last executing test programs: 8.123470756s ago: executing program 2 (id=3114): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/237}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000613d923ea71e7003fe5ae6f7c92d978793c59cf3356e5f989ee05539725e9132ed0100000000000080b5730421f61b2e82de2ff2620a207694975a14edfb03d7fa886c9c6118bf67521072a99e9584b58fb8023e5022e2fcd0e35085fd9fe369c094bbe1a15933b8fa41b7bd9a359bb449a9f0b19778e21edd32e3b0957e42bf9f535c29654407b1ccf3d9e1df1b7e496aa5d25d3f10ef3f94c51b1fcd2f6e0a6ba217ebfee170cdf70a6b461cffaa6e91f33b000000000000094a572738c9619771b36c04cc0df66fed0c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) sendmsg(r0, &(0x7f0000001580)={&(0x7f00000013c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x3, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001440)="c9226eb95c6b1bc48c1e4700703609662d02d5fb51d02df34ab26bfc0f766bbbe4792f9c5fa1b87536eb053059fb06d1623b326c87486e6c", 0x38}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000001480)="0d47db06b30d677f5a22208230ab2a16a7167d542ea245cc535213835dd60de2aaee0ae3494c98d5ec58fc0ef4ef301dbcca87f1911781717790995e926df7a365c5b2d063fc6968f6a8c97ea2a367fd7512231c8d1f12311636ce35d94bbe11d45fdb6eb22674cd23f2c0e3d845ead48d7d83879cc16ec4e5e29b6429a7013a347005176786e0417023278bec005cefc016ce7a809b1effe0eecacebccce6ef58ebcd1540a0360ac1c995f60fb9e1a443244423f45c9b4183879707f628980bb5", 0xc1}, {&(0x7f0000001a00)="113b793714d71a172bfbf905d8f8d1c02ab6a2580dc35fd35a376dec72fb5bde918f7922bab28b8035cc5414a358ef43cc98678cbd4781a197ce898a9995ab9daf2c04ad468de6435f23eb601e114d3db6804decea1ff5601d5167880d7d43cfa463", 0x62}, {&(0x7f0000001a80)="466f5528ff4a8bf3adfa1ba2aaed931543b8d5e60028b1c8a0c13d47bbcb0c1b437d75b4618fb808b3fa2c45770913602ac00e45471b2c451696031fadd86cbb7538e21069331823557df494eb059855cf3d84a01b9727958c3b06fe290087b344b5a0d07a54f311acab35166f926b26a85391265aba", 0x76}, {&(0x7f0000001b00)="8c0af61f6bd3bfce026333420620c544432c98fddcd59f4392906906641652e2272cdc1534864b6c7bb7a89a47dc15a0580ac81a6b7157eecaed89fac240b8d6dfec464c084ad8ea11560c9572eab5e04bae2c9cfaa78d79482dcb19a15fd45e1dc2e5038f141a1ea0cb64e7b02235472ef62e132985ed1a7b2f88f3e48a79edf20532c6e86b7f5395a1836db821d804c0f7064bed3dc9af0ac8cd77daf0f0df25f4f5a851834ab7d448d5985a16361ed0d34d73322e7cbbc37c4046229c00e4baad3aacf6633681adf0b9705ec243c36ac5a664792bbfcff996b91e4bde072e38c6412cc1f2f052de3174d03853f21d7ecc1d", 0xf3}], 0x6, &(0x7f0000001c80)=[{0xd8, 0x11, 0x8, "7d0f3280d78813f026f5358e5830e8be0f192a085181098e04dbaef254da80a0b3f6530dcaffc85f266bd654dbf294d56ac4ed4bda1a69e6d0a55fa9d47b4c1bb7c091a95cdb957f7ab7ede6e9825687516087654be839a3b9ce22f385cad582f58b4f62a7bc71227058e7acbee4831982121f8144129cb12597f4fdf3658796aa3f32a84a3d5c0731a62a81f9bc834aae1cbbd41ff52ede27efd9f1592a1d34e25287806ea7ef55304094218c7e49df23f18c5d350fcacc586b165e23f4abe1bc80ff"}, {0xb8, 0x88, 0x9, "40ae4d21702e8798e0832be1ca4121f86b4087930e28f0edf0712f24219604a93f8b0249db712fc0d636a827c4329d8100f4b45bc687e98cb6bb95c357a99c80266db3efc3863b9338b3d3fe6c3c50bb9e467fc12ec602750df742711545e20a7730fd9547e158a520cf05e4c7866d7b707fcfdb68eeeed38e5e1f87a01fb39de628f751ce2f23148383e811a011a8bb8476e2914780f2380bb73b06ec1028144b0e19af8e882b"}], 0x190}, 0x20048000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002040)=[{0x0}, {&(0x7f00000019c0)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a80", 0x29}], 0x2}, 0x0) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @remote, @remote, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000002c0)}, {0x0}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f00000016c0)=""/181, 0xb5}], 0x6, &(0x7f0000001800)=""/148, 0x94}, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98", &(0x7f0000000340), 0xffffffff, r3}, 0x38) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001980), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) close(r2) 7.876677634s ago: executing program 2 (id=3115): socketpair(0xe, 0x3, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982fe75ad84b9a26f3b7b685", 0x33}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff0200", 0x22}], 0x1}, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="240000006400ed"], 0xfe33) r4 = openat$cgroup_type(r1, 0x0, 0x2, 0x0) write$cgroup_type(r4, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x49a29a89}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.876368505s ago: executing program 1 (id=3116): r0 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x891a, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) 7.874472235s ago: executing program 3 (id=3117): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/166, 0xa6}], 0x2}, 0x0) 7.675008661s ago: executing program 1 (id=3118): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573d"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x18, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r3, &(0x7f0000001480)=ANY=[], 0xc54c295c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff01", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) 7.670459811s ago: executing program 0 (id=3126): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 7.537986785s ago: executing program 2 (id=3119): socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.418338579s ago: executing program 0 (id=3120): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd5"], 0x0, 0x29, 0x0, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x18, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r3, &(0x7f0000001480)=ANY=[], 0xc54c295c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff01", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) 6.880452237s ago: executing program 3 (id=3121): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe55}, 0x2000, 0x8, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB="0000000000000000000000df1985"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000004260000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001980)="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", 0xff8}], 0x1}, 0x3eb) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab592", @ANYRES8=r7, @ANYRES8=r0], 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14ed45d2fe2bc65f9548069eda6f89b814aa005400000000000014000000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRESOCT=r8, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) socket$kcm(0x10, 0x4, 0x10) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bf"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r11) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r11], 0x12) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.355534029s ago: executing program 1 (id=3122): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65d"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, r1, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff01", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) 4.347792939s ago: executing program 2 (id=3123): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1041a1, 0xc, 0x9, 0x1, 0x0, 0x300, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b9", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}], 0x58, 0x4000}, 0x40014) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000da6b1fe48cc1c63e7d221", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000007f000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xc) r9 = syz_clone(0x2016000, &(0x7f0000000340)="9eefcd80d5426655ddc98a8f80020d090a9dcac2e4ec69bc1b73add4834698556391304b4aa5c59f64f11d65d93b3701ea8931c734448c6cf236777a296a5d6d9003549c5b970b4e0cb875bd375edb2757c644fe6d882c27719a4290c04deeda8fd03bf60eec361e0ff595ea7575a8df33081cb8b6ff48e477d9c8563a39fb78825d82524827a7f4120d093f32d6d0948527a40de609dcd72dab248d42898fdcb72d223846950b571927251bdd2032f1a75223a4eb1e769c66b2cb1683a13a147c697c579c6bc85df5a7a694d23077f4b85ab691ed0e", 0xd6, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)="f58b99a58cefdc2ebf245fe4704a778871ea6b476fd2d64131d57d82f3fffa11a8328030be528f50fbdaad0593b3de89e959f85fbfc33c") syz_open_procfs$namespace(r9, &(0x7f0000000580)='ns/user\x00') perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xea37d383afb94786, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x8006, 0x98, 0x0, 0x40000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x4840) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) 4.297489771s ago: executing program 3 (id=3124): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a4", 0x35}], 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0x0, 0x1, 0xc, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="1e000100110000001031bc22486b1ea92c3c4b1d6e576e016ba671b0b56f7909af41b4f308e0c329a5b50d7626a3284674dca5af69874b12cfa92bc819", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@cgroup=r5, r2, 0xc, 0xc, 0x0, @void, @value, @void, @void, r4}, 0x20) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="b802d59d0abe1a7814bbdda1a6645bc1c646e37cab97dd971300c863a153dd23a05633405cc50ae9da838f6ae3796382d4ea8e276ac40688edad22416e6ba03451c92a78596589702b6eaa946d1ba1b3a7bb8edc2bfac04888a7536320fa6804c5f8a4c4f8cf13ea", 0x68}, {&(0x7f0000000280)="50378e9ace8836a0d8590b8df31a69171f440a570d7d1c47ad9406bd3ccfb991c6fecdad5f8b6c0a27441972519332eaf12f6b82142ea65f99438c2c1fc42d2dbb5e0ebf16fbd2ae5e9b02302ddde40fc5720ecac4bfd2aa5d4ac0ca66902bcdba944d3032acb7654097c0efbf13853904cbcbb675890348546bdaa0df41b648bcea4e4992c5a0a6c3dea129c5e33b2985450e4ad3256c9eaff0", 0x9a}, {&(0x7f0000000340)="372b84331cb097d973325655bd8ee6c72293c04042e6c5a24b515a03c706e3fc6eea41a0007e9bf9e283210e0058af839d4feb135ff9c035dd65fe022104217fdc386b41d5eb1d540fba73dd7dd6c6e4c91ce0ae4cbf64a9cd7f04040c8962b9763c637692d88f1a4b28a810ca73999585322c16c52d997400a22283cf888f94d99d67c7b6971ab3c7ca7b43bbb5e55450a83b5c39fc1723dbb1dbd8f995ce76fa86616fb8", 0xa5}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000000100)="9ba20b126937faec48a1ccf331c6f2a9604c5c08a02444603cc500", 0x1b}, {&(0x7f0000000400)="4dfa6d5da150228cb8c54f84f069af2dedf8225c8ea7d78980f90edba42c9ec51e7c9db2b07211264e1367d216a39e2b37b76663f90a3d33af04dd872d3901d87a660bc5f8bad6e0a02b61d649ade39cd7d322f91a06fbd6be472e9b2baa5e91737dedc2d4f45d7baff5375d251b25e1a183654524b61d96861b2d40322a1b3ee0febf3d5c69bd83b63f7ca2eaaf9857f26280670bbc556bb4186362d0840f793a85a56efe2a945f77bd1cc00d3fe00bd2b3f695fefb120150070fbdb7669767d2a936cbd08ee9359e91cd8846249273d57428f9eb60e9a810cbcb3d56949b", 0xdf}, {&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000000140)="4867b715bed453dc1433cb8b68e06383a5bb35680ca6674f", 0x18}, {&(0x7f00000001c0)="2c5bd0b64eb2139e028c87f085c94fda83033c80acad7516931dc2e5838d4d52f11098fd38adb1ac0fe3d10d09d2b61cecf73287f0131aad715df82b25db0b2cca7bf4a13ced243a998c5ad6a4becc9fc72ca24fba995f467293f8d4bdfd8435fdb0f0", 0x63}], 0xa, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc0, [@empty, @remote]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0xcc, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3861}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x30}, {@multicast1, 0x2a0}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4}, {@remote, 0x6}, {@empty, 0x3}, {@loopback, 0x40ed}]}, @timestamp_addr={0x44, 0x3c, 0xac, 0x1, 0x4, [{@local, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x7}, {@multicast2, 0x7}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0xa}, {@private=0xa010100, 0x2}, {@private=0xa010101, 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@end, @lsrr={0x83, 0x13, 0x35, [@broadcast, @empty, @rand_addr=0x64010102, @multicast2]}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x1b, 0xc5, [@multicast2, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @local, @dev={0xac, 0x14, 0x14, 0x3e}]}, @ssrr={0x89, 0xb, 0x57, [@loopback, @rand_addr=0x3]}, @end, @cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "da8b"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x198}, 0x20004080) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 4.206917704s ago: executing program 0 (id=3125): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040), 0x0, 0x200000000000000}, 0x20) 4.084739658s ago: executing program 3 (id=3127): r0 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x891a, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) 4.00714635s ago: executing program 1 (id=3128): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB="8f6cba11d08170dc1fc2d2e182281c7fc07e376c6e694614af0700c7ba6f81aa97028283b04d7b5a5c7c1b70e0ecd1cb64e3af465143967f5dee069661a9d5317c6a39f24aec3ff693b551a6c162cccdbdc59295c03447b6e0149f3ef8826d", @ANYRES16=r1, @ANYBLOB="aecccf9a008805d1ca67740df1e0ee9b74963b12873c615691c5d623ec064618a14715e3b5f96bd4279c798fcb5b39"], &(0x7f00000001c0)='GPL\x00', 0x34b, 0x0, 0x0, 0x0, 0x78}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000050000000000000000000000000000000000000000000400"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d00000"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES64], 0x6a) r10 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x53}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r10, 0x29, 0x15, &(0x7f0000000100), 0x3d) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0601000100000044000100fe800e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e618294010000003b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80000) 3.892321464s ago: executing program 0 (id=3129): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 3.295548743s ago: executing program 3 (id=3130): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/166, 0xa6}], 0x2}, 0x0) 3.188816697s ago: executing program 1 (id=3131): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) close(0x3) 3.167004747s ago: executing program 2 (id=3132): socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f00000003c0)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.287402736s ago: executing program 3 (id=3133): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573d"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x18, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r3, &(0x7f0000001480)=ANY=[], 0xc54c295c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff01", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) 2.285235246s ago: executing program 0 (id=3141): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/166, 0xa6}], 0x2}, 0x0) 2.284173576s ago: executing program 1 (id=3134): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd5"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x18, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r3, &(0x7f0000001480)=ANY=[], 0xc54c295c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff01", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) 1.300512348s ago: executing program 0 (id=3135): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe55}, 0x2000, 0x8, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYRESOCT=r3, @ANYBLOB="0000000000000000000000df1985"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000004260000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001980)="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", 0xff8}], 0x1}, 0x3eb) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000007000000000f00089500000000000000e26c9bd1a6361b80cdd6ff07000000000008bc005aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab592", @ANYRES8=r7, @ANYRES8=r0], 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac14ed45d2fe2bc65f9548069eda6f89b814aa005400000000000014000000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRESOCT=r8, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) socket$kcm(0x10, 0x4, 0x10) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bf"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r11) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[@ANYRES8=r10, @ANYRES8=r11], 0x12) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3136): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c3"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, r1, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff01", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): ][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.019718][T13446] Call Trace: [ 541.023115][T13446] [ 541.026057][T13446] dump_stack_lvl+0x18c/0x250 [ 541.030763][T13446] ? show_regs_print_info+0x20/0x20 [ 541.035996][T13446] ? load_image+0x400/0x400 [ 541.040536][T13446] ? __might_fault+0xaa/0x120 [ 541.045406][T13446] ? __lock_acquire+0x7d40/0x7d40 [ 541.050449][T13446] should_fail_ex+0x39d/0x4d0 [ 541.055147][T13446] _copy_from_iter+0x1d9/0x12e0 [ 