] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 578.150194][T15709] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 578.160337][T15709] Node 0 DMA32 free:1529968kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1048kB inactive_anon:27376kB active_file:104116kB inactive_file:158196kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2608952kB mlocked:0kB bounce:0kB free_pcp:38324kB local_pcp:17412kB free_cma:0kB [ 578.209570][T15734] netlink: 'syz.5.4168': attribute type 10 has an invalid length. [ 578.310592][T15709] lowmem_reserve[]: 0 0 0 0 0 [ 578.329682][T15709] Node 0 Normal free:12kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 578.414852][T15709] lowmem_reserve[]: 0 0 0 0 0 [ 578.419803][T15709] Node 1 Normal free:3918588kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6352kB local_pcp:5488kB free_cma:0kB [ 578.451164][T15709] lowmem_reserve[]: 0 0 0 0 0 [ 578.455941][T15709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 578.494573][T15709] Node 0 DMA32: 2944*4kB (UM) 2080*8kB (UME) 550*16kB (UME) 1361*32kB (UME) 621*64kB (UME) 414*128kB (UME) 254*256kB (UME) 156*512kB (UME) 79*1024kB (UME) 20*2048kB (UME) 266*4096kB (UM) = 1529792kB [ 578.532007][T15709] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 578.553555][T15709] Node 1 Normal: 143*4kB (UE) 36*8kB (UME) 24*16kB (UME) 125*32kB (UE) 54*64kB (UME) 20*128kB (UME) 9*256kB (UM) 5*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 951*4096kB (M) = 3918588kB [ 578.618405][T15709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.645597][T15709] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 578.672045][T15709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.692209][T15709] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 578.720779][T15709] 69757 total pagecache pages [ 578.725581][T15709] 0 pages in swap cache [ 578.730320][T15709] Swap cache stats: add 0, delete 0, find 0/0 [ 578.758756][T15709] Free swap = 124996kB [ 578.768217][T15709] Total swap = 124996kB [ 578.780140][T15747] device wlan1 entered promiscuous mode [ 578.800874][T15709] 2097051 pages RAM [ 578.804765][T15709] 0 pages HighMem/MovableOnly [ 578.829996][T15709] 410826 pages reserved [ 578.850636][T15709] 0 pages cma reserved [ 578.861271][T15089] wlan1: Trigger new scan to find an IBSS to join [ 578.893106][T15756] __nla_validate_parse: 3 callbacks suppressed [ 578.893129][T15756] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4179'. [ 578.971490][T15757] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4178'. [ 579.087781][T15766] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 579.113756][T15767] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4178'. [ 579.189112][T15772] FAULT_INJECTION: forcing a failure. [ 579.189112][T15772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.215605][T15771] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4185'. [ 579.234188][T15772] CPU: 0 PID: 15772 Comm: syz.7.4184 Not tainted syzkaller #0 [ 579.241724][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 579.251807][T15772] Call Trace: [ 579.255130][T15772] [ 579.258095][T15772] dump_stack_lvl+0x168/0x230 [ 579.262817][T15772] ? show_regs_print_info+0x20/0x20 [ 579.268044][T15772] ? load_image+0x3b0/0x3b0 [ 579.272579][T15772] ? __lock_acquire+0x7c60/0x7c60 [ 579.277637][T15772] should_fail+0x38c/0x4c0 [ 579.282091][T15772] _copy_from_user+0x2e/0x170 [ 579.286802][T15772] bpf_test_init+0x136/0x1b0 [ 579.291431][T15772] bpf_prog_test_run_skb+0x181/0x1180 [ 579.296832][T15772] ? __fget_files+0x40f/0x480 [ 579.301551][T15772] ? cpu_online+0x60/0x60 [ 579.305922][T15772] bpf_prog_test_run+0x31e/0x390 [ 579.310895][T15772] __sys_bpf+0x535/0x670 [ 579.315184][T15772] ? bpf_link_show_fdinfo+0x340/0x340 [ 579.320605][T15772] ? vtime_user_exit+0x2dc/0x400 [ 579.325580][T15772] __x64_sys_bpf+0x78/0x90 [ 579.330029][T15772] do_syscall_64+0x4c/0xa0 [ 579.334474][T15772] ? clear_bhb_loop+0x30/0x80 [ 579.339180][T15772] ? clear_bhb_loop+0x30/0x80 [ 579.343887][T15772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.349808][T15772] RIP: 0033:0x7f2e2d85d749 [ 579.354255][T15772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.373884][T15772] RSP: 002b:00007f2e2baa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.382343][T15772] RAX: ffffffffffffffda RBX: 00007f2e2dab4090 RCX: 00007f2e2d85d749 [ 579.390343][T15772] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 579.398342][T15772] RBP: 00007f2e2baa3090 R08: 0000000000000000 R09: 0000000000000000 [ 579.406344][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.414345][T15772] R13: 00007f2e2dab4128 R14: 00007f2e2dab4090 R15: 00007ffc1fbcf748 [ 579.422378][T15772] [ 579.628143][T15771] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4185'. [ 580.139718][T15791] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4192'. [ 580.183427][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4194'. [ 580.238631][T15801] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 580.402496][T15811] netlink: 'syz.3.4198': attribute type 8 has an invalid length. [ 580.422968][T15810] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4199'. [ 580.440648][T15811] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4198'. [ 580.493538][T15810] delete_channel: no stack [ 580.556550][T15810] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.4199'. [ 580.572625][T15810] netlink: zone id is out of range [ 580.580941][T15810] netlink: zone id is out of range [ 580.590287][T15810] netlink: zone id is out of range [ 580.602043][T15810] netlink: zone id is out of range [ 580.612340][T15810] netlink: zone id is out of range [ 580.624547][T15810] netlink: zone id is out of range [ 580.636233][T15810] netlink: zone id is out of range [ 580.648590][T15810] netlink: zone id is out of range [ 580.660191][T15810] netlink: zone id is out of range [ 580.673390][T15810] netlink: zone id is out of range [ 580.731239][T15809] delete_channel: no stack [ 580.899678][T15089] wlan1: Trigger new scan to find an IBSS to join [ 582.863102][ T9] wlan1: Trigger new scan to find an IBSS to join [ 583.275654][T15903] netlink: 'syz.7.4231': attribute type 10 has an invalid length. [ 584.522959][T15945] __nla_validate_parse: 11 callbacks suppressed [ 584.522977][T15945] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4251'. [ 584.610642][T15950] netlink: 'syz.1.4250': attribute type 10 has an invalid length. [ 584.642439][T15950] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4250'. [ 585.036753][T15971] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4261'. [ 585.081463][T15974] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4262'. [ 585.118351][T15977] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 585.161326][T15978] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4262'. [ 585.197920][T15976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4261'. [ 585.463490][T15989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4267'. [ 585.512186][T15992] netlink: 'syz.6.4268': attribute type 10 has an invalid length. [ 585.520078][T15992] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4268'. [ 585.605150][T15996] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4270'. [ 585.686270][T16001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4270'. [ 585.829499][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 586.238956][T16017] netlink: 'syz.6.4277': attribute type 2 has an invalid length. [ 586.507625][T16031] netlink: 'syz.1.4284': attribute type 10 has an invalid length. [ 586.814624][ T4268] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 586.852302][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 587.859132][T15100] wlan1: Trigger new scan to find an IBSS to join [ 587.901969][T16079] netlink: 'syz.3.4304': attribute type 10 has an invalid length. [ 588.394435][T16104] device syzkaller0 entered promiscuous mode [ 588.465243][T16098] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 588.750721][T16115] netlink: 'syz.6.4319': attribute type 4 has an invalid length. [ 588.835718][T15089] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 589.322305][T16154] FAULT_INJECTION: forcing a failure. [ 589.322305][T16154] name failslab, interval 1, probability 0, space 0, times 0 [ 589.349351][T16154] CPU: 1 PID: 16154 Comm: syz.1.4337 Not tainted syzkaller #0 [ 589.356881][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.366981][T16154] Call Trace: [ 589.370285][T16154] [ 589.373261][T16154] dump_stack_lvl+0x168/0x230 [ 589.377988][T16154] ? show_regs_print_info+0x20/0x20 [ 589.383236][T16154] ? load_image+0x3b0/0x3b0 [ 589.387798][T16154] ? __might_sleep+0xf0/0xf0 [ 589.392434][T16154] ? __lock_acquire+0x7c60/0x7c60 [ 589.397495][T16154] ? trace_event_raw_event_lock+0x250/0x250 [ 589.403412][T16154] should_fail+0x38c/0x4c0 [ 589.407857][T16154] should_failslab+0x5/0x20 [ 589.412380][T16154] slab_pre_alloc_hook+0x51/0xc0 [ 589.417336][T16154] kmem_cache_alloc_trace+0x47/0x2a0 [ 589.422739][T16154] ? pfifo_fast_change_tx_queue_len+0x9f/0xa50 [ 589.428923][T16154] pfifo_fast_change_tx_queue_len+0x9f/0xa50 [ 589.434918][T16154] ? lockdep_hardirqs_on+0x94/0x140 [ 589.440144][T16154] ? __local_bh_enable_ip+0x12a/0x1b0 [ 589.445551][T16154] ? _local_bh_enable+0xa0/0xa0 [ 589.450437][T16154] ? dev_deactivate_many+0xa61/0xc10 [ 589.455791][T16154] ? dev_deactivate_many+0xbf1/0xc10 [ 589.461122][T16154] ? pfifo_fast_destroy+0xd0/0xd0 [ 589.466175][T16154] dev_qdisc_change_tx_queue_len+0x318/0x480 [ 589.472190][T16154] ? dev_qdisc_change_real_num_tx+0x120/0x120 [ 589.478299][T16154] ? raw_notifier_call_chain+0x143/0x160 [ 589.483969][T16154] dev_change_tx_queue_len+0x15f/0x260 [ 589.489498][T16154] ? dev_set_mtu+0xc0/0xc0 [ 589.493931][T16154] ? __mutex_lock_common+0x431/0x2390 [ 589.499376][T16154] dev_ifsioc+0x25c/0xe70 [ 589.503899][T16154] ? dev_ioctl+0xe50/0xe50 [ 589.508353][T16154] ? apparmor_capable+0x12c/0x190 [ 589.513395][T16154] ? full_name_hash+0xac/0xe0 [ 589.518238][T16154] dev_ioctl+0x55f/0xe50 [ 589.522515][T16154] ? _copy_from_user+0x111/0x170 [ 589.527591][T16154] sock_do_ioctl+0x222/0x2f0 [ 589.532218][T16154] ? sock_show_fdinfo+0xb0/0xb0 [ 589.537500][T16154] sock_ioctl+0x4ed/0x6e0 [ 589.541945][T16154] ? sock_poll+0x3f0/0x3f0 [ 589.546390][T16154] ? bpf_lsm_file_ioctl+0x5/0x10 [ 589.551341][T16154] ? security_file_ioctl+0x7c/0xa0 [ 589.556478][T16154] ? sock_poll+0x3f0/0x3f0 [ 589.561018][T16154] __se_sys_ioctl+0xfa/0x170 [ 589.565648][T16154] do_syscall_64+0x4c/0xa0 [ 589.570094][T16154] ? clear_bhb_loop+0x30/0x80 [ 589.575063][T16154] ? clear_bhb_loop+0x30/0x80 [ 589.579883][T16154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 589.585813][T16154] RIP: 