last executing test programs: 8.103707681s ago: executing program 4 (id=3789): socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x2, 0x101}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0xc, 0x7f, 0xe, 0x7, 0x0, 0x6, 0x20, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp, 0x80000, 0x20, 0x8001, 0x3, 0x9, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1bb}, 0xffffffffffffffff, 0xc, r0, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0x70) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x10, &(0x7f0000000240)=r11, 0x8) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(r6, 0xc008744c, &(0x7f0000000180)) socket$kcm(0x29, 0x5, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000080)="d8000000320081024e81f782db44b904121d080005000000e8fe55a1180015000600142603600e4006000000036010fab94dcf5c0461c1d66d6f94007134cf6ee08000a2a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14479f30dfe1d9d322fe7c9f8775730d16bd683f5aeb4edbb57a5025ccca9e00360db7011f215ce3bb9ad809d5e1cace81ed0bffec0dd6e4edef3d93452a92954b43", 0xad}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x40, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f00000000c0)) 7.636247261s ago: executing program 4 (id=3796): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000500000002000000d6670000000001", @ANYRES32, @ANYBLOB="030000000000e700"/20, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x50) 7.199844661s ago: executing program 2 (id=3799): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x4}, 0xc99b9ee672f1e246, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0xd, 0x7}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0xc2aa}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) close(r0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x5, &(0x7f0000000180), 0x43) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r7, 0x0, 0x10003) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000080)=""/122, 0x4000}, 0x20) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = openat$cgroup(r5, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000780), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 6.979507916s ago: executing program 3 (id=3800): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28b01, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xe2f}, 0x100e64, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 6.660979662s ago: executing program 2 (id=3802): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.505548156s ago: executing program 3 (id=3803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x4040804) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="f0870326b11ee273b2bb5efaa052410fbc7f05a4cb493afcc770e22288d64d8bc0beecc363a9964a034186484560ea66820c841178bbcfdfc2f80cf938240b94a822215f11a9224252d9e77db5bcc6b7546b1ea8da962a54c11d35a1e0ecc59e57799aa89bd5c414724410c77eaaccc00f897aa9cca9970da1f202ee6cd5276c8bb35f70c0578abe8308ee667591", 0x8e}, {&(0x7f0000001480)="9bd27c6fe7c3bbb3c17f8095af05eb8cb31be4226d1966829fb1daf7e193418d760d347a7b662b16fc3c1bff447e7ffa55c0fc930ece4cd3470205db0ded8f5810c3c8a62153bea27413b73f422ddae1497d883e0ef7a4edadc95f290196a8c794ecf0872728989e5eaca9dbc44a065eb2ca8d84d187d4e57e986e4c26fc6acf8fec23e8fdf35afab9a567edabc6fbe31a50f20a6f95d6fcdcfc6ef9c025a1773e5dc4da8c1e464fe84be9a638c7ed83d80314c2a06129f92d30c33df0367fe7c39e40ef8797e5bded4493a735e861e78759af3d0a0e8f67576f9c85496da9e9f2855ade069de2ed94b2", 0xea}, {&(0x7f0000001580)="1855c794fffad4492e60e022129525c9167ac9798f98ffb01fce29858acd42aad55dcdecdc14e29796e69cb74a956b", 0x2f}], 0x6, 0x0, 0x0, 0x10000000}, 0x524c) 6.414776107s ago: executing program 4 (id=3804): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711093000000000095000800"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x48000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffff72}, 0x37) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000051e500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) 6.382886089s ago: executing program 1 (id=3805): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff2) 6.024206586s ago: executing program 0 (id=3806): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$tipc(r0, &(0x7f0000001cc0)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4010) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.443571994s ago: executing program 3 (id=3807): socket$kcm(0x2a, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000001000000000000007001ca87000000c3514d000000002900000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.416604134s ago: executing program 1 (id=3808): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff2) 3.404216665s ago: executing program 2 (id=3809): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28b01, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xe2f}, 0x100e64, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 3.391203145s ago: executing program 0 (id=3810): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711093000000000095000800"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x48000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffff72}, 0x37) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x5, 0x80, 0x81, 0x4, 0x0, 0x5, 0x0, 0x4cce, 0x80, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_config_ext={0xffffffffffff6805}, 0x1100, 0x8000000000000000, 0x2, 0x5, 0x2, 0xe000000, 0xffff, 0x0, 0x3, 0x0, 0x7}) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000051e500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) 3.344816246s ago: executing program 4 (id=3811): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, 0x0, 0x22) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={r0, 0x0, 0xb6, 0x0, &(0x7f0000000280)="0e90d244a4605393077be6af2c5235f45c8eb0d2dcffd16ac74416697a30f06621bbb9b1a2af58eed58cb38c20d550f31dfcd97a1ff7c230f134e726b552b3547ecfbda815aa18e8fe1c9213f3170859ea975aff5ba5e0eb8f82320ebed2cb52c8a49a31aac33e200aaeb700258cd32a00bdc9c56c6e2ea265eec38eff4dcc787fe228f79e716ddd0b6714fb548306d161625191a0aa3d04382615aa5f48b205578522ea4c60d98898057e88890c5d0c9e2312e47234", 0x0, 0x80000001, 0x0, 0xbc, 0x0, &(0x7f0000000340)="d0b64143b1e5017f8c2617f556868d2afca21a1cbb7d7fef30b97ed808322aca00cca3d20794d809196b1da2b19f202f59461e66109a2ac8f4b2540bc9cc3997f58c5b9ea60a6d1a1c67e7ab2138ad18c21cfc069cd9eae20a6d18d21fe8989714ec785d2657e6949f3ff7c469c178d7d320bc8b3c8021109f461dc7b844c1a64b996c521d7979a6b3bf4ce404c732d6334d53bd4882101f47846a99dd98eb48e4433deae21ecca1322cb248b13a0252a2cf6afc207607dad30329ac", 0x0, 0x2, 0x0, 0x9}, 0x50) 2.927088325s ago: executing program 0 (id=3812): socket$kcm(0x1e, 0x5, 0x0) mkdir(0x0, 0x144540f2249c4cec) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x40, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x1, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x209}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x4000040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x882, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x23, 0x5, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) 2.925245175s ago: executing program 2 (id=3813): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28b01, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xe2f}, 0x100e64, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 2.925008675s ago: executing program 3 (id=3814): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000500000002000000d6670000000001", @ANYRES32, @ANYBLOB="030000000000e700"/20, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x50) 2.901818075s ago: executing program 1 (id=3815): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r4, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x5, 0xd, 0xffffc4b6, 0x64e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)=[0xffffffffffffffff, 0x1], &(0x7f00000012c0), 0x10, 0x7fffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1a0000000500000000000000f8ffffff10200000", @ANYRES32=r3, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000300"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000a0000000000008001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_idx={0x18, 0x16, 0x5, 0x0, 0xc}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x64, &(0x7f00000004c0)=""/100, 0x40f00, 0x45, '\x00', r5, 0x1a, r6, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xade2, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[r8, r1, r9], &(0x7f0000000700)=[{0x4, 0x3, 0xb, 0x8}, {0x5, 0x3, 0x3, 0xc}, {0x2, 0x1, 0x1}, {0x3, 0x4, 0xd, 0xc}, {0x1, 0x5, 0xa, 0xb}, {0x0, 0x1, 0x4, 0x7}, {0x3, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x3, 0x5}, {0x5, 0x3, 0x1, 0x8}, {0x4, 0x5, 0xf, 0x9}], 0x10, 0x80009}, 0x94) close(0x3) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.477390485s ago: executing program 0 (id=3816): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) 2.467817975s ago: executing program 1 (id=3817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x4040804) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b8", 0x1}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="f0870326b11ee273b2bb5efaa052410fbc7f05a4cb493afcc770e22288d64d8bc0beecc363a9964a034186484560ea66820c841178bbcfdfc2f80cf938240b94a822215f11a9224252d9e77db5bcc6b7546b1ea8da962a54c11d35a1e0ecc59e57799aa89bd5c414724410c77eaaccc00f897aa9cca9970da1f202ee6cd5276c8bb35f70c0578abe8308ee667591", 0x8e}, {&(0x7f0000001480)="9bd27c6fe7c3bbb3c17f8095af05eb8cb31be4226d1966829fb1daf7e193418d760d347a7b662b16fc3c1bff447e7ffa55c0fc930ece4cd3470205db0ded8f5810c3c8a62153bea27413b73f422ddae1497d883e0ef7a4edadc95f290196a8c794ecf0872728989e5eaca9dbc44a065eb2ca8d84d187d4e57e986e4c26fc6acf8fec23e8fdf35afab9a567edabc6fbe31a50f20a6f95d6fcdcfc6ef9c025a1773e5dc4da8c1e464fe84be9a638c7ed83d80314c2a06129f92d30c33df0367fe7c39e40ef8797e5bded4493a735e861e78759af3d0a0e8f67576f9c85496da9e9f2855ade069de2ed94b2", 0xea}, {&(0x7f0000001580)="1855c794fffad4492e60e022129525c9167ac9798f98ffb01fce29858acd42aad55dcdecdc14e29796e69cb74a956b", 0x2f}], 0x6, 0x0, 0x0, 0x10000000}, 0x524c) 2.346250318s ago: executing program 4 (id=3818): socket$kcm(0x1e, 0x4, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff2) 2.345575988s ago: executing program 2 (id=3819): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.24099373s ago: executing program 0 (id=3820): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$tipc(r0, &(0x7f0000001cc0)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4010) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.215142861s ago: executing program 1 (id=3821): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711093000000000095000800"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x48000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffff72}, 0x37) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) getpid() perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000051e500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) 1.851594628s ago: executing program 3 (id=3822): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f900850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000500000002000000d6670000000001", @ANYRES32, @ANYBLOB="030000000000e700"/20, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYBLOB], 0x50) 974.800758ms ago: executing program 4 (id=3823): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28b01, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0xe2f}, 0x100e64, 0x8000000000000001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 772.429863ms ago: executing program 3 (id=3824): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$tipc(r0, &(0x7f0000001cc0)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x4010) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 428.5715ms ago: executing program 2 (id=3825): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711093000000000095000800"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xa, 0x0}, 0x48000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x7, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffff72}, 0x37) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000003c0)={0x5, 0x80, 0x81, 0x4, 0x0, 0x5, 0x0, 0x4cce, 0x80, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_config_ext={0xffffffffffff6805}, 0x1100, 0x8000000000000000, 0x2, 0x5, 0x2, 0xe000000, 0xffff, 0x0, 0x3, 0x0, 0x7}) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7ffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000051e500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) 417.06304ms ago: executing program 0 (id=3826): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0xc2ba, 0x7, 0x0, 0x3, 0xb}, 0xffffffffffffffff, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8, r3}, 0x18) socket$kcm(0x2a, 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r5, 0x29, 0x48, &(0x7f0000000100)=r6, 0x120) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 0s ago: executing program 1 (id=3827): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) close(r1) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000640)) kernel console output (not intermixed with test programs): 2b0 [ 709.780358][T13357] ? __x64_sys_sendmsg+0x80/0x80 [ 709.785362][T13357] ? lockdep_hardirqs_on+0x94/0x140 [ 709.790609][T13357] do_syscall_64+0x4c/0xa0 [ 709.795074][T13357] ? clear_bhb_loop+0x60/0xb0 [ 709.799803][T13357] ? clear_bhb_loop+0x60/0xb0 [ 709.804968][T13357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.810913][T13357] RIP: 0033:0x7f26c639de59 [ 709.815373][T13357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.835025][T13357] RSP: 002b:00007f26c71f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.843484][T13357] RAX: ffffffffffffffda RBX: 00007f26c6625fa0 RCX: 00007f26c639de59 [ 709.851582][T13357] RDX: 0000000000004880 RSI: 0000200000000000 RDI: 0000000000000003 [ 709.859623][T13357] RBP: 00007f26c71f4090 R08: 0000000000000000 R09: 0000000000000000 [ 709.867639][T13357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.875654][T13357] R13: 00007f26c6626038 R14: 00007f26c6625fa0 R15: 00007ffdf651e328 [ 709.883681][T13357] [ 710.091417][T13344] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3035'. [ 710.124886][T13348] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 710.151645][T13352] netlink: 'syz.0.3034': attribute type 2 has an invalid length. [ 710.170242][T13352] netlink: 'syz.0.3034': attribute type 8 has an invalid length. [ 710.196643][T13352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3034'. [ 710.393880][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 710.406761][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 710.414739][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 710.423959][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 710.431834][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 710.439820][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 710.780678][T13360] chnl_net:caif_netlink_parms(): no params data found [ 711.011700][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.057529][T13360] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.078777][T13360] device bridge_slave_0 entered promiscuous mode [ 711.113243][T13368] FAULT_INJECTION: forcing a failure. [ 711.113243][T13368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.154336][T13368] CPU: 1 PID: 13368 Comm: syz.4.3040 Not tainted syzkaller #0 [ 711.161973][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 711.172100][T13368] Call Trace: [ 711.175420][T13368] [ 711.178390][T13368] dump_stack_lvl+0x188/0x24e [ 711.183124][T13368] ? show_regs_print_info+0x12/0x12 [ 711.188382][T13368] ? load_image+0x410/0x410 [ 711.192936][T13368] ? __lock_acquire+0x7bd0/0x7bd0 [ 711.198018][T13368] ? snprintf+0xe5/0x140 [ 711.202307][T13368] should_fail_ex+0x390/0x4c0 [ 711.207038][T13368] _copy_to_user+0x2c/0x130 [ 711.211594][T13368] simple_read_from_buffer+0xe3/0x150 [ 711.217097][T13368] proc_fail_nth_read+0x1a6/0x220 [ 711.222185][T13368] ? proc_fault_inject_write+0x310/0x310 [ 711.227867][T13368] ? fsnotify_perm+0x248/0x550 [ 711.232667][T13368] ? proc_fault_inject_write+0x310/0x310 [ 711.238334][T13368] vfs_read+0x2db/0x960 [ 711.242539][T13368] ? kernel_read+0x1e0/0x1e0 [ 711.247181][T13368] ? __fget_files+0x28/0x460 [ 711.251832][T13368] ? __fget_files+0x3fc/0x460 [ 711.256552][T13368] ? __fdget_pos+0x2ae/0x360 [ 711.261201][T13368] ? ksys_read+0x70/0x260 [ 711.265565][T13368] ksys_read+0x14d/0x260 [ 711.269860][T13368] ? vfs_write+0x9a0/0x9a0 [ 711.274306][T13368] ? lockdep_hardirqs_on+0x94/0x140 [ 711.279527][T13368] do_syscall_64+0x4c/0xa0 [ 711.283970][T13368] ? clear_bhb_loop+0x60/0xb0 [ 711.288676][T13368] ? clear_bhb_loop+0x60/0xb0 [ 711.293382][T13368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 711.299303][T13368] RIP: 0033:0x7f689b15e68e [ 711.303738][T13368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 711.323461][T13368] RSP: 002b:00007f689c12bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 711.332202][T13368] RAX: ffffffffffffffda RBX: 00007f689c12c6c0 RCX: 00007f689b15e68e [ 711.340455][T13368] RDX: 000000000000000f RSI: 00007f689c12c0a0 RDI: 0000000000000004 [ 711.348448][T13368] RBP: 00007f689c12c090 R08: 0000000000000000 R09: 0000000000000000 [ 711.356434][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.364419][T13368] R13: 00007f689b426038 R14: 00007f689b425fa0 R15: 00007ffd7af980d8 [ 711.372426][T13368] [ 711.406628][T13360] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.413829][T13360] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.465608][T13360] device bridge_slave_1 entered promiscuous mode [ 711.621428][ T7316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.710930][T13360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.752921][T13360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.848958][ T7316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.927664][T13390] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3046'. [ 712.027055][T13394] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3053'. [ 712.528438][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 712.861136][T13394] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 712.875619][T13394] CPU: 0 PID: 13394 Comm: syz.2.3053 Not tainted syzkaller #0 [ 712.883139][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 712.893235][T13394] Call Trace: [ 712.896553][T13394] [ 712.899514][T13394] dump_stack_lvl+0x188/0x24e [ 712.904240][T13394] ? show_regs_print_info+0x12/0x12 [ 712.909493][T13394] ? load_image+0x410/0x410 [ 712.914062][T13394] sysfs_warn_dup+0x8a/0xa0 [ 712.918699][T13394] sysfs_do_create_link_sd+0xc0/0x110 [ 712.924151][T13394] device_add+0x83b/0x1050 [ 712.928704][T13394] wiphy_register+0x1d8b/0x2aa0 [ 712.933676][T13394] ? cfg80211_event_work+0x40/0x40 [ 712.938843][T13394] ? minstrel_ht_alloc+0x894/0xa20 [ 712.944251][T13394] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 712.950420][T13394] ieee80211_register_hw+0x2d48/0x39f0 [ 712.956020][T13394] ? ieee80211_register_hw+0xed1/0x39f0 [ 712.961619][T13394] ? ieee80211_register_hw+0xed1/0x39f0 [ 712.967230][T13394] ? ieee80211_tasklet_handler+0x20/0x20 [ 712.972921][T13394] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 712.978864][T13394] ? __debug_object_init+0xed/0x440 [ 712.984125][T13394] ? memset+0x1e/0x40 [ 712.988153][T13394] ? __hrtimer_init+0x189/0x270 [ 712.993119][T13394] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 712.998980][T13394] ? memcpy+0x3c/0x60 [ 713.003013][T13394] hwsim_new_radio_nl+0xab7/0xc90 [ 713.008106][T13394] genl_family_rcv_msg_doit+0x22f/0x350 [ 713.013766][T13394] ? end_current_label_crit_section+0x170/0x170 [ 713.020066][T13394] ? lockdep_hardirqs_on+0x94/0x140 [ 713.025308][T13394] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 713.031285][T13394] ? bpf_lsm_capable+0x5/0x10 [ 713.036098][T13394] ? security_capable+0x85/0xb0 [ 713.041058][T13394] genl_rcv_msg+0x601/0x790 [ 713.045638][T13394] ? genl_bind+0x360/0x360 [ 713.050111][T13394] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 713.056509][T13394] netlink_rcv_skb+0x1ef/0x440 [ 713.061326][T13394] ? genl_bind+0x360/0x360 [ 713.065805][T13394] ? netlink_ack+0x1160/0x1160 [ 713.070638][T13394] ? down_read+0x1a8/0x2d0 [ 713.075111][T13394] genl_rcv+0x24/0x40 [ 713.079144][T13394] netlink_unicast+0x7ad/0x920 [ 713.083991][T13394] netlink_sendmsg+0x8ad/0xbd0 [ 713.088821][T13394] ? netlink_getsockopt+0x550/0x550 [ 713.094079][T13394] ? aa_sock_msg_perm+0x94/0x150 [ 713.099074][T13394] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 713.104411][T13394] ? security_socket_sendmsg+0x7c/0xa0 [ 713.109940][T13394] ? netlink_getsockopt+0x550/0x550 [ 713.115207][T13394] ____sys_sendmsg+0x5ed/0x9a0 [ 713.120047][T13394] ? __sys_sendmsg_sock+0x30/0x30 [ 713.125124][T13394] ? __import_iovec+0x306/0x510 [ 713.130039][T13394] ? import_iovec+0x6f/0xa0 [ 713.134601][T13394] ___sys_sendmsg+0x2a2/0x360 [ 713.139336][T13394] ? __sys_sendmsg+0x2a0/0x2a0 [ 713.144187][T13394] __se_sys_sendmsg+0x1c3/0x2b0 [ 713.149075][T13394] ? __x64_sys_sendmsg+0x80/0x80 [ 713.154158][T13394] ? lockdep_hardirqs_on+0x94/0x140 [ 713.159477][T13394] do_syscall_64+0x4c/0xa0 [ 713.163926][T13394] ? clear_bhb_loop+0x60/0xb0 [ 713.168634][T13394] ? clear_bhb_loop+0x60/0xb0 [ 713.173346][T13394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.179274][T13394] RIP: 0033:0x7fe852d9de59 [ 713.183714][T13394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.203353][T13394] RSP: 002b:00007fe85076e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.211791][T13394] RAX: ffffffffffffffda RBX: 00007fe853026360 RCX: 00007fe852d9de59 [ 713.219787][T13394] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 713.227789][T13394] RBP: 00007fe852e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 713.235782][T13394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.243771][T13394] R13: 00007fe8530263f8 R14: 00007fe853026360 R15: 00007fffba0971d8 [ 713.251780][T13394] [ 713.304393][T13360] team0: Port device team_slave_0 added [ 713.450577][T13404] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 713.507627][T13360] team0: Port device team_slave_1 added [ 713.542144][ T7316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.719873][ T7316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.815189][T13360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.841169][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.986623][T13360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.032157][T13410] netlink: 'syz.4.3052': attribute type 2 has an invalid length. [ 714.052325][T13410] netlink: 'syz.4.3052': attribute type 8 has an invalid length. [ 714.088889][T13410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3052'. [ 714.525509][T13409] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3050'. [ 714.550619][T13415] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 714.580862][T13360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.606577][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 714.616634][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.753804][T13360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.973231][T13360] device hsr_slave_0 entered promiscuous mode [ 715.023433][T13360] device hsr_slave_1 entered promiscuous mode [ 715.045081][T13360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.106447][T13360] Cannot create hsr debugfs directory [ 715.204222][T13431] netlink: 'syz.4.3059': attribute type 10 has an invalid length. [ 715.220144][T13431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3059'. [ 715.475747][T13431] batman_adv: batadv0: Adding interface: virt_wifi0 [ 715.532642][T13431] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.639611][T13431] batman_adv: batadv0: Interface activated: virt_wifi0 [ 715.729126][ T7803] wlan1: Trigger new scan to find an IBSS to join [ 716.482030][ T7316] tipc: Left network mode [ 716.688004][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 717.756601][T13454] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 717.798896][T13462] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3065'. [ 717.837026][T13465] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 718.157427][T13468] netlink: 'syz.4.3067': attribute type 2 has an invalid length. [ 718.172471][T13468] netlink: 'syz.4.3067': attribute type 8 has an invalid length. [ 718.184495][T13468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3067'. [ 718.250820][T13472] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3070'. [ 718.547274][T13481] netlink: 'syz.2.3080': attribute type 2 has an invalid length. [ 718.555615][T13481] netlink: 'syz.2.3080': attribute type 8 has an invalid length. [ 718.574574][T13481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3080'. [ 718.722071][T13360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.766625][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 718.888763][T13492] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3083'. [ 719.805979][T13360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 719.826741][T13494] netlink: 'syz.4.3075': attribute type 10 has an invalid length. [ 719.841579][T13494] device hsr0 entered promiscuous mode [ 719.866995][T13494] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 719.957262][T13508] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3075'. [ 720.007063][T13360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 720.092963][T13360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 720.113646][T13519] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 720.327751][T13527] FAULT_INJECTION: forcing a failure. [ 720.327751][T13527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.374097][T13527] CPU: 0 PID: 13527 Comm: syz.4.3079 Not tainted syzkaller #0 [ 720.381635][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 720.391817][T13527] Call Trace: [ 720.395132][T13527] [ 720.398104][T13527] dump_stack_lvl+0x188/0x24e [ 720.402836][T13527] ? show_regs_print_info+0x12/0x12 [ 720.408088][T13527] ? load_image+0x410/0x410 [ 720.412641][T13527] ? __lock_acquire+0x7bd0/0x7bd0 [ 720.417721][T13527] should_fail_ex+0x390/0x4c0 [ 720.422447][T13527] _copy_from_user+0x2c/0x170 [ 720.427163][T13527] iovec_from_user+0x143/0x360 [ 720.431976][T13527] __import_iovec+0x6c/0x510 [ 720.436619][T13527] import_iovec+0x6f/0xa0 [ 720.440993][T13527] ___sys_sendmsg+0x252/0x360 [ 720.445720][T13527] ? __sys_sendmsg+0x2a0/0x2a0 [ 720.450547][T13527] ? __lock_acquire+0x7bd0/0x7bd0 [ 720.455637][T13527] __se_sys_sendmsg+0x1c3/0x2b0 [ 720.460534][T13527] ? __x64_sys_sendmsg+0x80/0x80 [ 720.465526][T13527] ? lockdep_hardirqs_on+0x94/0x140 [ 720.470769][T13527] do_syscall_64+0x4c/0xa0 [ 720.475247][T13527] ? clear_bhb_loop+0x60/0xb0 [ 720.479986][T13527] ? clear_bhb_loop+0x60/0xb0 [ 720.484710][T13527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 720.490667][T13527] RIP: 0033:0x7f689b19de59 [ 720.495120][T13527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.514765][T13527] RSP: 002b:00007f689c12c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.523226][T13527] RAX: ffffffffffffffda RBX: 00007f689b425fa0 RCX: 00007f689b19de59 [ 720.531238][T13527] RDX: 0000000000000010 RSI: 0000200000002480 RDI: 0000000000000004 [ 720.539254][T13527] RBP: 00007f689c12c090 R08: 0000000000000000 R09: 0000000000000000 [ 720.547278][T13527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.555287][T13527] R13: 00007f689b426038 R14: 00007f689b425fa0 R15: 00007ffd7af980d8 [ 720.563317][T13527] [ 721.217209][T13539] netlink: 'syz.2.3085': attribute type 2 has an invalid length. [ 721.231709][T13542] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.3086'. [ 721.246876][T13539] netlink: 'syz.2.3085': attribute type 8 has an invalid length. [ 721.255649][T13539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3085'. [ 721.278925][T13542] netlink: zone id is out of range [ 721.556195][T13360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.701901][T13554] FAULT_INJECTION: forcing a failure. [ 721.701901][T13554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.736330][ T7796] wlan1: Trigger new scan to find an IBSS to join [ 721.736451][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 721.757583][T13554] CPU: 1 PID: 13554 Comm: syz.2.3090 Not tainted syzkaller #0 [ 721.765215][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 721.775331][T13554] Call Trace: [ 721.778660][T13554] [ 721.781653][T13554] dump_stack_lvl+0x188/0x24e [ 721.786421][T13554] ? show_regs_print_info+0x12/0x12 [ 721.791704][T13554] ? load_image+0x410/0x410 [ 721.796305][T13554] ? __lock_acquire+0x7bd0/0x7bd0 [ 721.801427][T13554] should_fail_ex+0x390/0x4c0 [ 721.806190][T13554] _copy_from_iter+0x1c0/0x1130 [ 721.811151][T13554] ? copyout_mc+0x110/0x110 [ 721.815747][T13554] ? __virt_addr_valid+0x188/0x540 [ 721.821047][T13554] ? __virt_addr_valid+0x188/0x540 [ 721.826329][T13554] ? __virt_addr_valid+0x467/0x540 [ 721.831535][T13554] ? __phys_addr_symbol+0x2b/0x70 [ 721.836651][T13554] ? __check_object_size+0x4f6/0xa70 [ 721.842018][T13554] kernfs_fop_write_iter+0x19a/0x520 [ 721.847389][T13554] vfs_write+0x482/0x9a0 [ 721.851761][T13554] ? file_end_write+0x250/0x250 [ 721.856714][T13554] ? __fget_files+0x3fc/0x460 [ 721.861538][T13554] ? __fdget_pos+0x2ae/0x360 [ 721.866222][T13554] ? ksys_write+0x70/0x260 [ 721.870727][T13554] ksys_write+0x14d/0x260 [ 721.875141][T13554] ? __ia32_sys_read+0x80/0x80 [ 721.880003][T13554] ? lockdep_hardirqs_on+0x94/0x140 [ 721.885295][T13554] do_syscall_64+0x4c/0xa0 [ 721.889785][T13554] ? clear_bhb_loop+0x60/0xb0 [ 721.894527][T13554] ? clear_bhb_loop+0x60/0xb0 [ 721.899286][T13554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 721.905246][T13554] RIP: 0033:0x7fe852d9de59 [ 721.909722][T13554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.929417][T13554] RSP: 002b:00007fe850ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 721.937988][T13554] RAX: ffffffffffffffda RBX: 00007fe853025fa0 RCX: 00007fe852d9de59 [ 721.946030][T13554] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000006 [ 721.954062][T13554] RBP: 00007fe850ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 721.962115][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.970149][T13554] R13: 00007fe853026038 R14: 00007fe853025fa0 R15: 00007fffba0971d8 [ 721.978263][T13554] [ 722.004060][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.028424][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.071466][T13360] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.262915][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.278358][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.347687][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.354379][T13559] FAULT_INJECTION: forcing a failure. [ 722.354379][T13559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.354943][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.376310][T13557] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3089'. [ 722.389359][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.444784][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.465361][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.496444][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.504094][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.514579][T13567] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3091'. [ 722.546777][T13559] CPU: 1 PID: 13559 Comm: syz.1.3092 Not tainted syzkaller #0 [ 722.554332][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.564435][T13559] Call Trace: [ 722.567752][T13559] [ 722.570720][T13559] dump_stack_lvl+0x188/0x24e [ 722.575450][T13559] ? show_regs_print_info+0x12/0x12 [ 722.580698][T13559] ? load_image+0x410/0x410 [ 722.585261][T13559] ? __lock_acquire+0x7bd0/0x7bd0 [ 722.590375][T13559] should_fail_ex+0x390/0x4c0 [ 722.595104][T13559] strncpy_from_user+0x32/0x340 [ 722.600004][T13559] bpf_prog_load+0x200/0x1530 [ 722.604739][T13559] ? map_freeze+0x390/0x390 [ 722.609299][T13559] ? __might_fault+0xa6/0x120 [ 722.614094][T13559] ? trace_call_bpf+0xbf/0x6b0 [ 722.618913][T13559] ? __might_fault+0xa6/0x120 [ 722.623627][T13559] ? __might_fault+0xc2/0x120 [ 722.628331][T13559] ? __might_fault+0xa6/0x120 [ 722.633041][T13559] ? bpf_lsm_bpf+0x5/0x10 [ 722.637399][T13559] ? security_bpf+0x7a/0xa0 [ 722.641933][T13559] __sys_bpf+0x5b8/0x780 [ 722.646203][T13559] ? bpf_link_show_fdinfo+0x380/0x380 [ 722.651618][T13559] ? lock_chain_count+0x20/0x20 [ 722.656516][T13559] __x64_sys_bpf+0x78/0x90 [ 722.660974][T13559] do_syscall_64+0x4c/0xa0 [ 722.665411][T13559] ? clear_bhb_loop+0x60/0xb0 [ 722.670116][T13559] ? clear_bhb_loop+0x60/0xb0 [ 722.674816][T13559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.680729][T13559] RIP: 0033:0x7f26c639de59 [ 722.685163][T13559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.704793][T13559] RSP: 002b:00007f26c71f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 722.713233][T13559] RAX: ffffffffffffffda RBX: 00007f26c6625fa0 RCX: 00007f26c639de59 [ 722.721225][T13559] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 722.729222][T13559] RBP: 00007f26c71f4090 R08: 0000000000000000 R09: 0000000000000000 [ 722.737216][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.745211][T13559] R13: 00007f26c6626038 R14: 00007f26c6625fa0 R15: 00007ffdf651e328 [ 722.753216][T13559] [ 722.855564][T13567] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3091'. [ 722.946687][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.956228][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 723.012258][T13571] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 723.046243][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 723.093380][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.213791][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 723.250398][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.270447][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.299535][T13575] FAULT_INJECTION: forcing a failure. [ 723.299535][T13575] name failslab, interval 1, probability 0, space 0, times 0 [ 723.323999][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 723.344823][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.360963][T13575] CPU: 1 PID: 13575 Comm: syz.4.3094 Not tainted syzkaller #0 [ 723.368779][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.379054][T13575] Call Trace: [ 723.382388][T13575] [ 723.385440][T13575] dump_stack_lvl+0x188/0x24e [ 723.390177][T13575] ? show_regs_print_info+0x12/0x12 [ 723.395437][T13575] ? load_image+0x410/0x410 [ 723.400008][T13575] ? __lock_acquire+0x7bd0/0x7bd0 [ 723.405091][T13575] should_fail_ex+0x390/0x4c0 [ 723.409844][T13575] should_failslab+0x5/0x20 [ 723.414380][T13575] slab_pre_alloc_hook+0x59/0x300 [ 723.419534][T13575] ? bpf_test_init+0x9f/0x140 [ 723.424264][T13575] __kmem_cache_alloc_node+0x4f/0x270 [ 723.429694][T13575] ? bpf_test_init+0x9f/0x140 [ 723.434426][T13575] __kmalloc+0xa3/0x240 [ 723.438642][T13575] bpf_test_init+0x9f/0x140 [ 723.443185][T13575] bpf_prog_test_run_xdp+0x488/0xf80 [ 723.448521][T13575] ? __lock_acquire+0x7bd0/0x7bd0 [ 723.453606][T13575] ? dev_put+0x80/0x80 [ 723.457728][T13575] ? dev_put+0x80/0x80 [ 723.461832][T13575] bpf_prog_test_run+0x31c/0x390 [ 723.466817][T13575] __sys_bpf+0x62b/0x780 [ 723.471105][T13575] ? bpf_link_show_fdinfo+0x380/0x380 [ 723.476538][T13575] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 723.482750][T13575] __x64_sys_bpf+0x78/0x90 [ 723.487210][T13575] do_syscall_64+0x4c/0xa0 [ 723.491669][T13575] ? clear_bhb_loop+0x60/0xb0 [ 723.496389][T13575] ? clear_bhb_loop+0x60/0xb0 [ 723.501124][T13575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.507059][T13575] RIP: 0033:0x7f689b19de59 [ 723.511530][T13575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.531188][T13575] RSP: 002b:00007f689c12c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 723.539632][T13575] RAX: ffffffffffffffda RBX: 00007f689b425fa0 RCX: 00007f689b19de59 [ 723.547622][T13575] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 723.555625][T13575] RBP: 00007f689c12c090 R08: 0000000000000000 R09: 0000000000000000 [ 723.563631][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.571628][T13575] R13: 00007f689b426038 R14: 00007f689b425fa0 R15: 00007ffd7af980d8 [ 723.579647][T13575] [ 723.612956][T13360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.648141][T13360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.784019][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.800175][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.132162][T13594] FAULT_INJECTION: forcing a failure. [ 724.132162][T13594] name failslab, interval 1, probability 0, space 0, times 0 [ 724.176665][T13594] CPU: 1 PID: 13594 Comm: syz.4.3099 Not tainted syzkaller #0 [ 724.184207][T13594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.194299][T13594] Call Trace: [ 724.197611][T13594] [ 724.200574][T13594] dump_stack_lvl+0x188/0x24e [ 724.205304][T13594] ? show_regs_print_info+0x12/0x12 [ 724.210552][T13594] ? load_image+0x410/0x410 [ 724.215092][T13594] ? __might_sleep+0xd0/0xd0 [ 724.219725][T13594] ? __lock_acquire+0x7bd0/0x7bd0 [ 724.224827][T13594] should_fail_ex+0x390/0x4c0 [ 724.229566][T13594] should_failslab+0x5/0x20 [ 724.234106][T13594] slab_pre_alloc_hook+0x59/0x300 [ 724.239176][T13594] kmem_cache_alloc+0x56/0x2f0 [ 724.243997][T13594] ? security_inode_alloc+0x30/0x110 [ 724.249341][T13594] security_inode_alloc+0x30/0x110 [ 724.254510][T13594] inode_init_always+0x910/0xc90 [ 724.259510][T13594] new_inode_pseudo+0x91/0x1c0 [ 724.264319][T13594] __sock_create+0x129/0x940 [ 724.268950][T13594] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 724.275150][T13594] __sys_socket+0xc4/0x190 [ 724.279611][T13594] __x64_sys_socket+0x76/0x80 [ 724.284334][T13594] do_syscall_64+0x4c/0xa0 [ 724.288800][T13594] ? clear_bhb_loop+0x60/0xb0 [ 724.293524][T13594] ? clear_bhb_loop+0x60/0xb0 [ 724.298254][T13594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.304191][T13594] RIP: 0033:0x7f689b19de59 [ 724.308647][T13594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.328296][T13594] RSP: 002b:00007f689c12c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 724.336778][T13594] RAX: ffffffffffffffda RBX: 00007f689b425fa0 RCX: 00007f689b19de59 [ 724.344807][T13594] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 724.352905][T13594] RBP: 00007f689c12c090 R08: 0000000000000000 R09: 0000000000000000 [ 724.360915][T13594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.368923][T13594] R13: 00007f689b426038 R14: 00007f689b425fa0 R15: 00007ffd7af980d8 [ 724.376947][T13594] [ 724.401905][ T7316] device hsr_slave_0 left promiscuous mode [ 724.437066][ T7316] device hsr_slave_1 left promiscuous mode [ 724.450238][T13594] socket: no more sockets [ 724.464000][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.484031][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.534344][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.556529][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.607201][ T7316] bridge0: port 2(dummy0) entered disabled state [ 724.646629][ T7316] device bridge_slave_0 left promiscuous mode [ 724.653021][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.764004][ T7316] device veth1_macvtap left promiscuous mode [ 724.794841][ T7316] device veth0_macvtap left promiscuous mode [ 725.188648][T13612] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3105'. [ 725.739318][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 725.745927][T13555] wlan1: Trigger new scan to find an IBSS to join [ 725.884928][ T7316] team0 (unregistering): Port device team_slave_1 removed [ 725.925623][ T7316] team0 (unregistering): Port device team_slave_0 removed [ 725.962838][ T7316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.262673][ T7316] bond0 (unregistering): Released all slaves [ 726.343308][T13597] netlink: 'syz.0.3100': attribute type 2 has an invalid length. [ 726.351391][T13597] netlink: 'syz.0.3100': attribute type 8 has an invalid length. [ 726.364535][T13597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3100'. [ 726.385693][T13610] pimreg: tun_chr_ioctl cmd 1074025677 [ 726.396870][T13610] pimreg: linktype set to 769 [ 726.404622][T13616] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 726.641320][ T7819] wlan1: Creating new IBSS network, BSSID 72:4a:f1:ee:fa:c6 [ 726.661010][ T7766] wlan1: Creating new IBSS network, BSSID aa:13:83:25:a5:c0 [ 726.673596][T13621] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3107'. [ 726.950539][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 726.968693][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 727.028700][T13360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.127354][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 727.151431][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.182472][T13634] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3111'. [ 727.285224][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 727.344046][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.397575][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.438132][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.479760][T13360] device veth0_vlan entered promiscuous mode [ 727.619478][T13360] device veth1_vlan entered promiscuous mode [ 727.692530][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 727.710597][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 727.748945][T13360] device veth0_macvtap entered promiscuous mode [ 727.793342][T13360] device veth1_macvtap entered promiscuous mode [ 727.848080][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.889545][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.926619][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.951898][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.963156][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.975755][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.986137][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.997230][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.015240][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.026772][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.046109][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.070495][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.088420][T13360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.099626][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.110643][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.120756][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.132162][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.188017][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.210865][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.224882][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.235495][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.245682][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.257239][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.270330][T13360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.281013][T13360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.319699][T13360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.339232][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 728.348373][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.363148][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.385260][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.404774][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 728.424579][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 728.447033][T13651] netlink: 'syz.4.3116': attribute type 2 has an invalid length. [ 728.486827][T13651] netlink: 'syz.4.3116': attribute type 8 has an invalid length. [ 728.495215][T13651] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3116'. [ 728.532508][T13360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.561206][T13360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.578050][T13654] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3117'. [ 728.587777][T13360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.596636][T13360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.628845][T13660] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.649289][T13657] pimreg: tun_chr_ioctl cmd 1074025677 [ 728.654944][T13657] pimreg: linktype set to 769 [ 728.965287][T13555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.046211][T13555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.104890][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.112485][T13555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.135934][T13555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.200554][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 729.971967][T13672] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.076008][T13677] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.541409][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.553341][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.571371][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.581074][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.596942][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 730.604305][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 730.775978][T13692] netlink: 'syz.0.3129': attribute type 2 has an invalid length. [ 730.790814][T13697] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3130'. [ 730.813886][T13692] netlink: 'syz.0.3129': attribute type 8 has an invalid length. [ 730.860541][T13692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3129'. [ 730.960428][T13703] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3132'. [ 731.066256][T13687] chnl_net:caif_netlink_parms(): no params data found [ 731.067282][T13703] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3132'. [ 731.267447][T13687] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.275227][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.283977][T13687] device bridge_slave_0 entered promiscuous mode [ 731.293621][T13687] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.301282][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.310764][T13687] device bridge_slave_1 entered promiscuous mode [ 731.339716][T13687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.352046][T13687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.377203][T13711] netlink: 'syz.0.3134': attribute type 1 has an invalid length. [ 731.406229][T13687] team0: Port device team_slave_0 added [ 731.445491][T13687] team0: Port device team_slave_1 added [ 731.480429][T13687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.506524][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.555382][T13687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.573952][T13687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.591734][T13687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.627668][T13687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.694359][T13721] FAULT_INJECTION: forcing a failure. [ 731.694359][T13721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.719612][T13721] CPU: 1 PID: 13721 Comm: syz.4.3138 Not tainted syzkaller #0 [ 731.727141][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.737234][T13721] Call Trace: [ 731.740551][T13721] [ 731.743526][T13721] dump_stack_lvl+0x188/0x24e [ 731.748291][T13721] ? show_regs_print_info+0x12/0x12 [ 