last executing test programs: 4.430037828s ago: executing program 2 (id=7797): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000280)='memory.swap.max\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x4a, 0x0, 0xe5) close(r5) 4.10309847s ago: executing program 2 (id=7803): socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.402728108s ago: executing program 0 (id=7807): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000084000000000000000000007ea5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 2.48693886s ago: executing program 0 (id=7810): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 2.433983385s ago: executing program 2 (id=7812): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) close(0xffffffffffffffff) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {0x0}, {0x0}, {&(0x7f0000000340)="87", 0x1}, {&(0x7f0000001580)="c422d8a3f3ebcd077dcc687260684117bdca74d83fc6b47c8aeecce253607026b759a6812756f0704a921606fd33215775c726d80a0d1c8b6bcc65d4feb78c13f91b1b94e22e0a382b7087b42bf3e56d0fe6e2ed520f25aae2de4f947291f837cc01a0b6abb52cec2bd2e1c094ac818e4462464abcfe07c1bc92fbd5b327cc198d45907839aa865a9b2f60af25ac0a133bdcdeaadecff2fc2ea9a3467a5a7342979f25f611a78e908c22565679c48cbb44816f04aba483a105afade85b3fd6365da03aa80e12e7bbe703b46d820e8bc5083539970a34bd42b0370abd2489fbb9e0f5e2d1f454895d55df1f500caa44f83f7796d81f12e59ded1f7399ed2b48ea4d156a00163bc1d73fd57ade147479d5a6ce01a8169f75e15ae87b428a8b933414bca39555481ec175bf06bd3bc3972f5113f0350b2a6056647ba271a5bea93569bceef5be597218f541c4a131e7f4377a1964c42323eda5104811ef07cb64bbb5a49d6768c4bd1b3a901859f67e091ddad304768bdd2c5a499a46569d55683372249ae2bcbae601b85e01cbb22ebcf3c0039ee61fce0fe45d4fe41f3688211f78d3e2aa5f29469ee57c124f6f390167e19ac3479cd20b363c51fd16604492996a4c7302fee80a6f4ff992a0bde835991a26f405d3dfae1361519ba88c8a4ab84b9f749f12e0398aefc3009a43941b66bfd91a462f01d9b671d645404233e79eeef6b061688840064cd93aef6af5c4c15711801aa3bb0535519837ec30bc9c09f08daf49ef55f2584c52a81bd185e204faf325b9ca4c6570dd42ff4c0ac34144c6b44c171a335fcc41a79da089f4b01a60c066f29a23bf775edbc77dcf4107b85a53bc57b0f02a6a7279ba725848e22186297cdd2e1d40480a07726bb966a5c17781542bcd7c4e77ec60a04489bfacdefb98fca4efd84552ce1e33ff823e42b60fdc9880152a073b55e50410121cf530065ac134b985d4297c341184e06871ce6882506ffdc8be37081e1192c2e1d3d7fcb197300005a9c7014bcf45c88a02c2dfaa9e2eaf5a394a42c101c154979e85942a49536e05dc683392097bf5b6d7b306e5d02cedbd9165d9c72dbf04ceee2b205efa5c06ec2945b6fac1962f412c226291b98f2c8a77ed390606b9fabb82a53f2925b97eac97a2905710cca4cc3ec2f9ddc41a0e54aaba50fc920cf74ebc80bb5c8d6b2a00d04decb5418bccd2dffe30cac17d2e5cfbff4cd9b9dcf14916ad865bfbd2f725d28552eebc45fdec7df6de29bfd1254ddeb60810c4ae2f5095f7d567b660552dd2b2f28fd2450233f4159aea8ebafd62f13b9392bf64e77676bdcf73a0bba302cf188367d50bdc77d8aad4a3c129f876a10eba958e0703ea854ca26df8dc4c292208d14e74afe72a1545fc969353eae707612603168274847dc2c67d91befdbe3e979927e1374a75b7165976d4a97cb4a3c2e545e179b5f61eb94dca2d6cfef9f4ceb7d7de8d03966859789360f944115b793f489a7f7e64db464856978d6edb9ed93fd5ae93444574cd44b4c8379ab836876591f15361c033fe9c1423f41be70a1b91963dd53fdeedaa776cbef6f46a061d2726a5ac809093370fb0e4643933914c9884c6ea998e53073b35a5eb27e97d1ed8fb098dcae0f078ea03e3891d8bbdbbf8075dce7270955bab217fd194b5f9145a902f5b3ab34d55d601dc28debdd950165b108fa5ee2ed0108bcb50acce6d42913ed92d53be985ed45180f04639bfac152c01476da9abfccdf698c5599aa00e697292fe6f940910def83a832c3039d67f590299c0b63b8d9f5efea6e804f9947c9d38f45440a6bd711aab8d2e50de20f7f6cac2e126c5873b9e392a35bd30fcecc969a06fd76e640a0fc461ffedd85dc50e8d62098027bbf1e78546e7a725e19b4096022ae2cb08f78e07363c76206a1a6f0ce60a39733ae36c4011b1ad4de4e3be5541a42e0a0d0972c8c4e21db0bc17e8bdd4eeadb2f5c9c93f11efb121cb529e3ec0a51b33923161ef2398bf8c0e75e8c8ae5909a2e955ae1df1ddc8450eb88b14541d2ef150b8398da9d26403e6c99b1bfb2d19b17e20977f0a85d9bc2629d03702d8bc9cb52c0c5ec3757e53bf304d83d719d1b577879322a63d25efc7bcdadb309803a080638457edf32b4d939e3bb8953163aaa4fb6cb337e51d6bcc693fbeea0f37730b003f19a2a8b81d7dfc51a9146b2cea7b613244a404d05f98b585feceac667267f4347a865457c6024b617851cb851c6afa9e63af48074eff61dc9002e78743ed3883a58205263fbf097d78e078e2f9247ecc3784ebe03905b0fce9c1dd29f2c10511d83f0ba67b04bbc24c59d80c8883a1696c0cd53e97ef04b2673b39c9f3fb4c6057aeed8e8b60a0013182061ae97846f99889dccf46f29f663c2a6f8d073ffe79a339d8e8e3d7a5f56154330bd968bd762f8113d8822a0d6f489c8cc150c02f04fbb83e172654abefbad0902cc4d8ebd1f886adf39c2bbb3ada4db709499f7a6b1d4031fbe0e8cf1aa94da02d5f4ca2e356eba3ec40a824cd97f2487fb980a5d79592f5bf6d822779", 0x71a}], 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000004f978de70000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000a6a100000000000007010000f8ffffffb7020000060000009500"/105], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0xd}, 0x94) 2.368918429s ago: executing program 0 (id=7813): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x114905, 0x4, 0x9, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r2) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100005, 0xca, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r5, 0xb701, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x140) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000900000007000000000000080080000000000000000000"], 0x0, 0x2d}, 0x28) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r9], 0x12) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) 2.330161611s ago: executing program 1 (id=7814): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000060400000000"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0xd, 0x7f}, 0x4140, 0x8, 0x80000000, 0x8, 0x3, 0xffff, 0xb44b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000010400000004"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x28) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 2.243345098s ago: executing program 2 (id=7815): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xd0}, [@ldst={0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) 1.779154669s ago: executing program 3 (id=7816): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000580), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="03000000000000c1b62b91cd28004000000000000000007c9c3e0ff9000000eb9a87e9a48c9e61f556cbcefdd551953e95a608b802992dd75c8b1cc8e8a9cf492205d33db79371e00e6a4b4df2d1eb52ea431d357b8cf4ed75a3a694cd0d5da3c771c0e323e24e23f307bfd2bf85040930c16bea4b3e7d9979c1b9a0b5463bcb9fb79cb73ec59716df824e8ab63e3f8fca899ab47463f94a98b2321c8c95f2f2da", @ANYRES32=r4, @ANYRES32, @ANYBLOB="feffffff0500"/28], 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=@raw=[@ldst={0x2, 0x3, 0x1, 0x6, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x100, 0x5}, 0x10, 0x1e650, r1, 0x3, &(0x7f0000000bc0)=[r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x4, 0x1, 0x6}, {0x2, 0x1, 0x1}, {0x0, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/91, 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0x52, &(0x7f0000000180)=[{0x0}], 0x1000001f, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x2}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}], 0x30}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0x116}], 0x1, 0x0, 0x0, 0x39c}, 0x8005) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@map, 0xffffffffffffffff, 0xd}, 0x20) 1.688297335s ago: executing program 1 (id=7817): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) (fail_nth: 3) 1.610877691s ago: executing program 1 (id=7818): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) 1.598127381s ago: executing program 0 (id=7819): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x3, {0xa, 0x4e27, 0x7, @mcast2, 0x100}}}, 0x80, 0x0}, 0x40004) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'veth0_to_bond\x00', @broadcast}) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0xf5, 0xe, 0x8, 0x5f, 0x0, 0x8, 0x10, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x110040, 0x7ffffffffffffffc, 0xffffcdf4, 0x3, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x10}, r1, 0x2, r0, 0x4) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0d725aa0a45f21c5bb8830db8eb505260767646d61202d6465766963657320"], 0xf) (async, rerun: 64) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x500) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000700)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8b29, 0x0) (rerun: 32) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000340)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x2c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x168f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x1, 0x3, 0x2, 0x2, 0xfffffffffffffff0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @map_idx={0x18, 0x8}, @ldst={0x1, 0x0, 0x6, 0x4, 0x6, 0x100, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000900)=""/193, 0x41000, 0x20, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000a00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xd, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1], &(0x7f0000000b00)=[{0x4, 0x5, 0x3, 0x5}, {0x3, 0x5, 0x5, 0xc}, {0x0, 0x5, 0x1, 0x3}, {0x1, 0x3, 0xd, 0x3}, {0x4, 0x3, 0xb, 0x6}, {0x4, 0x3, 0x9, 0x1}, {0x0, 0x3, 0x9}, {0x4, 0x3, 0xc, 0x1}, {0x0, 0x4, 0x5, 0xc}], 0x10, 