0033:0x7f56e3b76749 [ 589.590418][T16154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.610062][T16154] RSP: 002b:00007f56e1ddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.618503][T16154] RAX: ffffffffffffffda RBX: 00007f56e3dccfa0 RCX: 00007f56e3b76749 [ 589.626610][T16154] RDX: 0000200000000100 RSI: 0000000000008943 RDI: 0000000000000004 [ 589.634604][T16154] RBP: 00007f56e1ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 589.642682][T16154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.650669][T16154] R13: 00007f56e3dcd038 R14: 00007f56e3dccfa0 R15: 00007ffc2ef54c78 [ 589.658688][T16154] [ 589.665350][T16154] macvtap0: refused to change device tx_queue_len [ 589.770200][T16163] __nla_validate_parse: 13 callbacks suppressed [ 589.770221][T16163] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4341'. [ 589.941289][T16174] macvtap0: refused to change device tx_queue_len [ 590.096460][T16179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4348'. [ 590.124378][T16191] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 591.109488][T16200] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4353'. [ 591.229561][T16204] netlink: 'syz.6.4356': attribute type 10 has an invalid length. [ 591.240074][T16204] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4356'. [ 591.295592][T16205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4353'. [ 591.315391][T16209] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 591.575941][T16226] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4365'. [ 591.725204][T16233] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4377'. [ 592.536038][T16235] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 593.002416][T16243] device syzkaller0 entered promiscuous mode [ 593.030940][T16258] netlink: 'syz.1.4375': attribute type 10 has an invalid length. [ 593.050240][T16258] team0: Device ipvlan1 failed to register rx_handler [ 593.106485][T16262] netlink: 'syz.7.4372': attribute type 10 has an invalid length. [ 593.131139][T16262] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4372'. [ 593.141050][T16266] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 593.151163][ T4262] syzkaller0: tun_net_xmit 48 [ 593.250949][T16269] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4379'. [ 593.267420][T16269] net_ratelimit: 235 callbacks suppressed [ 593.267440][T16269] openvswitch: netlink: Flow actions attr not present in new flow. [ 593.409260][T16273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4381'. [ 593.529995][T16279] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.782531][ T9] wlan1: Trigger new scan to find an IBSS to join [ 594.837812][T16302] device syzkaller0 entered promiscuous mode [ 594.936676][T16307] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.971995][ T4225] syzkaller0: tun_net_xmit 48 [ 595.030281][T16314] __nla_validate_parse: 2 callbacks suppressed [ 595.030304][T16314] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4394'. [ 595.188436][T16318] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4396'. [ 595.230896][T16321] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 595.268991][T16318] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4396'. [ 596.024986][T16341] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 596.382385][T16346] netlink: 'syz.7.4408': attribute type 10 has an invalid length. [ 596.390268][T16346] netlink: 55 bytes leftover after parsing attributes in process `syz.7.4408'. [ 596.474539][T16350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4410'. [ 596.492693][T16348] netlink: 'syz.5.4409': attribute type 39 has an invalid length. [ 596.914279][T16371] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4417'. [ 597.040656][T16374] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 597.102112][T16378] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4417'. [ 597.200985][T16384] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 597.427195][T16389] netlink: 'syz.3.4422': attribute type 8 has an invalid length. [ 597.470058][T16389] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4422'. [ 597.800424][T16399] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4427'. [ 597.905601][T16401] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4428'. [ 597.923339][T16397] netlink: 'syz.1.4426': attribute type 39 has an invalid length. [ 598.267181][T16417] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 598.765534][T16426] netlink: 'syz.3.4435': attribute type 8 has an invalid length. [ 598.874282][T16430] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 599.631887][T16448] netlink: 'syz.6.4443': attribute type 39 has an invalid length. [ 599.820730][T15100] wlan1: Trigger new scan to find an IBSS to join [ 599.829972][T16452] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 599.923673][T16454] netlink: 'syz.3.4445': attribute type 39 has an invalid length. [ 600.473915][T16460] netlink: 'syz.3.4445': attribute type 2 has an invalid length. [ 600.604293][T16464] netlink: 'syz.6.4447': attribute type 21 has an invalid length. [ 600.651274][T16464] __nla_validate_parse: 5 callbacks suppressed [ 600.651294][T16464] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4447'. [ 601.101728][T16479] netlink: 'syz.1.4450': attribute type 8 has an invalid length. [ 601.122998][T16481] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 601.176819][T16479] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4450'. [ 601.371015][T13103] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 601.596874][T16491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4455'. [ 601.876456][T16497] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 602.220404][T16507] netlink: 'syz.1.4461': attribute type 10 has an invalid length. [ 602.257721][T16507] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4461'. [ 602.518123][T16520] netlink: 'syz.5.4465': attribute type 8 has an invalid length. [ 602.534880][T16520] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4465'. [ 602.630033][T16518] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 602.860777][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 602.928375][T16527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4469'. [ 603.133153][T16528] netlink: 'syz.3.4468': attribute type 39 has an invalid length. [ 603.697220][T16533] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.109958][T16552] netlink: 'syz.5.4479': attribute type 10 has an invalid length. [ 604.128490][T16552] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4479'. [ 604.570712][T16557] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.794351][T16562] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4482'. [ 604.926069][T16566] netlink: 'syz.5.4483': attribute type 39 has an invalid length. [ 605.910751][ T4226] Bluetooth: hci1: command 0x0406 tx timeout [ 605.932750][T16592] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 606.225663][T16598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4496'. [ 606.705538][T16608] netlink: 'syz.3.4500': attribute type 39 has an invalid length. [ 607.124313][T16627] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 607.277931][T16629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4510'. [ 607.954008][T16647] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4516'. [ 608.621353][T16654] netlink: 'syz.6.4519': attribute type 39 has an invalid length. [ 608.724981][T16660] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 609.170909][T16666] netlink: 'syz.1.4525': attribute type 10 has an invalid length. [ 609.178813][T16666] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4525'. [ 609.345877][T16675] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4527'. [ 609.820908][T15091] wlan1: Trigger new scan to find an IBSS to join [ 610.309251][T16692] netlink: 'syz.1.4534': attribute type 39 has an invalid length. [ 610.454565][T16698] netlink: 'syz.6.4536': attribute type 21 has an invalid length. [ 610.463051][T16698] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4536'. [ 610.644739][T16701] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.950781][T16722] netlink: 'syz.6.4544': attribute type 10 has an invalid length. [ 612.852773][T16722] team0: Port device vlan0 added [ 612.858611][T16733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4546'. [ 613.217794][T16735] chnl_net:caif_netlink_parms(): no params data found [ 613.347138][T16750] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 613.797371][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.825346][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.889850][T16735] device bridge_slave_0 entered promiscuous mode [ 613.923304][T16735] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.948815][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.021876][T16735] device bridge_slave_1 entered promiscuous mode [ 614.780731][T16762] netlink: 'syz.5.4556': attribute type 39 has an invalid length. [ 614.783708][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 614.802409][T16776] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4561'. [ 614.859659][T16735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.860934][ T4221] Bluetooth: hci2: command 0x0409 tx timeout [ 614.901062][T16735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.026449][T16735] team0: Port device team_slave_0 added [ 615.052933][T16735] team0: Port device team_slave_1 added [ 615.082873][T16787] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 615.181027][T16791] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4564'. [ 615.354603][T16735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.362697][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.391512][T16735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.605871][T16735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.613909][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.641082][T16735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.705474][T15114] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.730334][T16735] device hsr_slave_0 entered promiscuous mode [ 616.578780][T16735] device hsr_slave_1 entered promiscuous mode [ 616.590647][T16735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.602972][T16735] Cannot create hsr debugfs directory [ 616.641365][T16808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4571'. [ 616.652300][T16811] netlink: 'syz.6.4573': attribute type 39 has an invalid length. [ 616.783842][T15114] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.913139][T15114] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.942464][ T2238] Bluetooth: hci2: command 0x041b tx timeout [ 