731.753572][T13721] ? load_image+0x410/0x410 [ 731.758122][T13721] ? __lock_acquire+0x7bd0/0x7bd0 [ 731.763206][T13721] should_fail_ex+0x390/0x4c0 [ 731.767939][T13721] _copy_from_user+0x2c/0x170 [ 731.772661][T13721] sctp_setsockopt+0x19a/0xf90 [ 731.777668][T13721] ? sock_common_recvmsg+0x190/0x190 [ 731.782995][T13721] __sys_setsockopt+0x2bf/0x3d0 [ 731.788259][T13721] __x64_sys_setsockopt+0xb1/0xc0 [ 731.793318][T13721] do_syscall_64+0x4c/0xa0 [ 731.797769][T13721] ? clear_bhb_loop+0x60/0xb0 [ 731.802472][T13721] ? clear_bhb_loop+0x60/0xb0 [ 731.807184][T13721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.813103][T13721] RIP: 0033:0x7f689b19de59 [ 731.817537][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.837165][T13721] RSP: 002b:00007f689c12c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 731.845597][T13721] RAX: ffffffffffffffda RBX: 00007f689b425fa0 RCX: 00007f689b19de59 [ 731.853600][T13721] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 731.861601][T13721] RBP: 00007f689c12c090 R08: 0000000000000020 R09: 0000000000000000 [ 731.869592][T13721] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.877584][T13721] R13: 00007f689b426038 R14: 00007f689b425fa0 R15: 00007ffd7af980d8 [ 731.885598][T13721] [ 731.904295][T13687] device hsr_slave_0 entered promiscuous mode [ 731.947009][T13687] device hsr_slave_1 entered promiscuous mode [ 731.976742][T13687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 731.984363][T13687] Cannot create hsr debugfs directory [ 732.007249][T13720] pimreg: tun_chr_ioctl cmd 1074025677 [ 732.013594][T13720] pimreg: linktype set to 769 [ 732.056324][T13725] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 732.148873][T13727] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3149'. [ 732.635640][T13687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.688333][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 732.695489][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 732.741597][T13735] netlink: 'syz.4.3140': attribute type 2 has an invalid length. [ 732.774728][T13735] netlink: 'syz.4.3140': attribute type 8 has an invalid length. [ 732.856718][T13735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3140'. [ 732.959889][T13687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.056796][T13740] netlink: 'syz.0.3141': attribute type 29 has an invalid length. [ 733.140657][T13687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.193684][T13740] netlink: 'syz.0.3141': attribute type 29 has an invalid length. [ 733.349153][T13687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.463492][T13741] netlink: 'syz.0.3141': attribute type 29 has an invalid length. [ 733.472352][T13744] netlink: 'syz.0.3141': attribute type 29 has an invalid length. [ 733.481677][T13740] netlink: 'syz.0.3141': attribute type 29 has an invalid length. [ 733.542927][T13749] sock: sock_timestamping_bind_phc: sock not bind to device [ 733.551500][T13750] netlink: 'syz.4.3144': attribute type 2 has an invalid length. [ 733.561899][T13749] FAULT_INJECTION: forcing a failure. [ 733.561899][T13749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.575631][T13750] netlink: 'syz.4.3144': attribute type 8 has an invalid length. [ 733.575694][T13750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3144'. [ 733.633168][T13749] CPU: 0 PID: 13749 Comm: syz.2.3143 Not tainted syzkaller #0 [ 733.640734][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 733.650830][T13749] Call Trace: [ 733.654146][T13749] [ 733.657116][T13749] dump_stack_lvl+0x188/0x24e [ 733.661852][T13749] ? show_regs_print_info+0x12/0x12 [ 733.667447][T13749] ? load_image+0x410/0x410 [ 733.672003][T13749] ? __lock_acquire+0x7bd0/0x7bd0 [ 733.677089][T13749] ? snprintf+0xe5/0x140 [ 733.681379][T13749] should_fail_ex+0x390/0x4c0 [ 733.686128][T13749] _copy_to_user+0x2c/0x130 [ 733.690682][T13749] simple_read_from_buffer+0xe3/0x150 [ 733.696104][T13749] proc_fail_nth_read+0x1a6/0x220 [ 733.701497][T13749] ? proc_fault_inject_write+0x310/0x310 [ 733.707189][T13749] ? fsnotify_perm+0x248/0x550 [ 733.712013][T13749] ? proc_fault_inject_write+0x310/0x310 [ 733.717688][T13749] vfs_read+0x2db/0x960 [ 733.721885][T13749] ? kernel_read+0x1e0/0x1e0 [ 733.726513][T13749] ? __fget_files+0x28/0x460 [ 733.731148][T13749] ? __fget_files+0x3fc/0x460 [ 733.735864][T13749] ? __fdget_pos+0x2ae/0x360 [ 733.740481][T13749] ? ksys_read+0x70/0x260 [ 733.744841][T13749] ksys_read+0x14d/0x260 [ 733.749120][T13749] ? vfs_write+0x9a0/0x9a0 [ 733.753572][T13749] ? syscall_enter_from_user_mode+0x2a/0x80 [ 733.759494][T13749] do_syscall_64+0x4c/0xa0 [ 733.763951][T13749] ? clear_bhb_loop+0x60/0xb0 [ 733.768651][T13749] ? clear_bhb_loop+0x60/0xb0 [ 733.773355][T13749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.779275][T13749] RIP: 0033:0x7fe852d5e68e [ 733.783716][T13749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 733.803343][T13749] RSP: 002b:00007fe850ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 733.811782][T13749] RAX: ffffffffffffffda RBX: 00007fe850ff66c0 RCX: 00007fe852d5e68e [ 733.819780][T13749] RDX: 000000000000000f RSI: 00007fe850ff60a0 RDI: 0000000000000010 [ 733.827773][T13749] RBP: 00007fe850ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 733.835762][T13749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.843753][T13749] R13: 00007fe853026038 R14: 00007fe853025fa0 R15: 00007fffba0971d8 [ 733.851762][T13749] [ 734.068407][T13687] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 734.105850][T13687] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 734.116218][T13752] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3145'. [ 734.127577][T13687] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 734.147887][T13687] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 734.291011][T13763] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3150'. [ 734.395514][T13687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.499942][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 734.517703][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 734.590590][T13687] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.767071][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 734.769710][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 734.811717][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 734.832941][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 734.867034][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.875053][ T7798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.903543][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 734.953177][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 735.005930][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 735.057384][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.064559][ T7798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.124205][T13779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3155'. [ 735.186877][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 735.208330][T13781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3158'. [ 735.256526][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 735.285495][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 735.317928][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 735.361303][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 735.400039][T13785] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3159'. [ 735.417799][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 735.480447][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 735.502047][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 735.525989][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 735.569222][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 735.627024][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 735.650819][T13687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 735.715190][T13792] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3162'. [ 735.727230][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 736.361170][T13799] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3161'. [ 736.388544][T13806] validate_nla: 5 callbacks suppressed [ 736.388566][T13806] netlink: 'syz.2.3165': attribute type 9 has an invalid length. [ 736.846514][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 736.852976][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 736.887327][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 736.899821][T13687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.929987][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 736.940692][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 736.974848][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 736.994591][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 737.032486][T13687] device veth0_vlan entered promiscuous mode [ 737.052297][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 737.100536][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 737.168393][T13820] netlink: 'syz.0.3170': attribute type 2 has an invalid length. [ 737.201326][T13820] netlink: 'syz.0.3170': attribute type 8 has an invalid length. [ 737.221512][T13820] __nla_validate_parse: 3 callbacks suppressed [ 737.221570][T13820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3170'. [ 737.290024][T13687] device veth1_vlan entered promiscuous mode [ 737.377091][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 737.436904][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 737.457892][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 737.481194][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 737.519724][T13687] device veth0_macvtap entered promiscuous mode [ 737.539357][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 737.552688][T13687] device veth1_macvtap entered promiscuous mode [ 737.571334][T13834] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3174'. [ 737.630562][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.641290][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.655367][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.666403][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.681780][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.695701][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.705911][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.717142][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.728032][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.742673][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.752924][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.763909][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.775591][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.786310][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.808962][T13687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.821872][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.833152][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.843413][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.913020][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.926410][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.937167][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.947344][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.958222][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.969534][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.980441][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.003057][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.015376][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.025651][T13687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.044487][T13687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.058386][T13687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.068126][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 738.090340][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 738.117682][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 738.148502][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 738.167456][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'. [ 738.195947][T13687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.226630][T13687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.252312][T13687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.265262][T13687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.280405][T13847] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3187'. [ 738.498902][T13855] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3178'. [ 738.534113][ T7798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.576476][ T7798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.587496][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 738.625362][T13855] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3178'. [ 738.688242][ T7798] wlan1: Creating new IBSS network, BSSID 2e:73:fb:89:64:d1 [ 738.847154][ T7785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.859169][ T7785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.907047][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 738.926936][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 739.216311][T13870] netlink: 'syz.0.3184': attribute type 2 has an invalid length. [ 739.232811][T13870] netlink: 'syz.0.3184': attribute type 8 has an invalid length. [ 739.241615][T13870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3184'. [ 740.078879][T13889] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3192'. [ 740.327895][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 740.338592][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 740.348160][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 740.357570][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 740.365734][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 740.373426][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 740.702657][T13909] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 740.712512][T13905] netlink: 'syz.0.3198': attribute type 2 has an invalid length. [ 740.722052][T13905] netlink: 'syz.0.3198': attribute type 8 has an invalid length. [ 740.761173][T13905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3198'. [ 740.873681][T13898] chnl_net:caif_netlink_parms(): no params data found [ 741.163654][T13919] FAULT_INJECTION: forcing a failure. [ 741.163654][T13919] name failslab, interval 1, probability 0, space 0, times 0 [ 741.196564][T13919] CPU: 0 PID: 13919 Comm: syz.1.3203 Not tainted syzkaller #0 [ 741.204371][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.214469][T13919] Call Trace: [ 741.217784][T13919] [ 741.220753][T13919] dump_stack_lvl+0x188/0x24e [ 741.225523][T13919] ? show_regs_print_info+0x12/0x12 [ 741.230799][T13919] ? load_image+0x410/0x410 [ 741.235360][T13919] ? __lock_acquire+0x7bd0/0x7bd0 [ 741.240448][T13919] should_fail_ex+0x390/0x4c0 [ 741.245178][T13919] should_failslab+0x5/0x20 [ 741.249735][T13919] slab_pre_alloc_hook+0x59/0x300 [ 741.254811][T13919] kmem_cache_alloc_node+0x5a/0x310 [ 741.260057][T13919] ? perf_event_alloc+0x155/0x21e0 [ 741.265215][T13919] perf_event_alloc+0x155/0x21e0 [ 741.270193][T13919] ? _raw_spin_unlock+0x24/0x40 [ 741.275093][T13919] ? find_lively_task_by_vpid+0x19/0x290 [ 741.280770][T13919] ? find_lively_task_by_vpid+0x19/0x290 [ 741.286438][T13919] __se_sys_perf_event_open+0x701/0x1ec0 [ 741.292097][T13919] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 741.297946][T13919] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 741.303612][T13919] ? lockdep_hardirqs_on+0x94/0x140 [ 741.308829][T13919] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 741.314483][T13919] do_syscall_64+0x4c/0xa0 [ 741.318934][T13919] ? clear_bhb_loop+0x60/0xb0 [ 741.323638][T13919] ? clear_bhb_loop+0x60/0xb0 [ 741.328346][T13919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.334274][T13919] RIP: 0033:0x7fcab2b9de59 [ 741.338720][T13919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.358350][T13919] RSP: 002b:00007fcab3b46028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 741.366797][T13919] RAX: ffffffffffffffda RBX: 00007fcab2e25fa0 RCX: 00007fcab2b9de59 [ 741.374797][T13919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 741.382814][T13919] RBP: 00007fcab3b46090 R08: 0000000000000000 R09: 0000000000000000 [ 741.390810][T13919] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 741.398803][T13919] R13: 00007fcab2e26038 R14: 00007fcab2e25fa0 R15: 00007fffe3eb9f28 [ 741.406834][T13919] [ 741.482956][T13898] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.493533][T13898] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.502894][T13898] device bridge_slave_0 entered promiscuous mode [ 741.514145][T13898] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.522646][T13898] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.531454][T13898] device bridge_slave_1 entered promiscuous mode [ 741.565328][T13898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.585114][T13898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.629404][T13898] team0: Port device team_slave_0 added [ 741.642147][T13898] team0: Port device team_slave_1 added [ 741.675612][T13898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.683986][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.727059][T13898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.793217][T13898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.816444][T13898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.945527][T13898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.100837][T13898] device hsr_slave_0 entered promiscuous mode [ 742.144246][T13898] device hsr_slave_1 entered promiscuous mode [ 742.183475][T13898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.202714][T13898] Cannot create hsr debugfs directory [ 742.224968][T13940] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 742.446576][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 742.470022][T13948] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 742.601321][T13950] netlink: 'syz.3.3215': attribute type 2 has an invalid length. [ 742.658137][T13950] netlink: 'syz.3.3215': attribute type 8 has an invalid length. [ 742.676339][T13950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3215'. [ 742.749161][T13953] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 742.760621][T13955] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 742.771014][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 742.906038][T13898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.073161][T13898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.105476][T13961] netlink: 'syz.3.3219': attribute type 5 has an invalid length. [ 743.214023][T13898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.352837][T13898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.465262][T13975] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 743.625069][T13979] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3226'. [ 743.660594][T13898] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 743.710944][T13898] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 743.763280][T13898] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 743.795926][T13898] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 743.827393][T13983] netlink: 'syz.4.3229': attribute type 2 has an invalid length. [ 743.845636][T13983] netlink: 'syz.4.3229': attribute type 8 has an invalid length. [ 743.854163][T13983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3229'. [ 743.879857][T13986] netlink: 'syz.1.3228': attribute type 2 has an invalid length. [ 743.895933][T13986] netlink: 'syz.1.3228': attribute type 8 has an invalid length. [ 743.909147][T13986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3228'. [ 743.972025][T13979] netlink: 'syz.3.3226': attribute type 16 has an invalid length. [ 744.002759][T13979] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3226'. [ 744.169499][T13990] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 744.386097][T13898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.414467][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 744.434039][T13997] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3233'. [ 744.434455][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 744.482023][T13898] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.531539][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 744.539026][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 744.577341][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 744.606538][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.613729][ T7784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.662112][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 744.686232][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 744.698035][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 744.710699][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.717931][ T7784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.728855][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 744.743725][T14006] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 744.775375][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 744.803289][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 744.819268][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 744.841805][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 744.869944][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 744.889908][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 744.924946][T13898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 745.038187][T13898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 745.081634][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.097885][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 745.135252][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 745.208021][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 745.263705][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.317956][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 745.349533][T14013] netlink: 'syz.1.3240': attribute type 2 has an invalid length. [ 745.402491][T14013] netlink: 'syz.1.3240': attribute type 8 has an invalid length. [ 745.459151][T14013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3240'. [ 745.726552][ T7798] wlan1: Trigger new scan to find an IBSS to join [ 746.072055][T14024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3241'. [ 746.459625][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 746.468559][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 746.490931][T13898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.570238][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 746.588474][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 746.606905][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 746.610421][T14038] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3247'. [ 746.668497][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 746.704328][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 746.754107][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 746.767775][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 746.774458][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 746.827037][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 746.871900][T13898] device veth0_vlan entered promiscuous mode [ 746.899803][T14050] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 746.946217][T13898] device veth1_vlan entered promiscuous mode [ 746.983415][T14046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3249'. [ 747.053395][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 747.066808][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 747.075725][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 747.088650][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.094993][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.114487][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 747.127527][T13898] device veth0_macvtap entered promiscuous mode [ 747.151706][T13898] device veth1_macvtap entered promiscuous mode [ 747.177766][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.207198][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.243419][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.277231][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.315041][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.341164][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.366595][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.377540][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.387649][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.399191][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.420227][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.431146][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.441381][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.462178][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.488327][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.529202][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.564238][T13898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.604683][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 747.628926][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 747.649216][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 747.708465][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 747.746177][T14065] validate_nla: 5 callbacks suppressed [ 747.746194][T14065] netlink: 'syz.1.3253': attribute type 16 has an invalid length. [ 747.786652][T14065] __nla_validate_parse: 3 callbacks suppressed [ 747.786671][T14065] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3253'. [ 747.880562][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.919813][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.943886][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.987788][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.019073][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.046421][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.079456][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.097583][T14080] FAULT_INJECTION: forcing a failure. [ 748.097583][T14080] name failslab, interval 1, probability 0, space 0, times 0 [ 748.112136][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.122796][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.134900][T14080] CPU: 0 PID: 14080 Comm: syz.3.3258 Not tainted syzkaller #0 [ 748.142442][T14080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 748.152634][T14080] Call Trace: [ 748.155956][T14080] [ 748.158962][T14080] dump_stack_lvl+0x188/0x24e [ 748.163749][T14080] ? show_regs_print_info+0x12/0x12 [ 748.169008][T14080] ? load_image+0x410/0x410 [ 748.173600][T14080] ? __might_sleep+0xd0/0xd0 [ 748.178240][T14080] ? __lock_acquire+0x7bd0/0x7bd0 [ 748.183318][T14080] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 748.189357][T14080] should_fail_ex+0x390/0x4c0 [ 748.194088][T14080] should_failslab+0x5/0x20 [ 748.198633][T14080] slab_pre_alloc_hook+0x59/0x300 [ 748.203705][T14080] ? lockdep_hardirqs_on+0x94/0x140 [ 748.208967][T14080] kmem_cache_alloc+0x56/0x2f0 [ 748.213778][T14080] ? getname_flags+0xb7/0x500 [ 748.218504][T14080] getname_flags+0xb7/0x500 [ 748.223052][T14080] user_path_at_empty+0x28/0x60 [ 748.227950][T14080] bpf_obj_get_user+0xb6/0x480 [ 748.232833][T14080] ? bpf_obj_pin_user+0x300/0x300 [ 748.238091][T14080] __sys_bpf+0x532/0x780 [ 748.242367][T14080] ? bpf_link_show_fdinfo+0x380/0x380 [ 748.247783][T14080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 748.253973][T14080] __x64_sys_bpf+0x78/0x90 [ 748.258428][T14080] do_syscall_64+0x4c/0xa0 [ 748.262963][T14080] ? clear_bhb_loop+0x60/0xb0 [ 748.267675][T14080] ? clear_bhb_loop+0x60/0xb0 [ 748.272396][T14080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.278320][T14080] RIP: 0033:0x7fe970d9de59 [ 748.282856][T14080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.302486][T14080] RSP: 002b:00007fe971cea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.310929][T14080] RAX: ffffffffffffffda RBX: 00007fe971026090 RCX: 00007fe970d9de59 [ 748.318931][T14080] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000007 [ 748.326935][T14080] RBP: 00007fe971cea090 R08: 0000000000000000 R09: 0000000000000000 [ 748.334926][T14080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.342924][T14080] R13: 00007fe971026128 R14: 00007fe971026090 R15: 00007ffdb3bcff28 [ 748.350931][T14080] [ 748.370661][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.396403][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.416395][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.426323][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.455799][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.475805][T13898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.497724][T13898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.518900][T13898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.543438][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 748.569907][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 748.617907][T14080] netlink: 'syz.3.3258': attribute type 6 has an invalid length. [ 748.631111][T14080] netlink: 'syz.3.3258': attribute type 30 has an invalid length. [ 748.659935][T13898] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.679405][T13898] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.688716][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 748.705054][T13898] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.714144][T13898] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.737762][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 748.901743][ T7316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.916413][ T7316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.959729][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 749.069320][ T7798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.096050][ T7798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.152232][T14087] netlink: 'syz.0.3262': attribute type 21 has an invalid length. [ 749.185954][T14087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3262'. [ 749.208256][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 749.265064][T14091] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 749.450463][T14093] netlink: 'syz.2.3185': attribute type 2 has an invalid length. [ 749.483986][T14093] netlink: 'syz.2.3185': attribute type 8 has an invalid length. [ 749.495263][T14093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3185'. [ 749.588166][T14097] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3265'. [ 749.744354][T14102] netlink: 'syz.4.3264': attribute type 15 has an invalid length. [ 749.758023][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 749.764729][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 749.775163][T14102] netlink: 'syz.4.3264': attribute type 7 has an invalid length. [ 749.860895][T14105] netlink: 'syz.0.3267': attribute type 2 has an invalid length. [ 749.886974][T14105] netlink: 'syz.0.3267': attribute type 8 has an invalid length. [ 749.894776][T14105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3267'. [ 750.306669][T14118] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3273'. [ 750.474907][T14118] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3273'. [ 751.227728][T14141] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3281'. [ 