0x7fff}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) 1.591261592s ago: executing program 1 (id=7820): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0x40, 0xfc, 0xc2, 0x4, 0x0, 0x8, 0x2620, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xc, 0x0, @perf_config_ext={0x6, 0x8}, 0x104041, 0x6, 0x2, 0x2, 0x7, 0x5, 0x4, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', r5, 0xffffffffffffffff, 0x9, 0x2, 0x4}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0xc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2b", 0x13}], 0x1}, 0x0) 1.146814872s ago: executing program 2 (id=7821): socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 825.566744ms ago: executing program 3 (id=7822): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r0, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0xc0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7d29, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000200), 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f0000000020000004000000", @ANYRES32, @ANYBLOB="da0498c2f4141abe77d0347f95bf4ee8b1484df9d3ebec99046be1ce724aa01564ac7ceaae28b9d72413e34ea1a129ddb484e4944deb3a1900fca0ff5970aab5375d7eb9b1f41323cc7fdee9754836700ff9c18f17381ca44b2f13b20b46a1719b42e8888e93457b97c0b75a99699e1f5f5962a3e07e2af11242fae591c21c75946f1702e0b766332750913e13", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 589.54735ms ago: executing program 3 (id=7823): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) close(0xffffffffffffffff) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {0x0}, {0x0}, {&(0x7f0000000340)="87", 0x1}, {&(0x7f0000001580)="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", 0x71a}], 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000004f978de70000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000a6a100000000000007010000f8ffffffb7020000060000009500"/105], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0xd}, 0x94) 538.786434ms ago: executing program 0 (id=7824): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000280)='memory.swap.max\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x4a, 0x0, 0xe5) close(r5) 509.938666ms ago: executing program 3 (id=7825): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000060400000000"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0xd, 0x7f}, 0x4140, 0x8, 0x80000000, 0x8, 0x3, 0xffff, 0xb44b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000010400000004"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x28) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 456.108159ms ago: executing program 1 (id=7826): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="62031400d755af056510120800afbcf711e12b7f96e5521c8cf217300100000093c1cdf632dbb86770380e8ddd9aff775f8e", 0x32}], 0x1}, 0x0) 359.105306ms ago: executing program 3 (id=7827): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6d, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001040)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6cebbd1e70b909de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a9440700000000000000900c5b287016e512b050cac070174f8295e895ac12e8bf45039335474bec214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83", 0xaa}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa", @ANYRESDEC], 0xcfa4) 342.441457ms ago: executing program 1 (id=7828): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x114905, 0x4, 0x9, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r2) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100005, 0xca, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r5, 0xb701, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x140) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000070000000000000800800000000000000000006100a1"], 0x0, 0x2d}, 0x28) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r9], 0x12) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) 275.023081ms ago: executing program 0 (id=7829): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18200, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x10000) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r1, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_ext={0x1c, 0x22, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @exit, @call={0x85, 0x0, 0x0, 0xc0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x8, 0xd, 0x9, 0x40}]}, &(0x7f0000001880)='GPL\x00', 0x3, 0xee, &(0x7f00000018c0)=""/238, 0x41100, 0x2a, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x16e41, r1, 0x2, 0x0, &(0x7f0000001cc0)=[{0x1, 0xfffffffe, 0x10, 0x9}, {0x2, 0x3, 0x7, 0x7}], 0x10, 0x2}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b020000fe00fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 98.917154ms ago: executing program 3 (id=7830): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3a, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000580), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="03000000000000c1b62b91cd28004000000000000000007c9c3e0ff9000000eb9a87e9a48c9e61f556cbcefdd551953e95a608b802992dd75c8b1cc8e8a9cf492205d33db79371e00e6a4b4df2d1eb52ea431d357b8cf4ed75a3a694cd0d5da3c771c0e323e24e23f307bfd2bf85040930c16bea4b3e7d9979c1b9a0b5463bcb9fb79cb73ec59716df824e8ab63e3f8fca899ab47463f94a98b2321c8c95f2f2da", @ANYRES32=r4, @ANYRES32, @ANYBLOB="feffffff0500"/28], 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=@raw=[@ldst={0x2, 0x3, 0x1, 0x6, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r4, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x100, 0x5}, 0x10, 0x1e650, r1, 0x3, &(0x7f0000000bc0)=[r5, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x4, 0x1, 0x6}, {0x2, 0x1, 0x1}, {0x0, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/91, 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0x52, &(0x7f0000000180)=[{0x0}], 0x1000001f, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x2}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}], 0x30}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0x116}], 0x1, 0x0, 0x0, 0x39c}, 0x8005) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@map, 0xffffffffffffffff, 0xd}, 0x20) 0s ago: executing program 2 (id=7831): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r0, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0xc0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7d29, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000bd4d072a00000000040098feff5e00000000ebef122c6b4cdbb237bba7383566eb32b2668821df398282235e41ca0fe51d258f141d66d64969253568f92e69b7121a71f56c43f8f15bda93e9231d4fb8f64c237800d188243054fe41ec6d6b8512586e051a09b5f36c26728c9417b363f4f0d68287adb0c97098d6199b46e4b0ceaceeaa0f260097d25718a9be0b4aef8893ebae108cf59391c8f0d0f152886df2995448b524d83d6493d371dfa7dfdda323be56a7c4717b6cf74e235971d2c8dc8a970600000000e452ff0a4c5c3386ca2ef34721e772bc798b8736dc2a2e53282f381eb4f4fdb2c3", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x2000, 0x80000, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x4861, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x1f, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f0000000200), 0x0, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0xef, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getpid() ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f0000000020000004000000", @ANYRES32, @ANYBLOB="da0498c2f4141abe77d0347f95bf4ee8b1484df9d3ebec99046be1ce724aa01564ac7ceaae28b9d72413e34ea1a129ddb484e4944deb3a1900fca0ff5970aab5375d7eb9b1f41323cc7fdee9754836700ff9c18f17381ca44b2f13b20b46a1719b42e8888e93457b97c0b75a99699e1f5f5962a3e07e2af11242fae591c21c75946f1702e0b766332750913e13", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): t enabled [ 1782.571686][T25997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.771357][T24584] wlan1: Creating new IBSS network, BSSID 8e:97:9c:91:da:cf [ 1783.107585][T25997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1783.177782][T18836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.186506][T18836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1783.262791][T26153] netlink: 'syz.0.7256': attribute type 10 has an invalid length. [ 1783.373081][ T34] wlan1: Creating new IBSS network, BSSID 6a:cc:e7:c8:5f:ac [ 1783.390101][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.397886][ T5855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.416086][ T5852] wlan1: Trigger new scan to find an IBSS to join [ 1783.710926][T26166] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.7259'. [ 1783.867691][T25997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1784.058252][T26174] FAULT_INJECTION: forcing a failure. [ 1784.058252][T26174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.081283][T26174] CPU: 1 PID: 26174 Comm: syz.0.7262 Not tainted syzkaller #0 [ 1784.089089][T26174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1784.100737][T26174] Call Trace: [ 1784.104036][T26174] [ 1784.107427][T26174] dump_stack_lvl+0x18c/0x250 [ 1784.112500][T26174] ? show_regs_print_info+0x20/0x20 [ 1784.118003][T26174] ? load_image+0x420/0x420 [ 1784.123078][T26174] ? __lock_acquire+0x7d40/0x7d40 [ 1784.128336][T26174] ? __virt_addr_valid+0x18c/0x540 [ 1784.133855][T26174] should_fail_ex+0x39d/0x4d0 [ 1784.138927][T26174] _copy_from_user+0x2f/0xe0 [ 1784.144004][T26174] bpf_test_init+0xde/0x140 [ 1784.148784][T26174] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1784.154638][T26174] ? dev_put+0x80/0x80 [ 1784.158940][T26174] ? dev_put+0x80/0x80 [ 1784.163315][T26174] bpf_prog_test_run+0x321/0x390 [ 1784.168542][T26174] __sys_bpf+0x49d/0x890 [ 1784.173789][T26174] ? bpf_link_show_fdinfo+0x390/0x390 [ 1784.180785][T26174] ? lock_chain_count+0x20/0x20 [ 1784.186375][T26174] __x64_sys_bpf+0x7c/0x90 [ 1784.191436][T26174] do_syscall_64+0x55/0xa0 [ 1784.196777][T26174] ? clear_bhb_loop+0x40/0x90 [ 1784.201990][T26174] ? clear_bhb_loop+0x40/0x90 [ 1784.208006][T26174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1784.214567][T26174] RIP: 0033:0x7f9d03d9c819 [ 1784.219447][T26174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.241016][T26174] RSP: 002b:00007f9d04b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1784.250165][T26174] RAX: ffffffffffffffda RBX: 00007f9d04015fa0 RCX: 00007f9d03d9c819 [ 1784.259476][T26174] RDX: 0000000000000028 RSI: 0000200000000440 RDI: 000000000000000a [ 1784.268985][T26174] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.278231][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.287720][T26174] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1784.296201][T26174] [ 1784.372976][T25438] Bluetooth: hci3: command tx timeout [ 1784.741258][T25997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1785.341933][T25997] veth0_vlan: entered promiscuous mode [ 1785.430735][T25997] veth1_vlan: entered promiscuous mode [ 1785.454663][T26190] netlink: 'syz.0.7267': attribute type 10 has an invalid length. [ 1785.627641][T21551] hsr_slave_0: left promiscuous mode [ 1785.651941][T21551] hsr_slave_1: left promiscuous mode [ 1785.697667][T21551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1785.713206][T21551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1785.726426][T21551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1785.736788][T21551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.802724][T21551] veth1_macvtap: left promiscuous mode [ 1785.808595][T21551] veth0_macvtap: left promiscuous mode [ 1785.821047][T21551] veth1_vlan: left promiscuous mode [ 1785.831191][T21551] veth0_vlan: left promiscuous mode [ 1785.889050][T26206] netlink: 'syz.0.7271': attribute type 3 has an invalid length. [ 1785.928400][T26206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7271'. [ 1786.045606][T21551] team0 (unregistering): Port device geneve1 removed [ 1787.016798][T21551] team0 (unregistering): Port device team_slave_1 removed [ 1787.118125][T21551] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.171734][T21551] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.421583][ T5852] wlan1: Trigger new scan to find an IBSS to join [ 1787.598305][T21551] .` (unregistering): Released all slaves [ 1787.673975][T25997] veth0_macvtap: entered promiscuous mode [ 1787.734096][T25997] veth1_macvtap: entered promiscuous mode [ 1787.789447][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.801338][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.812864][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.824289][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.834500][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.846783][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.857500][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1787.868630][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.891520][T25997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1787.902126][T26215] FAULT_INJECTION: forcing a failure. [ 1787.902126][T26215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1787.913228][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.917149][T26215] CPU: 1 PID: 26215 Comm: syz.0.7275 Not tainted syzkaller #0 [ 1787.934747][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1787.935694][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.945856][T26215] Call Trace: [ 1787.945874][T26215] [ 1787.945883][T26215] dump_stack_lvl+0x18c/0x250 [ 1787.945915][T26215] ? show_regs_print_info+0x20/0x20 [ 1787.945938][T26215] ? load_image+0x420/0x420 [ 1787.945961][T26215] ? __might_fault+0xaa/0x120 [ 1787.945982][T26215] should_fail_ex+0x39d/0x4d0 [ 1787.946008][T26215] copyout+0x1a/0x90 [ 1787.946030][T26215] _copy_to_iter+0x432/0x1120 [ 1787.946063][T26215] ? iov_iter_init+0x1e0/0x1e0 [ 1787.946085][T26215] ? __virt_addr_valid+0x18c/0x540 [ 1787.946106][T26215] ? __virt_addr_valid+0x469/0x540 [ 1787.946126][T26215] ? __phys_addr_symbol+0x2f/0x70 [ 1787.946152][T26215] __skb_datagram_iter+0xdb/0x780 [ 1787.946175][T26215] ? skb_copy_datagram_iter+0x200/0x200 [ 1787.963293][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.963351][T26215] skb_copy_datagram_iter+0xb1/0x200 [ 1787.968371][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.973861][T26215] netlink_recvmsg+0x2d4/0xe60 [ 1787.973898][T26215] ? netlink_sendmsg+0xbf0/0xbf0 [ 1787.973923][T26215] ? aa_af_perm+0x330/0x330 [ 1787.973944][T26215] ? __lock_acquire+0x1273/0x7d40 [ 1787.973964][T26215] ? verify_lock_unused+0x140/0x140 [ 1787.973983][T26215] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1787.974003][T26215] ? security_socket_recvmsg+0x89/0xb0 [ 1787.974023][T26215] ? netlink_sendmsg+0xbf0/0xbf0 [ 1787.974048][T26215] ____sys_recvmsg+0x2ce/0x5e0 [ 1787.974077][T26215] ? __sys_recvmsg_sock+0x50/0x50 [ 1787.974104][T26215] ? import_iovec+0x73/0xa0 [ 1787.974125][T26215] ___sys_recvmsg+0x216/0x590 [ 1787.974146][T26215] ? __sys_recvmsg+0x2a0/0x2a0 [ 1787.974165][T26215] ? ksys_write+0x1c4/0x260 [ 1787.987422][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.988969][T26215] ? __fget_files+0x43d/0x4b0 [ 1788.153674][T26215] __x64_sys_recvmsg+0x20c/0x2e0 [ 1788.159409][T26215] ? ___sys_recvmsg+0x590/0x590 [ 1788.164728][T26215] ? lockdep_hardirqs_on+0x98/0x150 [ 1788.170460][T26215] do_syscall_64+0x55/0xa0 [ 1788.175321][T26215] ? clear_bhb_loop+0x40/0x90 [ 1788.180190][T26215] ? clear_bhb_loop+0x40/0x90 [ 1788.185241][T26215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1788.192142][T26215] RIP: 0033:0x7f9d03d9c819 [ 1788.197184][T26215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.220229][T26215] RSP: 002b:00007f9d04b75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1788.230143][T26215] RAX: ffffffffffffffda RBX: 00007f9d04016090 RCX: 00007f9d03d9c819 [ 1788.238302][T26215] RDX: 0000000000010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1788.246470][T26215] RBP: 00007f9d04b75090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.255495][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.264257][T26215] R13: 00007f9d04016128 R14: 00007f9d04016090 R15: 00007ffe8cef90c8 [ 1788.273290][T26215] [ 1788.279143][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.293980][T25997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1788.310122][T25997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1788.334112][T25997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.352812][T25997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.369342][T25997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.381859][T25997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.401247][T25997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.531662][ T5852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.546029][ T5852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.575302][T24584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.584462][ T5855] wlan1: Creating new IBSS network, BSSID de:dd:74:1d:5c:fb [ 1788.585529][T24584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.689169][T26236] netlink: 'syz.0.7279': attribute type 1 has an invalid length. [ 1789.750660][T26236] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.7279'. [ 1789.763795][T26236] netlink: 'syz.0.7279': attribute type 1 has an invalid length. [ 1789.818906][T26239] FAULT_INJECTION: forcing a failure. [ 1789.818906][T26239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.837542][T26239] CPU: 1 PID: 26239 Comm: syz.1.7280 Not tainted syzkaller #0 [ 1789.845255][T26239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1789.856050][T26239] Call Trace: [ 1789.859936][T26239] [ 1789.862970][T26239] dump_stack_lvl+0x18c/0x250 [ 1789.868390][T26239] ? show_regs_print_info+0x20/0x20 [ 1789.874597][T26239] ? load_image+0x420/0x420 [ 1789.879590][T26239] ? __might_fault+0xaa/0x120 [ 1789.884928][T26239] ? __lock_acquire+0x7d40/0x7d40 [ 1789.890293][T26239] should_fail_ex+0x39d/0x4d0 [ 1789.895472][T26239] _copy_from_user+0x2f/0xe0 [ 1789.900454][T26239] ____sys_sendmsg+0x2fd/0x960 [ 1789.905335][T26239] ? __lock_acquire+0x7d40/0x7d40 [ 1789.911097][T26239] ? __sys_sendmsg_sock+0x30/0x30 [ 1789.916491][T26239] ? __import_iovec+0x5f2/0x850 [ 1789.921355][T26239] ? import_iovec+0x73/0xa0 [ 1789.926490][T26239] ___sys_sendmsg+0x2a6/0x360 [ 1789.931546][T26239] ? get_pid_task+0x20/0x1e0 [ 1789.936359][T26239] ? __sys_sendmsg+0x2a0/0x2a0 [ 1789.941632][T26239] ? __lock_acquire+0x7d40/0x7d40 [ 