617.852390][T16828] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 617.894954][T16840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4585'. [ 617.943673][T15114] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.990305][T16846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4586'. [ 618.011688][T16850] netlink: 'syz.6.4588': attribute type 39 has an invalid length. [ 618.181503][T16735] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 618.269381][T16735] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 618.312686][T16735] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 618.328292][T16735] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 618.780784][T15089] wlan1: Trigger new scan to find an IBSS to join [ 619.023702][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 619.271159][T16877] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 619.282112][T16876] netlink: 'syz.3.4598': attribute type 39 has an invalid length. [ 619.392204][T16889] netlink: 'syz.5.4602': attribute type 39 has an invalid length. [ 619.577364][T16735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.619149][T16899] netlink: 'syz.5.4608': attribute type 10 has an invalid length. [ 619.767413][T16899] device vlan0 entered promiscuous mode [ 619.811244][T16899] team0: Port device vlan0 added [ 620.614674][T16906] netlink: 'syz.1.4611': attribute type 2 has an invalid length. [ 620.669584][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 620.697153][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.719012][T16735] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.758507][T16917] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 620.849948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 620.861203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 620.905359][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.912635][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.930798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 620.939927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 620.949106][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.956251][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.965358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 620.975003][T16921] netlink: 'syz.1.4617': attribute type 39 has an invalid length. [ 621.017052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 621.111177][ T4240] Bluetooth: hci2: command 0x0419 tx timeout [ 621.129267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 621.141688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 621.167712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 621.187175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 621.221111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 621.252562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 621.284729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 621.293423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 621.302569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.311867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 621.323805][T16735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 621.820778][T13103] wlan1: Trigger new scan to find an IBSS to join [ 622.110711][T16947] netlink: 'syz.5.4628': attribute type 2 has an invalid length. [ 622.179582][T16950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4629'. [ 622.220049][T16953] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 622.453559][T15114] device hsr_slave_0 left promiscuous mode [ 622.460388][T15114] device hsr_slave_1 left promiscuous mode [ 622.467980][T15114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.476026][T15114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.503843][T15114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.537483][T15114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.561555][T15114] bridge0: port 3(dummy0) entered disabled state [ 622.582585][T15114] device bridge_slave_0 left promiscuous mode [ 622.588987][T15114] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.619375][T15114] device veth1_macvtap left promiscuous mode [ 622.633344][T15114] device veth0_macvtap left promiscuous mode [ 622.788306][T15114] team0 (unregistering): Port device geneve1 removed [ 622.867224][T15114] team0 (unregistering): Port device team_slave_1 removed [ 622.899774][T15114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.924530][T15114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.944470][T15114] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 622.988449][T15114] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 623.034083][T15114] bond0 (unregistering): Released all slaves [ 623.089857][T16963] netlink: 'syz.3.4634': attribute type 39 has an invalid length. [ 623.148579][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.165425][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.091998][T16735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.110800][T16989] netlink: 'syz.3.4642': attribute type 2 has an invalid length. [ 624.201487][T16992] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4643'. [ 624.280079][T17002] netlink: 'syz.3.4647': attribute type 10 has an invalid length. [ 624.303398][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.309890][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.342820][T17002] device batadv0 entered promiscuous mode [ 624.401267][T17010] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 624.574518][T17016] netlink: 'syz.3.4651': attribute type 39 has an invalid length. [ 624.690112][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 624.708358][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.807105][T17023] netlink: 'syz.5.4654': attribute type 10 has an invalid length. [ 624.828156][T17023] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4654'. [ 624.860917][ T9] wlan1: Trigger new scan to find an IBSS to join [ 625.431915][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 625.440844][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.451200][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.459362][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.482258][T16735] device veth0_vlan entered promiscuous mode [ 625.533988][T17029] netlink: 'syz.6.4657': attribute type 21 has an invalid length. [ 625.556659][T17029] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4657'. [ 625.567154][T17029] netlink: 'syz.6.4657': attribute type 5 has an invalid length. [ 625.576982][T17029] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4657'. [ 625.618936][T16735] device veth1_vlan entered promiscuous mode [ 625.715303][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 625.741397][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 625.756538][T16735] device veth0_macvtap entered promiscuous mode [ 625.787342][T16735] device veth1_macvtap entered promiscuous mode [ 625.867521][T16735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.902372][T16735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.942672][T16735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.970645][T16735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.000819][T16735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.041440][T16735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.092110][T16735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.489346][T17044] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 628.501777][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.516069][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.525208][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.544677][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.581595][T16735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.601198][T16735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.611738][T16735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.623845][T16735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.645232][T16735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.656129][T16735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.670556][T16735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.681812][T16735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.703170][T16735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.734432][T16735] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.748582][T16735] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.783522][T16735] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.827886][T16735] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.872086][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 628.892228][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 628.937068][T17057] netlink: 'syz.1.4668': attribute type 39 has an invalid length. [ 629.731270][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.739477][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.838811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 629.886790][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.919264][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.958734][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.001567][T17083] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 630.791304][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 632.890774][T17093] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4680'. [ 633.814705][T17106] netlink: 'syz.3.4684': attribute type 2 has an invalid length. [ 633.897635][T17114] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4687'. [ 633.977604][T17119] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4687'. [ 634.020706][T17113] netlink: 'syz.1.4688': attribute type 10 has an invalid length. [ 634.028597][T17113] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4688'. [ 634.052962][T17121] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 634.235040][T17118] netlink: 186324 bytes leftover after parsing attributes in process `syz.3.4690'. [ 634.334103][T17131] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4693'. [ 634.438040][T17135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4695'. [ 634.786746][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 637.216280][T13103] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 637.229152][T17148] netlink: 'syz.5.4700': attribute type 2 has an invalid length. [ 637.365349][T17157] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 637.464262][T17158] netlink: 'syz.1.4704': attribute type 39 has an invalid length. [ 637.651855][T17165] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4707'. [ 637.721270][T17171] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 637.899620][T17183] FAULT_INJECTION: forcing a failure. [ 637.899620][T17183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.937166][T17184] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4714'. [ 637.952093][T17183] CPU: 0 PID: 17183 Comm: syz.6.4715 Not tainted syzkaller #0 [ 637.959625][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 637.969726][T17183] Call Trace: [ 637.973031][T17183] [ 637.975987][T17183] dump_stack_lvl+0x168/0x230 [ 637.980704][T17183] ? show_regs_print_info+0x20/0x20 [ 637.985938][T17183] ? load_image+0x3b0/0x3b0 [ 637.990542][T17183] ? __lock_acquire+0x7c60/0x7c60 [ 637.995609][T17183] should_fail+0x38c/0x4c0 [ 638.000081][T17183] _copy_to_user+0x2e/0x130 [ 638.004624][T17183] simple_read_from_buffer+0xe3/0x150 [ 638.010040][T17183] proc_fail_nth_read+0x19a/0x210 [ 638.015109][T17183] ? proc_fault_inject_write+0x2f0/0x2f0 [ 638.020787][T17183] ? fsnotify_perm+0x254/0x560 [ 638.025595][T17183] ? proc_fault_inject_write+0x2f0/0x2f0 [ 638.031274][T17183] vfs_read+0x2f6/0xcf0 [ 638.035473][T17183] ? kernel_read+0x1e0/0x1e0 [ 638.040106][T17183] ? __fget_files+0x40f/0x480 [ 638.044831][T17183] ? mutex_lock_nested+0x17/0x20 [ 638.049808][T17183] ? __fdget_pos+0x2bf/0x370 [ 638.054444][T17183] ? ksys_read+0x71/0x250 [ 638.058811][T17183] ksys_read+0x14d/0x250 [ 638.063091][T17183] ? vfs_write+0xd00/0xd00 [ 638.067573][T17183] ? lockdep_hardirqs_on+0x94/0x140 [ 638.072825][T17183] do_syscall_64+0x4c/0xa0 [ 638.077279][T17183] ? clear_bhb_loop+0x30/0x80 [ 638.082039][T17183] ? clear_bhb_loop+0x30/0x80 [ 638.086819][T17183] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 638.092758][T17183] RIP: 0033:0x7f7f9062f15c [ 638.097222][T17183] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 638.116876][T17183] RSP: 002b:00007f7f8e897030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 638.125338][T17183] RAX: ffffffffffffffda RBX: 00007f7f90886fa0 RCX: 00007f7f9062f15c [ 638.133349][T17183] RDX: 000000000000000f RSI: 00007f7f8e8970a0 RDI: 0000000000000005 [ 638.141357][T17183] RBP: 00007f7f8e897090 R08: 0000000000000000 R09: 0000000000000000 [ 638.149366][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.157375][T17183] R13: 00007f7f90887038 R14: 00007f7f90886fa0 R15: 00007ffe14da0c78 [ 638.165400][T17183] [ 638.296138][T17192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4714'. [ 640.915484][T17197] netlink: 'syz.8.4719': attribute type 2 has an invalid length. [ 640.964661][T17199] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 641.207567][T17213] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4726'. [ 641.280359][T17215] netlink: 'syz.5.4725': attribute type 39 has an invalid length. [ 641.343287][T17220] netlink: 'syz.1.4728': attribute type 3 has an invalid length. [ 641.384329][T17220] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4728'. [ 641.412565][T17220] netlink: 'syz.1.4728': attribute type 16 has an invalid length. [ 641.421911][T17229] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4732'. [ 641.440646][T17220] netlink: 'syz.1.4728': attribute type 3 has an invalid length. [ 641.460352][T17220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4728'. [ 641.473515][T17232] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 641.758530][T17237] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4732'. [ 641.908938][T17247] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 642.148624][T17252] netlink: 'syz.3.4740': attribute type 39 has an invalid length. [ 642.299632][T17256] netlink: 'syz.8.4743': attribute type 39 has an invalid length. [ 642.526792][T17268] netlink: 'syz.6.4745': attribute type 21 has an invalid length. [ 642.610079][T17268] IPv6: NLM_F_CREATE should be specified when creating new route [ 642.765203][T17280] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 642.816218][T17282] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 643.459267][T17306] netlink: 'syz.6.4760': attribute type 10 has an invalid length. [ 643.479670][T17306] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4760'. [ 643.585310][T17312] netlink: 'syz.5.4762': attribute type 3 has an invalid length. [ 643.610945][T17312] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.4762'. [ 643.641910][T17317] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 643.801324][T17324] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4768'. [ 644.038537][T17337] FAULT_INJECTION: forcing a failure. [ 644.038537][T17337] name failslab, interval 1, probability 0, space 0, times 0 [ 644.058206][T17337] CPU: 1 PID: 17337 Comm: syz.8.4774 Not tainted syzkaller #0 [ 644.065745][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.075838][T17337] Call Trace: [ 644.079144][T17337] [ 644.082096][T17337] dump_stack_lvl+0x168/0x230 [ 644.086809][T17337] ? show_regs_print_info+0x20/0x20 [ 644.092211][T17337] ? load_image+0x3b0/0x3b0 [ 644.096749][T17337] ? __might_sleep+0xf0/0xf0 [ 644.101366][T17337] ? __lock_acquire+0x7c60/0x7c60 [ 644.106432][T17337] should_fail+0x38c/0x4c0 [ 644.110884][T17337] should_failslab+0x5/0x20 [ 644.115416][T17337] slab_pre_alloc_hook+0x51/0xc0 [ 644.120387][T17337] __kmalloc+0x6b/0x330 [ 644.124572][T17337] ? tomoyo_encode+0x27e/0x540 [ 644.129365][T17337] tomoyo_encode+0x27e/0x540 [ 644.133993][T17337] tomoyo_realpath_from_path+0x5cd/0x610 [ 644.139668][T17337] tomoyo_path_number_perm+0x1d5/0x5d0 [ 644.145166][T17337] ? verify_lock_unused+0x140/0x140 [ 644.150414][T17337] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 644.155901][T17337] ? ksys_write+0x1c7/0x250 [ 644.160509][T17337] security_file_ioctl+0x6c/0xa0 [ 644.165485][T17337] __se_sys_ioctl+0x48/0x170 [ 644.170114][T17337] do_syscall_64+0x4c/0xa0 [ 644.174557][T17337] ? clear_bhb_loop+0x30/0x80 [ 644.179258][T17337] ? clear_bhb_loop+0x30/0x80 [ 644.183957][T17337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 644.189878][T17337] RIP: 0033:0x7fde164c6749 [ 644.194318][T17337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.213948][T17337] RSP: 002b:00007fde1472d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.222488][T17337] RAX: ffffffffffffffda RBX: 00007fde1671cfa0 RCX: 00007fde164c6749 [ 644.230498][T17337] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 644.238503][T17337] RBP: 00007fde1472d090 R08: 0000000000000000 R09: 0000000000000000 [ 644.246605][T17337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.254604][T17337] R13: 00007fde1671d038 R14: 00007fde1671cfa0 R15: 00007ffe85887ac8 [ 644.262710][T17337] [ 644.271059][T17337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 644.425817][T17346] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4778'. [ 644.471535][T17352] FAULT_INJECTION: forcing a failure. [ 644.471535][T17352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.491356][T17352] CPU: 1 PID: 17352 Comm: syz.1.4781 Not tainted syzkaller #0 [ 644.498882][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.508962][T17352] Call Trace: [ 644.512260][T17352] [ 644.515202][T17352] dump_stack_lvl+0x168/0x230 [ 644.519901][T17352] ? show_regs_print_info+0x20/0x20 [ 644.525110][T17352] ? load_image+0x3b0/0x3b0 [ 644.529630][T17352] ? __lock_acquire+0x7c60/0x7c60 [ 644.534668][T17352] should_fail+0x38c/0x4c0 [ 644.539099][T17352] strncpy_from_user+0x32/0x360 [ 644.544056][T17352] getname_flags+0xef/0x500 [ 644.548577][T17352] do_sys_openat2+0xcf/0x4a0 [ 644.553178][T17352] ? __lock_acquire+0x7c60/0x7c60 [ 644.558220][T17352] ? do_sys_open+0xe0/0xe0 [ 644.562650][T17352] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 644.568642][T17352] ? lock_chain_count+0x20/0x20 [ 644.573507][T17352] ? vtime_user_exit+0x2dc/0x400 [ 644.578463][T17352] __x64_sys_openat+0x135/0x160 [ 644.583326][T17352] do_syscall_64+0x4c/0xa0 [ 644.587747][T17352] ? clear_bhb_loop+0x30/0x80 [ 644.592450][T17352] ? clear_bhb_loop+0x30/0x80 [ 644.597141][T17352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 644.603040][T17352] RIP: 0033:0x7f56e3b74f90 [ 644.607463][T17352] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 644.627088][T17352] RSP: 002b:00007f56e1ddcf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 644.635627][T17352] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f56e3b74f90 [ 644.643631][T17352] RDX: 0000000000000002 RSI: 00007f56e1ddcfa0 RDI: 00000000ffffff9c [ 644.651608][T17352] RBP: 00007f56e1ddcfa0 R08: 0000000000000000 R09: 00007f56e1ddccd5 [ 644.659738][T17352] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 644.667727][T17352] R13: 00007f56e3dcd038 R14: 00007f56e3dccfa0 R15: 00007ffc2ef54c78 [ 644.675736][T17352] [ 644.735597][T17358] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 644.846952][T17364] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4786'. [ 644.870849][T15091] wlan1: Trigger new scan to find an IBSS to join [ 644.889595][T17364] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4786'. [ 644.950690][T17368] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4786'. [ 644.970213][T17372] FAULT_INJECTION: forcing a failure. [ 644.970213][T17372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.056329][T17372] CPU: 0 PID: 17372 Comm: syz.3.4789 Not tainted syzkaller #0 [ 645.063964][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 645.074046][T17372] Call Trace: [ 645.077368][T17372] [ 645.080320][T17372] dump_stack_lvl+0x168/0x230 [ 645.085122][T17372] ? show_regs_print_info+0x20/0x20 [ 645.090355][T17372] ? load_image+0x3b0/0x3b0 [ 645.094904][T17372] ? __lock_acquire+0x7c60/0x7c60 [ 645.099997][T17372] should_fail+0x38c/0x4c0 [ 645.104499][T17372] _copy_to_user+0x2e/0x130 [ 645.109036][T17372] simple_read_from_buffer+0xe3/0x150 [ 645.114446][T17372] proc_fail_nth_read+0x19a/0x210 [ 645.119503][T17372] ? proc_fault_inject_write+0x2f0/0x2f0 [ 645.125174][T17372] ? fsnotify_perm+0x254/0x560 [ 645.129969][T17372] ? proc_fault_inject_write+0x2f0/0x2f0 [ 645.135657][T17372] vfs_read+0x2f6/0xcf0 [ 645.139861][T17372] ? kernel_read+0x1e0/0x1e0 [ 645.144488][T17372] ? __fget_files+0x40f/0x480 [ 645.149210][T17372] ? mutex_lock_nested+0x17/0x20 [ 645.154168][T17372] ? __fdget_pos+0x2bf/0x370 [ 645.158871][T17372] ? ksys_read+0x71/0x250 [ 645.163242][T17372] ksys_read+0x14d/0x250 [ 645.167511][T17372] ? vfs_write+0xd00/0xd00 [ 645.171960][T17372] ? lockdep_hardirqs_on+0x94/0x140 [ 645.177192][T17372] do_syscall_64+0x4c/0xa0 [ 645.181635][T17372] ? clear_bhb_loop+0x30/0x80 [ 645.186335][T17372] ? clear_bhb_loop+0x30/0x80 [ 645.191049][T17372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 645.197065][T17372] RIP: 0033:0x7fac74a0315c [ 645.201503][T17372] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 645.221132][T17372] RSP: 002b:00007fac72c6b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.229587][T17372] RAX: ffffffffffffffda RBX: 00007fac74c5afa0 RCX: 00007fac74a0315c [ 645.237578][T17372] RDX: 000000000000000f RSI: 00007fac72c6b0a0 RDI: 0000000000000004 [ 645.245563][T17372] RBP: 00007fac72c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 645.253724][T17372] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 645.261812][T17372] R13: 00007fac74c5b038 R14: 00007fac74c5afa0 R15: 00007ffdf042d208 [ 645.269861][T17372] [ 645.287632][T17364] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.4786'. [ 645.564762][T17395] netlink: 2943 bytes leftover after parsing attributes in process `syz.6.4799'. [ 645.631098][T17398] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4797'. [ 645.687708][T17403] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 646.030248][T17416] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 646.213722][T17420] validate_nla: 5 callbacks suppressed [ 646.213738][T17420] netlink: 'syz.3.4806': attribute type 3 has an invalid length. [ 646.288695][T17420] netlink: 'syz.3.4806': attribute type 16 has an invalid length. [ 646.310885][T17420] netlink: 'syz.3.4806': attribute type 3 has an invalid length. [ 646.623596][T17443] netlink: 'syz.1.4815': attribute type 10 has an invalid length. [ 646.764819][T17449] FAULT_INJECTION: forcing a failure. [ 646.764819][T17449] name failslab, interval 1, probability 0, space 0, times 0 [ 646.806047][T17449] CPU: 0 PID: 17449 Comm: syz.3.4817 Not tainted syzkaller #0 [ 646.813591][T17449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 646.823770][T17449] Call Trace: [ 646.827078][T17449] [ 646.830033][T17449] dump_stack_lvl+0x168/0x230 [ 646.834757][T17449] ? show_regs_print_info+0x20/0x20 [ 646.840000][T17449] ? load_image+0x3b0/0x3b0 [ 646.844546][T17449] ? __might_sleep+0xf0/0xf0 [ 646.849258][T17449] ? __lock_acquire+0x7c60/0x7c60 [ 646.854335][T17449] should_fail+0x38c/0x4c0 [ 646.858797][T17449] should_failslab+0x5/0x20 [ 646.863345][T17449] slab_pre_alloc_hook+0x51/0xc0 [ 646.868328][T17449] __kmalloc+0x6b/0x330 [ 646.872519][T17449] ? bpf_test_init+0xf8/0x1b0 [ 646.877248][T17449] bpf_test_init+0xf8/0x1b0 [ 646.882063][T17449] bpf_prog_test_run_xdp+0x1ae/0x920 [ 646.887397][T17449] ? dev_put+0x70/0x70 [ 646.891519][T17449] ? dev_put+0x70/0x70 [ 646.895616][T17449] bpf_prog_test_run+0x31e/0x390 [ 646.900687][T17449] __sys_bpf+0x535/0x670 [ 646.905102][T17449] ? bpf_link_show_fdinfo+0x340/0x340 [ 646.910541][T17449] ? vtime_user_exit+0x2dc/0x400 [ 646.915545][T17449] __x64_sys_bpf+0x78/0x90 [ 646.920125][T17449] do_syscall_64+0x4c/0xa0 [ 646.924577][T17449] ? clear_bhb_loop+0x30/0x80 [ 646.929304][T17449] ? clear_bhb_loop+0x30/0x80 [ 646.934043][T17449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 646.940196][T17449] RIP: 0033:0x7fac74a04749 [ 646.944665][T17449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.964316][T17449] RSP: 002b:00007fac72c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.972782][T17449] RAX: ffffffffffffffda RBX: 00007fac74c5afa0 RCX: 00007fac74a04749 [ 646.980933][T17449] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 646.988955][T17449] RBP: 00007fac72c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 646.996968][T17449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.005062][T17449] R13: 00007fac74c5b038 R14: 00007fac74c5afa0 R15: 00007ffdf042d208 [ 647.013249][T17449] [ 647.248146][T17434] FAULT_INJECTION: forcing a failure. [ 647.248146][T17434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 647.263021][T17434] CPU: 1 PID: 17434 Comm: syz.6.4813 Not tainted syzkaller #0 [ 647.270533][T17434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.280636][T17434] Call Trace: [ 647.283944][T17434] [ 647.286926][T17434] dump_stack_lvl+0x168/0x230 [ 647.291647][T17434] ? verify_lock_unused+0x140/0x140 [ 647.296887][T17434] ? show_regs_print_info+0x20/0x20 [ 647.302133][T17434] ? load_image+0x3b0/0x3b0 [ 647.306686][T17434] ? perf_trace_lock+0xdf/0x370 [ 647.311589][T17434] ? mark_lock+0x94/0x320 [ 647.315971][T17434] should_fail+0x38c/0x4c0 [ 647.320433][T17434] prepare_alloc_pages+0x1e4/0x5f0 [ 647.325600][T17434] __alloc_pages+0x10e/0x470 [ 647.330245][T17434] ? zone_statistics+0x170/0x170 [ 647.335227][T17434] ? rcu_lock_acquire+0x30/0x30 [ 647.340122][T17434] ? alloc_pages+0x438/0x550 [ 647.340398][T17455] device syzkaller0 entered promiscuous mode [ 647.350752][T17434] __get_free_pages+0x8/0x30 [ 647.355540][T17434] __tlb_remove_page_size+0x1f2/0x3f0 [ 647.360969][T17434] unmap_page_range+0x10b8/0x2520 [ 647.366064][T17434] ? uprobe_munmap+0x165/0x3f0 [ 647.370886][T17434] unmap_vmas+0x11b/0x230 [ 647.375254][T17434] ? uprobe_clear_state+0x4f/0x460 [ 647.380414][T17434] ? unmap_page_range+0x2520/0x2520 [ 647.385650][T17434] ? __mutex_lock_common+0x431/0x2390 [ 647.391086][T17434] ? memset+0x1e/0x40 [ 647.395123][T17434] exit_mmap+0x38f/0x5f0 [ 647.399419][T17434] ? vm_brk+0x20/0x20 [ 647.403459][T17434] ? uprobe_clear_state+0x2f6/0x460 [ 647.408694][T17434] ? mm_update_next_owner+0x522/0x640 [ 647.414117][T17434] __mmput+0x115/0x3b0 [ 647.418241][T17434] exit_mm+0x567/0x6c0 [ 647.422358][T17434] ? xacct_add_tsk+0x4b0/0x4b0 [ 647.427175][T17434] ? do_exit+0x20a0/0x20a0 [ 647.431631][T17434] ? taskstats_exit+0x439/0xab0 [ 647.436527][T17434] ? tty_audit_exit+0x14e/0x1f0 [ 647.441401][T17434] do_exit+0x5a1/0x20a0 [ 647.445589][T17434] ? put_task_struct+0x80/0x80 [ 647.450381][T17434] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 647.456390][T17434] ? lock_chain_count+0x20/0x20 [ 647.461280][T17434] ? cgroup_freezing+0x264/0x310 [ 647.466238][T17434] do_group_exit+0x12e/0x300 [ 647.470846][T17434] ? lockdep_hardirqs_on+0x94/0x140 [ 647.476071][T17434] get_signal+0x6ca/0x12c0 [ 647.480527][T17434] arch_do_signal_or_restart+0xc1/0x1300 [ 647.486194][T17434] ? kick_process+0xd4/0x140 [ 647.490803][T17434] ? get_sigframe_size+0x10/0x10 [ 647.495789][T17434] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 647.501808][T17434] ? exit_to_user_mode_loop+0x3b/0x130 [ 647.507305][T17434] exit_to_user_mode_loop+0x9e/0x130 [ 647.512616][T17434] exit_to_user_mode_prepare+0xee/0x180 [ 647.518186][T17434] syscall_exit_to_user_mode+0x16/0x40 [ 647.523665][T17434] do_syscall_64+0x58/0xa0 [ 647.528092][T17434] ? clear_bhb_loop+0x30/0x80 [ 647.532787][T17434] ? clear_bhb_loop+0x30/0x80 [ 647.537481][T17434] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 647.543396][T17434] RIP: 0033:0x7f7f90630749 [ 647.547826][T17434] Code: Unable to access opcode bytes at RIP 0x7f7f9063071f. [ 647.555201][T17434] RSP: 002b:00007f7f8e897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 647.563643][T17434] RAX: 0000000000000000 RBX: 00007f7f90886fa0 RCX: 00007f7f90630749 [ 647.571630][T17434] RDX: 0000000000010002 RSI: 0000200000000580 RDI: 0000000000000004 [ 647.579611][T17434] RBP: 00007f7f8e897090 R08: 0000000000000000 R09: 0000000000000000 [ 647.587616][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.595599][T17434] R13: 00007f7f90887038 R14: 00007f7f90886fa0 R15: 00007ffe14da0c78 [ 647.603696][T17434] [ 647.661500][T17455] netlink: 'syz.8.4820': attribute type 21 has an invalid length. [ 647.824525][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 647.867552][T17477] netlink: 'syz.5.4825': attribute type 3 has an invalid length. [ 647.928614][T17473] netlink: 'syz.5.4825': attribute type 16 has an invalid length. [ 647.947143][T17473] netlink: 'syz.5.4825': attribute type 3 has an invalid length. [ 647.981613][T17484] netlink: 'syz.6.4828': attribute type 10 has an invalid length. [ 648.271369][T17503] FAULT_INJECTION: forcing a failure. [ 648.271369][T17503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.330808][T17503] CPU: 1 PID: 17503 Comm: syz.6.4835 Not tainted syzkaller #0 [ 648.338355][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.348446][T17503] Call Trace: [ 648.351767][T17503] [ 648.354735][T17503] dump_stack_lvl+0x168/0x230 [ 648.359503][T17503] ? show_regs_print_info+0x20/0x20 [ 648.364922][T17503] ? load_image+0x3b0/0x3b0 [ 648.369480][T17503] ? __lock_acquire+0x7c60/0x7c60 [ 648.374545][T17503] ? __lock_acquire+0x13ad/0x7c60 [ 648.379623][T17503] should_fail+0x38c/0x4c0 [ 648.384096][T17503] strncpy_from_user+0x32/0x360 [ 648.388989][T17503] ? perf_trace_preemptirq_template+0x2d0/0x380 [ 648.395264][T17503] bpf_prog_load+0x1a8/0x1550 [ 648.399970][T17503] ? lock_chain_count+0x20/0x20 [ 648.404844][T17503] ? map_freeze+0x350/0x350 [ 648.409387][T17503] ? __sys_bpf+0x284/0x670 [ 648.413826][T17503] ? __sanitizer_cov_trace_switch+0x5e/0xe0 [ 648.419747][T17503] __sys_bpf+0x4c2/0x670 [ 648.424279][T17503] ? bpf_link_show_fdinfo+0x340/0x340 [ 648.429686][T17503] ? __sys_bpf+0x6/0x670 [ 648.433947][T17503] __x64_sys_bpf+0x78/0x90 [ 648.438390][T17503] do_syscall_64+0x4c/0xa0 [ 648.442825][T17503] ? clear_bhb_loop+0x30/0x80 [ 648.447599][T17503] ? clear_bhb_loop+0x30/0x80 [ 648.452284][T17503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 648.458237][T17503] RIP: 0033:0x7f7f90630749 [ 648.462684][T17503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.482321][T17503] RSP: 002b:00007f7f8e897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.490768][T17503] RAX: ffffffffffffffda RBX: 00007f7f90886fa0 RCX: 00007f7f90630749 [ 648.498755][T17503] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 648.506851][T17503] RBP: 00007f7f8e897090 R08: 0000000000000000 R09: 0000000000000000 [ 648.514874][T17503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.523141][T17503] R13: 00007f7f90887038 R14: 00007f7f90886fa0 R15: 00007ffe14da0c78 [ 648.531150][T17503] [ 648.783884][T17521] netlink: 'syz.5.4842': attribute type 10 has an invalid length. [ 648.807679][T17521] __nla_validate_parse: 10 callbacks suppressed [ 648.807701][T17521] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4842'. [ 648.861755][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 649.002960][T17527] netlink: 199824 bytes leftover after parsing attributes in process `syz.8.4844'. [ 649.088667][T17527] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4844'. [ 649.176589][T17535] bridge0: port 4(team0) entered blocking state [ 649.221946][T17535] bridge0: port 4(team0) entered disabled state [ 649.303462][T17535] device team0 entered promiscuous mode [ 649.339042][T17535] device team_slave_0 entered promiscuous mode [ 649.427783][T17535] device team_slave_1 entered promiscuous mode [ 649.462867][T17535] bridge0: port 4(team0) entered blocking state [ 649.469382][T17535] bridge0: port 4(team0) entered forwarding state [ 649.737132][T17560] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4857'. [ 649.751473][T17559] FAULT_INJECTION: forcing a failure. [ 649.751473][T17559] name failslab, interval 