751.257122][T14143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3282'. [ 751.308025][T14143] openvswitch: netlink: Message has 6 unknown bytes. [ 751.728139][ T7785] wlan1: Creating new IBSS network, BSSID a6:e7:a5:77:b0:d8 [ 751.735743][ T7819] wlan1: Trigger new scan to find an IBSS to join [ 751.858998][T14157] FAULT_INJECTION: forcing a failure. [ 751.858998][T14157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.914512][T14157] CPU: 0 PID: 14157 Comm: syz.4.3288 Not tainted syzkaller #0 [ 751.922073][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 751.932269][T14157] Call Trace: [ 751.935585][T14157] [ 751.938567][T14157] dump_stack_lvl+0x188/0x24e [ 751.943410][T14157] ? show_regs_print_info+0x12/0x12 [ 751.948670][T14157] ? load_image+0x410/0x410 [ 751.953232][T14157] ? __lock_acquire+0x7bd0/0x7bd0 [ 751.958311][T14157] ? lockdep_hardirqs_on+0x94/0x140 [ 751.963552][T14157] should_fail_ex+0x390/0x4c0 [ 751.968510][T14157] _copy_from_user+0x2c/0x170 [ 751.973959][T14157] __copy_msghdr+0x384/0x560 [ 751.978596][T14157] ___sys_sendmsg+0x210/0x360 [ 751.983479][T14157] ? lock_chain_count+0x20/0x20 [ 751.988552][T14157] ? __sys_sendmsg+0x2a0/0x2a0 [ 751.993776][T14157] ? __lock_acquire+0x7bd0/0x7bd0 [ 751.999123][T14157] __se_sys_sendmsg+0x1c3/0x2b0 [ 752.004004][T14157] ? perf_trace_preemptirq_template+0x268/0x320 [ 752.010358][T14157] ? __x64_sys_sendmsg+0x80/0x80 [ 752.015342][T14157] ? lockdep_hardirqs_on+0x94/0x140 [ 752.020579][T14157] do_syscall_64+0x4c/0xa0 [ 752.025032][T14157] ? clear_bhb_loop+0x60/0xb0 [ 752.029765][T14157] ? clear_bhb_loop+0x60/0xb0 [ 752.034508][T14157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.040441][T14157] RIP: 0033:0x7f689b19de59 [ 752.044890][T14157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.064531][T14157] RSP: 002b:00007f689c12c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.073433][T14157] RAX: ffffffffffffffda RBX: 00007f689b425fa0 RCX: 00007f689b19de59 [ 752.081428][T14157] RDX: 0000000020040050 RSI: 0000200000000600 RDI: 000000000000000d [ 752.089510][T14157] RBP: 00007f689c12c090 R08: 0000000000000000 R09: 0000000000000000 [ 752.097517][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.105530][T14157] R13: 00007f689b426038 R14: 00007f689b425fa0 R15: 00007ffd7af980d8 [ 752.113555][T14157] [ 752.188969][T14161] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3289'. [ 752.718780][T13555] wlan1: Trigger new scan to find an IBSS to join [ 752.771748][T13555] wlan1: Trigger new scan to find an IBSS to join [ 754.287255][ T7785] wlan1: Creating new IBSS network, BSSID fe:d1:fc:9c:a4:9b [ 754.314236][T14187] FAULT_INJECTION: forcing a failure. [ 754.314236][T14187] name failslab, interval 1, probability 0, space 0, times 0 [ 754.329814][ T7819] wlan1: Creating new IBSS network, BSSID ba:74:c5:7c:46:ee [ 754.436867][T14187] CPU: 1 PID: 14187 Comm: syz.2.3295 Not tainted syzkaller #0 [ 754.444427][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 754.454520][T14187] Call Trace: [ 754.457842][T14187] [ 754.460811][T14187] dump_stack_lvl+0x188/0x24e [ 754.465726][T14187] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 754.472171][T14187] ? show_regs_print_info+0x12/0x12 [ 754.477609][T14187] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 754.483836][T14187] should_fail_ex+0x390/0x4c0 [ 754.488661][T14187] should_failslab+0x5/0x20 [ 754.493217][T14187] slab_pre_alloc_hook+0x59/0x300 [ 754.498322][T14187] kmem_cache_alloc+0x56/0x2f0 [ 754.503310][T14187] ? security_inode_alloc+0x30/0x110 [ 754.508658][T14187] security_inode_alloc+0x30/0x110 [ 754.514436][T14187] inode_init_always+0x910/0xc90 [ 754.519445][T14187] new_inode_pseudo+0x91/0x1c0 [ 754.524349][T14187] __sock_create+0x129/0x940 [ 754.528986][T14187] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 754.535027][T14187] __sys_socket+0xc4/0x190 [ 754.539503][T14187] __x64_sys_socket+0x76/0x80 [ 754.544244][T14187] do_syscall_64+0x4c/0xa0 [ 754.548720][T14187] ? clear_bhb_loop+0x60/0xb0 [ 754.553451][T14187] ? clear_bhb_loop+0x60/0xb0 [ 754.558220][T14187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.564185][T14187] RIP: 0033:0x7ffa3bb9de59 [ 754.568653][T14187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.588301][T14187] RSP: 002b:00007ffa3ca80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 754.596767][T14187] RAX: ffffffffffffffda RBX: 00007ffa3be25fa0 RCX: 00007ffa3bb9de59 [ 754.604803][T14187] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 754.612942][T14187] RBP: 00007ffa3ca80090 R08: 0000000000000000 R09: 0000000000000000 [ 754.620958][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.629104][T14187] R13: 00007ffa3be26038 R14: 00007ffa3be25fa0 R15: 00007ffedeb29898 [ 754.637148][T14187] [ 754.696775][T14187] socket: no more sockets [ 754.716537][T14190] __nla_validate_parse: 1 callbacks suppressed [ 754.716556][T14190] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3296'. [ 755.092332][T14208] validate_nla: 10 callbacks suppressed [ 755.092372][T14208] netlink: 'syz.1.3302': attribute type 6 has an invalid length. [ 755.140603][T14208] netlink: 'syz.1.3302': attribute type 30 has an invalid length. [ 755.919180][T14226] netlink: 'syz.2.3309': attribute type 29 has an invalid length. [ 755.953309][T14226] netlink: 'syz.2.3309': attribute type 29 has an invalid length. [ 755.975075][T14230] netlink: 'syz.2.3309': attribute type 29 has an invalid length. [ 756.008852][T14229] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3310'. [ 756.473177][T14242] netlink: 'syz.4.3315': attribute type 2 has an invalid length. [ 756.501925][T14242] netlink: 'syz.4.3315': attribute type 8 has an invalid length. [ 756.524688][T14242] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3315'. [ 756.766926][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 757.021825][T14256] netlink: 'syz.0.3319': attribute type 2 has an invalid length. [ 757.076688][T14256] netlink: 'syz.0.3319': attribute type 8 has an invalid length. [ 757.085105][T14256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3319'. [ 757.364643][T14266] netlink: 'syz.3.3320': attribute type 6 has an invalid length. [ 757.452293][T14268] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3323'. [ 757.522976][T14277] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3327'. [ 757.551908][T14277] openvswitch: netlink: Message has 6 unknown bytes. [ 758.261807][ T7785] wlan1: Creating new IBSS network, BSSID 2a:23:13:1d:1c:38 [ 758.791597][T14291] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3331'. [ 759.609297][T14305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3336'. [ 759.858808][T14310] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3339'. [ 760.314603][T14324] validate_nla: 5 callbacks suppressed [ 760.314680][T14324] netlink: 'syz.2.3344': attribute type 2 has an invalid length. [ 760.372551][T14324] netlink: 'syz.2.3344': attribute type 8 has an invalid length. [ 760.421781][T14324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3344'. [ 760.461786][T14318] device ipvlan0 entered promiscuous mode [ 760.757893][T14339] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3350'. [ 760.799838][T14339] openvswitch: netlink: Message has 6 unknown bytes. [ 761.679114][T14349] netlink: 'syz.0.3353': attribute type 21 has an invalid length. [ 761.706909][T14349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3353'. [ 761.852967][T14352] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3354'. [ 762.550680][T14369] netlink: 'syz.1.3361': attribute type 2 has an invalid length. [ 762.571914][T14369] netlink: 'syz.1.3361': attribute type 8 has an invalid length. [ 762.611761][T14369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3361'. [ 762.757184][T14371] netlink: 'syz.0.3362': attribute type 6 has an invalid length. [ 762.796820][T14371] netlink: 'syz.0.3362': attribute type 30 has an invalid length. [ 763.039396][T14373] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 763.697000][T14387] netlink: 'syz.2.3367': attribute type 21 has an invalid length. [ 763.718385][T14387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3367'. [ 764.060103][T14393] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3370'. [ 764.239386][T14400] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 765.736657][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 766.373463][T14414] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 766.688042][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 766.697041][T14433] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3385'. [ 766.756616][T14433] openvswitch: netlink: Message has 6 unknown bytes. [ 767.002845][T14439] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3384'. [ 767.927428][T14462] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 767.969269][T14464] netlink: 'syz.0.3392': attribute type 2 has an invalid length. [ 767.986608][T14464] netlink: 'syz.0.3392': attribute type 8 has an invalid length. [ 767.994431][T14464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3392'. [ 768.187334][T14469] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 768.360728][T14471] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3399'. [ 768.397318][T14471] openvswitch: netlink: Message has 6 unknown bytes. [ 768.509062][T14477] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3398'. [ 768.599209][T14477] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3398'. [ 768.686962][ T7798] wlan1: Trigger new scan to find an IBSS to join [ 768.855597][T14482] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3413'. [ 768.893054][T14482] openvswitch: netlink: Message has 6 unknown bytes. [ 768.916113][T14480] netlink: 'syz.3.3402': attribute type 2 has an invalid length. [ 768.945052][T14480] netlink: 'syz.3.3402': attribute type 8 has an invalid length. [ 768.987680][T14480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3402'. [ 769.164782][T14486] netlink: 'syz.4.3403': attribute type 21 has an invalid length. [ 769.182775][T14486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3403'. [ 769.258161][T14488] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3405'. [ 769.277282][T14488] openvswitch: netlink: Message has 6 unknown bytes. [ 769.726910][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 769.737541][T14498] openvswitch: netlink: Message has 6 unknown bytes. [ 769.868678][T14500] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 770.128050][T14503] device ipvlan0 entered promiscuous mode [ 770.224852][T14508] netlink: 'syz.3.3411': attribute type 2 has an invalid length. [ 770.261797][T14515] openvswitch: netlink: Message has 6 unknown bytes. [ 770.271140][T14508] netlink: 'syz.3.3411': attribute type 8 has an invalid length. [ 770.544686][T14517] netlink: 'syz.2.3417': attribute type 2 has an invalid length. [ 770.584454][T14517] netlink: 'syz.2.3417': attribute type 8 has an invalid length. [ 770.692726][ T7798] wlan1: Trigger new scan to find an IBSS to join [ 770.768759][T13555] wlan1: Trigger new scan to find an IBSS to join [ 771.325165][T14523] netlink: 'syz.2.3419': attribute type 21 has an invalid length. [ 771.727245][ T7316] wlan1: Trigger new scan to find an IBSS to join [ 771.963314][T14537] __nla_validate_parse: 7 callbacks suppressed [ 771.963358][T14537] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3420'. [ 772.076768][T14537] openvswitch: netlink: Message has 6 unknown bytes. [ 772.849166][T14545] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 772.899208][T14548] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 773.289651][T14552] netlink: 'syz.1.3429': attribute type 2 has an invalid length. [ 773.328589][T14552] netlink: 'syz.1.3429': attribute type 8 has an invalid length. [ 773.353941][T14555] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3432'. [ 773.367623][T14552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3429'. [ 773.396940][T14555] openvswitch: netlink: Message has 6 unknown bytes. [ 773.727622][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 774.200140][T14569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3437'. [ 774.267028][T14569] openvswitch: netlink: Message has 6 unknown bytes. [ 774.679057][T14584] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3439'. [ 774.688212][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 774.767847][ T7784] wlan1: Creating new IBSS network, BSSID 32:3a:10:f1:ec:d0 [ 774.777529][T14579] netlink: 'syz.0.3440': attribute type 21 has an invalid length. [ 774.807044][T14579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3440'. [ 774.826544][T14584] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3439'. [ 775.068026][T14589] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3443'. [ 775.091563][T14589] openvswitch: netlink: Message has 6 unknown bytes. [ 775.457457][T14596] netlink: 'syz.3.3445': attribute type 2 has an invalid length. [ 775.594593][T14596] netlink: 'syz.3.3445': attribute type 8 has an invalid length. [ 775.712509][T14596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3445'. [ 775.726757][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 776.194856][T14602] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 776.303003][T14604] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 776.522569][T14609] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3450'. [ 776.558280][T14608] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 776.575011][T14609] openvswitch: netlink: Message has 6 unknown bytes. [ 776.611496][T14612] openvswitch: netlink: Message has 6 unknown bytes. [ 776.688596][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 776.889490][T14613] netlink: 'syz.2.3453': attribute type 21 has an invalid length. [ 777.156990][T14620] netlink: 'syz.3.3456': attribute type 21 has an invalid length. [ 777.165728][T14620] __nla_validate_parse: 2 callbacks suppressed [ 777.165766][T14620] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3456'. [ 777.894084][T14638] netlink: 'syz.1.3461': attribute type 2 has an invalid length. [ 777.956433][T14638] netlink: 'syz.1.3461': attribute type 8 has an invalid length. [ 778.033172][T14642] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3459'. [ 778.039022][T14638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3461'. [ 778.290065][T14642] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3459'. [ 778.767726][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 778.774383][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 778.782341][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 778.782370][ T7316] wlan1: Trigger new scan to find an IBSS to join [ 778.839590][T14647] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 779.567912][T14662] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 779.750874][ T7819] wlan1: Creating new IBSS network, BSSID 7e:c7:c7:a8:be:03 [ 779.781150][T14668] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3472'. [ 779.805280][T14668] openvswitch: netlink: Message has 6 unknown bytes. [ 779.947608][T14673] netlink: 'syz.3.3471': attribute type 21 has an invalid length. [ 779.976289][T14673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3471'. [ 780.483877][T14676] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 780.521625][T14681] netlink: 'syz.4.3474': attribute type 2 has an invalid length. [ 780.546462][T14681] netlink: 'syz.4.3474': attribute type 8 has an invalid length. [ 780.576542][T14681] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3474'. [ 780.625064][T14684] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3476'. [ 780.646548][T14684] openvswitch: netlink: Message has 6 unknown bytes. [ 780.843956][T14690] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3478'. [ 780.937558][T14690] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3478'. [ 