1789.947049][T26239] __se_sys_sendmsg+0x1c2/0x2b0 [ 1789.952093][T26239] ? __x64_sys_sendmsg+0x80/0x80 [ 1789.957423][T26239] ? lockdep_hardirqs_on+0x98/0x150 [ 1789.962726][T26239] do_syscall_64+0x55/0xa0 [ 1789.967231][T26239] ? clear_bhb_loop+0x40/0x90 [ 1789.972085][T26239] ? clear_bhb_loop+0x40/0x90 [ 1789.977558][T26239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.983582][T26239] RIP: 0033:0x7f9d01d9c819 [ 1789.988569][T26239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.010334][T26239] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1790.019284][T26239] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1790.027586][T26239] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 1790.037058][T26239] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.045472][T26239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.053981][T26239] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1790.063290][T26239] [ 1790.107854][T26234] netlink: 'syz.3.7278': attribute type 10 has an invalid length. [ 1790.280859][T26248] FAULT_INJECTION: forcing a failure. [ 1790.280859][T26248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.306561][T26248] CPU: 1 PID: 26248 Comm: syz.3.7286 Not tainted syzkaller #0 [ 1790.316194][T26248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1790.327690][T26248] Call Trace: [ 1790.331263][T26248] [ 1790.334510][T26248] dump_stack_lvl+0x18c/0x250 [ 1790.339776][T26248] ? show_regs_print_info+0x20/0x20 [ 1790.345455][T26248] ? load_image+0x420/0x420 [ 1790.350985][T26248] ? __might_fault+0xaa/0x120 [ 1790.356761][T26248] should_fail_ex+0x39d/0x4d0 [ 1790.362732][T26248] copyout+0x1a/0x90 [ 1790.366847][T26248] _copy_to_iter+0x432/0x1120 [ 1790.372457][T26248] ? iov_iter_init+0x1e0/0x1e0 [ 1790.377963][T26248] ? __virt_addr_valid+0x18c/0x540 [ 1790.383386][T26248] ? __virt_addr_valid+0x469/0x540 [ 1790.389578][T26248] ? __phys_addr_symbol+0x2f/0x70 [ 1790.395565][T26248] __skb_datagram_iter+0xdb/0x780 [ 1790.401335][T26248] ? skb_copy_datagram_iter+0x200/0x200 [ 1790.407443][T26248] skb_copy_datagram_iter+0xb1/0x200 [ 1790.413766][T26248] netlink_recvmsg+0x2d4/0xe60 [ 1790.418921][T26248] ? netlink_sendmsg+0xbf0/0xbf0 [ 1790.424293][T26248] ? aa_af_perm+0x330/0x330 [ 1790.429475][T26248] ? __lock_acquire+0x1273/0x7d40 [ 1790.434890][T26248] ? verify_lock_unused+0x140/0x140 [ 1790.440909][T26248] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1790.446739][T26248] ? security_socket_recvmsg+0x89/0xb0 [ 1790.452921][T26248] ? netlink_sendmsg+0xbf0/0xbf0 [ 1790.458003][T26248] ____sys_recvmsg+0x2ce/0x5e0 [ 1790.462935][T26248] ? __sys_recvmsg_sock+0x50/0x50 [ 1790.468363][T26248] ? import_iovec+0x73/0xa0 [ 1790.473254][T26248] ___sys_recvmsg+0x216/0x590 [ 1790.478456][T26248] ? __sys_recvmsg+0x2a0/0x2a0 [ 1790.483593][T26248] ? ksys_write+0x1c4/0x260 [ 1790.488746][T26248] ? __fget_files+0x43d/0x4b0 [ 1790.493804][T26248] __x64_sys_recvmsg+0x20c/0x2e0 [ 1790.499431][T26248] ? ___sys_recvmsg+0x590/0x590 [ 1790.505023][T26248] ? lockdep_hardirqs_on+0x98/0x150 [ 1790.510623][T26248] do_syscall_64+0x55/0xa0 [ 1790.515170][T26248] ? clear_bhb_loop+0x40/0x90 [ 1790.520140][T26248] ? clear_bhb_loop+0x40/0x90 [ 1790.525070][T26248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1790.531543][T26248] RIP: 0033:0x7f0a5099c819 [ 1790.536356][T26248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.564287][T26248] RSP: 002b:00007f0a51782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1790.574281][T26248] RAX: ffffffffffffffda RBX: 00007f0a50c15fa0 RCX: 00007f0a5099c819 [ 1790.584832][T26248] RDX: 0000000040010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1790.596254][T26248] RBP: 00007f0a51782090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.609180][T26248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.620577][T26248] R13: 00007f0a50c16038 R14: 00007f0a50c15fa0 R15: 00007ffe72b30cb8 [ 1790.630841][T26248] [ 1790.680912][T26251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1790.707859][T26247] netlink: 'syz.0.7282': attribute type 3 has an invalid length. [ 1790.717341][T26247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7282'. [ 1790.718663][T26251] veth0_macvtap: left promiscuous mode [ 1790.751411][T26254] netlink: 'syz.2.7288': attribute type 3 has an invalid length. [ 1790.773614][T26254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7288'. [ 1790.871384][T26257] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7288'. [ 1791.819323][T26257] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1791.977855][T26270] netlink: 'syz.2.7292': attribute type 3 has an invalid length. [ 1791.993313][T26270] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.031948][T26272] netlink: 'syz.0.7294': attribute type 10 has an invalid length. [ 1792.095980][T26270] netlink: 'syz.2.7292': attribute type 17 has an invalid length. [ 1792.154422][T26270] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.176889][T26271] netlink: 'syz.2.7292': attribute type 3 has an invalid length. [ 1792.218810][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.229147][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.232712][T26271] netlink: 'syz.2.7292': attribute type 1 has an invalid length. [ 1792.246277][T26280] sctp: [Deprecated]: syz.0.7297 (pid 26280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1792.246277][T26280] Use struct sctp_sack_info instead [ 1792.258741][T26271] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.285685][T26271] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.308026][T26271] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.355040][T26281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7298'. [ 1792.371009][T26271] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.411755][T26271] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.440766][T26271] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.478967][T26271] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.7292'. [ 1792.513567][T26284] FAULT_INJECTION: forcing a failure. [ 1792.513567][T26284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1792.549088][T26284] CPU: 0 PID: 26284 Comm: syz.0.7299 Not tainted syzkaller #0 [ 1792.557505][T26284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1792.569004][T26284] Call Trace: [ 1792.572582][T26284] [ 1792.575795][T26284] dump_stack_lvl+0x18c/0x250 [ 1792.580706][T26284] ? show_regs_print_info+0x20/0x20 [ 1792.586401][T26284] ? load_image+0x420/0x420 [ 1792.591556][T26284] ? __might_fault+0xaa/0x120 [ 1792.596545][T26284] ? __lock_acquire+0x7d40/0x7d40 [ 1792.602676][T26284] should_fail_ex+0x39d/0x4d0 [ 1792.607733][T26284] _copy_from_user+0x2f/0xe0 [ 1792.613259][T26284] bpf_prog_test_run_skb+0x266/0x12b0 [ 1792.619228][T26284] ? __fget_files+0x28/0x4b0 [ 1792.624582][T26284] ? __fget_files+0x28/0x4b0 [ 1792.629918][T26284] ? __fget_files+0x43d/0x4b0 [ 1792.634876][T26284] ? cpu_online+0x60/0x60 [ 1792.640224][T26284] bpf_prog_test_run+0x321/0x390 [ 1792.647044][T26284] __sys_bpf+0x49d/0x890 [ 1792.651602][T26284] ? bpf_link_show_fdinfo+0x390/0x390 [ 1792.657385][T26284] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1792.664133][T26284] __x64_sys_bpf+0x7c/0x90 [ 1792.669116][T26284] do_syscall_64+0x55/0xa0 [ 1792.674208][T26284] ? clear_bhb_loop+0x40/0x90 [ 1792.679974][T26284] ? clear_bhb_loop+0x40/0x90 [ 1792.685041][T26284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1792.691559][T26284] RIP: 0033:0x7f9d03d9c819 [ 1792.696110][T26284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.717160][T26284] RSP: 002b:00007f9d04b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1792.726597][T26284] RAX: ffffffffffffffda RBX: 00007f9d04015fa0 RCX: 00007f9d03d9c819 [ 1792.734841][T26284] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1792.743641][T26284] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.752585][T26284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.760918][T26284] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1792.769951][T26284] [ 1792.987346][T26289] FAULT_INJECTION: forcing a failure. [ 1792.987346][T26289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.023429][T26289] CPU: 0 PID: 26289 Comm: syz.1.7301 Not tainted syzkaller #0 [ 1793.032548][T26289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1793.044289][T26289] Call Trace: [ 1793.047938][T26289] [ 1793.051334][T26289] dump_stack_lvl+0x18c/0x250 [ 1793.057111][T26289] ? show_regs_print_info+0x20/0x20 [ 1793.062780][T26289] ? load_image+0x420/0x420 [ 1793.068306][T26289] ? __might_fault+0xaa/0x120 [ 1793.074653][T26289] ? __lock_acquire+0x7d40/0x7d40 [ 1793.080909][T26289] ? unix_ioctl+0x261/0x670 [ 1793.086077][T26289] should_fail_ex+0x39d/0x4d0 [ 1793.092533][T26289] _copy_from_user+0x2f/0xe0 [ 1793.098053][T26289] sock_do_ioctl+0x190/0x310 [ 1793.105376][T26289] ? sock_show_fdinfo+0xb0/0xb0 [ 1793.112416][T26289] ? sock_ioctl+0x1c1/0x7e0 [ 1793.121139][T26289] sock_ioctl+0x5ba/0x7e0 [ 1793.128748][T26289] ? sock_poll+0x3e0/0x3e0 [ 1793.136438][T26289] ? bpf_lsm_file_free_security+0x10/0x10 [ 