541.060028][T13446] ? slab_post_alloc_hook+0x8a/0x4b0 [ 541.065367][T13446] ? __virt_addr_valid+0x18c/0x540 [ 541.070526][T13446] ? __lock_acquire+0x7d40/0x7d40 [ 541.075600][T13446] ? rcu_is_watching+0x15/0xb0 [ 541.080420][T13446] ? copyout_mc+0x70/0x70 [ 541.084759][T13446] ? __virt_addr_valid+0x18c/0x540 [ 541.089882][T13446] ? __virt_addr_valid+0x18c/0x540 [ 541.095002][T13446] ? __virt_addr_valid+0x469/0x540 [ 541.100125][T13446] ? __check_object_size+0x506/0xa20 [ 541.105426][T13446] netlink_sendmsg+0x76b/0xbf0 [ 541.110235][T13446] ? netlink_getsockopt+0x590/0x590 [ 541.115491][T13446] ? aa_sock_msg_perm+0x94/0x150 [ 541.120468][T13446] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.125822][T13446] ? security_socket_sendmsg+0x80/0xa0 [ 541.131293][T13446] ? netlink_getsockopt+0x590/0x590 [ 541.136513][T13446] ____sys_sendmsg+0x5ba/0x960 [ 541.141305][T13446] ? __asan_memset+0x22/0x40 [ 541.145922][T13446] ? __sys_sendmsg_sock+0x30/0x30 [ 541.150957][T13446] ? __import_iovec+0x5f2/0x850 [ 541.155827][T13446] ? import_iovec+0x73/0xa0 [ 541.160353][T13446] ___sys_sendmsg+0x2a6/0x360 [ 541.165118][T13446] ? get_pid_task+0x20/0x1e0 [ 541.169779][T13446] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.174602][T13446] ? __lock_acquire+0x7d40/0x7d40 [ 541.179664][T13446] __se_sys_sendmsg+0x1c2/0x2b0 [ 541.184621][T13446] ? __x64_sys_sendmsg+0x80/0x80 [ 541.189626][T13446] ? lockdep_hardirqs_on+0x98/0x150 [ 541.194878][T13446] do_syscall_64+0x55/0xa0 [ 541.199342][T13446] ? clear_bhb_loop+0x40/0x90 [ 541.204033][T13446] ? clear_bhb_loop+0x40/0x90 [ 541.208725][T13446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.214649][T13446] RIP: 0033:0x7f021c99c819 [ 541.219106][T13446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.238754][T13446] RSP: 002b:00007f021d851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.247443][T13446] RAX: ffffffffffffffda RBX: 00007f021cc15fa0 RCX: 00007f021c99c819 [ 541.255931][T13446] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 541.263962][T13446] RBP: 00007f021d851090 R08: 0000000000000000 R09: 0000000000000000 [ 541.272109][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.280131][T13446] R13: 00007f021cc16038 R14: 00007f021cc15fa0 R15: 00007ffebd52e038 [ 541.288138][T13446] [ 541.398855][ T5947] team0 (unregistering): Port device geneve1 removed [ 541.533682][T13449] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2309'. [ 541.986840][ T5947] team0 (unregistering): Port device team_slave_1 removed [ 542.036106][ T5947] team0 (unregistering): Port device team_slave_0 removed [ 542.083258][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.135967][ T5947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.168830][ T5947] team0 (unregistering): Port device veth0_to_bond removed [ 542.198066][ T5947] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 542.230439][ T5963] wlan1: Trigger new scan to find an IBSS to join [ 542.301850][T13312] Bluetooth: hci2: command tx timeout [ 542.537179][ T5947] bond0 (unregistering): Released all slaves [ 542.633358][T13437] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 542.654351][T13449] netlink: 51471 bytes leftover after parsing attributes in process `syz.0.2309'. [ 543.045753][T13461] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 543.285968][T13309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 543.300845][T13309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.315170][T13309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.331752][T13309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.443550][T13471] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 543.603861][T13309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.636431][T13309] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.672505][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.679837][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.722837][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.730098][T10287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.387843][T13498] validate_nla: 2 callbacks suppressed [ 544.387889][T13498] netlink: 'syz.0.2318': attribute type 29 has an invalid length. [ 544.465839][T13309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.490052][T13498] netlink: 'syz.0.2318': attribute type 29 has an invalid length. [ 544.539293][T13503] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 544.599141][T13505] netlink: 'syz.0.2318': attribute type 29 has an invalid length. [ 544.644367][T13508] netlink: 'syz.0.2318': attribute type 29 has an invalid length. [ 544.678034][T13498] netlink: 'syz.0.2318': attribute type 29 has an invalid length. [ 544.887851][T13309] veth0_vlan: entered promiscuous mode [ 544.916010][T13513] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 544.961703][T13309] veth1_vlan: entered promiscuous mode [ 545.104490][T13309] veth0_macvtap: entered promiscuous mode [ 545.133745][T13309] veth1_macvtap: entered promiscuous mode [ 545.193034][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.223172][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.268077][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.299161][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.309258][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.320757][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.345801][T13309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.409990][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.449200][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.474241][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.514345][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.517192][T13529] netlink: 'syz.0.2327': attribute type 29 has an invalid length. [ 545.534034][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.547793][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.566093][T13309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.585602][T13527] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2326'. [ 545.604937][T13309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.614812][T13309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.644938][T13309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.674403][T13309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.699192][T13529] netlink: 'syz.0.2327': attribute type 29 has an invalid length. [ 545.737744][T13524] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2326'. [ 545.760207][T13535] netlink: 'syz.2.2328': attribute type 10 has an invalid length. [ 545.815611][T13531] netlink: 'syz.0.2327': attribute type 29 has an invalid length. [ 545.853737][T13532] netlink: 'syz.0.2327': attribute type 29 has an invalid length. [ 546.092471][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.110161][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.142557][T13545] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 546.209114][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.217014][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.225766][ T5963] wlan1: Trigger new scan to find an IBSS to join [ 546.443135][T13554] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 546.842597][T13557] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 547.111418][T13564] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 547.314184][T13573] FAULT_INJECTION: forcing a failure. [ 547.314184][T13573] name failslab, interval 1, probability 0, space 0, times 0 [ 547.395197][T13573] CPU: 1 PID: 13573 Comm: syz.0.2335 Not tainted syzkaller #0 [ 547.402748][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.412905][T13573] Call Trace: [ 547.416250][T13573] [ 547.419230][T13573] dump_stack_lvl+0x18c/0x250 [ 547.423973][T13573] ? show_regs_print_info+0x20/0x20 [ 547.429257][T13573] ? load_image+0x400/0x400 [ 547.433842][T13573] should_fail_ex+0x39d/0x4d0 [ 547.438594][T13573] should_failslab+0x9/0x20 [ 547.443159][T13573] slab_pre_alloc_hook+0x59/0x310 [ 547.448256][T13573] kmem_cache_alloc+0x5a/0x2d0 [ 547.453109][T13573] ? dst_alloc+0x105/0x170 [ 547.457593][T13573] dst_alloc+0x105/0x170 [ 547.461894][T13573] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 547.468021][T13573] ? ip_route_output_key_hash_rcu+0x1291/0x2370 [ 547.474330][T13573] ? ip_route_output_key_hash+0x13d/0x330 [ 547.480107][T13573] ip_route_output_key_hash+0x1f3/0x330 [ 547.485730][T13573] ? ip_route_input_rcu+0x30f0/0x30f0 [ 547.491163][T13573] ? mark_lock+0x94/0x320 [ 547.495620][T13573] tcp_v4_connect+0x6ec/0x18e0 [ 547.500473][T13573] ? tcp_twsk_unique+0x990/0x990 [ 547.505535][T13573] ? mptcp_token_new_connect+0x4c7/0x630 [ 547.511237][T13573] mptcp_connect+0x449/0x640 [ 547.515903][T13573] __inet_stream_connect+0x254/0xdc0 [ 547.521240][T13573] ? inet_dgram_connect+0x360/0x360 [ 547.526483][T13573] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 547.531727][T13573] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 547.537144][T13573] mptcp_sendmsg+0x14b2/0x16d0 [ 547.542052][T13573] ? __lock_acquire+0x1273/0x7d40 [ 547.547109][T13573] ? verify_lock_unused+0x140/0x140 [ 547.552358][T13573] ? aa_sk_perm+0x83c/0x970 [ 547.556946][T13573] ? aa_af_perm+0x330/0x330 [ 547.561556][T13573] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 547.568051][T13573] ? mptcp_shutdown+0x80/0x80 [ 547.572808][T13573] ? sock_rps_record_flow+0x19/0x3f0 [ 547.578178][T13573] ? inet_sendmsg+0xe9/0x2f0 [ 547.582835][T13573] ? inet_send_prepare+0x260/0x260 [ 547.587986][T13573] ____sys_sendmsg+0x5ba/0x960 [ 547.592791][T13573] ? __lock_acquire+0x7d40/0x7d40 [ 547.597889][T13573] ? __asan_memset+0x22/0x40 [ 547.602550][T13573] ? __sys_sendmsg_sock+0x30/0x30 [ 547.607678][T13573] ? __import_iovec+0x3fa/0x850 [ 547.612600][T13573] ? import_iovec+0x73/0xa0 [ 547.617160][T13573] ___sys_sendmsg+0x2a6/0x360 [ 547.621879][T13573] ? __sys_sendmsg+0x2a0/0x2a0 [ 547.626697][T13573] ? trace_call_bpf+0xc3/0x6c0 [ 547.631528][T13573] __se_sys_sendmsg+0x1c2/0x2b0 [ 547.636408][T13573] ? __x64_sys_sendmsg+0x80/0x80 [ 547.641413][T13573] ? lockdep_hardirqs_on+0x98/0x150 [ 547.646690][T13573] do_syscall_64+0x55/0xa0 [ 547.651159][T13573] ? clear_bhb_loop+0x40/0x90 [ 547.655887][T13573] ? clear_bhb_loop+0x40/0x90 [ 547.660616][T13573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.666552][T13573] RIP: 0033:0x7f021c99c819 [ 547.670996][T13573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.690639][T13573] RSP: 002b:00007f021d851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.699261][T13573] RAX: ffffffffffffffda RBX: 00007f021cc15fa0 RCX: 00007f021c99c819 [ 547.707266][T13573] RDX: 0000000034004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 547.715267][T13573] RBP: 00007f021d851090 R08: 0000000000000000 R09: 0000000000000000 [ 547.723263][T13573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.731260][T13573] R13: 00007f021cc16038 R14: 00007f021cc15fa0 R15: 00007ffebd52e038 [ 547.739271][T13573] [ 548.055477][T13580] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2336'. [ 548.146389][T13589] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2337'. [ 548.233194][T13584] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2337'. [ 548.658229][T13599] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 548.900933][T13607] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 548.948621][T13608] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 549.261787][T10288] wlan1: Trigger new scan to find an IBSS to join [ 551.269236][ T1085] wlan1: Trigger new scan to find an IBSS to join [ 552.111484][T13643] IPv6: NLM_F_CREATE should be specified when creating new route [ 552.120090][T13643] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2349'. [ 552.211355][T13645] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 552.442246][T13655] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2351'. [ 552.474746][T13652] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2351'. [ 552.507817][T13657] IPv6: NLM_F_CREATE should be specified when creating new route [ 552.517939][T13657] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2353'. [ 552.558078][T13657] FAULT_INJECTION: forcing a failure. [ 552.558078][T13657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.583784][T13657] CPU: 1 PID: 13657 Comm: syz.0.2353 Not tainted syzkaller #0 [ 552.591360][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.601652][T13657] Call Trace: [ 552.604982][T13657] [ 552.607954][T13657] dump_stack_lvl+0x18c/0x250 [ 552.612710][T13657] ? show_regs_print_info+0x20/0x20 [ 552.617966][T13657] ? load_image+0x400/0x400 [ 552.622522][T13657] ? __might_fault+0xaa/0x120 [ 552.627249][T13657] ? __lock_acquire+0x7d40/0x7d40 [ 552.632332][T13657] ? trace_event_raw_event_lock+0x250/0x250 [ 552.638284][T13657] should_fail_ex+0x39d/0x4d0 [ 552.643019][T13657] _copy_from_user+0x2f/0xe0 [ 552.647681][T13657] get_user_ifreq+0x6b/0x180 [ 552.652445][T13657] inet_ioctl+0x3ed/0x560 [ 552.656831][T13657] ? tomoyo_path_number_perm+0x217/0x620 [ 552.662530][T13657] ? inet_shutdown+0x370/0x370 [ 552.667348][T13657] ? slab_free_freelist_hook+0x130/0x1a0 [ 552.673035][T13657] ? tomoyo_path_number_perm+0x500/0x620 [ 552.678729][T13657] ? __kmem_cache_free+0xba/0x1e0 [ 552.683878][T13657] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 552.689418][T13657] ? packet_ioctl+0x270/0x340 [ 552.694177][T13657] sock_do_ioctl+0xfc/0x310 [ 552.698801][T13657] ? sock_show_fdinfo+0xb0/0xb0 [ 552.703746][T13657] sock_ioctl+0x5ba/0x7e0 [ 552.708147][T13657] ? sock_poll+0x3e0/0x3e0 [ 552.712630][T13657] ? bpf_lsm_file_ioctl+0x9/0x10 [ 552.717618][T13657] ? security_file_ioctl+0x80/0xa0 [ 552.722824][T13657] ? sock_poll+0x3e0/0x3e0 [ 552.727290][T13657] __se_sys_ioctl+0xfd/0x170 [ 552.731932][T13657] do_syscall_64+0x55/0xa0 [ 552.736416][T13657] ? clear_bhb_loop+0x40/0x90 [ 552.741136][T13657] ? clear_bhb_loop+0x40/0x90 [ 552.745867][T13657] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.751802][T13657] RIP: 0033:0x7f021c99c819 [ 552.756267][T13657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.776017][T13657] RSP: 002b:00007f021d851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.784490][T13657] RAX: ffffffffffffffda RBX: 00007f021cc15fa0 RCX: 00007f021c99c819 [ 552.792516][T13657] RDX: 0000200000000580 RSI: 0000000000008916 RDI: 0000000000000009 [ 552.800526][T13657] RBP: 00007f021d851090 R08: 0000000000000000 R09: 0000000000000000 [ 552.808535][T13657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.816545][T13657] R13: 00007f021cc16038 R14: 00007f021cc15fa0 R15: 00007ffebd52e038 [ 552.824588][T13657] [ 554.219527][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 555.495072][T13670] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 557.628789][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 557.650454][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 557.659395][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.670942][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.679440][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 557.687150][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 557.737882][T13715] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 558.222810][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 558.246623][ T5957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.433544][ T5957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.810648][T13726] validate_nla: 1 callbacks suppressed [ 558.810726][T13726] netlink: 'syz.2.2376': attribute type 9 has an invalid length. [ 558.829779][ T5957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.889550][T13726] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2376'. [ 559.488088][ T5957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.613570][T13713] chnl_net:caif_netlink_parms(): no params data found [ 559.739351][ T51] Bluetooth: hci3: command tx timeout [ 560.027143][T13713] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.045174][T13713] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.060442][T13713] bridge_slave_0: entered allmulticast mode [ 560.077893][T13713] bridge_slave_0: entered promiscuous mode [ 560.098729][ T51] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 560.100379][T13312] Bluetooth: hci1: hardware error 0x0f [ 560.170130][T13713] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.183251][T13713] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.191593][T13713] bridge_slave_1: entered allmulticast mode [ 