781.142809][T14695] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 781.203535][T14698] openvswitch: netlink: Message has 6 unknown bytes. [ 781.816707][T14709] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 781.844110][T14706] netlink: 'syz.4.3485': attribute type 21 has an invalid length. [ 781.903002][T14710] netlink: 'syz.0.3488': attribute type 21 has an invalid length. [ 782.097348][T14714] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 782.290230][T14719] __nla_validate_parse: 3 callbacks suppressed [ 782.290249][T14719] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3491'. [ 782.336632][T14719] openvswitch: netlink: Message has 6 unknown bytes. [ 782.403093][T14718] netlink: 'syz.0.3492': attribute type 2 has an invalid length. [ 782.416873][T14718] netlink: 'syz.0.3492': attribute type 8 has an invalid length. [ 782.432101][T14718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3492'. [ 782.550476][ T7766] device hsr_slave_0 left promiscuous mode [ 782.578494][ T7766] device hsr_slave_1 left promiscuous mode [ 782.646751][ T7766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.654269][ T7766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.687182][ T7798] wlan1: Trigger new scan to find an IBSS to join [ 782.701330][ T7766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.719483][ T7766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.777847][ T7766] bridge0: port 3(dummy0) entered disabled state [ 782.787319][ T7766] device bridge_slave_1 left promiscuous mode [ 782.793632][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.806539][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 782.917584][ T7766] device bridge_slave_0 left promiscuous mode [ 782.923882][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.950027][T14737] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3498'. [ 783.014102][T14737] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3498'. [ 783.038422][ T7766] device veth1_macvtap left promiscuous mode [ 783.044574][ T7766] device veth0_macvtap left promiscuous mode [ 783.073290][ T7766] device veth1_vlan left promiscuous mode [ 783.108409][ T7766] device veth0_vlan left promiscuous mode [ 783.741460][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 783.741858][ T7796] wlan1: Trigger new scan to find an IBSS to join [ 784.502544][T14725] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 784.535030][T14745] netlink: 'syz.2.3501': attribute type 21 has an invalid length. [ 784.558983][T14745] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3501'. [ 784.579352][T14750] netlink: 'syz.0.3503': attribute type 21 has an invalid length. [ 784.606972][T14750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3503'. [ 784.750119][ T7796] wlan1: Creating new IBSS network, BSSID 56:59:cf:70:8f:3e [ 784.776966][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 785.163336][T14765] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3510'. [ 785.193873][T14765] openvswitch: netlink: Message has 6 unknown bytes. [ 786.137325][T14780] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 786.247249][T14783] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3513'. [ 786.257004][T14781] netlink: 'syz.4.3515': attribute type 21 has an invalid length. [ 786.265499][T14781] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3515'. [ 786.279098][T14783] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3513'. [ 786.600121][T14788] netlink: 'syz.3.3516': attribute type 21 has an invalid length. [ 786.763324][T14790] netlink: 'syz.4.3517': attribute type 21 has an invalid length. [ 786.773146][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 787.292994][T14802] openvswitch: netlink: Message has 6 unknown bytes. [ 787.731337][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 788.533942][T14807] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 788.587847][T14809] netlink: 'syz.3.3527': attribute type 21 has an invalid length. [ 788.596200][T14809] __nla_validate_parse: 3 callbacks suppressed [ 788.596235][T14809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3527'. [ 788.666964][ T7819] wlan1: Creating new IBSS network, BSSID a2:27:be:d8:d6:72 [ 788.692000][T13555] wlan1: Trigger new scan to find an IBSS to join [ 788.766806][ T7796] wlan1: Trigger new scan to find an IBSS to join [ 788.873958][T14812] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 789.420595][T14829] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3533'. [ 789.444116][T14829] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3533'. [ 790.057767][ T7785] wlan1: Creating new IBSS network, BSSID 9e:18:0e:9e:13:81 [ 790.070889][T14822] netlink: 'syz.3.3531': attribute type 21 has an invalid length. [ 790.079288][T14822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3531'. [ 790.094936][T14825] netlink: 'syz.2.3534': attribute type 21 has an invalid length. [ 790.103661][T14825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3534'. [ 790.115623][T14833] netlink: 'syz.4.3535': attribute type 21 has an invalid length. [ 790.137467][T14833] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3535'. [ 790.393364][T14837] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3537'. [ 790.415682][T14837] openvswitch: netlink: Message has 6 unknown bytes. [ 790.769615][ T7316] wlan1: Trigger new scan to find an IBSS to join [ 791.571824][T14850] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 791.625930][T14857] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 791.728470][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 791.881058][T14858] netlink: 'syz.1.3542': attribute type 21 has an invalid length. [ 791.902907][T14858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3542'. [ 792.006153][T14864] netlink: 'syz.2.3548': attribute type 21 has an invalid length. [ 792.036905][T14864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3548'. [ 792.108797][T14868] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3549'. [ 792.303291][T14871] netlink: 'syz.3.3550': attribute type 21 has an invalid length. [ 792.767859][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 792.798552][T14886] openvswitch: netlink: Message has 6 unknown bytes. [ 793.193086][T14892] openvswitch: netlink: Message has 6 unknown bytes. [ 793.285814][ T4300] wlan1: Creating new IBSS network, BSSID 66:07:f4:b5:de:03 [ 793.441324][T14896] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 793.668009][T14900] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 793.726924][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 793.733725][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 794.130581][T14904] netlink: 'syz.4.3563': attribute type 2 has an invalid length. [ 794.157969][T14904] netlink: 'syz.4.3563': attribute type 8 has an invalid length. [ 794.180005][T14904] __nla_validate_parse: 5 callbacks suppressed [ 794.180042][T14904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3563'. [ 794.278744][T14908] netlink: 'syz.0.3565': attribute type 21 has an invalid length. [ 794.295645][T14908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3565'. [ 794.543139][T14912] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3566'. [ 794.650616][T14916] netlink: 'syz.2.3569': attribute type 21 has an invalid length. [ 794.667592][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3569'. [ 794.678598][T14914] netlink: 'syz.0.3568': attribute type 2 has an invalid length. [ 794.693771][T14914] netlink: 'syz.0.3568': attribute type 8 has an invalid length. [ 794.703181][T14914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3568'. [ 795.727147][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 795.939376][T14932] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 795.952164][T14939] netlink: 'syz.0.3578': attribute type 21 has an invalid length. [ 796.054621][T14939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3578'. [ 796.133858][T14941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3579'. [ 796.315645][T14946] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 796.340405][T14948] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3581'. [ 796.371624][T14944] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3582'. [ 796.383467][T14948] openvswitch: netlink: Message has 6 unknown bytes. [ 796.687152][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 796.695467][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 797.222183][T14971] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 797.726732][ T7316] wlan1: Trigger new scan to find an IBSS to join [ 798.239837][T14978] validate_nla: 2 callbacks suppressed [ 798.239859][T14978] netlink: 'syz.1.3593': attribute type 21 has an invalid length. [ 798.297341][T14978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3593'. [ 798.377726][T14982] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 798.585308][T14985] netlink: 'syz.4.3596': attribute type 2 has an invalid length. [ 798.616773][T14985] netlink: 'syz.4.3596': attribute type 8 has an invalid length. [ 798.767355][ T7819] wlan1: Trigger new scan to find an IBSS to join [ 800.507245][T15006] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 800.547183][T15009] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 800.686744][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 800.686949][T13555] wlan1: Trigger new scan to find an IBSS to join [ 800.930424][T15022] netlink: 'syz.4.3610': attribute type 21 has an invalid length. [ 800.947147][T15022] __nla_validate_parse: 2 callbacks suppressed [ 800.947166][T15022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3610'. [ 800.987707][T15020] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3613'. [ 800.997719][T15017] netlink: 'syz.2.3611': attribute type 2 has an invalid length. [ 801.007914][T15017] netlink: 'syz.2.3611': attribute type 8 has an invalid length. [ 801.031219][T15017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3611'. [ 801.241720][T15032] FAULT_INJECTION: forcing a failure. [ 801.241720][T15032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.258732][T15032] CPU: 1 PID: 15032 Comm: syz.2.3616 Not tainted syzkaller #0 [ 801.266248][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.276362][T15032] Call Trace: [ 801.279674][T15032] [ 801.282662][T15032] dump_stack_lvl+0x188/0x24e [ 801.287409][T15032] ? lock_chain_count+0x20/0x20 [ 801.292312][T15032] ? show_regs_print_info+0x12/0x12 [ 801.297570][T15032] ? load_image+0x410/0x410 [ 801.302124][T15032] ? lockdep_hardirqs_on+0x94/0x140 [ 801.307407][T15032] should_fail_ex+0x390/0x4c0 [ 801.312142][T15032] copy_page_from_iter_atomic+0x21d/0x12e0 [ 801.318022][T15032] ? pipe_zero+0x140/0x140 [ 801.322575][T15032] ? PageHeadHuge+0x8e/0x1c0 [ 801.327226][T15032] ? shmem_write_begin+0x1b4/0x3f0 [ 801.332371][T15032] generic_perform_write+0x34f/0x5c0 [ 801.337790][T15032] ? generic_file_direct_write+0x330/0x330 [ 801.343628][T15032] ? __file_remove_privs+0x5f0/0x5f0 [ 801.348939][T15032] ? rwsem_write_trylock+0x135/0x1c0 [ 801.354250][T15032] ? clear_nonspinnable+0x60/0x60 [ 801.359307][T15032] ? generic_write_checks_count+0x363/0x440 [ 801.366694][T15032] __generic_file_write_iter+0x148/0x2a0 [ 801.372640][T15032] generic_file_write_iter+0xab/0x2e0 [ 801.378138][T15032] vfs_write+0x482/0x9a0 [ 801.382506][T15032] ? file_end_write+0x250/0x250 [ 801.387393][T15032] ? __fget_files+0x3fc/0x460 [ 801.392106][T15032] ? __fdget_pos+0x2ae/0x360 [ 801.396830][T15032] ? ksys_write+0x70/0x260 [ 801.401285][T15032] ksys_write+0x14d/0x260 [ 801.405714][T15032] ? __ia32_sys_read+0x80/0x80 [ 801.410608][T15032] ? lockdep_hardirqs_on+0x94/0x140 [ 801.415945][T15032] do_syscall_64+0x4c/0xa0 [ 801.421790][T15032] ? clear_bhb_loop+0x60/0xb0 [ 801.426605][T15032] ? clear_bhb_loop+0x60/0xb0 [ 801.431342][T15032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 801.438058][T15032] RIP: 0033:0x7ffa3bb9de59 [ 801.442938][T15032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.465261][T15032] RSP: 002b:00007ffa3ca80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 801.473700][T15032] RAX: ffffffffffffffda RBX: 00007ffa3be25fa0 RCX: 00007ffa3bb9de59 [ 801.481876][T15032] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000006 [ 801.489877][T15032] RBP: 00007ffa3ca80090 R08: 0000000000000000 R09: 0000000000000000 [ 801.498044][T15032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.506867][T15032] R13: 00007ffa3be26038 R14: 00007ffa3be25fa0 R15: 00007ffedeb29898 [ 801.514882][T15032] [ 801.794718][T15039] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3619'. [ 801.826972][ T7316] wlan1: Creating new IBSS network, BSSID 76:d2:00:ed:fe:01 [ 801.826972][ T7766] wlan1: Creating new IBSS network, BSSID e2:4f:59:10:74:3d [ 801.863296][T15039] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3619'. [ 801.960708][T15043] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3620'. [ 802.012138][T15043] openvswitch: netlink: Message has 6 unknown bytes. [ 802.100161][T15047] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 802.773194][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 803.176798][T15052] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 803.278358][ T4300] device hsr_slave_0 left promiscuous mode [ 803.327269][ T4300] device hsr_slave_1 left promiscuous mode [ 803.346707][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.357180][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.375638][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.394202][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.434535][ T4300] bridge0: port 2(dummy0) entered disabled state [ 803.459880][ T4300] device bridge_slave_0 left promiscuous mode [ 803.480811][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.598197][ T4300] device veth1_macvtap left promiscuous mode [ 803.624309][ T4300] device veth1_vlan left promiscuous mode [ 803.645168][ T4300] device veth0_vlan left promiscuous mode [ 803.726587][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 804.672780][ T7316] wlan1: Creating new IBSS network, BSSID 8a:63:fe:54:ab:bd [ 804.692027][ T7796] wlan1: Trigger new scan to find an IBSS to join [ 805.342221][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.426793][ T4300] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 805.489224][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 805.575027][T15099] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3643'. [ 805.594171][T15099] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3643'. [ 805.743168][T13555] wlan1: Trigger new scan to find an IBSS to join [ 806.000458][ T4300] bond0 (unregistering): Released all slaves [ 806.126646][T15087] netlink: 'syz.0.3638': attribute type 21 has an invalid length. [ 806.134937][T15087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3638'. [ 806.149888][T15094] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 806.846177][T15126] netlink: 'syz.0.3654': attribute type 2 has an invalid length. [ 806.868757][T15126] netlink: 'syz.0.3654': attribute type 8 has an invalid length. [ 806.887105][T15126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3654'. [ 806.925264][T15131] netlink: 'syz.1.3656': attribute type 1 has an invalid length. [ 806.973554][T15131] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3656'. [ 806.997834][T15135] netlink: 'syz.1.3656': attribute type 29 has an invalid length. [ 807.006038][T15135] netlink: 'syz.1.3656': attribute type 29 has an invalid length. [ 807.051648][T15131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3656'. [ 807.224315][T15138] netlink: 'syz.3.3659': attribute type 21 has an invalid length. [ 807.266767][T15138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3659'. [ 807.337327][T15141] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 