1793.146716][T26289] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1793.154840][T26289] ? security_file_ioctl+0x80/0xa0 [ 1793.162718][T26289] ? sock_poll+0x3e0/0x3e0 [ 1793.171127][T26289] __se_sys_ioctl+0xfd/0x170 [ 1793.178488][T26289] do_syscall_64+0x55/0xa0 [ 1793.184075][T26289] ? clear_bhb_loop+0x40/0x90 [ 1793.189253][T26289] ? clear_bhb_loop+0x40/0x90 [ 1793.195481][T26289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1793.203087][T26289] RIP: 0033:0x7f9d01d9c819 [ 1793.208499][T26289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.235408][T26289] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.245336][T26289] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1793.254894][T26289] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000039 [ 1793.265254][T26289] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.275161][T26289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.283772][T26289] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1793.293098][T26289] [ 1796.640863][T26309] validate_nla: 68 callbacks suppressed [ 1796.640901][T26309] netlink: 'syz.0.7308': attribute type 3 has an invalid length. [ 1796.660882][T26312] netlink: 'syz.1.7307': attribute type 58 has an invalid length. [ 1799.937784][T26330] netlink: 'syz.1.7315': attribute type 10 has an invalid length. [ 1800.729445][T26346] netlink: 'syz.0.7320': attribute type 3 has an invalid length. [ 1800.750193][T26346] __nla_validate_parse: 28 callbacks suppressed [ 1800.750241][T26346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7320'. [ 1800.906192][T26354] FAULT_INJECTION: forcing a failure. [ 1800.906192][T26354] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.921842][T26354] CPU: 1 PID: 26354 Comm: syz.3.7324 Not tainted syzkaller #0 [ 1800.929804][T26354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1800.940242][T26354] Call Trace: [ 1800.943550][T26354] [ 1800.946580][T26354] dump_stack_lvl+0x18c/0x250 [ 1800.951366][T26354] ? show_regs_print_info+0x20/0x20 [ 1800.957008][T26354] ? load_image+0x420/0x420 [ 1800.961698][T26354] ? __might_sleep+0xe0/0xe0 [ 1800.966403][T26354] ? __lock_acquire+0x7d40/0x7d40 [ 1800.971651][T26354] should_fail_ex+0x39d/0x4d0 [ 1800.976784][T26354] should_failslab+0x9/0x20 [ 1800.981640][T26354] slab_pre_alloc_hook+0x59/0x310 [ 1800.987206][T26354] ? sctp_association_new+0x89/0x25c0 [ 1800.992850][T26354] __kmem_cache_alloc_node+0x53/0x250 [ 1800.999113][T26354] ? sctp_association_new+0x89/0x25c0 [ 1801.004928][T26354] kmalloc_trace+0x2a/0xe0 [ 1801.009788][T26354] sctp_association_new+0x89/0x25c0 [ 1801.015249][T26354] ? bpf_lsm_capable+0x9/0x10 [ 1801.020449][T26354] ? security_capable+0x89/0xb0 [ 1801.025786][T26354] sctp_connect_new_asoc+0x2de/0x6a0 [ 1801.031455][T26354] ? __sctp_connect+0xd80/0xd80 [ 1801.036618][T26354] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1801.042087][T26354] ? _local_bh_enable+0xa0/0xa0 [ 1801.047125][T26354] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1801.053212][T26354] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1801.059397][T26354] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1801.065031][T26354] ? security_sctp_bind_connect+0x89/0xb0 [ 1801.071051][T26354] sctp_sendmsg+0x1575/0x28c0 [ 1801.076088][T26354] ? sctp_getsockopt+0xb60/0xb60 [ 1801.081371][T26354] ? aa_sk_perm+0x83c/0x970 [ 1801.086349][T26354] ? aa_af_perm+0x330/0x330 [ 1801.091391][T26354] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1801.098867][T26354] ? sock_rps_record_flow+0x19/0x3f0 [ 1801.104787][T26354] ? inet_sendmsg+0x7c/0x2f0 [ 1801.109556][T26354] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1801.115832][T26354] ? security_socket_sendmsg+0x80/0xa0 [ 1801.121685][T26354] ? inet_send_prepare+0x260/0x260 [ 1801.126824][T26354] ____sys_sendmsg+0x5ba/0x960 [ 1801.131676][T26354] ? __lock_acquire+0x7d40/0x7d40 [ 1801.137054][T26354] ? __asan_memset+0x22/0x40 [ 1801.141995][T26354] ? __sys_sendmsg_sock+0x30/0x30 [ 1801.147299][T26354] ? __import_iovec+0x5f2/0x850 [ 1801.153030][T26354] ? import_iovec+0x73/0xa0 [ 1801.157887][T26354] ___sys_sendmsg+0x2a6/0x360 [ 1801.163446][T26354] ? get_pid_task+0x20/0x1e0 [ 1801.168997][T26354] ? __sys_sendmsg+0x2a0/0x2a0 [ 1801.173880][T26354] ? __lock_acquire+0x7d40/0x7d40 [ 1801.179672][T26354] __se_sys_sendmsg+0x1c2/0x2b0 [ 1801.184708][T26354] ? __x64_sys_sendmsg+0x80/0x80 [ 1801.190267][T26354] ? lockdep_hardirqs_on+0x98/0x150 [ 1801.196540][T26354] do_syscall_64+0x55/0xa0 [ 1801.201141][T26354] ? clear_bhb_loop+0x40/0x90 [ 1801.206116][T26354] ? clear_bhb_loop+0x40/0x90 [ 1801.211244][T26354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1801.217416][T26354] RIP: 0033:0x7f0a5099c819 [ 1801.222046][T26354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.243491][T26354] RSP: 002b:00007f0a51782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1801.252684][T26354] RAX: ffffffffffffffda RBX: 00007f0a50c15fa0 RCX: 00007f0a5099c819 [ 1801.261263][T26354] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1801.269628][T26354] RBP: 00007f0a51782090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.278459][T26354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1801.286961][T26354] R13: 00007f0a50c16038 R14: 00007f0a50c15fa0 R15: 00007ffe72b30cb8 [ 1801.295395][T26354] [ 1801.407841][T26357] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.7323'. [ 1801.619200][T26361] netlink: 'syz.1.7327': attribute type 10 has an invalid length. [ 1801.642657][T26361] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7327'. [ 1801.652147][T26361] hsr0: entered promiscuous mode [ 1801.697706][T26361] bridge0: port 3(hsr0) entered blocking state [ 1801.724232][T26361] bridge0: port 3(hsr0) entered disabled state [ 1801.753577][T26361] hsr0: entered allmulticast mode [ 1801.760190][T26361] hsr_slave_0: entered allmulticast mode [ 1801.782463][T26361] hsr_slave_1: entered allmulticast mode [ 1801.822097][T26361] bridge0: port 3(hsr0) entered blocking state [ 1801.829396][T26361] bridge0: port 3(hsr0) entered forwarding state [ 1802.366265][T26375] netlink: 'syz.1.7330': attribute type 10 has an invalid length. [ 1802.366648][T26374] FAULT_INJECTION: forcing a failure. [ 1802.366648][T26374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.395670][T26377] netlink: 'syz.3.7333': attribute type 3 has an invalid length. [ 1802.405722][T26377] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7333'. [ 1802.411663][T26374] CPU: 0 PID: 26374 Comm: syz.2.7331 Not tainted syzkaller #0 [ 1802.423031][T26374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1802.433822][T26374] Call Trace: [ 1802.437394][T26374] [ 1802.440499][T26374] dump_stack_lvl+0x18c/0x250 [ 1802.445221][T26374] ? show_regs_print_info+0x20/0x20 [ 1802.450632][T26374] ? load_image+0x420/0x420 [ 1802.455187][T26374] ? __might_fault+0xaa/0x120 [ 1802.460181][T26374] should_fail_ex+0x39d/0x4d0 [ 1802.465250][T26374] copyout+0x1a/0x90 [ 1802.469351][T26374] _copy_to_iter+0x432/0x1120 [ 1802.473283][T24584] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1802.474829][T26374] ? iov_iter_init+0x1e0/0x1e0 [ 1802.490440][T26374] ? __virt_addr_valid+0x18c/0x540 [ 1802.495837][T26374] ? __virt_addr_valid+0x469/0x540 [ 1802.501758][T26374] ? __phys_addr_symbol+0x2f/0x70 [ 1802.507263][T26374] __skb_datagram_iter+0xdb/0x780 [ 1802.512513][T26374] ? skb_copy_datagram_iter+0x200/0x200 [ 1802.518566][T26374] skb_copy_datagram_iter+0xb1/0x200 [ 1802.524162][T26374] netlink_recvmsg+0x2d4/0xe60 [ 1802.529187][T26374] ? netlink_sendmsg+0xbf0/0xbf0 [ 1802.534349][T26374] ? aa_af_perm+0x330/0x330 [ 1802.539063][T26374] ? __lock_acquire+0x1273/0x7d40 [ 1802.544201][T26374] ? verify_lock_unused+0x140/0x140 [ 1802.549965][T26374] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1802.555466][T26374] ? security_socket_recvmsg+0x89/0xb0 [ 1802.561390][T26374] ? netlink_sendmsg+0xbf0/0xbf0 [ 1802.566451][T26374] ____sys_recvmsg+0x2ce/0x5e0 [ 1802.571380][T26374] ? __sys_recvmsg_sock+0x50/0x50 [ 1802.577065][T26374] ? import_iovec+0x73/0xa0 [ 1802.581860][T26374] ___sys_recvmsg+0x216/0x590 [ 1802.586744][T26374] ? __sys_recvmsg+0x2a0/0x2a0 [ 1802.591813][T26374] ? ksys_write+0x1c4/0x260 [ 1802.596455][T26374] ? __fget_files+0x43d/0x4b0 [ 1802.601357][T26374] __x64_sys_recvmsg+0x20c/0x2e0 [ 1802.606622][T26374] ? ___sys_recvmsg+0x590/0x590 [ 1802.611782][T26374] ? lockdep_hardirqs_on+0x98/0x150 [ 1802.617572][T26374] do_syscall_64+0x55/0xa0 [ 1802.622726][T26374] ? clear_bhb_loop+0x40/0x90 [ 1802.627881][T26374] ? clear_bhb_loop+0x40/0x90 [ 1802.632635][T26374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1802.639026][T26374] RIP: 0033:0x7f7adcb9c819 [ 1802.644515][T26374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.666718][T26374] RSP: 002b:00007f7add99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1802.676204][T26374] RAX: ffffffffffffffda RBX: 00007f7adce15fa0 RCX: 00007f7adcb9c819 [ 1802.684382][T26374] RDX: 0000000040010100 RSI: 0000200000000080 RDI: 0000000000000003 [ 1802.692553][T26374] RBP: 00007f7add99e090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.700694][T26374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.708962][T26374] R13: 