1, probability 0, space 0, times 0 [ 649.832283][T17559] CPU: 1 PID: 17559 Comm: syz.3.4858 Not tainted syzkaller #0 [ 649.839832][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 649.850012][T17559] Call Trace: [ 649.853334][T17559] [ 649.856306][T17559] dump_stack_lvl+0x168/0x230 [ 649.861037][T17559] ? show_regs_print_info+0x20/0x20 [ 649.866286][T17559] ? load_image+0x3b0/0x3b0 [ 649.870838][T17559] ? __might_sleep+0xf0/0xf0 [ 649.875469][T17559] ? __lock_acquire+0x7c60/0x7c60 [ 649.880571][T17559] should_fail+0x38c/0x4c0 [ 649.885046][T17559] should_failslab+0x5/0x20 [ 649.889588][T17559] slab_pre_alloc_hook+0x51/0xc0 [ 649.894567][T17559] kmem_cache_alloc_trace+0x47/0x2a0 [ 649.899892][T17559] ? cpu_map_alloc+0x191/0x320 [ 649.904706][T17559] cpu_map_alloc+0x191/0x320 [ 649.909337][T17559] map_create+0x485/0x2350 [ 649.913811][T17559] __sys_bpf+0x2a4/0x670 [ 649.918192][T17559] ? bpf_link_show_fdinfo+0x340/0x340 [ 649.923617][T17559] ? vtime_user_exit+0x2dc/0x400 [ 649.928613][T17559] __x64_sys_bpf+0x78/0x90 [ 649.933071][T17559] do_syscall_64+0x4c/0xa0 [ 649.937519][T17559] ? clear_bhb_loop+0x30/0x80 [ 649.942236][T17559] ? clear_bhb_loop+0x30/0x80 [ 649.946968][T17559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 649.953027][T17559] RIP: 0033:0x7fac74a04749 [ 649.957485][T17559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.977138][T17559] RSP: 002b:00007fac72c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.985775][T17559] RAX: ffffffffffffffda RBX: 00007fac74c5afa0 RCX: 00007fac74a04749 [ 649.993911][T17559] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 650.002039][T17559] RBP: 00007fac72c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 650.010187][T17559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.018206][T17559] R13: 00007fac74c5b038 R14: 00007fac74c5afa0 R15: 00007ffdf042d208 [ 650.026245][T17559] [ 650.467048][T17576] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 650.821056][T17589] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4870'. [ 650.843389][T17589] openvswitch: netlink: Duplicate key (type 0). [ 651.326851][T17602] validate_nla: 4 callbacks suppressed [ 651.326871][T17602] netlink: 'syz.6.4873': attribute type 10 has an invalid length. [ 651.356304][T17602] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4873'. [ 651.795367][T17626] netlink: 2943 bytes leftover after parsing attributes in process `syz.8.4883'. [ 652.013286][T17638] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 652.056723][T17641] netlink: 'syz.5.4890': attribute type 10 has an invalid length. [ 652.096450][T17641] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4890'. [ 652.477659][T17658] netlink: 'syz.5.4896': attribute type 8 has an invalid length. [ 652.514426][T17658] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4896'. [ 652.706543][T17672] netlink: 'syz.5.4901': attribute type 2 has an invalid length. [ 652.723621][T17672] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.4901'. [ 652.860710][ T9] wlan1: Trigger new scan to find an IBSS to join [ 652.867471][ T4268] wlan1: Trigger new scan to find an IBSS to join [ 652.994830][T17678] netlink: 'syz.5.4906': attribute type 10 has an invalid length. [ 653.104254][T17685] netlink: 'syz.6.4907': attribute type 21 has an invalid length. [ 653.131059][T17685] netlink: 'syz.6.4907': attribute type 5 has an invalid length. [ 653.331934][T17703] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 653.758629][T17731] device syzkaller0 entered promiscuous mode [ 656.064793][ T4268] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 656.076091][T15091] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 656.243021][T17745] netlink: 'syz.5.4920': attribute type 39 has an invalid length. [ 656.270374][T17750] netlink: 'syz.8.4918': attribute type 4 has an invalid length. [ 656.302385][T17747] netlink: 'syz.6.4919': attribute type 10 has an invalid length. [ 656.323592][T17747] __nla_validate_parse: 4 callbacks suppressed [ 656.323612][T17747] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4919'. [ 656.408106][T17756] netlink: 'syz.5.4923': attribute type 39 has an invalid length. [ 656.427986][T17757] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 656.616912][T17768] netlink: 'syz.6.4926': attribute type 10 has an invalid length. [ 656.635824][T17767] netlink: 'syz.1.4928': attribute type 21 has an invalid length. [ 656.644475][T17767] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4928'. [ 656.654581][T17767] netlink: 'syz.1.4928': attribute type 5 has an invalid length. [ 656.665570][T17767] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4928'. [ 656.678288][T17768] netlink: 'syz.6.4926': attribute type 10 has an invalid length. [ 656.720877][T17763] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4926'. [ 656.737498][T17771] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4929'. [ 656.758088][T17768] netlink: 'syz.6.4926': attribute type 10 has an invalid length. [ 656.840930][T17772] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4929'. [ 657.107305][T17775] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 657.854776][T17781] netlink: 'syz.3.4934': attribute type 39 has an invalid length. [ 658.019198][T17793] netlink: 'syz.5.4937': attribute type 10 has an invalid length. [ 658.036893][T17793] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4937'. [ 658.097225][T17800] netlink: 'syz.6.4941': attribute type 2 has an invalid length. [ 658.130571][T17800] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.4941'. [ 658.373231][T17814] netlink: 'syz.6.4947': attribute type 21 has an invalid length. [ 658.389246][T17814] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4947'. [ 658.419992][T17814] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4947'. [ 658.468157][T17819] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 659.823677][T15091] wlan1: Trigger new scan to find an IBSS to join [ 660.910810][T17850] FAULT_INJECTION: forcing a failure. [ 660.910810][T17850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.965580][T17850] CPU: 1 PID: 17850 Comm: syz.5.4960 Not tainted syzkaller #0 [ 660.973127][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.983312][T17850] Call Trace: [ 660.986619][T17850] [ 660.989575][T17850] dump_stack_lvl+0x168/0x230 [ 660.994292][T17850] ? show_regs_print_info+0x20/0x20 [ 660.999531][T17850] ? load_image+0x3b0/0x3b0 [ 661.004074][T17850] ? __lock_acquire+0x7c60/0x7c60 [ 661.009144][T17850] ? __htab_map_lookup_elem+0x236/0x2a0 [ 661.014746][T17850] should_fail+0x38c/0x4c0 [ 661.019208][T17850] _copy_to_user+0x2e/0x130 [ 661.023747][T17850] bpf_prog_test_run_syscall+0x373/0x4e0 [ 661.029429][T17850] ? sock_gen_cookie+0x60/0x60 [ 661.034243][T17850] ? sock_gen_cookie+0x60/0x60 [ 661.039086][T17850] bpf_prog_test_run+0x31e/0x390 [ 661.044054][T17850] __sys_bpf+0x535/0x670 [ 661.048319][T17850] ? bpf_link_show_fdinfo+0x340/0x340 [ 661.053706][T17850] ? rcu_nmi_exit+0x6f/0xf0 [ 661.058241][T17850] ? vtime_user_exit+0x2dc/0x400 [ 661.063203][T17850] __x64_sys_bpf+0x78/0x90 [ 661.067635][T17850] do_syscall_64+0x4c/0xa0 [ 661.072062][T17850] ? clear_bhb_loop+0x30/0x80 [ 661.076751][T17850] ? clear_bhb_loop+0x30/0x80 [ 661.081454][T17850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 661.087359][T17850] RIP: 0033:0x7f07ebd7e749 [ 661.091790][T17850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.111414][T17850] RSP: 002b:00007f07e9fe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.119865][T17850] RAX: ffffffffffffffda RBX: 00007f07ebfd4fa0 RCX: 00007f07ebd7e749 [ 661.127858][T17850] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 661.135844][T17850] RBP: 00007f07e9fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 661.144040][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.152036][T17850] R13: 00007f07ebfd5038 R14: 00007f07ebfd4fa0 R15: 00007fffcc399a28 [ 661.160046][T17850] [ 661.329178][T17859] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 661.405303][T17863] __nla_validate_parse: 3 callbacks suppressed [ 661.405338][T17863] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4967'. [ 661.503620][T17863] validate_nla: 6 callbacks suppressed [ 661.503710][T17863] netlink: 'syz.5.4967': attribute type 5 has an invalid length. [ 661.571152][T17863] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4967'. [ 661.676201][T17867] netlink: 'syz.8.4968': attribute type 39 has an invalid length. [ 661.725318][T17873] netlink: 'syz.1.4970': attribute type 10 has an invalid length. [ 661.770549][T17873] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4970'. [ 662.377989][T17883] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.4975'. [ 662.426497][T17883] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4975'. [ 662.455316][T17887] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4977'. [ 662.516242][T17891] netlink: 'syz.5.4979': attribute type 16 has an invalid length. [ 662.567190][T17891] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4979'. [ 662.693859][T17891] device syzkaller0 entered promiscuous mode [ 662.722234][T17900] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 662.746647][T17896] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4980'. [ 662.860680][ T9] wlan1: Trigger new scan to find an IBSS to join [ 662.886468][T17909] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 662.924194][T17907] netlink: 'syz.8.4984': attribute type 39 has an invalid length. [ 663.065265][T17913] netlink: 'syz.3.4988': attribute type 10 has an invalid length. [ 663.079983][T17913] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4988'. [ 663.163413][T17922] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.4990'. [ 663.787084][T17941] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 663.859356][T17939] netlink: 'syz.3.4996': attribute type 39 has an invalid length. [ 664.085855][T17948] netlink: 'syz.1.5001': attribute type 30 has an invalid length. [ 664.153154][T17951] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 664.201470][T17948] netlink: 'syz.1.5001': attribute type 39 has an invalid length. [ 664.435209][T17957] netlink: 'syz.3.5004': attribute type 39 has an invalid length. [ 664.716054][T17971] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 665.014030][T17993] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 665.525051][T18006] bond_slave_1: mtu less than device minimum [ 665.820872][ T4268] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 665.830544][ T9] wlan1: Trigger new scan to find an IBSS to join [ 665.958502][T18023] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 