807.774697][T15155] netlink: 'syz.2.3667': attribute type 2 has an invalid length. [ 807.807265][T15155] netlink: 'syz.2.3667': attribute type 8 has an invalid length. [ 807.815901][T15155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3667'. [ 807.899743][T15159] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3669'. [ 807.955234][T15159] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3669'. [ 808.233498][T15169] netlink: 'syz.2.3673': attribute type 2 has an invalid length. [ 808.272050][T15169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3673'. [ 808.529455][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.535828][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.616614][T15180] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 808.631460][T15186] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3679'. [ 808.642019][T15186] openvswitch: netlink: Message has 6 unknown bytes. [ 809.803348][ T7819] wlan1: Trigger new scan to find an IBSS to join [ 810.233221][T15220] openvswitch: netlink: Message has 6 unknown bytes. [ 810.585704][T15225] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 811.553982][T15237] validate_nla: 5 callbacks suppressed [ 811.554000][T15237] netlink: 'syz.0.3697': attribute type 2 has an invalid length. [ 811.601327][T15237] netlink: 'syz.0.3697': attribute type 8 has an invalid length. [ 811.636518][T15237] __nla_validate_parse: 5 callbacks suppressed [ 811.636538][T15237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3697'. [ 811.734046][T15246] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 811.988813][T15255] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3704'. [ 812.064936][T15255] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3704'. [ 812.663196][T15270] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 812.686661][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 812.980114][T15289] netlink: 'syz.3.3713': attribute type 2 has an invalid length. [ 813.062789][T15289] netlink: 'syz.3.3713': attribute type 8 has an invalid length. [ 813.105957][T15291] sctp: [Deprecated]: syz.0.3717 (pid 15291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 813.105957][T15291] Use struct sctp_sack_info instead [ 813.144111][T15289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3713'. [ 813.175785][T15284] netlink: 'syz.2.3715': attribute type 21 has an invalid length. [ 813.189475][T15284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3715'. [ 813.756775][T15314] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3723'. [ 813.841205][T15314] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3723'. [ 813.909525][T15319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3726'. [ 813.982875][T15318] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 814.313773][T15326] netlink: 'syz.3.3730': attribute type 21 has an invalid length. [ 814.357050][T15326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3730'. [ 814.412798][T15330] netlink: 'syz.4.3731': attribute type 2 has an invalid length. [ 814.458712][T15330] netlink: 'syz.4.3731': attribute type 8 has an invalid length. [ 814.509734][T15330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3731'. [ 814.686796][ T7796] wlan1: Trigger new scan to find an IBSS to join [ 814.694008][ T7796] wlan1: Trigger new scan to find an IBSS to join [ 814.762730][T15342] FAULT_INJECTION: forcing a failure. [ 814.762730][T15342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.799667][T15342] CPU: 0 PID: 15342 Comm: syz.3.3736 Not tainted syzkaller #0 [ 814.807210][T15342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 814.817313][T15342] Call Trace: [ 814.820629][T15342] [ 814.823587][T15342] dump_stack_lvl+0x188/0x24e [ 814.828302][T15342] ? show_regs_print_info+0x12/0x12 [ 814.833527][T15342] ? lockdep_hardirqs_on+0x94/0x140 [ 814.838765][T15342] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 814.844955][T15342] should_fail_ex+0x390/0x4c0 [ 814.849669][T15342] _copy_from_user+0x2c/0x170 [ 814.854376][T15342] __copy_msghdr+0x384/0x560 [ 814.859003][T15342] ___sys_sendmsg+0x210/0x360 [ 814.863713][T15342] ? __sys_sendmsg+0x2a0/0x2a0 [ 814.868537][T15342] __se_sys_sendmsg+0x1c3/0x2b0 [ 814.873557][T15342] ? __x64_sys_sendmsg+0x80/0x80 [ 814.878553][T15342] ? lockdep_hardirqs_on+0x94/0x140 [ 814.883789][T15342] do_syscall_64+0x4c/0xa0 [ 814.888243][T15342] ? clear_bhb_loop+0x60/0xb0 [ 814.893145][T15342] ? clear_bhb_loop+0x60/0xb0 [ 814.897890][T15342] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.903834][T15342] RIP: 0033:0x7fe970d9de59 [ 814.908305][T15342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.928121][T15342] RSP: 002b:00007fe971d0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.937275][T15342] RAX: ffffffffffffffda RBX: 00007fe971025fa0 RCX: 00007fe970d9de59 [ 814.946163][T15342] RDX: 0000000000040810 RSI: 0000200000000540 RDI: 0000000000000003 [ 814.954608][T15342] RBP: 00007fe971d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 814.962718][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.971177][T15342] R13: 00007fe971026038 R14: 00007fe971025fa0 R15: 00007ffdb3bcff28 [ 814.980432][T15342] [ 815.371326][T15361] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 815.688172][T15368] netlink: 'syz.0.3747': attribute type 2 has an invalid length. [ 815.707578][T15368] netlink: 'syz.0.3747': attribute type 8 has an invalid length. [ 815.726560][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 815.733334][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 815.769252][ T4300] wlan1: Creating new IBSS network, BSSID fa:ad:1e:5b:9d:e1 [ 816.024842][T15382] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 816.148358][T15387] openvswitch: netlink: Message has 6 unknown bytes. [ 816.402527][T15395] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 816.654598][T15399] __nla_validate_parse: 5 callbacks suppressed [ 816.654617][T15399] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3759'. [ 816.760337][T15406] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3760'. [ 816.929123][T15406] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3760'. [ 817.276084][T15419] netlink: 'syz.3.3763': attribute type 2 has an invalid length. [ 817.344209][T15419] netlink: 'syz.3.3763': attribute type 8 has an invalid length. [ 817.396450][T15419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3763'. [ 817.476967][T15421] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 817.750637][T15431] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 817.766606][ T7796] wlan1: Trigger new scan to find an IBSS to join [ 818.169901][T15445] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3775'. [ 818.425859][T15462] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3780'. [ 818.499190][T15463] netlink: 'syz.3.3782': attribute type 2 has an invalid length. [ 818.516905][T15463] netlink: 'syz.3.3782': attribute type 8 has an invalid length. [ 818.535598][T15462] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3780'. [ 818.554106][T15463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3782'. [ 818.705786][ T7819] wlan1: Trigger new scan to find an IBSS to join [ 818.705802][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 821.553424][ T4300] wlan1: Creating new IBSS network, BSSID 76:b1:a2:58:73:b3 [ 821.561380][T15474] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 821.727742][ T7766] wlan1: Trigger new scan to find an IBSS to join [ 821.853071][T15482] sctp: [Deprecated]: syz.4.3789 (pid 15482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.853071][T15482] Use struct sctp_sack_info instead [ 821.905746][T15486] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 821.954061][T15489] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 822.294505][T15494] netlink: 'syz.2.3794': attribute type 21 has an invalid length. [ 822.329615][T15500] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3795'. [ 822.355915][T15494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3794'. [ 822.449689][T15500] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3795'. [ 823.058509][T15514] netlink: 'syz.3.3800': attribute type 21 has an invalid length. [ 823.077111][T15514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3800'. [ 823.189214][T15516] netlink: 'syz.1.3801': attribute type 2 has an invalid length. [ 823.212553][T15516] netlink: 'syz.1.3801': attribute type 8 has an invalid length. [ 823.225220][T15516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3801'. [ 823.838310][T15529] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3804'. [ 823.876028][T15529] openvswitch: netlink: Message has 6 unknown bytes. [ 824.767216][ T7316] wlan1: Trigger new scan to find an IBSS to join [ 825.726687][ T7785] wlan1: Trigger new scan to find an IBSS to join [ 826.600326][T15536] netlink: 'syz.2.3809': attribute type 21 has an invalid length. [ 826.609564][T15540] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3810'. [ 826.609921][T15540] openvswitch: netlink: Message has 6 unknown bytes. [ 826.674969][T15536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3809'. [ 826.688127][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 826.760166][T15546] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3811'. [ 826.836552][T15546] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3811'. [ 827.151130][T15557] netlink: 'syz.1.3815': attribute type 2 has an invalid length. [ 827.189662][T15557] netlink: 'syz.1.3815': attribute type 8 has an invalid length. [ 827.264258][T15558] netlink: 'syz.2.3813': attribute type 21 has an invalid length. [ 827.867205][T15574] __nla_validate_parse: 2 callbacks suppressed [ 827.867257][T15574] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3821'. [ 827.933665][T15574] openvswitch: netlink: Message has 6 unknown bytes. [ 828.688394][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 828.767234][ T7784] wlan1: Trigger new scan to find an IBSS to join [ 829.553352][T15589] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3825'. [ 829.573043][T15589] openvswitch: netlink: Message has 6 unknown bytes. [ 829.783458][ T7819] wlan1: Creating new IBSS network, BSSID 52:1e:a3:da:5f:31 [ 829.793124][T13555] wlan1: Creating new IBSS network, BSSID 5a:1d:d3:1e:16:e6 [ 829.803268][T15582] netlink: 'syz.4.3823': attribute type 21 has an invalid length. [ 829.816538][T15582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3823'. [ 829.843788][T15587] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 829.846072][ T7819] ------------[ cut here ]------------ [ 829.859572][ T7819] WARNING: CPU: 1 PID: 7819 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 829.869753][ T7819] Modules linked in: [ 829.873699][ T7819] CPU: 1 PID: 7819 Comm: kworker/u4:32 Not tainted syzkaller #0 [ 829.881425][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 829.891566][ T7819] Workqueue: cfg80211 cfg80211_event_work [ 829.897488][ T7819] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 829.903711][ T7819] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 89 ea f7 0f 0b eb bf e8 a7 89 ea f7 <0f> 0b eb b6 e8 9e 89 ea f7 0f 0b e9 82 fd ff ff e8 92 89 ea f7 0f [ 829.923609][ T7819] RSP: 0018:ffffc9000dd27ac0 EFLAGS: 00010293 [ 829.929768][ T7819] RAX: ffffffff89979769 RBX: 1ffff92001ba4f5c RCX: ffff88802b0c5a00 [ 829.937935][ T7819] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf4160 [ 829.945964][ T7819] RBP: ffffc9000dd27b70 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 829.954027][ T7819] R10: dffffc0000000000 R11: fffffbfff2162056 R12: ffff88807345b5b8 [ 829.962212][ T7819] R13: dffffc0000000000 R14: 000000000000001f R15: ffff8880770f4c90 [ 829.970380][ T7819] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 829.979420][ T7819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 829.986053][ T7819] CR2: 00007ffa3ca3dff8 CR3: 0000000026b0b000 CR4: 00000000003506e0 [ 829.994215][ T7819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.002307][ T7819] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 830.010363][ T7819] Call Trace: [ 830.013693][ T7819] [ 830.016728][ T7819] ? trace_rdev_return_void+0x240/0x240 [ 830.022356][ T7819] cfg80211_process_wdev_events+0x359/0x4d0 [ 830.028364][ T7819] ? process_one_work+0x7b4/0x1160 [ 830.033712][ T7819] cfg80211_process_rdev_events+0x9d/0x110 [ 830.039636][ T7819] cfg80211_event_work+0x2b/0x40 [ 830.044641][ T7819] process_one_work+0x8ab/0x1160 [ 830.049704][ T7819] ? worker_detach_from_pool+0x240/0x240 [ 830.055515][ T7819] ? _raw_spin_lock_irq+0xb7/0xf0 [ 830.060656][ T7819] ? _raw_spin_lock_irqsave+0x100/0x100 [ 830.066280][ T7819] ? wq_worker_running+0x97/0x190 [ 830.071402][ T7819] worker_thread+0xaf5/0x12a0 [ 830.076164][ T7819] kthread+0x29d/0x330 [ 830.080325][ T7819] ? worker_clr_flags+0x1a0/0x1a0 [ 830.085580][ T7819] ? kthread_blkcg+0xd0/0xd0 [ 830.090307][ T7819] ret_from_fork+0x1f/0x30 [ 830.094887][ T7819] [ 830.098008][ T7819] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 830.105325][ T7819] CPU: 1 PID: 7819 Comm: kworker/u4:32 Not tainted syzkaller #0 [ 830.112993][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.123087][ T7819] Workqueue: cfg80211 cfg80211_event_work [ 830.128958][ T7819] Call Trace: [ 830.132273][ T7819] [ 830.135241][ T7819] dump_stack_lvl+0x188/0x24e [ 830.139985][ T7819] ? memcpy+0x3c/0x60 [ 830.144015][ T7819] ? show_regs_print_info+0x12/0x12 [ 830.149267][ T7819] ? load_image+0x410/0x410 [ 830.153833][ T7819] panic+0x2d3/0x710 [ 830.157783][ T7819] ? bpf_jit_dump+0xd0/0xd0 [ 830.162335][ T7819] ? ret_from_fork+0x1f/0x30 [ 830.167003][ T7819] __warn+0x2f8/0x4f0 [ 830.171123][ T7819] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 830.176731][ T7819] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 830.182330][ T7819] report_bug+0x2ba/0x4f0 [ 830.186790][ T7819] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 830.192397][ T7819] handle_bug+0x3a/0x70 [ 830.196604][ T7819] exc_invalid_op+0x16/0x40 [ 830.201165][ T7819] asm_exc_invalid_op+0x16/0x20 [ 830.206058][ T7819] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 830.212273][ T7819] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 89 ea f7 0f 0b eb bf e8 a7 89 ea f7 <0f> 0b eb b6 e8 9e 89 ea f7 0f 0b e9 82 fd ff ff e8 92 89 ea f7 0f [ 830.231928][ T7819] RSP: 0018:ffffc9000dd27ac0 EFLAGS: 00010293 [ 830.238039][ T7819] RAX: ffffffff89979769 RBX: 1ffff92001ba4f5c RCX: ffff88802b0c5a00 [ 830.246052][ T7819] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf4160 [ 830.254071][ T7819] RBP: ffffc9000dd27b70 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 830.262164][ T7819] R10: dffffc0000000000 R11: fffffbfff2162056 R12: ffff88807345b5b8 [ 830.270182][ T7819] R13: dffffc0000000000 R14: 000000000000001f R15: ffff8880770f4c90 [ 830.278184][ T7819] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 830.283783][ T7819] ? trace_rdev_return_void+0x240/0x240 [ 830.289371][ T7819] cfg80211_process_wdev_events+0x359/0x4d0 [ 830.295403][ T7819] ? process_one_work+0x7b4/0x1160 [ 830.300549][ T7819] cfg80211_process_rdev_events+0x9d/0x110 [ 830.306408][ T7819] cfg80211_event_work+0x2b/0x40 [ 830.311372][ T7819] process_one_work+0x8ab/0x1160 [ 830.316353][ T7819] ? worker_detach_from_pool+0x240/0x240 [ 830.322030][ T7819] ? _raw_spin_lock_irq+0xb7/0xf0 [ 830.327085][ T7819] ? _raw_spin_lock_irqsave+0x100/0x100 [ 830.332782][ T7819] ? wq_worker_running+0x97/0x190 [ 830.337831][ T7819] worker_thread+0xaf5/0x12a0 [ 830.342576][ T7819] kthread+0x29d/0x330 [ 830.346671][ T7819] ? worker_clr_flags+0x1a0/0x1a0 [ 830.351719][ T7819] ? kthread_blkcg+0xd0/0xd0 [ 830.356334][ T7819] ret_from_fork+0x1f/0x30 [ 830.360805][ T7819] [ 830.364004][ T7819] Kernel Offset: disabled [ 830.368389][ T7819] Rebooting in 86400 seconds..