00007f7adce16038 R14: 00007f7adce15fa0 R15: 00007fff7d8b9958 [ 1802.717255][T26374] [ 1803.106853][T26383] netlink: 'syz.2.7334': attribute type 3 has an invalid length. [ 1803.162205][T26383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7334'. [ 1804.590579][T26427] FAULT_INJECTION: forcing a failure. [ 1804.590579][T26427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1804.613660][T26427] CPU: 1 PID: 26427 Comm: syz.0.7348 Not tainted syzkaller #0 [ 1804.621974][T26427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1804.633112][T26427] Call Trace: [ 1804.636854][T26427] [ 1804.639991][T26427] dump_stack_lvl+0x18c/0x250 [ 1804.645070][T26427] ? show_regs_print_info+0x20/0x20 [ 1804.650926][T26427] ? load_image+0x420/0x420 [ 1804.656962][T26427] ? __lock_acquire+0x7d40/0x7d40 [ 1804.662267][T26427] ? snprintf+0xe9/0x140 [ 1804.666785][T26427] should_fail_ex+0x39d/0x4d0 [ 1804.672033][T26427] _copy_to_user+0x2f/0xa0 [ 1804.676634][T26427] simple_read_from_buffer+0xe7/0x150 [ 1804.682132][T26427] proc_fail_nth_read+0x1e8/0x260 [ 1804.687506][T26427] ? proc_fault_inject_write+0x360/0x360 [ 1804.693845][T26427] ? fsnotify_perm+0x271/0x5e0 [ 1804.698976][T26427] ? proc_fault_inject_write+0x360/0x360 [ 1804.704722][T26427] vfs_read+0x28b/0x970 [ 1804.709043][T26427] ? kernel_read+0x1e0/0x1e0 [ 1804.713776][T26427] ? __fget_files+0x28/0x4b0 [ 1804.718747][T26427] ? __fget_files+0x28/0x4b0 [ 1804.723629][T26427] ? __fget_files+0x43d/0x4b0 [ 1804.728672][T26427] ? __fdget_pos+0x2a3/0x330 [ 1804.733265][T26427] ? ksys_read+0x75/0x260 [ 1804.737871][T26427] ksys_read+0x150/0x260 [ 1804.742396][T26427] ? vfs_write+0x990/0x990 [ 1804.747282][T26427] ? lockdep_hardirqs_on+0x98/0x150 [ 1804.753050][T26427] do_syscall_64+0x55/0xa0 [ 1804.757660][T26427] ? clear_bhb_loop+0x40/0x90 [ 1804.762454][T26427] ? clear_bhb_loop+0x40/0x90 [ 1804.767227][T26427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1804.773473][T26427] RIP: 0033:0x7f9d03d5d04e [ 1804.778068][T26427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1804.798401][T26427] RSP: 002b:00007f9d04b95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1804.807444][T26427] RAX: ffffffffffffffda RBX: 00007f9d04b966c0 RCX: 00007f9d03d5d04e [ 1804.815796][T26427] RDX: 000000000000000f RSI: 00007f9d04b960a0 RDI: 0000000000000004 [ 1804.824130][T26427] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.832534][T26427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1804.840764][T26427] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1804.849527][T26427] [ 1804.973633][T26430] netlink: 'syz.2.7347': attribute type 3 has an invalid length. [ 1804.982004][T26430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7347'. [ 1807.415345][T26422] netlink: 'syz.3.7345': attribute type 10 has an invalid length. [ 1808.151855][T26452] netlink: 'syz.2.7356': attribute type 1 has an invalid length. [ 1808.213052][T26452] netlink: 'syz.2.7356': attribute type 3 has an invalid length. [ 1808.241068][T26452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7356'. [ 1808.793685][T26461] netlink: 'syz.3.7359': attribute type 1 has an invalid length. [ 1808.814693][T26461] netlink: 'syz.3.7359': attribute type 3 has an invalid length. [ 1808.837548][T26461] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7359'. [ 1808.854173][T24584] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1808.896230][T26470] netlink: 'syz.1.7361': attribute type 10 has an invalid length. [ 1809.136655][T26474] netlink: 'syz.3.7363': attribute type 3 has an invalid length. [ 1809.146566][T26474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7363'. [ 1809.243226][T26476] netlink: 'syz.2.7364': attribute type 10 has an invalid length. [ 1809.639774][T26486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1809.803698][T26492] netlink: 'syz.3.7369': attribute type 10 has an invalid length. [ 1809.822581][T26495] netlink: 'syz.1.7377': attribute type 10 has an invalid length. [ 1810.807036][T26514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7378'. [ 1810.875123][T26518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1811.079863][T26523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7391'. [ 1811.300544][T26533] bridge0: port 3(hsr0) entered disabled state [ 1811.308648][T26533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.317812][T26533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.984795][T26553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1812.038172][T26555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1812.066739][T26555] FAULT_INJECTION: forcing a failure. [ 1812.066739][T26555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1812.090346][T26555] CPU: 0 PID: 26555 Comm: syz.1.7394 Not tainted syzkaller #0 [ 1812.098489][T26555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1812.109127][T26555] Call Trace: [ 1812.112795][T26555] [ 1812.115753][T26555] dump_stack_lvl+0x18c/0x250 [ 1812.120830][T26555] ? show_regs_print_info+0x20/0x20 [ 1812.126587][T26555] ? load_image+0x420/0x420 [ 1812.131217][T26555] ? __might_fault+0xaa/0x120 [ 1812.136267][T26555] ? __lock_acquire+0x7d40/0x7d40 [ 1812.141387][T26555] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1812.147295][T26555] should_fail_ex+0x39d/0x4d0 [ 1812.152302][T26555] _copy_from_user+0x2f/0xe0 [ 1812.157079][T26555] wext_handle_ioctl+0xc8/0x1d0 [ 1812.162335][T26555] ? call_commit_handler+0xf0/0xf0 [ 1812.168016][T26555] sock_ioctl+0x15d/0x7e0 [ 1812.172525][T26555] ? sock_poll+0x3e0/0x3e0 [ 1812.177051][T26555] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1812.182536][T26555] ? security_file_ioctl+0x80/0xa0 [ 1812.188862][T26555] ? sock_poll+0x3e0/0x3e0 [ 1812.193545][T26555] __se_sys_ioctl+0xfd/0x170 [ 1812.198331][T26555] do_syscall_64+0x55/0xa0 [ 1812.203038][T26555] ? clear_bhb_loop+0x40/0x90 [ 1812.208327][T26555] ? clear_bhb_loop+0x40/0x90 [ 1812.213038][T26555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1812.219023][T26555] RIP: 0033:0x7f9d01d9c819 [ 1812.223610][T26555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1812.244804][T26555] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.253564][T26555] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1812.261707][T26555] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 000000000000000a [ 1812.270023][T26555] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.278628][T26555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.286795][T26555] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1812.294960][T26555] [ 1812.569980][T26565] validate_nla: 8 callbacks suppressed [ 1812.570018][T26565] netlink: 'syz.0.7397': attribute type 3 has an invalid length. [ 1812.602293][T26565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7397'. [ 1812.615451][T26566] netlink: 'syz.3.7398': attribute type 10 has an invalid length. [ 1812.845852][ T5855] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1813.341497][T26583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1813.466402][T26593] netlink: 'syz.1.7407': attribute type 10 has an invalid length. [ 1814.320039][T26596] netlink: 'syz.2.7409': attribute type 10 has an invalid length. [ 1814.366112][T26596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.378117][T26596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.410169][T18836] wlan1: Trigger new scan to find an IBSS to join [ 1814.643229][T26607] netlink: 'syz.3.7411': attribute type 3 has an invalid length. [ 1814.674858][T26596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.681829][T26607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1814.685232][T26596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.716451][T26596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.731445][T26596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1815.116092][T26596] team0: Port device bridge0 added [ 1815.168082][T26599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1815.417282][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1815.466941][T26618] FAULT_INJECTION: forcing a failure. [ 1815.466941][T26618] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.544424][T26618] CPU: 1 PID: 26618 Comm: syz.3.7414 Not tainted syzkaller #0 [ 1815.552308][T26618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1815.562840][T26618] Call Trace: [ 1815.566181][T26618] [ 1815.569230][T26618] dump_stack_lvl+0x18c/0x250 [ 1815.574325][T26618] ? show_regs_print_info+0x20/0x20 [ 1815.580086][T26618] ? load_image+0x420/0x420 [ 1815.584798][T26618] ? __lock_acquire+0x7d40/0x7d40 [ 1815.589972][T26618] should_fail_ex+0x39d/0x4d0 [ 1815.594947][T26618] should_failslab+0x9/0x20 [ 1815.599468][T26618] slab_pre_alloc_hook+0x59/0x310 [ 1815.607572][T26618] kmem_cache_alloc_lru+0x4d/0x2d0 [ 1815.613275][T26618] ? iget_locked+0x20a/0x840 [ 1815.618429][T26618] iget_locked+0x20a/0x840 [ 1815.623851][T26618] kernfs_get_inode+0x4f/0x700 [ 1815.629085][T26618] cgroup_attach_permissions+0x26a/0x9d0 [ 1815.635366][T26618] __cgroup_procs_write+0x1e5/0x350 [ 1815.640767][T26618] cgroup_procs_write+0x27/0x50 [ 1815.646044][T26618] ? cgroup_procs_next+0xa0/0xa0 [ 1815.651226][T26618] cgroup_file_write+0x2c9/0x690 [ 1815.656398][T26618] ? read_lock_is_recursive+0x20/0x20 [ 1815.662127][T26618] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1815.667482][T26618] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1815.672791][T26618] kernfs_fop_write_iter+0x3b6/0x520 [ 1815.678459][T26618] vfs_write+0x46c/0x990 [ 1815.682956][T26618] ? file_end_write+0x250/0x250 [ 1815.688406][T26618] ? __fget_files+0x43d/0x4b0 [ 1815.693377][T26618] ? __fdget_pos+0x2a3/0x330 [ 1815.697995][T26618] ? ksys_write+0x75/0x260 [ 1815.702951][T26618] ksys_write+0x150/0x260 [ 1815.707442][T26618] ? __ia32_sys_read+0x90/0x90 [ 1815.712259][T26618] ? lockdep_hardirqs_on+0x98/0x150 [ 1815.717668][T26618] do_syscall_64+0x55/0xa0 [ 1815.722395][T26618] ? clear_bhb_loop+0x40/0x90 [ 1815.727705][T26618] ? clear_bhb_loop+0x40/0x90 [ 1815.732745][T26618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.739172][T26618] RIP: 0033:0x7f0a5099c819 [ 1815.743603][T26618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.764069][T26618] RSP: 002b:00007f0a51782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1815.773551][T26618] RAX: ffffffffffffffda RBX: 00007f0a50c15fa0 RCX: 00007f0a5099c819 [ 1815.781811][T26618] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1815.790332][T26618] RBP: 00007f0a51782090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.798677][T26618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1815.806855][T26618] R13: 00007f0a50c16038 R14: 00007f0a50c15fa0 R15: 00007ffe72b30cb8 [ 1815.815036][T26618] [ 1816.104396][T26632] netlink: 'syz.1.7421': attribute type 10 has an invalid length. [ 1816.135911][T26633] netlink: 'syz.0.7418': attribute type 10 has an invalid length. [ 1816.353683][T26635] netlink: 'syz.1.7422': attribute type 3 has an invalid length. [ 1816.378090][T26635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7422'. [ 1816.426682][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1816.444716][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1816.471266][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1816.480398][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1816.491554][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1816.501824][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1816.604164][T26643] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7423'. [ 1816.670012][ T5855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.837158][ T5855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.101214][ T5855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.345783][ T5852] wlan1: Trigger new scan to find an IBSS to join [ 1817.388829][ T5855] batman_adv: batadv0: Removing interface: netdevsim0 [ 1817.408545][ T5855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.541345][T26637] chnl_net:caif_netlink_parms(): no params data found [ 1817.702697][T26660] netlink: 'syz.2.7428': attribute type 3 has an invalid length. [ 1817.713518][T26660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7428'. [ 1817.789680][T26664] netlink: 'syz.0.7429': attribute type 10 has an invalid length. [ 1817.805508][T26664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.814937][T26664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.941582][T26637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.956671][T26637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.964617][T26637] bridge_slave_0: entered allmulticast mode [ 1817.973493][T26637] bridge_slave_0: entered promiscuous mode [ 1817.984208][T26637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.992414][T26637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.000713][T26637] bridge_slave_1: entered allmulticast mode [ 1818.014631][T26637] bridge_slave_1: entered promiscuous mode [ 1818.063793][T26671] netlink: 'syz.2.7430': attribute type 3 has an invalid length. [ 1818.081142][T26671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7430'. [ 1818.131975][T26637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1818.181652][T26637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1818.351687][T26637] team0: Port device team_slave_0 added [ 1818.375140][T26637] team0: Port device team_slave_1 added [ 1818.437319][T26686] FAULT_INJECTION: forcing a failure. [ 1818.437319][T26686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.469745][T26686] CPU: 0 PID: 26686 Comm: syz.1.7433 Not tainted syzkaller #0 [ 1818.477378][T26686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1818.488065][T26686] Call Trace: [ 1818.491554][T26686] [ 1818.494609][T26686] dump_stack_lvl+0x18c/0x250 [ 1818.499674][T26686] ? show_regs_print_info+0x20/0x20 [ 1818.505404][T26686] ? load_image+0x420/0x420 [ 1818.510220][T26686] ? __might_fault+0xaa/0x120 [ 1818.515323][T26686] should_fail_ex+0x39d/0x4d0 [ 1818.520488][T26686] copyin+0x1a/0x90 [ 1818.524462][T26686] _copy_from_iter+0x404/0x12e0 [ 1818.529550][T26686] ? copyout_mc+0x70/0x70 [ 1818.534018][T26686] ? verify_lock_unused+0x140/0x140 [ 1818.539428][T26686] ? dev_get_by_index+0x22/0x2d0 [ 1818.544757][T26686] ? dev_get_by_index+0x22/0x2d0 [ 1818.550178][T26686] packet_sendmsg+0x2e23/0x4d70 [ 1818.555313][T26686] ? aa_sk_perm+0x970/0x970 [ 1818.560218][T26686] ? __might_sleep+0xe0/0xe0 [ 1818.562728][T25438] Bluetooth: hci1: command tx timeout [ 1818.564870][T26686] ? verify_lock_unused+0x140/0x140 [ 1818.564894][T26686] ? mark_lock+0x94/0x320 [ 1818.564912][T26686] ? __lock_acquire+0x1273/0x7d40 [ 1818.585838][T26686] ? verify_lock_unused+0x140/0x140 [ 1818.591337][T26686] ? aa_sk_perm+0x83c/0x970 [ 1818.595986][T26686] ? packet_getsockopt+0xad0/0xad0 [ 1818.601311][T26686] ? aa_sock_msg_perm+0x94/0x150 [ 1818.606729][T26686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1818.612409][T26686] ? security_socket_sendmsg+0x80/0xa0 [ 1818.618168][T26686] ? packet_getsockopt+0xad0/0xad0 [ 1818.623322][T26686] ____sys_sendmsg+0x5ba/0x960 [ 1818.628300][T26686] ? __lock_acquire+0x7d40/0x7d40 [ 1818.633883][T26686] ? __asan_memset+0x22/0x40 [ 1818.638776][T26686] ? __sys_sendmsg_sock+0x30/0x30 [ 1818.643830][T26686] ? __import_iovec+0x3fa/0x850 [ 1818.649077][T26686] ? import_iovec+0x73/0xa0 [ 1818.654160][T26686] ___sys_sendmsg+0x2a6/0x360 [ 1818.659306][T26686] ? get_pid_task+0x20/0x1e0 [ 1818.664543][T26686] ? __sys_sendmsg+0x2a0/0x2a0 [ 1818.669852][T26686] ? __lock_acquire+0x7d40/0x7d40 [ 1818.675281][T26686] __se_sys_sendmsg+0x1c2/0x2b0 [ 1818.680373][T26686] ? __x64_sys_sendmsg+0x80/0x80 [ 1818.685551][T26686] ? lockdep_hardirqs_on+0x98/0x150 [ 1818.691239][T26686] do_syscall_64+0x55/0xa0 [ 1818.695863][T26686] ? clear_bhb_loop+0x40/0x90 [ 1818.700865][T26686] ? clear_bhb_loop+0x40/0x90 [ 1818.705843][T26686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.712036][T26686] RIP: 0033:0x7f9d01d9c819 [ 1818.716495][T26686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.737108][T26686] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1818.745821][T26686] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1818.754191][T26686] RDX: 0000000004008001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1818.762379][T26686] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.770468][T26686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.778932][T26686] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1818.787565][T26686] [ 1818.794529][T26637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.818813][T26637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.880057][T26637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.898382][T26687] netlink: 'syz.2.7432': attribute type 10 has an invalid length. [ 1818.937297][T26687] team0: Port device geneve1 added [ 1819.020522][T26637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1819.042245][T26637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.078102][T26637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.343138][T18836] wlan1: Trigger new scan to find an IBSS to join [ 1819.440045][T18836] wlan1: Trigger new scan to find an IBSS to join [ 1819.447264][T24584] wlan1: Trigger new scan to find an IBSS to join [ 1819.879215][T26637] hsr_slave_0: entered promiscuous mode [ 1819.890927][T26637] hsr_slave_1: entered promiscuous mode [ 1819.901357][T26711] netlink: 'syz.2.7437': attribute type 3 has an invalid length. [ 1819.927201][T26715] netlink: 'syz.1.7438': attribute type 10 has an invalid length. [ 1820.006306][T26711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7437'. [ 1820.326736][T18836] wlan1: Creating new IBSS network, BSSID fe:26:41:24:4d:5d [ 1820.350535][T26722] netlink: 'syz.1.7440': attribute type 3 has an invalid length. [ 1820.364544][T26722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7440'. [ 1820.410835][T18836] wlan1: Creating new IBSS network, BSSID 9e:a4:f2:15:95:76 [ 1820.460881][T26727] FAULT_INJECTION: forcing a failure. [ 1820.460881][T26727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.486246][T26727] CPU: 0 PID: 26727 Comm: syz.2.7441 Not tainted syzkaller #0 [ 1820.494046][T26727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1820.504564][T26727] Call