560.203662][T13713] bridge_slave_1: entered promiscuous mode [ 560.219640][ T1085] wlan1: Trigger new scan to find an IBSS to join [ 560.237679][T13755] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 560.541267][T13713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.562534][T13713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.735950][T13713] team0: Port device team_slave_0 added [ 560.775620][T13713] team0: Port device team_slave_1 added [ 560.984248][T13713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.010757][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.068021][T13713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.108284][T13775] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.196508][T13713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.209256][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.291633][T13713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.670539][T13713] hsr_slave_0: entered promiscuous mode [ 561.724308][T13713] hsr_slave_1: entered promiscuous mode [ 561.790591][ T51] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 561.791167][ T51] Bluetooth: hci2: hardware error 0x0f [ 561.825655][T13805] Bluetooth: hci3: command tx timeout [ 562.139719][T13312] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 562.487995][T13817] netlink: 'syz.1.2396': attribute type 21 has an invalid length. [ 562.520625][T13817] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.072853][T13826] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 563.117704][ T5957] vlan0: left allmulticast mode [ 563.134336][ T5957] veth0_vlan: left allmulticast mode [ 563.143786][ T5957] vlan0: left promiscuous mode [ 563.164035][ T5957] À: port 1(vlan0) entered disabled state [ 563.255637][ T5957] hsr_slave_0: left promiscuous mode [ 563.268007][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.275172][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.282145][T10288] wlan1: Trigger new scan to find an IBSS to join [ 563.313271][ T5957] hsr_slave_1: left promiscuous mode [ 563.364221][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.376593][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.391278][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.406699][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.427483][ T5957] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 563.437425][ T5957] batman_adv: batadv0: Removing interface: veth0_vlan [ 563.451632][ T5957] bridge_slave_1: left allmulticast mode [ 563.459160][ T5957] bridge_slave_1: left promiscuous mode [ 563.465066][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.482472][ T5957] bridge_slave_0: left allmulticast mode [ 563.488316][ T5957] bridge_slave_0: left promiscuous mode [ 563.510836][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.572699][ T5957] veth1_macvtap: left promiscuous mode [ 563.578488][ T5957] veth0_macvtap: left promiscuous mode [ 563.592957][ T5957] veth1_vlan: left promiscuous mode [ 563.598437][ T5957] veth0_vlan: left promiscuous mode [ 563.899133][T13312] Bluetooth: hci3: command tx timeout [ 563.986558][ T5957] team0 (unregistering): Port device geneve1 removed [ 564.139673][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 564.387497][ T5957] team0 (unregistering): Port device hsr0 removed [ 564.622204][ T5957] team0 (unregistering): Port device team_slave_1 removed [ 564.676389][ T5957] team0 (unregistering): Port device team_slave_0 removed [ 564.795163][ T5957] team0 (unregistering): Port device veth0_to_bond removed [ 565.270117][T10288] wlan1: Trigger new scan to find an IBSS to join [ 565.536225][T13713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 565.626330][T13713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 565.644127][T13713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 565.670100][T13713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 565.836868][T13713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.871194][T13713] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.892909][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.900166][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.928796][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.936038][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.980644][ T51] Bluetooth: hci3: command tx timeout [ 566.262616][T13713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.328226][T13713] veth0_vlan: entered promiscuous mode [ 566.358138][T13713] veth1_vlan: entered promiscuous mode [ 566.413146][T13713] veth0_macvtap: entered promiscuous mode [ 566.436106][T13713] veth1_macvtap: entered promiscuous mode [ 566.477945][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.493330][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.509183][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.537391][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.560201][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.571251][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.587976][T13713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.662840][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.685907][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.706832][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.729957][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.764298][T13713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.786657][T13713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.812606][T13713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.883148][T13713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.919205][T13713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.928023][T13713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.955195][T13713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.065550][ T51] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 567.066254][ T51] Bluetooth: hci0: hardware error 0x0f [ 567.262185][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.271674][ T34] wlan1: Trigger new scan to find an IBSS to join [ 567.327701][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.472978][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.512592][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.792888][T13920] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 567.991845][T13924] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 568.312611][T13938] netlink: 'syz.3.2418': attribute type 9 has an invalid length. [ 568.348010][T13938] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2418'. [ 569.104351][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 569.200915][ T5966] wlan1: Creating new IBSS network, BSSID 76:2c:70:bc:0e:f1 [ 569.208593][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 569.641351][T13312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 569.653940][T13312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 569.666543][T13312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 569.684411][T13312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 569.697882][T13312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 569.708353][T13312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 569.986899][T13957] raw_sendmsg: syz.0.2422 forgot to set AF_INET. Fix it! [ 570.221994][ T1085] wlan1: Trigger new scan to find an IBSS to join [ 570.416166][T13962] chnl_net:caif_netlink_parms(): no params data found [ 570.615739][T13962] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.644233][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.663269][T13962] bridge_slave_0: entered allmulticast mode [ 570.671322][T13962] bridge_slave_0: entered promiscuous mode [ 570.680946][T13962] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.688221][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.696028][T13962] bridge_slave_1: entered allmulticast mode [ 570.705118][T13962] bridge_slave_1: entered promiscuous mode [ 570.741730][T13962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.754585][T13962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.861660][T13962] team0: Port device team_slave_0 added [ 570.881408][T13962] team0: Port device team_slave_1 added [ 570.917424][T13962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.924508][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.954130][T13962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.967266][T13962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.974631][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.029778][T13962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.166635][T13962] hsr_slave_0: entered promiscuous mode [ 571.196326][T13962] hsr_slave_1: entered promiscuous mode [ 571.203171][T13962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.214469][T13962] Cannot create hsr debugfs directory [ 571.355611][T14006] netlink: 'syz.1.2435': attribute type 9 has an invalid length. [ 571.380455][T14006] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2435'. [ 571.819308][T13312] Bluetooth: hci0: command tx timeout [ 572.220911][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 572.479578][ T5947] wlan1: Creating new IBSS network, BSSID fe:2d:53:cb:95:47 [ 572.504959][T13962] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.523514][T14012] netlink: 'syz.3.2438': attribute type 25 has an invalid length. [ 572.535667][T14012] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 572.544884][T14012] FAULT_INJECTION: forcing a failure. [ 572.544884][T14012] name failslab, interval 1, probability 0, space 0, times 0 [ 572.557896][T14012] CPU: 1 PID: 14012 Comm: syz.3.2438 Not tainted syzkaller #0 [ 572.565392][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.575509][T14012] Call Trace: [ 572.578808][T14012] [ 572.581768][T14012] dump_stack_lvl+0x18c/0x250 [ 572.586483][T14012] ? show_regs_print_info+0x20/0x20 [ 572.591725][T14012] ? load_image+0x400/0x400 [ 572.596258][T14012] ? __schedule+0x155b/0x45a0 [ 572.600977][T14012] should_fail_ex+0x39d/0x4d0 [ 572.605697][T14012] should_failslab+0x9/0x20 [ 572.610238][T14012] slab_pre_alloc_hook+0x59/0x310 [ 572.615294][T14012] ? asan.module_dtor+0x20/0x20 [ 572.620178][T14012] kmem_cache_alloc_node+0x60/0x320 [ 572.625412][T14012] ? mark_lock+0x94/0x320 [ 572.629770][T14012] ? __alloc_skb+0x103/0x2c0 [ 572.634420][T14012] __alloc_skb+0x103/0x2c0 [ 572.638865][T14012] br_rtr_notify+0x19e/0x9a0 [ 572.643491][T14012] ? br_mdb_notify+0x960/0x960 [ 572.648281][T14012] ? __irq_work_queue_local+0x13a/0x3b0 [ 572.653863][T14012] br_multicast_add_router+0x456/0x550 [ 572.659358][T14012] ? __wake_up_klogd+0xd9/0x100 [ 572.664252][T14012] ? in_dev_get+0x280/0x280 [ 572.668785][T14012] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 572.674712][T14012] ? mark_lock+0x94/0x320 [ 572.679078][T14012] br_multicast_mark_router+0x3b0/0x5a0 [ 572.684749][T14012] ? br_multicast_add_router+0x550/0x550 [ 572.690407][T14012] ? do_raw_spin_lock+0x11f/0x2c0 [ 572.695464][T14012] ? __rwlock_init+0x150/0x150 [ 572.700266][T14012] ? br_multicast_set_port_router+0x17d/0xc80 [ 572.706365][T14012] br_multicast_set_port_router+0x3e2/0xc80 [ 572.712286][T14012] ? br_switchdev_set_port_flag+0x1d9/0x3a0 [ 572.718305][T14012] ? br_multicast_set_router+0x3f0/0x3f0 [ 572.723969][T14012] ? __lock_acquire+0x1347/0x7d40 [ 572.729112][T14012] ? br_port_flags_change+0x19b/0x1f0 [ 572.734519][T14012] br_setport+0xe7a/0x1680 [ 572.738975][T14012] ? br_setlink+0x8b0/0x8b0 [ 572.743509][T14012] ? __rwlock_init+0x150/0x150 [ 572.748342][T14012] ? br_setlink+0x51d/0x8b0 [ 572.752876][T14012] br_setlink+0x52f/0x8b0 [ 572.757335][T14012] ? br_vlan_info+0x460/0x460 [ 572.762077][T14012] ? __mutex_lock+0x956/0xcc0 [ 572.766780][T14012] ? mutex_is_locked+0x12/0x40 [ 572.771573][T14012] rtnl_bridge_setlink+0x5b7/0x7d0 [ 572.776713][T14012] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 572.782038][T14012] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 572.787173][T14012] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 572.792312][T14012] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 572.797616][T14012] rtnetlink_rcv_msg+0x869/0xfa0 [ 572.802594][T14012] ? lockdep_hardirqs_on+0x98/0x150 [ 572.807834][T14012] ? rtnetlink_bind+0x80/0x80 [ 572.812550][T14012] ? perf_trace_preemptirq_template+0xac/0x330 [ 572.818748][T14012] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 572.824858][T14012] ? lock_chain_count+0x20/0x20 [ 572.829768][T14012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 572.835253][T14012] ? lockdep_hardirqs_on+0x98/0x150 [ 572.840481][T14012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 572.845875][T14012] ? _local_bh_enable+0xa0/0xa0 [ 572.850763][T14012] ? __dev_queue_xmit+0x265/0x3660 [ 572.855942][T14012] ? __dev_queue_xmit+0x265/0x3660 [ 572.861523][T14012] ? __dev_queue_xmit+0x1b2c/0x3660 [ 572.866765][T14012] ? __dev_queue_xmit+0x265/0x3660 [ 572.871933][T14012] ? ref_tracker_free+0x690/0x840 [ 572.876992][T14012] netlink_rcv_skb+0x241/0x4d0 [ 572.881964][T14012] ? rtnetlink_bind+0x80/0x80 [ 572.886669][T14012] ? netlink_ack+0x1180/0x1180 [ 572.891469][T14012] ? __lock_acquire+0x7d40/0x7d40 [ 572.896523][T14012] ? netlink_deliver_tap+0x2e/0x1b0 [ 572.901752][T14012] netlink_unicast+0x751/0x8d0 [ 572.906636][T14012] netlink_sendmsg+0x8d0/0xbf0 [ 572.911530][T14012] ? netlink_getsockopt+0x590/0x590 [ 572.916779][T14012] ? aa_sock_msg_perm+0x94/0x150 [ 572.921746][T14012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 572.927055][T14012] ? security_socket_sendmsg+0x80/0xa0 [ 572.932538][T14012] ? netlink_getsockopt+0x590/0x590 [ 572.937765][T14012] ____sys_sendmsg+0x5ba/0x960 [ 572.942553][T14012] ? __asan_memset+0x22/0x40 [ 572.947169][T14012] ? __sys_sendmsg_sock+0x30/0x30 [ 572.952209][T14012] ? __import_iovec+0x5f2/0x850 [ 572.957090][T14012] ? import_iovec+0x73/0xa0 [ 572.961623][T14012] ___sys_sendmsg+0x2a6/0x360 [ 572.966454][T14012] ? get_pid_task+0x20/0x1e0 [ 572.971101][T14012] ? __sys_sendmsg+0x2a0/0x2a0 [ 572.975919][T14012] ? __lock_acquire+0x7d40/0x7d40 [ 572.980998][T14012] __se_sys_sendmsg+0x1c2/0x2b0 [ 572.985976][T14012] ? __x64_sys_sendmsg+0x80/0x80 [ 572.990955][T14012] ? lockdep_hardirqs_on+0x98/0x150 [ 572.996183][T14012] do_syscall_64+0x55/0xa0 [ 573.000636][T14012] ? clear_bhb_loop+0x40/0x90 [ 573.005343][T14012] ? clear_bhb_loop+0x40/0x90 [ 573.010053][T14012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.015972][T14012] RIP: 0033:0x7f6155d9c819 [ 573.020413][T14012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.040049][T14012] RSP: 002b:00007f6156b75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.048499][T14012] RAX: ffffffffffffffda RBX: 00007f6156015fa0 RCX: 00007f6155d9c819 [ 573.056491][T14012] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000004 [ 573.064483][T14012] RBP: 00007f6156b75090 R08: 0000000000000000 R09: 0000000000000000 [ 573.072479][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.080471][T14012] R13: 00007f6156016038 R14: 00007f6156015fa0 R15: 00007ffdf0103848 [ 573.088481][T14012] [ 573.243155][T13962] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.423468][T13962] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.675682][T14038] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 573.899521][T13312] Bluetooth: hci0: command tx timeout [ 574.030245][T14045] FAULT_INJECTION: forcing a failure. [ 574.030245][T14045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.100022][T13962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 574.117494][T13962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 574.124646][T14045] CPU: 1 PID: 14045 Comm: syz.3.2446 Not tainted syzkaller #0 [ 574.132156][T14045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.142251][T14045] Call Trace: [ 574.145746][T14045] [ 574.148719][T14045] dump_stack_lvl+0x18c/0x250 [ 574.153468][T14045] ? show_regs_print_info+0x20/0x20 [ 574.158820][T14045] ? load_image+0x400/0x400 [ 574.163378][T14045] ? __lock_acquire+0x7d40/0x7d40 [ 574.168552][T14045] should_fail_ex+0x39d/0x4d0 [ 574.173324][T14045] _copy_from_user+0x2f/0xe0 [ 574.177979][T14045] __copy_msghdr+0x3bb/0x580 [ 574.182628][T14045] ___sys_sendmsg+0x214/0x360 [ 574.187413][T14045] ? __sys_sendmsg+0x2a0/0x2a0 [ 574.192269][T14045] ? trace_call_bpf+0xc3/0x6c0 [ 574.197112][T14045] __se_sys_sendmsg+0x1c2/0x2b0 [ 574.202009][T14045] ? __x64_sys_sendmsg+0x80/0x80 [ 574.207009][T14045] ? lockdep_hardirqs_on+0x98/0x150 [ 574.212257][T14045] do_syscall_64+0x55/0xa0 [ 574.216716][T14045] ? clear_bhb_loop+0x40/0x90 [ 574.221418][T14045] ? clear_bhb_loop+0x40/0x90 [ 574.226145][T14045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.232067][T14045] RIP: 0033:0x7f6155d9c819 [ 574.236502][T14045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.256222][T14045] RSP: 002b:00007f6156b75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.264668][T14045] RAX: ffffffffffffffda RBX: 00007f6156015fa0 RCX: 00007f6155d9c819 [ 574.272676][T14045] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 574.280712][T14045] RBP: 00007f6156b75090 R08: 0000000000000000 R09: 0000000000000000 [ 574.288706][T14045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.296715][T14045] R13: 00007f6156016038 R14: 00007f6156015fa0 R15: 00007ffdf0103848 [ 574.304723][T14045] [ 574.315882][ T34] wlan1: Trigger new scan to find an IBSS to join [ 574.345561][T13962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 574.367249][T13962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 574.683211][T13962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.706260][T14052] netlink: 'syz.0.2447': attribute type 9 has an invalid length. [ 574.776186][T14052] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2447'. [ 574.792532][T13962] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.829680][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.829865][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.833802][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.834020][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.778715][T13962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.912055][T13962] veth0_vlan: entered promiscuous mode [ 575.970811][T13962] veth1_vlan: entered promiscuous mode [ 575.979578][T13312] Bluetooth: hci0: command tx timeout [ 576.058788][T14079] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 576.120099][T13962] veth0_macvtap: entered promiscuous mode [ 576.150247][T13962] veth1_macvtap: entered promiscuous mode [ 576.219923][T10288] wlan1: Creating new IBSS network, BSSID 56:a1:ac:c8:3b:ed [ 576.248864][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.279856][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.303484][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.330608][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.345522][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.419025][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.428928][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.449137][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.467417][T13962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.525795][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.549228][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.565060][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.576057][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.598565][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.621044][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.642565][T13962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.664675][T13962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.707875][T13962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.752043][T13962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.799203][T13962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.808178][T13962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.836443][T13962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.051288][T14100] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.158666][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.183444][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.255606][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.295679][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.397179][T14112] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.672258][T14115] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.698555][T14119] netlink: 'syz.0.2464': attribute type 46 has an invalid length. [ 577.707251][T14119] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2464'. [ 578.060585][T13312] Bluetooth: hci0: command tx timeout [ 578.413142][T14141] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 578.455080][T14144] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 578.770917][T14153] FAULT_INJECTION: forcing a failure. [ 578.770917][T14153] name failslab, interval 1, probability 0, space 0, times 0 [ 578.794748][T14153] CPU: 1 PID: 14153 Comm: syz.0.2472 Not tainted syzkaller #0 [ 578.802282][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.812363][T14153] Call Trace: [ 578.815662][T14153] [ 578.818623][T14153] dump_stack_lvl+0x18c/0x250 [ 578.823342][T14153] ? show_regs_print_info+0x20/0x20 [ 578.828571][T14153] ? load_image+0x400/0x400 [ 578.833096][T14153] ? __might_sleep+0xe0/0xe0 [ 578.837707][T14153] ? __lock_acquire+0x7d40/0x7d40 [ 578.842758][T14153] should_fail_ex+0x39d/0x4d0 [ 578.847465][T14153] should_failslab+0x9/0x20 [ 578.851997][T14153] slab_pre_alloc_hook+0x59/0x310 [ 578.857051][T14153] ? __lock_acquire+0x7d40/0x7d40 [ 578.862107][T14153] kmem_cache_alloc_node+0x60/0x320 [ 578.867337][T14153] ? __alloc_skb+0x103/0x2c0 [ 578.871955][T14153] __alloc_skb+0x103/0x2c0 [ 578.876401][T14153] netlink_sendmsg+0x66a/0xbf0 [ 578.881210][T14153] ? netlink_getsockopt+0x590/0x590 [ 578.886450][T14153] ? aa_sock_msg_perm+0x94/0x150 [ 578.891427][T14153] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 578.896752][T14153] ? security_socket_sendmsg+0x80/0xa0 [ 578.902254][T14153] ? netlink_getsockopt+0x590/0x590 [ 578.907498][T14153] ____sys_sendmsg+0x5ba/0x960 [ 578.912304][T14153] ? __asan_memset+0x22/0x40 [ 578.916924][T14153] ? __sys_sendmsg_sock+0x30/0x30 [ 578.921978][T14153] ? __import_iovec+0x5f2/0x850 [ 578.926856][T14153] ? import_iovec+0x73/0xa0 [ 578.931390][T14153] ___sys_sendmsg+0x2a6/0x360 [ 578.936089][T14153] ? get_pid_task+0x20/0x1e0 [ 578.940708][T14153] ? __sys_sendmsg+0x2a0/0x2a0 [ 578.945511][T14153] ? __lock_acquire+0x7d40/0x7d40 [ 578.950598][T14153] __se_sys_sendmsg+0x1c2/0x2b0 [ 578.955491][T14153] ? __x64_sys_sendmsg+0x80/0x80 [ 578.960471][T14153] ? lockdep_hardirqs_on+0x98/0x150 [ 578.965699][T14153] do_syscall_64+0x55/0xa0 [ 578.970151][T14153] ? clear_bhb_loop+0x40/0x90 [ 578.974884][T14153] ? clear_bhb_loop+0x40/0x90 [ 578.979592][T14153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.985513][T14153] RIP: 0033:0x7f35bdf9c819 [ 578.989971][T14153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.009870][T14153] RSP: 002b:00007f35bedca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.018317][T14153] RAX: ffffffffffffffda RBX: 00007f35be215fa0 RCX: 00007f35bdf9c819 [ 579.026321][T14153] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 579.034327][T14153] RBP: 00007f35bedca090 R08: 0000000000000000 R09: 0000000000000000 [ 579.042338][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.050330][T14153] R13: 00007f35be216038 R14: 00007f35be215fa0 R15: 00007ffdce423338 [ 579.058359][T14153] [ 579.196943][T14155] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 579.473205][T14163] netlink: 'syz.2.2477': attribute type 46 has an invalid length. [ 579.499214][T14163] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2477'. [ 579.529121][T14162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2475'. [ 580.266022][T14176] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 581.022724][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.032400][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.042124][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.072879][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.095302][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 581.103973][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.245550][ T3457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.275547][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 581.379629][ T3457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.599522][ T3457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.687655][T14208] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 581.777437][ T3457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.931357][T14210] netlink: 'syz.2.2494': attribute type 25 has an invalid length. [ 581.964285][T14210] netlink: 'syz.2.2494': attribute type 29 has an invalid length. [ 582.012058][T14193] chnl_net:caif_netlink_parms(): no params data found [ 582.425064][T14193] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.459349][T14193] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.479609][T14193] bridge_slave_0: entered allmulticast mode [ 582.507038][T14193] bridge_slave_0: entered promiscuous mode [ 582.550722][T14193] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.567543][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.576140][T14193] bridge_slave_1: entered allmulticast mode [ 582.584084][T14193] bridge_slave_1: entered promiscuous mode [ 583.179522][ T51] Bluetooth: hci1: command tx timeout [ 583.220686][T14193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.242781][T14193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.452965][T14250] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 583.564191][T14193] team0: Port device team_slave_0 added [ 583.585858][T14193] team0: Port device team_slave_1 added [ 583.896782][T14193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.925308][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.004736][T14193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.176166][T14193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.209190][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.237320][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 584.272099][T14193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.377072][T14281] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 584.536789][T14285] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 584.576121][T14193] hsr_slave_0: entered promiscuous mode [ 584.586108][T14193] hsr_slave_1: entered promiscuous mode [ 584.596854][T14193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.605944][T14193] Cannot create hsr debugfs directory [ 584.785377][T14289] hsr0: VLAN not yet supported [ 584.795591][T14292] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 585.200811][ T5963] wlan1: Trigger new scan to find an IBSS to join [ 585.259329][ T51] Bluetooth: hci1: command tx timeout [ 585.707917][ T3457] vlan0: left allmulticast mode [ 585.733287][ T3457] veth0_vlan: left allmulticast mode [ 585.738689][ T3457] vlan0: left promiscuous mode [ 585.760128][ T3457] À: port 1(vlan0) entered disabled state [ 585.806719][ T3457] hsr_slave_0: left promiscuous mode [ 585.815883][ T3457] hsr_slave_1: left promiscuous mode [ 585.824417][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.832157][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.841893][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.849932][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.858218][ T3457] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 585.866644][ T3457] batman_adv: batadv0: Removing interface: veth0_vlan [ 585.875668][ T3457] bridge0: port 3(team0) entered disabled state [ 585.894580][ T3457] bridge_slave_1: left allmulticast mode [ 585.909376][ T3457] bridge_slave_1: left promiscuous mode [ 585.918762][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.939690][ T3457] bridge_slave_0: left allmulticast mode [ 585.945422][ T3457] bridge_slave_0: left promiscuous mode [ 585.960274][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.009950][ T3457] veth1_macvtap: left promiscuous mode [ 586.023189][ T3457] veth0_macvtap: left promiscuous mode [ 586.031661][ T3457] veth1_vlan: left promiscuous mode [ 586.037327][ T3457] veth0_vlan: left promiscuous mode [ 586.219516][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 586.642565][ T3457] hsr0 (unregistering): left promiscuous mode [ 586.648936][ T3457] hsr0 (unregistering): left allmulticast mode [ 586.660986][ T3457] team0 (unregistering): Port device hsr0 removed [ 586.841576][ T3457] team_slave_1 (unregistering): left promiscuous mode [ 586.848444][ T3457] team_slave_1 (unregistering): left allmulticast mode [ 586.863012][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 586.908127][ T3457] team_slave_0 (unregistering): left promiscuous mode [ 586.918205][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 586.964749][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.011596][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.038015][ T3457] veth0_to_bond (unregistering): left promiscuous mode [ 587.045587][ T3457] veth0_to_bond (unregistering): left allmulticast mode [ 587.056768][ T3457] team0 (unregistering): Port device veth0_to_bond removed [ 587.182465][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 587.259817][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 587.352893][ T51] Bluetooth: hci1: command tx timeout [ 587.406850][ T3457] bond0 (unregistering): Released all slaves [ 587.890900][T14332] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 588.310828][T14341] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 588.404452][T14193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.438523][T14346] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 588.465961][T14193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 588.492782][T14193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 588.507882][T14193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.746348][T14193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.837904][T14193] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.922277][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.930515][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.990687][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.997944][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.422349][ T51] Bluetooth: hci1: command tx timeout [ 589.688898][T14193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.880723][T14193] veth0_vlan: entered promiscuous mode [ 589.921152][T14193] veth1_vlan: entered promiscuous mode [ 590.053851][T14193] veth0_macvtap: entered promiscuous mode [ 590.111868][T14193] veth1_macvtap: entered promiscuous mode [ 590.198764][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.221013][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 590.238820][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.275739][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.299092][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.322360][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.343930][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.364269][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.441733][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.517393][T14193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.595661][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.606754][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.617355][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.628620][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.669349][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.689041][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.710151][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.732220][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.762505][T14193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.813070][T14402] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 590.835133][T14401] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 590.846918][T14401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2538'. [ 590.909316][T14401] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 590.919787][T14401] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.974368][T14401] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 591.007201][T14193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.028441][T14193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.045990][T14193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.054933][T14193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.067327][T14397] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2538'. [ 