666.287239][T18035] syz.8.5036[18035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.287811][T18035] syz.8.5036[18035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.302907][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.388147][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.472898][T18044] __nla_validate_parse: 12 callbacks suppressed [ 666.472911][T18044] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5039'. [ 666.507332][T18045] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5040'. [ 666.542724][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.569783][T18050] validate_nla: 11 callbacks suppressed [ 666.569803][T18050] netlink: 'syz.5.5041': attribute type 2 has an invalid length. [ 666.679348][T18055] netlink: 'syz.8.5051': attribute type 2 has an invalid length. [ 666.687734][T18055] netlink: 16098 bytes leftover after parsing attributes in process `syz.8.5051'. [ 666.700810][T18053] netlink: 'syz.1.5042': attribute type 39 has an invalid length. [ 666.833855][T18061] netlink: 'syz.5.5044': attribute type 2 has an invalid length. [ 666.893468][T18065] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5043'. [ 666.919362][T18033] chnl_net:caif_netlink_parms(): no params data found [ 667.004508][T18067] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.087895][T18071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5043'. [ 667.185916][T18033] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.195946][T18033] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.204877][T18033] device bridge_slave_0 entered promiscuous mode [ 667.228913][T18074] netlink: 'syz.5.5048': attribute type 10 has an invalid length. [ 667.237312][T18074] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5048'. [ 667.250940][T18033] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.261074][T18033] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.277649][T18033] device bridge_slave_1 entered promiscuous mode [ 667.371200][T18083] netlink: 'syz.3.5052': attribute type 30 has an invalid length. [ 667.390300][T18033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.413657][T18033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.492787][T18083] netlink: 'syz.3.5052': attribute type 39 has an invalid length. [ 667.533977][T18087] netlink: 'syz.5.5054': attribute type 2 has an invalid length. [ 667.547737][T18087] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.5054'. [ 667.559201][T18085] netlink: 'syz.8.5053': attribute type 39 has an invalid length. [ 667.584720][T18033] team0: Port device team_slave_0 added [ 667.617966][T18033] team0: Port device team_slave_1 added [ 667.643303][T18033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.650311][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.699408][T18033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.723248][T18033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.730257][T18033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.757768][T18033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.839090][T18095] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.878130][T18098] netlink: 'syz.1.5057': attribute type 2 has an invalid length. [ 667.908508][T18033] device hsr_slave_0 entered promiscuous mode [ 667.956778][T18033] device hsr_slave_1 entered promiscuous mode [ 667.971962][T18033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.051862][T18033] Cannot create hsr debugfs directory [ 668.160807][T18107] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5060'. [ 668.230868][ T4262] Bluetooth: hci3: command 0x0409 tx timeout [ 668.238163][T18109] FAULT_INJECTION: forcing a failure. [ 668.238163][T18109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.290912][T18109] CPU: 1 PID: 18109 Comm: syz.5.5064 Not tainted syzkaller #0 [ 668.298441][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 668.308512][T18109] Call Trace: [ 668.311823][T18109] [ 668.314778][T18109] dump_stack_lvl+0x168/0x230 [ 668.319471][T18109] ? show_regs_print_info+0x20/0x20 [ 668.324706][T18109] ? load_image+0x3b0/0x3b0 [ 668.329233][T18109] ? __lock_acquire+0x7c60/0x7c60 [ 668.334298][T18109] ? __lock_acquire+0x13ad/0x7c60 [ 668.339354][T18109] should_fail+0x38c/0x4c0 [ 668.343794][T18109] strncpy_from_user+0x32/0x360 [ 668.348701][T18109] bpf_prog_load+0x1a8/0x1550 [ 668.353435][T18109] ? map_freeze+0x350/0x350 [ 668.357979][T18109] ? __might_fault+0xb7/0x110 [ 668.362723][T18109] ? __might_fault+0xb3/0x110 [ 668.367433][T18109] ? bpf_lsm_bpf+0x5/0x10 [ 668.371792][T18109] ? security_bpf+0x7a/0xa0 [ 668.376329][T18109] __sys_bpf+0x4c2/0x670 [ 668.380608][T18109] ? bpf_link_show_fdinfo+0x340/0x340 [ 668.386029][T18109] ? vtime_user_exit+0x2dc/0x400 [ 668.391010][T18109] __x64_sys_bpf+0x78/0x90 [ 668.395463][T18109] do_syscall_64+0x4c/0xa0 [ 668.400001][T18109] ? clear_bhb_loop+0x30/0x80 [ 668.404710][T18109] ? clear_bhb_loop+0x30/0x80 [ 668.409423][T18109] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 668.415405][T18109] RIP: 0033:0x7f07ebd7e749 [ 668.419857][T18109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.439580][T18109] RSP: 002b:00007f07e9fe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.448117][T18109] RAX: ffffffffffffffda RBX: 00007f07ebfd4fa0 RCX: 00007f07ebd7e749 [ 668.456121][T18109] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 668.464122][T18109] RBP: 00007f07e9fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 668.472128][T18109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.480128][T18109] R13: 00007f07ebfd5038 R14: 00007f07ebfd4fa0 R15: 00007fffcc399a28 [ 668.488153][T18109] [ 668.536064][T18115] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5063'. [ 668.697002][T18118] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 668.773535][ T9] device hsr_slave_0 left promiscuous mode [ 668.860991][ T9] device hsr_slave_1 left promiscuous mode [ 668.871136][T15089] wlan1: Trigger new scan to find an IBSS to join [ 668.889945][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.899428][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.918935][ T9] bridge0: port 3(dummy0) entered disabled state [ 668.943093][ T9] device bridge_slave_1 left promiscuous mode [ 668.959865][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.981320][ T9] device bridge_slave_0 left promiscuous mode [ 668.987653][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.011205][ T9] device veth1_vlan left promiscuous mode [ 669.017411][ T9] device veth0_vlan left promiscuous mode [ 669.407062][ T9] team0 (unregistering): Port device vlan0 removed [ 669.514608][ T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 669.543439][ T9] team0 (unregistering): Port device team_slave_1 removed [ 669.582408][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.635103][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.787682][ T9] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 669.800078][ T9] bond0 (unregistering): Released all slaves [ 669.895742][T18131] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 670.040954][T18140] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 670.310634][ T7704] Bluetooth: hci3: command 0x041b tx timeout [ 670.359885][T18147] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5079'. [ 670.414428][T18033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 670.434835][T18033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 670.463469][T18033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 670.488762][T18033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 670.571026][T18159] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 670.899227][T18033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.955136][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.975955][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 671.003557][T18033] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.050177][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 671.085184][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 671.106173][T15089] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.113378][T15089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.169387][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 671.181474][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 671.195963][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.205265][T15089] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.212459][T15089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.247324][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 671.325024][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 671.334843][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 671.348039][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 671.366488][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.412600][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 671.442166][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.452641][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.464631][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.479433][T18033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 671.502293][T18033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 671.523735][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.546064][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.578648][T18197] validate_nla: 3 callbacks suppressed [ 671.578669][T18197] netlink: 'syz.5.5099': attribute type 10 has an invalid length. [ 671.640662][T18197] __nla_validate_parse: 1 callbacks suppressed [ 671.640681][T18197] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5099'. [ 671.788490][T18206] FAULT_INJECTION: forcing a failure. [ 671.788490][T18206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.821077][T15089] wlan1: Trigger new scan to find an IBSS to join [ 671.843694][T18206] CPU: 0 PID: 18206 Comm: syz.1.5104 Not tainted syzkaller #0 [ 671.851220][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 671.861312][T18206] Call Trace: [ 671.864617][T18206] [ 671.867565][T18206] dump_stack_lvl+0x168/0x230 [ 671.872387][T18206] ? show_regs_print_info+0x20/0x20 [ 671.877637][T18206] ? load_image+0x3b0/0x3b0 [ 671.882188][T18206] ? __lock_acquire+0x7c60/0x7c60 [ 671.887248][T18206] ? read_lock_is_recursive+0x10/0x10 [ 671.892661][T18206] should_fail+0x38c/0x4c0 [ 671.897125][T18206] _copy_to_user+0x2e/0x130 [ 671.901673][T18206] bpf_prog_test_run_syscall+0x373/0x4e0 [ 671.907341][T18206] ? sock_gen_cookie+0x60/0x60 [ 671.912139][T18206] ? sock_gen_cookie+0x60/0x60 [ 671.916943][T18206] bpf_prog_test_run+0x31e/0x390 [ 671.921917][T18206] __sys_bpf+0x535/0x670 [ 671.926195][T18206] ? bpf_link_show_fdinfo+0x340/0x340 [ 671.931608][T18206] ? vtime_user_exit+0x2dc/0x400 [ 