591.323756][T10287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.349162][T10287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.441276][T10287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.456466][T10287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.185205][T14425] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 592.220947][T10287] wlan1: Trigger new scan to find an IBSS to join [ 592.787053][T14451] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 592.952803][T14459] FAULT_INJECTION: forcing a failure. [ 592.952803][T14459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.969304][T14459] CPU: 0 PID: 14459 Comm: syz.3.2554 Not tainted syzkaller #0 [ 592.976842][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.986945][T14459] Call Trace: [ 592.990255][T14459] [ 592.993219][T14459] dump_stack_lvl+0x18c/0x250 [ 592.997943][T14459] ? show_regs_print_info+0x20/0x20 [ 593.003282][T14459] ? load_image+0x400/0x400 [ 593.007822][T14459] ? __lock_acquire+0x7d40/0x7d40 [ 593.012874][T14459] ? _copy_from_iter+0x181/0x12e0 [ 593.018796][T14459] should_fail_ex+0x39d/0x4d0 [ 593.023540][T14459] prepare_alloc_pages+0x1e2/0x5f0 [ 593.028713][T14459] __alloc_pages+0x134/0x460 [ 593.033347][T14459] ? zone_statistics+0x170/0x170 [ 593.038346][T14459] ? _raw_spin_lock_irqsave+0x100/0x100 [ 593.043957][T14459] ? copy_page_from_iter+0xe8/0x100 [ 593.049216][T14459] pipe_write+0x62b/0x1b10 [ 593.053714][T14459] ? pipe_read+0x1310/0x1310 [ 593.058368][T14459] ? end_current_label_crit_section+0x149/0x170 [ 593.064672][T14459] ? common_file_perm+0x198/0x1f0 [ 593.069763][T14459] vfs_write+0x46c/0x990 [ 593.074067][T14459] ? file_end_write+0x250/0x250 [ 593.079337][T14459] ? __fget_files+0x43d/0x4b0 [ 593.084099][T14459] ? __fdget_pos+0x1d8/0x330 [ 593.088791][T14459] ? ksys_write+0x75/0x260 [ 593.093285][T14459] ksys_write+0x150/0x260 [ 593.097679][T14459] ? __ia32_sys_read+0x90/0x90 [ 593.102504][T14459] ? lockdep_hardirqs_on+0x98/0x150 [ 593.107840][T14459] do_syscall_64+0x55/0xa0 [ 593.112318][T14459] ? clear_bhb_loop+0x40/0x90 [ 593.117072][T14459] ? clear_bhb_loop+0x40/0x90 [ 593.121851][T14459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.127789][T14459] RIP: 0033:0x7f6155d9c819 [ 593.132237][T14459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.151901][T14459] RSP: 002b:00007f6156b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.160462][T14459] RAX: ffffffffffffffda RBX: 00007f6156015fa0 RCX: 00007f6155d9c819 [ 593.168488][T14459] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000000 [ 593.176516][T14459] RBP: 00007f6156b75090 R08: 0000000000000000 R09: 0000000000000000 [ 593.184542][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.192568][T14459] R13: 00007f6156016038 R14: 00007f6156015fa0 R15: 00007ffdf0103848 [ 593.200621][T14459] [ 593.260477][ T34] wlan1: Trigger new scan to find an IBSS to join [ 594.076211][T14483] netlink: 'syz.1.2563': attribute type 29 has an invalid length. [ 594.104407][T14484] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.118748][T14483] netlink: 'syz.1.2563': attribute type 29 has an invalid length. [ 594.243356][T14493] netlink: 'syz.3.2566': attribute type 29 has an invalid length. [ 594.258381][T14493] netlink: 'syz.3.2566': attribute type 29 has an invalid length. [ 594.268665][T14493] netlink: 'syz.3.2566': attribute type 29 has an invalid length. [ 594.860566][T14515] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 595.022678][T14519] netlink: 'syz.3.2577': attribute type 29 has an invalid length. [ 595.035713][T14519] netlink: 'syz.3.2577': attribute type 29 has an invalid length. [ 595.045279][T14519] netlink: 'syz.3.2577': attribute type 29 has an invalid length. [ 595.233114][T14523] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2579'. [ 595.264351][T14523] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2579'. [ 595.275140][T14523] tipc: Started in network mode [ 595.280570][T14523] tipc: Node identity b, cluster identity 73 [ 595.286650][T14523] tipc: Node number set to 11 [ 595.697679][T14542] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 595.774580][T14546] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2587'. [ 595.784454][T14546] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2587'. [ 595.795733][T14546] tipc: Started in network mode [ 595.802635][T14546] tipc: Node identity b, cluster identity 73 [ 595.808796][T14546] tipc: Node number set to 11 [ 596.220636][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 596.231192][ T12] wlan1: Trigger new scan to find an IBSS to join [ 596.305403][ T34] wlan1: Creating new IBSS network, BSSID 82:34:12:90:be:92 [ 596.316657][T14566] netlink: 'syz.3.2594': attribute type 3 has an invalid length. [ 596.338620][T14566] netlink: 'syz.3.2594': attribute type 1 has an invalid length. [ 596.367287][T14566] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2594'. [ 596.876120][T14578] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 597.193934][T14584] FAULT_INJECTION: forcing a failure. [ 597.193934][T14584] name failslab, interval 1, probability 0, space 0, times 0 [ 597.224993][T14584] CPU: 0 PID: 14584 Comm: syz.2.2601 Not tainted syzkaller #0 [ 597.232557][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.242663][T14584] Call Trace: [ 597.245997][T14584] [ 597.249000][T14584] dump_stack_lvl+0x18c/0x250 [ 597.253751][T14584] ? show_regs_print_info+0x20/0x20 [ 597.259029][T14584] ? load_image+0x400/0x400 [ 597.263588][T14584] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 597.269631][T14584] ? __asan_memset+0x22/0x40 [ 597.274460][T14584] should_fail_ex+0x39d/0x4d0 [ 597.279201][T14584] should_failslab+0x9/0x20 [ 597.283796][T14584] slab_pre_alloc_hook+0x59/0x310 [ 597.288873][T14584] ? __debug_object_init+0xec/0x450 [ 597.294134][T14584] kmem_cache_alloc+0x5a/0x2d0 [ 597.298954][T14584] ? slab_build_skb+0x2b/0x3f0 [ 597.303806][T14584] slab_build_skb+0x2b/0x3f0 [ 597.308462][T14584] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 597.313889][T14584] ? __fget_files+0x28/0x4b0 [ 597.318540][T14584] ? __fget_files+0x28/0x4b0 [ 597.323190][T14584] ? __fget_files+0x43d/0x4b0 [ 597.327931][T14584] ? cpu_online+0x60/0x60 [ 597.332305][T14584] bpf_prog_test_run+0x321/0x390 [ 597.337368][T14584] __sys_bpf+0x49d/0x890 [ 597.341649][T14584] ? bpf_link_show_fdinfo+0x390/0x390 [ 597.347077][T14584] ? lock_chain_count+0x20/0x20 [ 597.351972][T14584] __x64_sys_bpf+0x7c/0x90 [ 597.356420][T14584] do_syscall_64+0x55/0xa0 [ 597.360886][T14584] ? clear_bhb_loop+0x40/0x90 [ 597.365684][T14584] ? clear_bhb_loop+0x40/0x90 [ 597.370401][T14584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.376358][T14584] RIP: 0033:0x7f67d9d9c819 [ 597.380811][T14584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.400445][T14584] RSP: 002b:00007f67dabcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.408890][T14584] RAX: ffffffffffffffda RBX: 00007f67da015fa0 RCX: 00007f67d9d9c819 [ 597.416919][T14584] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 597.424957][T14584] RBP: 00007f67dabcb090 R08: 0000000000000000 R09: 0000000000000000 [ 597.432972][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.440989][T14584] R13: 00007f67da016038 R14: 00007f67da015fa0 R15: 00007fff7939b878 [ 597.449041][T14584] [ 597.711526][T14592] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 597.763681][T14598] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 597.855375][T14601] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 598.686516][T14621] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 598.738111][T14624] FAULT_INJECTION: forcing a failure. [ 598.738111][T14624] name failslab, interval 1, probability 0, space 0, times 0 [ 598.768934][T14624] CPU: 1 PID: 14624 Comm: syz.2.2618 Not tainted syzkaller #0 [ 598.776543][T14624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.786663][T14624] Call Trace: [ 598.790000][T14624] [ 598.792984][T14624] dump_stack_lvl+0x18c/0x250 [ 598.797748][T14624] ? show_regs_print_info+0x20/0x20 [ 598.803032][T14624] ? load_image+0x400/0x400 [ 598.807599][T14624] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 598.813657][T14624] ? __asan_memset+0x22/0x40 [ 598.818315][T14624] should_fail_ex+0x39d/0x4d0 [ 598.823056][T14624] should_failslab+0x9/0x20 [ 598.827605][T14624] slab_pre_alloc_hook+0x59/0x310 [ 598.832711][T14624] ? __debug_object_init+0xec/0x450 [ 598.837993][T14624] kmem_cache_alloc+0x5a/0x2d0 [ 598.842817][T14624] ? slab_build_skb+0x2b/0x3f0 [ 598.847649][T14624] slab_build_skb+0x2b/0x3f0 [ 598.852304][T14624] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 598.857726][T14624] ? __fget_files+0x28/0x4b0 [ 598.862365][T14624] ? __fget_files+0x28/0x4b0 [ 598.867008][T14624] ? __fget_files+0x43d/0x4b0 [ 598.871751][T14624] ? cpu_online+0x60/0x60 [ 598.876124][T14624] bpf_prog_test_run+0x321/0x390 [ 598.881106][T14624] __sys_bpf+0x49d/0x890 [ 598.885401][T14624] ? bpf_link_show_fdinfo+0x390/0x390 [ 598.890867][T14624] ? lock_chain_count+0x20/0x20 [ 598.895791][T14624] __x64_sys_bpf+0x7c/0x90 [ 598.900263][T14624] do_syscall_64+0x55/0xa0 [ 598.904743][T14624] ? clear_bhb_loop+0x40/0x90 [ 598.909478][T14624] ? clear_bhb_loop+0x40/0x90 [ 598.914203][T14624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.920181][T14624] RIP: 0033:0x7f67d9d9c819 [ 598.924632][T14624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.944274][T14624] RSP: 002b:00007f67dabcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.952756][T14624] RAX: ffffffffffffffda RBX: 00007f67da015fa0 RCX: 00007f67d9d9c819 [ 598.960781][T14624] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 598.968820][T14624] RBP: 00007f67dabcb090 R08: 0000000000000000 R09: 0000000000000000 [ 598.976827][T14624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.984834][T14624] R13: 00007f67da016038 R14: 00007f67da015fa0 R15: 00007fff7939b878 [ 598.992873][T14624] [ 599.037798][T14626] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 599.182492][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 599.235148][T14629] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.2620'. [ 599.907506][T14647] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 599.994195][T14643] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 600.038920][T14649] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 600.255814][T10288] wlan1: Trigger new scan to find an IBSS to join [ 602.219370][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 602.226106][ T12] wlan1: Trigger new scan to find an IBSS to join [ 602.233399][ T34] wlan1: Trigger new scan to find an IBSS to join [ 605.189429][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 605.196083][T10287] wlan1: Trigger new scan to find an IBSS to join [ 605.259267][ T1085] wlan1: Trigger new scan to find an IBSS to join [ 605.259608][ T12] wlan1: Trigger new scan to find an IBSS to join [ 606.518764][ T1085] wlan1: Creating new IBSS network, BSSID 62:3a:52:3b:d4:60 [ 606.892703][T14681] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 607.015022][T14682] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 607.147693][T14687] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 607.853827][T14704] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 608.128814][T14716] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 608.242965][T14720] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 608.917871][T14742] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 609.187107][T10287] wlan1: Trigger new scan to find an IBSS to join [ 609.235913][T14751] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.261657][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 611.268311][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 611.275256][ T12] wlan1: Trigger new scan to find an IBSS to join [ 612.513123][T14763] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 612.547956][T14767] FAULT_INJECTION: forcing a failure. [ 612.547956][T14767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.582327][T14767] CPU: 1 PID: 14767 Comm: syz.1.2673 Not tainted syzkaller #0 [ 612.590039][T14767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.600198][T14767] Call Trace: [ 612.603548][T14767] [ 612.606549][T14767] dump_stack_lvl+0x18c/0x250 [ 612.611349][T14767] ? show_regs_print_info+0x20/0x20 [ 612.616633][T14767] ? load_image+0x400/0x400 [ 612.621231][T14767] ? __might_fault+0xaa/0x120 [ 612.625992][T14767] ? __lock_acquire+0x7d40/0x7d40 [ 612.631094][T14767] ? __kasan_slab_alloc+0x6c/0x80 [ 612.636226][T14767] should_fail_ex+0x39d/0x4d0 [ 612.641014][T14767] strncpy_from_user+0x36/0x2d0 [ 612.645986][T14767] getname_flags+0xf6/0x500 [ 612.650604][T14767] user_path_create+0x25/0x50 [ 612.655366][T14767] bpf_obj_pin_user+0x149/0x330 [ 612.660311][T14767] ? verifier_remove_insns+0x1370/0x1370 [ 612.666056][T14767] ? __might_fault+0xaa/0x120 [ 612.670839][T14767] __sys_bpf+0x7be/0x890 [ 612.675180][T14767] ? bpf_link_show_fdinfo+0x390/0x390 [ 612.680697][T14767] ? lock_chain_count+0x20/0x20 [ 612.685676][T14767] __x64_sys_bpf+0x7c/0x90 [ 612.690194][T14767] do_syscall_64+0x55/0xa0 [ 612.694699][T14767] ? clear_bhb_loop+0x40/0x90 [ 612.699451][T14767] ? clear_bhb_loop+0x40/0x90 [ 612.704238][T14767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.710316][T14767] RIP: 0033:0x7f562279c819 [ 612.714833][T14767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.734545][T14767] RSP: 002b:00007f5623687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.743062][T14767] RAX: ffffffffffffffda RBX: 00007f5622a15fa0 RCX: 00007f562279c819 [ 612.751133][T14767] RDX: 0000000000000018 RSI: 0000200000000140 RDI: 0000000000000006 [ 612.759191][T14767] RBP: 00007f5623687090 R08: 0000000000000000 R09: 0000000000000000 [ 612.767247][T14767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.775318][T14767] R13: 00007f5622a16038 R14: 00007f5622a15fa0 R15: 00007fff76020838 [ 612.783475][T14767] [ 613.021111][T14774] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.060941][T14805] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.151837][T14810] FAULT_INJECTION: forcing a failure. [ 614.151837][T14810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.195128][T14810] CPU: 0 PID: 14810 Comm: syz.2.2689 Not tainted syzkaller #0 [ 614.195674][T14813] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.202664][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 614.202680][T14810] Call Trace: [ 614.202690][T14810] [ 614.202699][T14810] dump_stack_lvl+0x18c/0x250 [ 614.202739][T14810] ? show_regs_print_info+0x20/0x20 [ 614.202772][T14810] ? load_image+0x400/0x400 [ 614.202801][T14810] ? __lock_acquire+0x7d40/0x7d40 [ 614.202834][T14810] should_fail_ex+0x39d/0x4d0 [ 614.202870][T14810] _copy_from_user+0x2f/0xe0 [ 614.202899][T14810] __copy_msghdr+0x3bb/0x580 [ 614.202925][T14810] ___sys_sendmsg+0x214/0x360 [ 614.202946][T14810] ? get_pid_task+0x20/0x1e0 [ 614.202979][T14810] ? __sys_sendmsg+0x2a0/0x2a0 [ 614.203022][T14810] ? __lock_acquire+0x7d40/0x7d40 [ 614.203073][T14810] __se_sys_sendmsg+0x1c2/0x2b0 [ 614.203098][T14810] ? __x64_sys_sendmsg+0x80/0x80 [ 614.203134][T14810] ? lockdep_hardirqs_on+0x98/0x150 [ 614.203163][T14810] do_syscall_64+0x55/0xa0 [ 614.203193][T14810] ? clear_bhb_loop+0x40/0x90 [ 614.203218][T14810] ? clear_bhb_loop+0x40/0x90 [ 614.203246][T14810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.203271][T14810] RIP: 0033:0x7f67d9d9c819 [ 614.203292][T14810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.203319][T14810] RSP: 002b:00007f67dabcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.203343][T14810] RAX: ffffffffffffffda RBX: 00007f67da015fa0 RCX: 00007f67d9d9c819 [ 614.203360][T14810] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 614.203374][T14810] RBP: 00007f67dabcb090 R08: 0000000000000000 R09: 0000000000000000 [ 614.203388][T14810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.203401][T14810] R13: 00007f67da016038 R14: 00007f67da015fa0 R15: 00007fff7939b878 [ 614.389270][T14810] [ 615.274991][T10287] wlan1: Trigger new scan to find an IBSS to join [ 616.219529][ T12] wlan1: Trigger new scan to find an IBSS to join [ 616.231959][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 617.726445][T14840] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 618.136175][T14855] netlink: 'syz.1.2704': attribute type 2 has an invalid length. [ 618.698234][T14872] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 619.042356][T14882] À: port 1(vlan0) entered blocking state [ 619.074261][T14882] À: port 1(vlan0) entered disabled state [ 619.093082][T14882] vlan0: entered allmulticast mode [ 619.112209][T14882] veth0_vlan: entered allmulticast mode [ 619.143850][T14882] vlan0: entered promiscuous mode [ 619.186586][T14880] delete_channel: no stack [ 619.470129][T14897] netlink: 'syz.3.2719': attribute type 41 has an invalid length. [ 619.813341][T14903] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2720'. [ 619.828283][T14903] openvswitch: netlink: Key type 4112 is out of range max 32 [ 620.025753][T14910] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 620.228835][T10287] wlan1: Trigger new scan to find an IBSS to join [ 620.816770][T14922] À: port 1(vlan0) entered blocking state [ 620.824128][T14922] À: port 1(vlan0) entered forwarding state [ 621.269500][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 622.220070][T10287] wlan1: Trigger new scan to find an IBSS to join [ 623.196977][ T34] wlan1: Trigger new scan to find an IBSS to join [ 624.113888][ T34] wlan1: Creating new IBSS network, BSSID 6e:49:63:e8:1d:13 [ 624.707945][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.715934][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.170151][T14969] FAULT_INJECTION: forcing a failure. [ 625.170151][T14969] name failslab, interval 1, probability 0, space 0, times 0 [ 625.182921][T14969] CPU: 1 PID: 14969 Comm: syz.1.2745 Not tainted syzkaller #0 [ 625.190433][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.200637][T14969] Call Trace: [ 625.203962][T14969] [ 625.206937][T14969] dump_stack_lvl+0x18c/0x250 [ 625.211698][T14969] ? show_regs_print_info+0x20/0x20 [ 625.216978][T14969] ? load_image+0x400/0x400 [ 625.221559][T14969] ? netdev_core_pick_tx+0x340/0x340 [ 625.226911][T14969] should_fail_ex+0x39d/0x4d0 [ 625.231655][T14969] should_failslab+0x9/0x20 [ 625.236225][T14969] slab_pre_alloc_hook+0x59/0x310 [ 625.241319][T14969] kmem_cache_alloc+0x5a/0x2d0 [ 625.246147][T14969] ? skb_clone+0x1eb/0x370 [ 625.250612][T14969] skb_clone+0x1eb/0x370 [ 625.254893][T14969] bpf_clone_redirect+0x167/0x4a0 [ 625.259959][T14969] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 625.265456][T14969] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 625.271478][T14969] ? lock_chain_count+0x20/0x20 [ 625.276361][T14969] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 625.282409][T14969] ? lockdep_softirqs_on+0x580/0x580 [ 625.287744][T14969] ? lock_chain_count+0x20/0x20 [ 625.292636][T14969] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 625.298926][T14969] ? __local_bh_disable_ip+0x108/0x1a0 [ 625.304425][T14969] ? __cant_sleep+0x220/0x220 [ 625.309136][T14969] ? __local_bh_enable_ip+0x13a/0x1c0 [ 625.314542][T14969] ? _local_bh_enable+0xa0/0xa0 [ 625.319430][T14969] ? bpf_test_timer_continue+0x135/0x380 [ 625.325098][T14969] ? bpf_test_run+0x174/0x870 [ 625.329892][T14969] bpf_test_run+0x2df/0x870 [ 625.334438][T14969] ? bpf_test_run+0x174/0x870 [ 625.339146][T14969] ? convert___skb_to_skb+0x590/0x590 [ 625.344566][T14969] ? eth_get_headlen+0x210/0x210 [ 625.349550][T14969] ? slab_build_skb+0x25f/0x3f0 [ 625.354445][T14969] ? convert___skb_to_skb+0x3d/0x590 [ 625.359777][T14969] bpf_prog_test_run_skb+0xad2/0x12b0 [ 625.365198][T14969] ? cpu_online+0x60/0x60 [ 625.369554][T14969] bpf_prog_test_run+0x321/0x390 [ 625.374525][T14969] __sys_bpf+0x49d/0x890 [ 625.378800][T14969] ? bpf_link_show_fdinfo+0x390/0x390 [ 625.384219][T14969] ? lock_chain_count+0x20/0x20 [ 625.389108][T14969] __x64_sys_bpf+0x7c/0x90 [ 625.393550][T14969] do_syscall_64+0x55/0xa0 [ 625.398175][T14969] ? clear_bhb_loop+0x40/0x90 [ 625.402882][T14969] ? clear_bhb_loop+0x40/0x90 [ 625.407594][T14969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.413537][T14969] RIP: 0033:0x7f562279c819 [ 625.417998][T14969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.437663][T14969] RSP: 002b:00007f5623687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 625.446116][T14969] RAX: ffffffffffffffda RBX: 00007f5622a15fa0 RCX: 00007f562279c819 [ 625.454121][T14969] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 625.462116][T14969] RBP: 00007f5623687090 R08: 0000000000000000 R09: 0000000000000000 [ 625.470115][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.478115][T14969] R13: 00007f5622a16038 R14: 00007f5622a15fa0 R15: 00007fff76020838 [ 625.486126][T14969] [ 626.232794][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 626.233629][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 628.524886][ T5947] wlan1: Creating new IBSS network, BSSID 5a:4d:c0:73:62:05 [ 628.530859][ T5957] wlan1: Creating new IBSS network, BSSID 9a:55:18:0c:35:ac [ 629.357399][T15006] FAULT_INJECTION: forcing a failure. [ 629.357399][T15006] name failslab, interval 1, probability 0, space 0, times 0 [ 629.370843][T15006] CPU: 0 PID: 15006 Comm: syz.3.2754 Not tainted syzkaller #0 [ 629.378446][T15006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.388568][T15006] Call Trace: [ 629.391979][T15006] [ 629.395031][T15006] dump_stack_lvl+0x18c/0x250 [ 629.399769][T15006] ? show_regs_print_info+0x20/0x20 [ 629.405027][T15006] ? load_image+0x400/0x400 [ 629.409586][T15006] ? __might_sleep+0xe0/0xe0 [ 629.414224][T15006] ? __lock_acquire+0x7d40/0x7d40 [ 629.419319][T15006] should_fail_ex+0x39d/0x4d0 [ 629.424264][T15006] should_failslab+0x9/0x20 [ 629.428821][T15006] slab_pre_alloc_hook+0x59/0x310 [ 629.433914][T15006] ? sctp_association_new+0x89/0x25c0 [ 629.439431][T15006] __kmem_cache_alloc_node+0x53/0x250 [ 629.444962][T15006] ? sctp_association_new+0x89/0x25c0 [ 629.450391][T15006] kmalloc_trace+0x2a/0xe0 [ 629.454886][T15006] sctp_association_new+0x89/0x25c0 [ 629.460142][T15006] ? bpf_lsm_capable+0x9/0x10 [ 629.464873][T15006] ? security_capable+0x89/0xb0 [ 629.469785][T15006] sctp_connect_new_asoc+0x2de/0x6a0 [ 629.475127][T15006] ? __sctp_connect+0xd80/0xd80 [ 629.480028][T15006] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 629.485979][T15006] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 629.491944][T15006] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 629.497937][T15006] __sctp_connect+0x5b7/0xd80 [ 629.502694][T15006] ? sctp_send_asconf+0x170/0x170 [ 629.507872][T15006] ? __local_bh_enable_ip+0x13a/0x1c0 [ 629.513329][T15006] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 629.518956][T15006] ? security_sctp_bind_connect+0x89/0xb0 [ 629.524763][T15006] sctp_setsockopt_connectx+0x104/0x1a0 [ 629.530406][T15006] sctp_setsockopt+0x6d8/0x11e0 [ 629.535320][T15006] ? sock_common_recvmsg+0x190/0x190 [ 629.540690][T15006] do_sock_setsockopt+0x175/0x1a0 [ 629.545782][T15006] ? __fdget+0x180/0x210 [ 629.550123][T15006] __x64_sys_setsockopt+0x182/0x200 [ 629.555402][T15006] do_syscall_64+0x55/0xa0 [ 629.559894][T15006] ? clear_bhb_loop+0x40/0x90 [ 629.564632][T15006] ? clear_bhb_loop+0x40/0x90 [ 629.569378][T15006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.575337][T15006] RIP: 0033:0x7f6155d9c819 [ 629.579805][T15006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.599475][T15006] RSP: 002b:00007f6156b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 629.607943][T15006] RAX: ffffffffffffffda RBX: 00007f6156015fa0 RCX: 00007f6155d9c819 [ 629.615961][T15006] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 629.623979][T15006] RBP: 00007f6156b75090 R08: 0000000000000010 R09: 0000000000000000 [ 629.632011][T15006] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.640041][T15006] R13: 00007f6156016038 R14: 00007f6156015fa0 R15: 00007ffdf0103848 [ 629.648173][T15006] [ 633.382166][ T51] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 639.099984][T15063] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 639.361813][T15071] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 640.101267][ T51] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 641.265362][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 643.357033][T15105] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 644.067851][ T51] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 647.179369][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 647.193270][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 647.257210][ T3457] wlan1: Creating new IBSS network, BSSID 5a:06:b2:f8:30:a7 [ 647.266247][T15138] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 648.006523][T15166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2803'. [ 649.259564][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 650.357957][T15174] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 650.841142][T15190] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2813'. [ 651.098695][T15198] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 651.130398][T15198] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 651.141148][T15201] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 651.271398][T10288] wlan1: Trigger new scan to find an IBSS to join [ 652.221244][ T34] wlan1: Creating new IBSS network, BSSID 86:c1:92:70:7f:54 [ 652.720166][T15212] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 654.176388][T15218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2822'. [ 654.230983][ T34] wlan1: Trigger new scan to find an IBSS to join [ 654.356102][T15226] FAULT_INJECTION: forcing a failure. [ 654.356102][T15226] name failslab, interval 1, probability 0, space 0, times 0 [ 654.372199][T15226] CPU: 1 PID: 15226 Comm: syz.0.2825 Not tainted syzkaller #0 [ 654.379764][T15226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.389906][T15226] Call Trace: [ 654.393254][T15226] [ 654.396237][T15226] dump_stack_lvl+0x18c/0x250 [ 654.401087][T15226] ? show_regs_print_info+0x20/0x20 [ 654.406364][T15226] ? load_image+0x400/0x400 [ 654.410953][T15226] ? __might_sleep+0xe0/0xe0 [ 654.415608][T15226] ? __lock_acquire+0x7d40/0x7d40 [ 654.420714][T15226] should_fail_ex+0x39d/0x4d0 [ 654.425536][T15226] should_failslab+0x9/0x20 [ 654.430133][T15226] slab_pre_alloc_hook+0x59/0x310 [ 654.435240][T15226] ? __lock_acquire+0x7d40/0x7d40 [ 654.440359][T15226] kmem_cache_alloc_node+0x60/0x320 [ 654.445653][T15226] ? __alloc_skb+0x103/0x2c0 [ 654.450321][T15226] __alloc_skb+0x103/0x2c0 [ 654.454813][T15226] netlink_sendmsg+0x66a/0xbf0 [ 654.459677][T15226] ? netlink_getsockopt+0x590/0x590 [ 654.464967][T15226] ? aa_sock_msg_perm+0x94/0x150 [ 654.469984][T15226] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 654.475343][T15226] ? security_socket_sendmsg+0x80/0xa0 [ 654.480873][T15226] ? netlink_getsockopt+0x590/0x590 [ 654.486152][T15226] ____sys_sendmsg+0x5ba/0x960 [ 654.491008][T15226] ? __asan_memset+0x22/0x40 [ 654.495678][T15226] ? __sys_sendmsg_sock+0x30/0x30 [ 654.500768][T15226] ? __import_iovec+0x5f2/0x850 [ 654.505703][T15226] ? import_iovec+0x73/0xa0 [ 654.510286][T15226] ___sys_sendmsg+0x2a6/0x360 [ 654.515030][T15226] ? get_pid_task+0x20/0x1e0 [ 654.519703][T15226] ? __sys_sendmsg+0x2a0/0x2a0 [ 654.524591][T15226] ? __lock_acquire+0x7d40/0x7d40 [ 654.529743][T15226] __se_sys_sendmsg+0x1c2/0x2b0 [ 654.534669][T15226] ? __x64_sys_sendmsg+0x80/0x80 [ 654.539709][T15226] ? lockdep_hardirqs_on+0x98/0x150 [ 654.544988][T15226] do_syscall_64+0x55/0xa0 [ 654.549477][T15226] ? clear_bhb_loop+0x40/0x90 [ 654.554222][T15226] ? clear_bhb_loop+0x40/0x90 [ 654.558968][T15226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.564928][T15226] RIP: 0033:0x7f35bdf9c819 [ 654.569398][T15226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.589062][T15226] RSP: 002b:00007f35bedca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.597559][T15226] RAX: ffffffffffffffda RBX: 00007f35be215fa0 RCX: 00007f35bdf9c819 [ 654.605612][T15226] RDX: 0000000000000080 RSI: 0000200000000940 RDI: 0000000000000004 [ 654.613646][T15226] RBP: 00007f35bedca090 R08: 0000000000000000 R09: 0000000000000000 [ 654.621686][T15226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.629730][T15226] R13: 00007f35be216038 R14: 00007f35be215fa0 R15: 00007ffdce423338 [ 654.637813][T15226] [ 655.045184][T15235] netlink: 'syz.0.2829': attribute type 29 has an invalid length. [ 655.064479][T15235] netlink: 'syz.0.2829': attribute type 29 has an invalid length. [ 655.081099][T15235] netlink: 'syz.0.2829': attribute type 29 has an invalid length. [ 655.180775][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 655.199210][ T34] wlan1: Trigger new scan to find an IBSS to join [ 655.248259][ T5966] wlan1: Creating new IBSS network, BSSID 32:90:39:4f:92:5f [ 657.259158][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 658.219181][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 658.265238][ T3457] wlan1: Creating new IBSS network, BSSID 32:d1:7d:55:ee:0f [ 658.513222][T15258] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 660.097742][T15297] FAULT_INJECTION: forcing a failure. [ 660.097742][T15297] name failslab, interval 1, probability 0, space 0, times 0 [ 660.139152][T15297] CPU: 1 PID: 15297 Comm: syz.3.2846 Not tainted syzkaller #0 [ 660.146793][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.156908][T15297] Call Trace: [ 660.160242][T15297] [ 660.163285][T15297] dump_stack_lvl+0x18c/0x250 [ 660.168040][T15297] ? show_regs_print_info+0x20/0x20 [ 660.173307][T15297] ? load_image+0x400/0x400 [ 660.177866][T15297] ? __might_sleep+0xe0/0xe0 [ 660.182521][T15297] ? __lock_acquire+0x7d40/0x7d40 [ 660.187620][T15297] ? __lock_acquire+0x7d40/0x7d40 [ 660.192703][T15297] should_fail_ex+0x39d/0x4d0 [ 660.197449][T15297] should_failslab+0x9/0x20 [ 660.202023][T15297] slab_pre_alloc_hook+0x59/0x310 [ 660.207124][T15297] ? trace_call_bpf+0x5e9/0x6c0 [ 660.212098][T15297] ? __get_vm_area_node+0x125/0x370 [ 660.217362][T15297] __kmem_cache_alloc_node+0x53/0x250 [ 660.222805][T15297] ? __get_vm_area_node+0x125/0x370 [ 660.228073][T15297] kmalloc_node_trace+0x26/0xe0 [ 660.232998][T15297] __get_vm_area_node+0x125/0x370 [ 660.238135][T15297] __vmalloc_node_range+0x36e/0x1330 [ 660.243504][T15297] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 660.249111][T15297] ? perf_trace_preemptirq_template+0x269/0x330 [ 660.255445][T15297] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 660.261518][T15297] ? free_vm_area+0x50/0x50 [ 660.266085][T15297] ? end_current_label_crit_section+0x170/0x170 [ 660.272405][T15297] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 660.278022][T15297] __vmalloc+0x7a/0x90 [ 660.282249][T15297] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 660.287884][T15297] bpf_prog_alloc_no_stats+0x47/0x440 [ 660.293321][T15297] ? bpf_prog_alloc+0x2b/0x1a0 [ 660.298159][T15297] bpf_prog_alloc+0x3d/0x1a0 [ 660.302818][T15297] bpf_prog_load+0x6eb/0x1670 [ 660.307553][T15297] ? map_freeze+0x420/0x420 [ 660.312111][T15297] ? __might_fault+0xaa/0x120 [ 660.315713][T15303] netlink: 'syz.3.2846': attribute type 29 has an invalid length. [ 660.316819][T15297] ? __lock_acquire+0x7d40/0x7d40 [ 660.316847][T15297] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 660.335995][T15297] ? ktime_get_real_ts64+0x440/0x440 [ 660.341342][T15297] ? __might_fault+0xaa/0x120 [ 660.346073][T15297] ? __might_fault+0xc6/0x120 [ 660.350795][T15297] ? __might_fault+0xaa/0x120 [ 660.355548][T15297] ? bpf_lsm_bpf+0x9/0x10 [ 660.360024][T15297] ? security_bpf+0x7e/0xa0 [ 660.364614][T15297] __sys_bpf+0x5ba/0x890 [ 660.368933][T15297] ? bpf_link_show_fdinfo+0x390/0x390 [ 660.374402][T15297] ? lock_chain_count+0x20/0x20 [ 660.379403][T15297] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 660.385460][T15297] __x64_sys_bpf+0x7c/0x90 [ 660.389938][T15297] do_syscall_64+0x55/0xa0 [ 660.394438][T15297] ? clear_bhb_loop+0x40/0x90 [ 660.399184][T15297] ? clear_bhb_loop+0x40/0x90 [ 660.403935][T15297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.409904][T15297] RIP: 0033:0x7f6155d9c819 [ 660.414399][T15297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.434071][T15297] RSP: 002b:00007f6156b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.442571][T15297] RAX: ffffffffffffffda RBX: 00007f6156015fa0 RCX: 00007f6155d9c819 [ 660.450599][T15297] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 660.458625][T15297] RBP: 00007f6156b75090 R08: 0000000000000000 R09: 0000000000000000 [ 660.466659][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.474694][T15297] R13: 00007f6156016038 R14: 00007f6156015fa0 R15: 00007ffdf0103848 [ 660.482744][T15297] [ 660.509732][T15303] netlink: 'syz.3.2846': attribute type 29 has an invalid length. [ 660.568418][T15297] syz.3.2846: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 660.618528][T15297] CPU: 0 PID: 15297 Comm: syz.3.2846 Not tainted syzkaller #0 [ 