671.936587][T18206] __x64_sys_bpf+0x78/0x90 [ 671.941042][T18206] do_syscall_64+0x4c/0xa0 [ 671.945491][T18206] ? clear_bhb_loop+0x30/0x80 [ 671.950184][T18206] ? clear_bhb_loop+0x30/0x80 [ 671.954870][T18206] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 671.960786][T18206] RIP: 0033:0x7f56e3b76749 [ 671.965221][T18206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.984844][T18206] RSP: 002b:00007f56e1ddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.993284][T18206] RAX: ffffffffffffffda RBX: 00007f56e3dccfa0 RCX: 00007f56e3b76749 [ 672.001273][T18206] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 672.009260][T18206] RBP: 00007f56e1ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 672.017248][T18206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.025236][T18206] R13: 00007f56e3dcd038 R14: 00007f56e3dccfa0 R15: 00007ffc2ef54c78 [ 672.033250][T18206] [ 672.067296][T18033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.075422][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.096953][T15089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.198911][T18221] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 672.380864][ T7704] Bluetooth: hci3: command 0x040f tx timeout [ 672.548657][T18240] FAULT_INJECTION: forcing a failure. [ 672.548657][T18240] name failslab, interval 1, probability 0, space 0, times 0 [ 672.622395][T18237] netlink: 'syz.3.5112': attribute type 39 has an invalid length. [ 672.631866][T18240] CPU: 0 PID: 18240 Comm: syz.5.5113 Not tainted syzkaller #0 [ 672.639384][T18240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 672.649473][T18240] Call Trace: [ 672.652780][T18240] [ 672.655744][T18240] dump_stack_lvl+0x168/0x230 [ 672.660461][T18240] ? show_regs_print_info+0x20/0x20 [ 672.665707][T18240] ? load_image+0x3b0/0x3b0 [ 672.670249][T18240] ? __might_sleep+0xf0/0xf0 [ 672.674872][T18240] ? __lock_acquire+0x7c60/0x7c60 [ 672.679934][T18240] should_fail+0x38c/0x4c0 [ 672.684408][T18240] should_failslab+0x5/0x20 [ 672.688964][T18240] slab_pre_alloc_hook+0x51/0xc0 [ 672.693921][T18240] __kmalloc_node_track_caller+0x68/0x3a0 [ 672.699682][T18240] ? netlink_sendmsg+0x645/0xbc0 [ 672.704648][T18240] ? kmem_cache_alloc_node+0x162/0x2d0 [ 672.710247][T18240] ? __alloc_skb+0xf4/0x750 [ 672.714785][T18240] ? netlink_sendmsg+0x645/0xbc0 [ 672.719765][T18240] __alloc_skb+0x22c/0x750 [ 672.724221][T18240] netlink_sendmsg+0x645/0xbc0 [ 672.729021][T18240] ? netlink_getsockopt+0x560/0x560 [ 672.734254][T18240] ? aa_sock_msg_perm+0x94/0x150 [ 672.739219][T18240] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 672.744524][T18240] ? security_socket_sendmsg+0x7c/0xa0 [ 672.750001][T18240] ? netlink_getsockopt+0x560/0x560 [ 672.755231][T18240] ____sys_sendmsg+0x5a2/0x8c0 [ 672.760055][T18240] ? memset+0x1e/0x40 [ 672.764108][T18240] ? __sys_sendmsg_sock+0x30/0x30 [ 672.769155][T18240] ? import_iovec+0x6f/0xa0 [ 672.773678][T18240] ___sys_sendmsg+0x1f0/0x260 [ 672.778375][T18240] ? __sys_sendmsg+0x250/0x250 [ 672.783163][T18240] ? vfs_write+0x84d/0xd00 [ 672.787599][T18240] ? __fdget+0x18b/0x210 [ 672.791943][T18240] __se_sys_sendmsg+0x190/0x250 [ 672.796804][T18240] ? __x64_sys_sendmsg+0x80/0x80 [ 672.801754][T18240] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 672.807752][T18240] ? lockdep_hardirqs_on+0x94/0x140 [ 672.812961][T18240] do_syscall_64+0x4c/0xa0 [ 672.817387][T18240] ? clear_bhb_loop+0x30/0x80 [ 672.822069][T18240] ? clear_bhb_loop+0x30/0x80 [ 672.826763][T18240] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 672.832664][T18240] RIP: 0033:0x7f07ebd7e749 [ 672.837090][T18240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.857227][T18240] RSP: 002b:00007f07e9fe5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.865778][T18240] RAX: ffffffffffffffda RBX: 00007f07ebfd4fa0 RCX: 00007f07ebd7e749 [ 672.873773][T18240] RDX: 0000000004000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 672.882349][T18240] RBP: 00007f07e9fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 672.890343][T18240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.898345][T18240] R13: 00007f07ebfd5038 R14: 00007f07ebfd4fa0 R15: 00007fffcc399a28 [ 672.906508][T18240] [ 672.917797][T15114] wlan1: Trigger new scan to find an IBSS to join [ 672.972684][T15114] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 673.035441][T18245] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 673.045912][T15114] ------------[ cut here ]------------ [ 673.060845][T15114] WARNING: CPU: 0 PID: 15114 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x418/0x4a0 [ 673.107086][T15114] Modules linked in: [ 673.128394][T15114] CPU: 0 PID: 15114 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 673.136995][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 673.157157][T15114] Workqueue: cfg80211 cfg80211_event_work [ 673.163901][T15114] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 673.177461][T15114] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 41 70 53 f8 0f 0b eb c3 e8 38 70 53 f8 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 2a 70 53 f8 0f 0b e9 7a fd ff ff e8 [ 673.200927][T15114] RSP: 0018:ffffc90003fbfaa0 EFLAGS: 00010293 [ 673.207537][T15114] RAX: ffffffff89245bd8 RBX: dffffc0000000000 RCX: ffff888066aabb80 [ 673.216180][T15114] RDX: 0000000000000000 RSI: ffffffff8a0b1c60 RDI: ffffffff8a59e580 [ 673.224532][T15114] RBP: ffffc90003fbfb70 R08: dffffc0000000000 R09: fffffbfff1ff7c26 [ 673.233427][T15114] R10: fffffbfff1ff7c26 R11: 1ffffffff1ff7c25 R12: ffff888022b23550 [ 673.248618][T18244] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 673.269924][T18253] netlink: 'syz.3.5116': attribute type 10 has an invalid length. [ 673.279451][T15114] R13: 1ffff920007f7f5c R14: 000000000000001f R15: ffff888077c58c90 [ 673.305317][T18253] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 673.321255][T15114] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 673.341569][T15114] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.357442][T15114] CR2: 00002000000029c0 CR3: 000000005c952000 CR4: 00000000003506f0 [ 673.382513][T18254] netlink: 'syz.5.5117': attribute type 10 has an invalid length. [ 673.401080][T15114] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 673.431132][T18254] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5117'. [ 673.441126][T15114] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 673.449173][T15114] Call Trace: [ 673.463562][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 673.473871][T15114] [ 673.484825][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.494528][T15114] ? trace_rdev_return_void+0x1c0/0x1c0 [ 673.500178][T15114] ? cfg80211_event_work+0x23/0x40 [ 673.512386][T15114] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 673.518387][T15114] cfg80211_process_rdev_events+0x9d/0x110 [ 673.542396][T15114] cfg80211_event_work+0x2b/0x40 [ 673.560870][T15114] process_one_work+0x863/0x1000 [ 673.565937][T15114] ? worker_detach_from_pool+0x240/0x240 [ 673.580015][T15114] ? lockdep_hardirqs_off+0x70/0x100 [ 673.586261][T15114] ? _raw_spin_lock_irq+0xab/0xe0 [ 673.591833][T15114] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 673.603565][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.614880][T15114] ? wq_worker_running+0x97/0x170 [ 673.619656][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.620057][T15114] worker_thread+0xaa8/0x12a0 [ 673.639525][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.639951][T15114] kthread+0x436/0x520 [ 673.655869][T13103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.657903][T15114] ? rcu_lock_release+0x20/0x20 [ 673.668106][T15114] ? kthread_blkcg+0xd0/0xd0 [ 673.681874][T18033] device veth0_vlan entered promiscuous mode [ 673.690868][T15114] ret_from_fork+0x1f/0x30 [ 673.695443][T15114] [ 673.698500][T15114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 673.705803][T15114] CPU: 0 PID: 15114 Comm: kworker/u4:21 Not tainted syzkaller #0 [ 673.713735][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 673.723821][T15114] Workqueue: cfg80211 cfg80211_event_work [ 673.729582][T15114] Call Trace: [ 673.732877][T15114] [ 673.735844][T15114] dump_stack_lvl+0x168/0x230 [ 673.740564][T15114] ? show_regs_print_info+0x20/0x20 [ 673.745802][T15114] ? load_image+0x3b0/0x3b0 [ 673.750354][T15114] panic+0x2c9/0x7f0 [ 673.754296][T15114] ? bpf_jit_dump+0xd0/0xd0 [ 673.758840][T15114] ? ret_from_fork+0x1f/0x30 [ 673.763473][T15114] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 673.769075][T15114] __warn+0x248/0x2b0 [ 673.773236][T15114] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 673.778867][T15114] report_bug+0x1b7/0x2e0 [ 673.783240][T15114] handle_bug+0x3a/0x70 [ 673.787429][T15114] exc_invalid_op+0x16/0x40 [ 673.791968][T15114] asm_exc_invalid_op+0x16/0x20 [ 673.796850][T15114] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 673.803048][T15114] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 41 70 53 f8 0f 0b eb c3 e8 38 70 53 f8 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 2a 70 53 f8 0f 0b e9 7a fd ff ff e8 [ 673.822700][T15114] RSP: 0018:ffffc90003fbfaa0 EFLAGS: 00010293 [ 673.828809][T15114] RAX: ffffffff89245bd8 RBX: dffffc0000000000 RCX: ffff888066aabb80 [ 673.836818][T15114] RDX: 0000000000000000 RSI: ffffffff8a0b1c60 RDI: ffffffff8a59e580 [ 673.845178][T15114] RBP: ffffc90003fbfb70 R08: dffffc0000000000 R09: fffffbfff1ff7c26 [ 673.853194][T15114] R10: fffffbfff1ff7c26 R11: 1ffffffff1ff7c25 R12: ffff888022b23550 [ 673.861151][T18033] device veth1_vlan entered promiscuous mode [ 673.867186][T15114] R13: 1ffff920007f7f5c R14: 000000000000001f R15: ffff888077c58c90 [ 673.867214][T15114] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 673.867259][T15114] ? trace_rdev_return_void+0x1c0/0x1c0 [ 673.886386][T15114] ? cfg80211_event_work+0x23/0x40 [ 673.891557][T15114] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 673.897494][T15114] cfg80211_process_rdev_events+0x9d/0x110 [ 673.903336][T15114] cfg80211_event_work+0x2b/0x40 [ 673.908321][T15114] process_one_work+0x863/0x1000 [ 673.913323][T15114] ? worker_detach_from_pool+0x240/0x240 [ 673.918993][T15114] ? lockdep_hardirqs_off+0x70/0x100 [ 673.924329][T15114] ? _raw_spin_lock_irq+0xab/0xe0 [ 673.929395][T15114] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 673.934818][T15114] ? wq_worker_running+0x97/0x170 [ 673.940021][T15114] worker_thread+0xaa8/0x12a0 [ 673.944929][T15114] kthread+0x436/0x520 [ 673.949048][T15114] ? rcu_lock_release+0x20/0x20 [ 673.953938][T15114] ? kthread_blkcg+0xd0/0xd0 [ 673.958574][T15114] ret_from_fork+0x1f/0x30 [ 673.963052][T15114] [ 673.966215][T15114] Kernel Offset: disabled [ 673.970960][T15114] Rebooting in 86400 seconds..