660.626083][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.636199][T15297] Call Trace: [ 660.639525][T15297] [ 660.642489][T15297] dump_stack_lvl+0x18c/0x250 [ 660.647230][T15297] ? show_regs_print_info+0x20/0x20 [ 660.652504][T15297] ? load_image+0x400/0x400 [ 660.657091][T15297] ? __rcu_read_unlock+0x7c/0xd0 [ 660.662087][T15297] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 660.668563][T15297] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 660.675119][T15297] warn_alloc+0x246/0x340 [ 660.679511][T15297] ? __get_vm_area_node+0x125/0x370 [ 660.684766][T15297] ? zone_watermark_ok_safe+0x230/0x230 [ 660.690375][T15297] ? rcu_is_watching+0x15/0xb0 [ 660.695197][T15297] ? __get_vm_area_node+0x356/0x370 [ 660.700458][T15297] __vmalloc_node_range+0x393/0x1330 [ 660.705810][T15297] ? perf_trace_preemptirq_template+0x269/0x330 [ 660.712146][T15297] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 660.718213][T15297] ? free_vm_area+0x50/0x50 [ 660.722788][T15297] ? end_current_label_crit_section+0x170/0x170 [ 660.729101][T15297] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 660.734712][T15297] __vmalloc+0x7a/0x90 [ 660.738866][T15297] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 660.744489][T15297] bpf_prog_alloc_no_stats+0x47/0x440 [ 660.750029][T15297] ? bpf_prog_alloc+0x2b/0x1a0 [ 660.754887][T15297] bpf_prog_alloc+0x3d/0x1a0 [ 660.759564][T15297] bpf_prog_load+0x6eb/0x1670 [ 660.764325][T15297] ? map_freeze+0x420/0x420 [ 660.768987][T15297] ? __might_fault+0xaa/0x120 [ 660.773725][T15297] ? __lock_acquire+0x7d40/0x7d40 [ 660.778903][T15297] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 660.785227][T15297] ? ktime_get_real_ts64+0x440/0x440 [ 660.790578][T15297] ? __might_fault+0xaa/0x120 [ 660.795317][T15297] ? __might_fault+0xc6/0x120 [ 660.800049][T15297] ? __might_fault+0xaa/0x120 [ 660.804867][T15297] ? bpf_lsm_bpf+0x9/0x10 [ 660.809249][T15297] ? security_bpf+0x7e/0xa0 [ 660.813806][T15297] __sys_bpf+0x5ba/0x890 [ 660.818109][T15297] ? bpf_link_show_fdinfo+0x390/0x390 [ 660.823554][T15297] ? lock_chain_count+0x20/0x20 [ 660.828461][T15297] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 660.834499][T15297] __x64_sys_bpf+0x7c/0x90 [ 660.838969][T15297] do_syscall_64+0x55/0xa0 [ 660.843447][T15297] ? clear_bhb_loop+0x40/0x90 [ 660.848176][T15297] ? clear_bhb_loop+0x40/0x90 [ 660.852922][T15297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.858888][T15297] RIP: 0033:0x7f6155d9c819 [ 660.863363][T15297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.883025][T15297] RSP: 002b:00007f6156b75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.891498][T15297] RAX: ffffffffffffffda RBX: 00007f6156015fa0 RCX: 00007f6155d9c819 [ 660.899532][T15297] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 660.907560][T15297] RBP: 00007f6156b75090 R08: 0000000000000000 R09: 0000000000000000 [ 660.915593][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.923621][T15297] R13: 00007f6156016038 R14: 00007f6156015fa0 R15: 00007ffdf0103848 [ 660.931664][T15297] [ 660.998802][T15297] Mem-Info: [ 661.002362][T15297] active_anon:5371 inactive_anon:0 isolated_anon:0 [ 661.002362][T15297] active_file:19612 inactive_file:40160 isolated_file:0 [ 661.002362][T15297] unevictable:768 dirty:171 writeback:0 [ 661.002362][T15297] slab_reclaimable:10341 slab_unreclaimable:103892 [ 661.002362][T15297] mapped:25265 shmem:1361 pagetables:536 [ 661.002362][T15297] sec_pagetables:0 bounce:0 [ 661.002362][T15297] kernel_misc_reclaimable:0 [ 661.002362][T15297] free:1334776 free_pcp:7712 free_cma:0 [ 661.052223][T15309] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 661.090279][T15297] Node 0 active_anon:21584kB inactive_anon:0kB active_file:78448kB inactive_file:160436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101060kB dirty:684kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10424kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no [ 661.195696][T15297] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 661.256889][T15297] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.289470][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 661.298267][T15297] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 661.304664][T15297] Node 0 DMA32 free:1421144kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21284kB inactive_anon:0kB active_file:78448kB inactive_file:159612kB unevictable:1536kB writepending:688kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:26992kB local_pcp:11820kB free_cma:0kB [ 661.363147][T15297] lowmem_reserve[]: 0 0 0 0 0 [ 661.368423][T15297] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 661.398672][T15297] lowmem_reserve[]: 0 0 0 0 0 [ 661.404108][T15297] Node 1 Normal free:3902100kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13472kB local_pcp:8448kB free_cma:0kB [ 661.457126][T15297] lowmem_reserve[]: 0 0 0 0 0 [ 661.510354][T15297] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 661.535380][T15297] Node 0 DMA32: 646*4kB (UME) 1229*8kB (UME) 1285*16kB (UME) 2026*32kB (UME) 910*64kB (UME) 448*128kB (UME) 221*256kB (UME) 92*512kB (UME) 47*1024kB (UM) 29*2048kB (UM) 249*4096kB (UM) = 1444496kB [ 661.567801][T15297] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 661.582632][T15318] netlink: 'syz.1.2850': attribute type 29 has an invalid length. [ 661.601902][T15318] netlink: 'syz.1.2850': attribute type 29 has an invalid length. [ 661.620448][T15297] Node 1 Normal: [ 661.620593][T15319] netlink: 'syz.1.2850': attribute type 29 has an invalid length. [ 661.620616][T15297] 237*4kB (UME) 38*8kB (UME) 33*16kB (UME) 203*32kB (UME) 51*64kB (UE) 9*128kB (UME) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3902100kB [ 661.692502][T15297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.704794][T15297] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 661.717485][T15297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.727546][T15297] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 661.785137][T15297] 61133 total pagecache pages [ 661.812125][T15297] 0 pages in swap cache [ 661.908002][T15297] Free swap = 124996kB [ 661.937675][T15297] Total swap = 124996kB [ 661.942609][T15297] 2097051 pages RAM [ 661.946993][T15297] 0 pages HighMem/MovableOnly [ 661.952298][T15297] 416926 pages reserved [ 661.956965][T15297] 0 pages cma reserved [ 663.222769][T15353] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 663.259546][ T34] wlan1: Trigger new scan to find an IBSS to join [ 663.548414][T15357] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 665.281760][T15399] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 666.223874][T10287] wlan1: Trigger new scan to find an IBSS to join [ 667.126543][T15440] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.141208][T15436] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2886'. [ 667.276823][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 668.057215][T15468] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 668.211915][T15472] netlink: 'syz.2.2899': attribute type 15 has an invalid length. [ 668.226595][T15472] netlink: 'syz.2.2899': attribute type 7 has an invalid length. [ 668.268713][T15472] FAULT_INJECTION: forcing a failure. [ 668.268713][T15472] name failslab, interval 1, probability 0, space 0, times 0 [ 668.306994][T15472] CPU: 1 PID: 15472 Comm: syz.2.2899 Not tainted syzkaller #0 [ 668.314628][T15472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.324736][T15472] Call Trace: [ 668.328067][T15472] [ 668.331044][T15472] dump_stack_lvl+0x18c/0x250 [ 668.335816][T15472] ? show_regs_print_info+0x20/0x20 [ 668.341162][T15472] ? load_image+0x400/0x400 [ 668.345748][T15472] ? __might_sleep+0xe0/0xe0 [ 668.350402][T15472] ? __lock_acquire+0x7d40/0x7d40 [ 668.355483][T15472] should_fail_ex+0x39d/0x4d0 [ 668.360221][T15472] should_failslab+0x9/0x20 [ 668.364817][T15472] slab_pre_alloc_hook+0x59/0x310 [ 668.369910][T15472] ? lockdep_hardirqs_on+0x98/0x150 [ 668.375165][T15472] kmem_cache_alloc_node+0x60/0x320 [ 668.380416][T15472] ? __alloc_skb+0x103/0x2c0 [ 668.385059][T15472] __alloc_skb+0x103/0x2c0 [ 668.389523][T15472] netlink_ack+0x376/0x1180 [ 668.394083][T15472] ? __dev_queue_xmit+0x265/0x3660 [ 668.399338][T15472] ? netlink_dump+0xe50/0xe50 [ 668.404077][T15472] ? ref_tracker_free+0x690/0x840 [ 668.409243][T15472] netlink_rcv_skb+0x2c5/0x4d0 [ 668.414162][T15472] ? rtnetlink_bind+0x80/0x80 [ 668.418981][T15472] ? netlink_ack+0x1180/0x1180 [ 668.423815][T15472] ? __lock_acquire+0x7d40/0x7d40 [ 668.428894][T15472] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.434145][T15472] netlink_unicast+0x751/0x8d0 [ 668.438967][T15472] netlink_sendmsg+0x8d0/0xbf0 [ 668.443791][T15472] ? netlink_getsockopt+0x590/0x590 [ 668.449030][T15472] ? aa_sock_msg_perm+0x94/0x150 [ 668.454008][T15472] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 668.459451][T15472] ? security_socket_sendmsg+0x80/0xa0 [ 668.464946][T15472] ? netlink_getsockopt+0x590/0x590 [ 668.470191][T15472] ____sys_sendmsg+0x5ba/0x960 [ 668.474986][T15472] ? __asan_memset+0x22/0x40 [ 668.479622][T15472] ? __sys_sendmsg_sock+0x30/0x30 [ 668.484671][T15472] ? __import_iovec+0x5f2/0x850 [ 668.490002][T15472] ? import_iovec+0x73/0xa0 [ 668.494547][T15472] ___sys_sendmsg+0x2a6/0x360 [ 668.499346][T15472] ? get_pid_task+0x20/0x1e0 [ 668.503976][T15472] ? __sys_sendmsg+0x2a0/0x2a0 [ 668.508775][T15472] ? __lock_acquire+0x7d40/0x7d40 [ 668.513848][T15472] __se_sys_sendmsg+0x1c2/0x2b0 [ 668.518775][T15472] ? __x64_sys_sendmsg+0x80/0x80 [ 668.523749][T15472] ? lockdep_hardirqs_on+0x98/0x150 [ 668.528982][T15472] do_syscall_64+0x55/0xa0 [ 668.533443][T15472] ? clear_bhb_loop+0x40/0x90 [ 668.538143][T15472] ? clear_bhb_loop+0x40/0x90 [ 668.542853][T15472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.548770][T15472] RIP: 0033:0x7f67d9d9c819 [ 668.553245][T15472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.572974][T15472] RSP: 002b:00007f67dabcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.581413][T15472] RAX: ffffffffffffffda RBX: 00007f67da015fa0 RCX: 00007f67d9d9c819 [ 668.589409][T15472] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 668.597399][T15472] RBP: 00007f67dabcb090 R08: 0000000000000000 R09: 0000000000000000 [ 668.605564][T15472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.613652][T15472] R13: 00007f67da016038 R14: 00007f67da015fa0 R15: 00007fff7939b878 [ 668.621770][T15472] [ 669.180055][T10288] wlan1: Trigger new scan to find an IBSS to join [ 669.260715][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 669.844355][T15507] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 670.220626][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 670.272409][ T34] wlan1: Creating new IBSS network, BSSID b2:3f:1d:1d:fd:5e [ 670.685677][T15529] syzkaller0: entered promiscuous mode [ 670.694035][T15529] syzkaller0: entered allmulticast mode [ 670.990951][T15540] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2922'. [ 671.001931][T15540] openvswitch: netlink: IP tunnel dst address not specified [ 672.223079][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 673.260244][ T34] wlan1: Trigger new scan to find an IBSS to join [ 673.266878][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 673.326411][ T5966] wlan1: Creating new IBSS network, BSSID 16:a4:51:1b:3e:5f [ 673.422692][T15551] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 673.433090][T15557] netlink: 'syz.1.2927': attribute type 15 has an invalid length. [ 673.444331][T15557] netlink: 'syz.1.2927': attribute type 7 has an invalid length. [ 674.017959][T15566] netlink: 'syz.3.2932': attribute type 2 has an invalid length. [ 674.036640][T15566] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2932'. [ 674.292046][T15585] delete_channel: no stack [ 674.311880][T15585] delete_channel: no stack [ 675.261434][T10287] wlan1: Creating new IBSS network, BSSID 86:5c:21:df:e6:7d [ 676.223563][T10287] wlan1: Trigger new scan to find an IBSS to join [ 676.230285][ T5963] wlan1: Trigger new scan to find an IBSS to join [ 677.599819][ T5963] wlan1: Creating new IBSS network, BSSID c6:36:c6:b0:41:be [ 677.820356][T15605] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 677.851844][T15609] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2944'. [ 678.645266][T15635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2951'. [ 678.669789][T15635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2951'. [ 680.067468][T15642] delete_channel: no stack [ 680.219244][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 680.226021][ T34] wlan1: Trigger new scan to find an IBSS to join [ 681.524820][T15637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2951'. [ 681.561416][ T5963] wlan1: Creating new IBSS network, BSSID a2:10:bb:c1:12:64 [ 681.839957][T15653] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 681.920044][T15659] FAULT_INJECTION: forcing a failure. [ 681.920044][T15659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.939115][T15659] CPU: 0 PID: 15659 Comm: syz.0.2959 Not tainted syzkaller #0 [ 681.946658][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.956766][T15659] Call Trace: [ 681.960100][T15659] [ 681.963078][T15659] dump_stack_lvl+0x18c/0x250 [ 681.967833][T15659] ? show_regs_print_info+0x20/0x20 [ 681.973094][T15659] ? load_image+0x400/0x400 [ 681.977657][T15659] ? __might_fault+0xaa/0x120 [ 681.982394][T15659] ? __lock_acquire+0x7d40/0x7d40 [ 681.987531][T15659] should_fail_ex+0x39d/0x4d0 [ 681.992280][T15659] _copy_to_user+0x2f/0xa0 [ 681.996757][T15659] bpf_verifier_vlog+0x2fa/0x870 [ 682.001772][T15659] btf_verifier_log+0x11e/0x1a0 [ 682.006697][T15659] ? btf_parse_graph_root+0xa90/0xa90 [ 682.012118][T15659] ? __btf_verifier_log+0xe3/0x140 [ 682.017287][T15659] ? btf_check_sec_info+0x350/0x350 [ 682.022542][T15659] btf_func_proto_log+0x73/0x840 [ 682.027534][T15659] ? btf_sec_info_cmp+0x5d/0x100 [ 682.032541][T15659] __btf_verifier_log_type+0x455/0x690 [ 682.038071][T15659] ? btf_int_show+0x2890/0x2890 [ 682.043035][T15659] btf_func_proto_check_meta+0xed/0x150 [ 682.048640][T15659] btf_check_all_metas+0x373/0xb00 [ 682.053893][T15659] ? sort_r+0x17f0/0x17f0 [ 682.058275][T15659] btf_parse_type_sec+0xf9/0x1930 [ 682.063353][T15659] ? btf_check_sec_info+0x29f/0x350 [ 682.068774][T15659] ? btf_verifier_log+0x1a0/0x1a0 [ 682.073852][T15659] ? btf_parse_str_sec+0x20d/0x2a0 [ 682.079028][T15659] btf_new_fd+0x440/0x9f0 [ 682.083427][T15659] ? bpf_btf_show_fdinfo+0x80/0x80 [ 682.088613][T15659] ? capable+0x88/0xe0 [ 682.092744][T15659] __sys_bpf+0x670/0x890 [ 682.097041][T15659] ? bpf_link_show_fdinfo+0x390/0x390 [ 682.102495][T15659] ? lock_chain_count+0x20/0x20 [ 682.107405][T15659] __x64_sys_bpf+0x7c/0x90 [ 682.111876][T15659] do_syscall_64+0x55/0xa0 [ 682.116360][T15659] ? clear_bhb_loop+0x40/0x90 [ 682.121089][T15659] ? clear_bhb_loop+0x40/0x90 [ 682.125836][T15659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.131784][T15659] RIP: 0033:0x7f35bdf9c819 [ 682.136251][T15659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.155910][T15659] RSP: 002b:00007f35bedca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 682.164376][T15659] RAX: ffffffffffffffda RBX: 00007f35be215fa0 RCX: 00007f35bdf9c819 [ 682.172393][T15659] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 682.180534][T15659] RBP: 00007f35bedca090 R08: 0000000000000000 R09: 0000000000000000 [ 682.188545][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.196573][T15659] R13: 00007f35be216038 R14: 00007f35be215fa0 R15: 00007ffdce423338 [ 682.204622][T15659] [ 682.617695][T15675] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 683.099517][T13312] Bluetooth: hci3: command 0x0406 tx timeout [ 684.222932][ T12] wlan1: Trigger new scan to find an IBSS to join [ 685.259139][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 685.995428][T15695] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 686.171382][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.177983][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.678573][T15705] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 686.701860][ T51] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 687.013280][T15722] sctp: [Deprecated]: syz.2.2976 (pid 15722) Use of int in maxseg socket option. [ 687.013280][T15722] Use struct sctp_assoc_value instead [ 687.112719][T15722] tap0: tun_chr_ioctl cmd 35108 [ 687.930685][T15740] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 688.246458][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 688.807406][T15765] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 689.875364][T15796] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 690.004381][T15803] FAULT_INJECTION: forcing a failure. [ 690.004381][T15803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.019084][T15803] CPU: 1 PID: 15803 Comm: syz.2.3007 Not tainted syzkaller #0 [ 690.026622][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.036731][T15803] Call Trace: [ 690.040059][T15803] [ 690.043046][T15803] dump_stack_lvl+0x18c/0x250 [ 690.047789][T15803] ? show_regs_print_info+0x20/0x20 [ 690.053059][T15803] ? load_image+0x400/0x400 [ 690.057622][T15803] ? __might_fault+0xaa/0x120 [ 690.062350][T15803] ? __lock_acquire+0x7d40/0x7d40 [ 690.067435][T15803] should_fail_ex+0x39d/0x4d0 [ 690.072180][T15803] _copy_to_user+0x2f/0xa0 [ 690.076648][T15803] finalize_log+0xe4/0x160 [ 690.081226][T15803] ? btf_parse_struct_metas+0xe40/0xe40 [ 690.086842][T15803] ? btf_check_type_tags+0x674/0x680 [ 690.092190][T15803] btf_new_fd+0x768/0x9f0 [ 690.096584][T15803] ? bpf_btf_show_fdinfo+0x80/0x80 [ 690.101755][T15803] ? capable+0x88/0xe0 [ 690.105882][T15803] __sys_bpf+0x670/0x890 [ 690.110435][T15803] ? bpf_link_show_fdinfo+0x390/0x390 [ 690.115872][T15803] ? lock_chain_count+0x20/0x20 [ 690.120784][T15803] __x64_sys_bpf+0x7c/0x90 [ 690.125253][T15803] do_syscall_64+0x55/0xa0 [ 690.129724][T15803] ? clear_bhb_loop+0x40/0x90 [ 690.134455][T15803] ? clear_bhb_loop+0x40/0x90 [ 690.139194][T15803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.145140][T15803] RIP: 0033:0x7f67d9d9c819 [ 690.149652][T15803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.169324][T15803] RSP: 002b:00007f67dabcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.177805][T15803] RAX: ffffffffffffffda RBX: 00007f67da015fa0 RCX: 00007f67d9d9c819 [ 690.185831][T15803] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 690.193854][T15803] RBP: 00007f67dabcb090 R08: 0000000000000000 R09: 0000000000000000 [ 690.201881][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.209910][T15803] R13: 00007f67da016038 R14: 00007f67da015fa0 R15: 00007fff7939b878 [ 690.217946][T15803] [ 690.238243][T10287] wlan1: Trigger new scan to find an IBSS to join [ 690.252203][T15801] netlink: 'syz.3.3006': attribute type 39 has an invalid length. [ 691.032148][T15824] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 691.126103][T15830] netlink: 'syz.3.3017': attribute type 21 has an invalid length. [ 691.161366][T15830] netlink: 'syz.3.3017': attribute type 6 has an invalid length. [ 691.192294][T15830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3017'. [ 691.860121][T15846] netlink: 'syz.2.3022': attribute type 4 has an invalid length. [ 691.896893][T15846] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3022'. [ 692.240862][ T12] wlan1: Trigger new scan to find an IBSS to join [ 692.269646][T15856] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 692.311629][T15858] netlink: 'syz.3.3027': attribute type 39 has an invalid length. [ 692.861525][T15869] netlink: 'syz.3.3031': attribute type 10 has an invalid length. [ 692.899492][T15869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3031'. [ 692.965263][T15869] batman_adv: batadv0: Adding interface: veth0_vlan [ 693.022919][T15869] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.112528][T15869] batman_adv: batadv0: Interface activated: veth0_vlan [ 693.339064][T13312] Bluetooth: hci0: command 0x0406 tx timeout [ 694.219207][T15841] wlan1: Creating new IBSS network, BSSID ce:78:71:f4:23:f1 [ 694.229470][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 695.380141][ T5966] wlan1: Creating new IBSS network, BSSID ea:5d:2e:5b:95:85 [ 695.389298][T15875] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 695.657234][T15883] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 696.059957][T15892] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.220223][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 698.639502][T15909] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 699.259215][ T12] wlan1: Trigger new scan to find an IBSS to join [ 699.716453][T15927] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 699.781537][T15929] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 700.579461][T15941] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3053'. [ 700.912414][T15946] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 701.148305][T15956] FAULT_INJECTION: forcing a failure. [ 701.148305][T15956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.189330][T15956] CPU: 0 PID: 15956 Comm: syz.2.3057 Not tainted syzkaller #0 [ 701.196893][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.207183][T15956] Call Trace: [ 701.210513][T15956] [ 701.213504][T15956] dump_stack_lvl+0x18c/0x250 [ 701.218260][T15956] ? show_regs_print_info+0x20/0x20 [ 701.223539][T15956] ? load_image+0x400/0x400 [ 701.228104][T15956] ? __might_fault+0xaa/0x120 [ 701.232840][T15956] ? __lock_acquire+0x7d40/0x7d40 [ 701.237930][T15956] should_fail_ex+0x39d/0x4d0 [ 701.242680][T15956] _copy_from_user+0x2f/0xe0 [ 701.247328][T15956] generic_map_update_batch+0x54b/0x810 [ 701.252992][T15956] ? rcu_read_unlock+0xa0/0xa0 [ 701.257816][T15956] ? __fdget+0x180/0x210 [ 701.262207][T15956] ? rcu_read_unlock+0xa0/0xa0 [ 701.267021][T15956] bpf_map_do_batch+0x3d7/0x610 [ 701.271935][T15956] __sys_bpf+0x381/0x890 [ 701.276234][T15956] ? bpf_link_show_fdinfo+0x390/0x390 [ 701.281681][T15956] ? lock_chain_count+0x20/0x20 [ 701.286609][T15956] __x64_sys_bpf+0x7c/0x90 [ 701.291084][T15956] do_syscall_64+0x55/0xa0 [ 701.295573][T15956] ? clear_bhb_loop+0x40/0x90 [ 701.300323][T15956] ? clear_bhb_loop+0x40/0x90 [ 701.305061][T15956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.311112][T15956] RIP: 0033:0x7f67d9d9c819 [ 701.315583][T15956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.335245][T15956] RSP: 002b:00007f67dabcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 701.343753][T15956] RAX: ffffffffffffffda RBX: 00007f67da015fa0 RCX: 00007f67d9d9c819 [ 701.351781][T15956] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 701.359832][T15956] RBP: 00007f67dabcb090 R08: 0000000000000000 R09: 0000000000000000 [ 701.367851][T15956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.375870][T15956] R13: 00007f67da016038 R14: 00007f67da015fa0 R15: 00007fff7939b878 [ 701.383911][T15956] [ 701.402341][ T5960] wlan1: Trigger new scan to find an IBSS to join [ 702.219563][ T12] wlan1: Trigger new scan to find an IBSS to join [ 702.235602][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 703.189098][T10288] wlan1: Trigger new scan to find an IBSS to join [ 703.589198][T13312] Bluetooth: hci1: command 0x0406 tx timeout [ 704.142678][ T1085] wlan1: Creating new IBSS network, BSSID ea:dc:a9:c2:54:4f [ 704.393119][T15967] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3060'. [ 704.409567][T15972] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 706.227627][T10288] wlan1: Trigger new scan to find an IBSS to join [ 706.239665][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 708.527369][T15841] wlan1: Creating new IBSS network, BSSID 92:0b:74:f7:bc:20 [ 708.527708][ T5947] wlan1: Creating new IBSS network, BSSID de:6a:96:e1:bf:da [ 708.540622][T16014] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 708.812577][T16018] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 709.082377][T16026] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 709.243647][T16029] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3079'. [ 711.194984][ T1085] wlan1: Trigger new scan to find an IBSS to join [ 711.259373][ T5966] wlan1: Trigger new scan to find an IBSS to join [ 712.705094][T16052] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 715.189403][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 715.189753][T10287] wlan1: Trigger new scan to find an IBSS to join [ 716.041478][ T5947] wlan1: Creating new IBSS network, BSSID 36:97:e6:cd:d7:58 [ 716.044688][T16067] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 716.291274][T16082] netlink: 'syz.0.3094': attribute type 29 has an invalid length. [ 716.326148][T16082] netlink: 'syz.0.3094': attribute type 29 has an invalid length. [ 716.375921][T16082] netlink: 'syz.0.3094': attribute type 29 has an invalid length. [ 716.413807][T16082] netlink: 'syz.0.3094': attribute type 29 has an invalid length. [ 716.424816][T16082] netlink: 'syz.0.3094': attribute type 29 has an invalid length. [ 716.462271][T16083] netlink: 'syz.1.3093': attribute type 10 has an invalid length. [ 716.474854][T16083] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3093'. [ 716.489235][T16083] hsr0: entered promiscuous mode [ 716.497051][T16083] bridge0: port 3(hsr0) entered blocking state [ 716.531261][T16083] bridge0: port 3(hsr0) entered disabled state [ 716.539723][T16083] hsr0: entered allmulticast mode [ 716.595590][T16083] hsr_slave_0: entered allmulticast mode [ 716.602097][T16083] hsr_slave_1: entered allmulticast mode [ 716.632673][T16083] bridge0: port 3(hsr0) entered blocking state [ 716.639851][T16083] bridge0: port 3(hsr0) entered forwarding state [ 716.744232][T16089] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 716.878096][T16091] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 717.029832][ T51] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 717.031192][ T51] Bluetooth: hci0: hardware error 0x0f [ 718.219532][T10293] wlan1: Trigger new scan to find an IBSS to join [ 719.099257][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 719.189125][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 719.195833][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 720.526580][T16123] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 720.631781][T16125] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 721.432564][T16147] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 723.190109][ T5947] wlan1: Trigger new scan to find an IBSS to join [ 723.259293][ T3457] wlan1: Trigger new scan to find an IBSS to join [ 724.219331][ T5960] wlan1: Trigger new scan to find an IBSS to join [ 724.226210][T10287] wlan1: Trigger new scan to find an IBSS to join [ 724.540844][T10287] wlan1: Creating new IBSS network, BSSID 6e:64:4f:69:4b:d0 [ 724.553244][T16157] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 724.797053][T16169] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 724.963874][T16171] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3123'. [ 725.040898][T16171] bridge_slave_1: default FDB implementation only supports local addresses [ 727.189409][ T5957] wlan1: Trigger new scan to find an IBSS to join [ 727.262916][ T12] wlan1: Trigger new scan to find an IBSS to join [ 728.876751][T16194] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.887022][ T3457] wlan1: Creating new IBSS network, BSSID 02:68:9c:e8:6b:1a [ 728.951727][T16197] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.983305][ T5957] ------------[ cut here ]------------ [ 728.989446][ T5957] WARNING: CPU: 1 PID: 5957 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 728.999455][ T5957] Modules linked in: [ 729.003411][ T5957] CPU: 1 PID: 5957 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 729.011193][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.021407][ T5957] Workqueue: cfg80211 cfg80211_event_work [ 729.027201][ T5957] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 729.033484][ T5957] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 f4 a0 f7 0f 0b eb bb e8 9e f4 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 f4 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 729.053646][ T5957] RSP: 0018:ffffc90004d3fa20 EFLAGS: 00010293 [ 729.059895][ T5957] RAX: ffffffff89e62b82 RBX: dffffc0000000000 RCX: ffff88807ee31e00 [ 729.067931][ T5957] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 729.076038][ T5957] RBP: ffffc90004d3faf8 R08: ffffffff911c356f R09: 1ffffffff22386ad [ 729.084200][ T5957] R10: dffffc0000000000 R11: fffffbfff22386ae R12: ffff888077a70c90 [ 729.092699][ T5957] R13: 1ffff920009a7f4c R14: ffff88807939b5f8 R15: 000000000000001f [ 729.101547][ T5957] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 729.111103][ T5957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.117782][ T5957] CR2: 000055556063e7e0 CR3: 00000000196dc000 CR4: 00000000003506e0 [ 729.126223][ T5957] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 729.134576][ T5957] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 729.143341][ T5957] Call Trace: [ 729.146682][ T5957] [ 729.149968][ T5957] ? mutex_lock_nested+0x20/0x20 [ 729.154988][ T5957] ? trace_rdev_return_void+0x1c0/0x1c0 [ 729.160922][ T5957] cfg80211_process_wdev_events+0x3bc/0x550 [ 729.167152][ T5957] cfg80211_process_rdev_events+0xa1/0x110 [ 729.173388][ T5957] cfg80211_event_work+0x2f/0x40 [ 729.178483][ T5957] ? process_scheduled_works+0x96f/0x15d0 [ 729.184800][ T5957] process_scheduled_works+0xa5d/0x15d0 [ 729.190704][ T5957] ? worker_attach_to_pool+0x380/0x380 [ 729.196246][ T5957] ? assign_work+0x3d2/0x5d0 [ 729.201007][ T5957] worker_thread+0xa55/0xfc0 [ 729.205704][ T5957] kthread+0x2fa/0x390 [ 729.209896][ T5957] ? pr_cont_work+0x560/0x560 [ 729.214636][ T5957] ? kthread_blkcg+0xd0/0xd0 [ 729.219321][ T5957] ret_from_fork+0x48/0x80 [ 729.223820][ T5957] ? kthread_blkcg+0xd0/0xd0 [ 729.228476][ T5957] ret_from_fork_asm+0x11/0x20 [ 729.233438][ T5957] [ 729.236517][ T5957] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 729.244014][ T5957] CPU: 1 PID: 5957 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 729.251784][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.261893][ T5957] Workqueue: cfg80211 cfg80211_event_work [ 729.267672][ T5957] Call Trace: [ 729.270991][ T5957] [ 729.273944][ T5957] dump_stack_lvl+0x18c/0x250 [ 729.278663][ T5957] ? show_regs_print_info+0x20/0x20 [ 729.283908][ T5957] ? load_image+0x400/0x400 [ 729.288458][ T5957] panic+0x2dc/0x730 [ 729.292392][ T5957] ? bpf_jit_dump+0xd0/0xd0 [ 729.296933][ T5957] ? ret_from_fork_asm+0x11/0x20 [ 729.301909][ T5957] __warn+0x2e0/0x470 [ 729.305919][ T5957] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 729.311498][ T5957] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 729.317082][ T5957] report_bug+0x2be/0x4f0 [ 729.321479][ T5957] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 729.327064][ T5957] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 729.332638][ T5957] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 729.338217][ T5957] handle_bug+0xcf/0x120 [ 729.342498][ T5957] exc_invalid_op+0x1a/0x50 [ 729.347125][ T5957] asm_exc_invalid_op+0x1a/0x20 [ 729.352181][ T5957] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 729.358369][ T5957] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 f4 a0 f7 0f 0b eb bb e8 9e f4 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 f4 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 729.378003][ T5957] RSP: 0018:ffffc90004d3fa20 EFLAGS: 00010293 [ 729.384099][ T5957] RAX: ffffffff89e62b82 RBX: dffffc0000000000 RCX: ffff88807ee31e00 [ 729.392102][ T5957] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 729.400200][ T5957] RBP: ffffc90004d3faf8 R08: ffffffff911c356f R09: 1ffffffff22386ad [ 729.408283][ T5957] R10: dffffc0000000000 R11: fffffbfff22386ae R12: ffff888077a70c90 [ 729.416282][ T5957] R13: 1ffff920009a7f4c R14: ffff88807939b5f8 R15: 000000000000001f [ 729.424382][ T5957] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 729.429971][ T5957] ? mutex_lock_nested+0x20/0x20 [ 729.434938][ T5957] ? trace_rdev_return_void+0x1c0/0x1c0 [ 729.440523][ T5957] cfg80211_process_wdev_events+0x3bc/0x550 [ 729.446477][ T5957] cfg80211_process_rdev_events+0xa1/0x110 [ 729.452343][ T5957] cfg80211_event_work+0x2f/0x40 [ 729.457309][ T5957] ? process_scheduled_works+0x96f/0x15d0 [ 729.463064][ T5957] process_scheduled_works+0xa5d/0x15d0 [ 729.468672][ T5957] ? worker_attach_to_pool+0x380/0x380 [ 729.474182][ T5957] ? assign_work+0x3d2/0x5d0 [ 729.478809][ T5957] worker_thread+0xa55/0xfc0 [ 729.483543][ T5957] kthread+0x2fa/0x390 [ 729.487638][ T5957] ? pr_cont_work+0x560/0x560 [ 729.492347][ T5957] ? kthread_blkcg+0xd0/0xd0 [ 729.496960][ T5957] ret_from_fork+0x48/0x80 [ 729.501410][ T5957] ? kthread_blkcg+0xd0/0xd0 [ 729.506029][ T5957] ret_from_fork_asm+0x11/0x20 [ 729.510855][ T5957] [ 729.514510][ T5957] Kernel Offset: disabled [ 729.519038][ T5957] Rebooting in 86400 seconds..