Trace: [ 1820.508133][T26727] [ 1820.511196][T26727] dump_stack_lvl+0x18c/0x250 [ 1820.515919][T26727] ? show_regs_print_info+0x20/0x20 [ 1820.521505][T26727] ? load_image+0x420/0x420 [ 1820.526309][T26727] ? __might_fault+0xaa/0x120 [ 1820.531024][T26727] ? __lock_acquire+0x7d40/0x7d40 [ 1820.536092][T26727] should_fail_ex+0x39d/0x4d0 [ 1820.540987][T26727] _copy_from_user+0x2f/0xe0 [ 1820.545620][T26727] kstrtouint_from_user+0xde/0x170 [ 1820.551057][T26727] ? kstrtol_from_user+0x190/0x190 [ 1820.556399][T26727] proc_fail_nth_write+0x8f/0x250 [ 1820.561723][T26727] ? proc_fail_nth_read+0x260/0x260 [ 1820.567054][T26727] ? proc_fail_nth_read+0x260/0x260 [ 1820.572543][T26727] vfs_write+0x296/0x990 [ 1820.577066][T26727] ? file_end_write+0x250/0x250 [ 1820.582139][T26727] ? __fget_files+0x28/0x4b0 [ 1820.586854][T26727] ? __fget_files+0x28/0x4b0 [ 1820.591511][T26727] ? __fget_files+0x43d/0x4b0 [ 1820.596576][T26727] ? __fdget_pos+0x2a3/0x330 [ 1820.601206][T26727] ? ksys_write+0x75/0x260 [ 1820.606185][T26727] ksys_write+0x150/0x260 [ 1820.610728][T26727] ? __ia32_sys_read+0x90/0x90 [ 1820.615619][T26727] ? lockdep_hardirqs_on+0x98/0x150 [ 1820.621145][T26727] do_syscall_64+0x55/0xa0 [ 1820.625877][T26727] ? clear_bhb_loop+0x40/0x90 [ 1820.630719][T26727] ? clear_bhb_loop+0x40/0x90 [ 1820.636136][T26727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1820.642300][T25438] Bluetooth: hci1: command tx timeout [ 1820.648136][T26727] RIP: 0033:0x7f7adcb5d04e [ 1820.652669][T26727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1820.674308][T26727] RSP: 002b:00007f7add99dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1820.683199][T26727] RAX: ffffffffffffffda RBX: 00007f7add99e6c0 RCX: 00007f7adcb5d04e [ 1820.692187][T26727] RDX: 0000000000000001 RSI: 00007f7add99e0a0 RDI: 0000000000000006 [ 1820.700278][T26727] RBP: 00007f7add99e090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.708712][T26727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.717028][T26727] R13: 00007f7adce16038 R14: 00007f7adce15fa0 R15: 00007fff7d8b9958 [ 1820.725489][T26727] [ 1822.377264][ T1098] wlan1: Trigger new scan to find an IBSS to join [ 1822.702620][T25438] Bluetooth: hci1: command tx timeout [ 1823.300122][ T1098] wlan1: Creating new IBSS network, BSSID 72:cb:ab:42:31:6f [ 1823.838253][T26754] netlink: 'syz.1.7445': attribute type 10 has an invalid length. [ 1824.112335][T26762] netlink: 'syz.1.7448': attribute type 3 has an invalid length. [ 1824.127800][T26760] netlink: 'syz.2.7447': attribute type 10 has an invalid length. [ 1824.146880][T26762] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7448'. [ 1824.195780][T26760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.206293][T26760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.429614][T26774] netlink: 'syz.0.7450': attribute type 3 has an invalid length. [ 1824.480500][T26774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7450'. [ 1824.704015][T26637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1824.753316][T26637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1824.774414][T25438] Bluetooth: hci1: command tx timeout [ 1824.842736][T26637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1824.902832][T26637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1826.376958][T24584] wlan1: Trigger new scan to find an IBSS to join [ 1828.309323][T26804] netlink: 'syz.2.7455': attribute type 10 has an invalid length. [ 1828.566136][T26841] netlink: 'syz.0.7459': attribute type 10 has an invalid length. [ 1828.607942][T26839] netlink: 'syz.1.7458': attribute type 3 has an invalid length. [ 1828.628784][T26839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7458'. [ 1828.726708][T26637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.815012][T26847] netlink: 'syz.0.7461': attribute type 3 has an invalid length. [ 1828.833736][T26847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7461'. [ 1828.870435][T26637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.901607][T21551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.909392][T21551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.998151][T21551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.006172][T21551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.241959][T26859] netlink: 'syz.2.7464': attribute type 10 has an invalid length. [ 1829.415776][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1829.480359][T26637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1829.496070][T26637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1829.872444][T26868] FAULT_INJECTION: forcing a failure. [ 1829.872444][T26868] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.899551][T26868] CPU: 1 PID: 26868 Comm: syz.0.7467 Not tainted syzkaller #0 [ 1829.907080][T26868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1829.917519][T26868] Call Trace: [ 1829.921029][T26868] [ 1829.924084][T26868] dump_stack_lvl+0x18c/0x250 [ 1829.929023][T26868] ? show_regs_print_info+0x20/0x20 [ 1829.934402][T26868] ? load_image+0x420/0x420 [ 1829.939096][T26868] ? __might_sleep+0xe0/0xe0 [ 1829.943873][T26868] ? __lock_acquire+0x7d40/0x7d40 [ 1829.949201][T26868] should_fail_ex+0x39d/0x4d0 [ 1829.954067][T26868] should_failslab+0x9/0x20 [ 1829.958906][T26868] slab_pre_alloc_hook+0x59/0x310 [ 1829.964032][T26868] ? __lock_acquire+0x1347/0x7d40 [ 1829.969671][T26868] kmem_cache_alloc_node+0x60/0x320 [ 1829.975060][T26868] ? __alloc_skb+0x103/0x2c0 [ 1829.979933][T26868] __alloc_skb+0x103/0x2c0 [ 1829.984451][T26868] tcp_stream_alloc_skb+0x3d/0x330 [ 1829.989839][T26868] tcp_sendmsg_locked+0xea4/0x4bd0 [ 1829.995304][T26868] ? verify_lock_unused+0x140/0x140 [ 1830.000889][T26868] ? verify_lock_unused+0x140/0x140 [ 1830.007100][T26868] ? tcp_set_state+0x680/0x680 [ 1830.012064][T26868] tcp_sendmsg+0x2f/0x50 [ 1830.016775][T26868] ? inet_send_prepare+0x260/0x260 [ 1830.022150][T26868] ____sys_sendmsg+0x5ba/0x960 [ 1830.027183][T26868] ? __sys_sendmsg_sock+0x30/0x30 [ 1830.032203][T26868] ? __import_iovec+0x5f2/0x850 [ 1830.037066][T26868] ? import_iovec+0x73/0xa0 [ 1830.041702][T26868] ___sys_sendmsg+0x2a6/0x360 [ 1830.046728][T26868] ? get_pid_task+0x20/0x1e0 [ 1830.051418][T26868] ? __sys_sendmsg+0x2a0/0x2a0 [ 1830.056371][T26868] ? __lock_acquire+0x7d40/0x7d40 [ 1830.061796][T26868] __se_sys_sendmsg+0x1c2/0x2b0 [ 1830.066821][T26868] ? __x64_sys_sendmsg+0x80/0x80 [ 1830.072127][T26868] ? lockdep_hardirqs_on+0x98/0x150 [ 1830.077774][T26868] do_syscall_64+0x55/0xa0 [ 1830.082621][T26868] ? clear_bhb_loop+0x40/0x90 [ 1830.087578][T26868] ? clear_bhb_loop+0x40/0x90 [ 1830.092344][T26868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1830.098613][T26868] RIP: 0033:0x7f9d03d9c819 [ 1830.103344][T26868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.123486][T26868] RSP: 002b:00007f9d04b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1830.132956][T26868] RAX: ffffffffffffffda RBX: 00007f9d04015fa0 RCX: 00007f9d03d9c819 [ 1830.141348][T26868] RDX: 0000000004000081 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1830.150019][T26868] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.158519][T26868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1830.167099][T26868] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1830.176301][T26868] [ 1830.289526][T26872] netlink: 'syz.1.7468': attribute type 10 has an invalid length. [ 1830.328947][ T5855] hsr_slave_0: left promiscuous mode [ 1830.339813][ T5855] hsr_slave_1: left promiscuous mode [ 1830.350255][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.368942][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.382024][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.396660][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.437725][ T5855] veth1_macvtap: left promiscuous mode [ 1830.448426][ T5855] veth1_vlan: left promiscuous mode [ 1830.457800][ T5855] veth0_vlan: left promiscuous mode [ 1830.536406][T26883] netlink: 'syz.1.7471': attribute type 3 has an invalid length. [ 1830.552641][T26883] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1830.605161][ T5855] team0 (unregistering): Port device geneve1 removed [ 1830.616771][T26885] netlink: 'syz.0.7472': attribute type 3 has an invalid length. [ 1830.628350][T26885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7472'. [ 1831.150241][ T5855] team0 (unregistering): Port device team_slave_1 removed [ 1831.256467][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.266579][ T5855] bond_slave_1 (unregistering): left promiscuous mode [ 1831.319834][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.330760][ T5855] bond_slave_0 (unregistering): left promiscuous mode [ 1831.700838][ T5855] team0 (unregistering): Port device dummy0 removed [ 1831.767061][ T5855] bond0 (unregistering): Released all slaves [ 1831.845994][T26637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1832.035367][T26637] veth0_vlan: entered promiscuous mode [ 1832.072912][T26637] veth1_vlan: entered promiscuous mode [ 1832.307525][T26637] veth0_macvtap: entered promiscuous mode [ 1832.325272][T26637] veth1_macvtap: entered promiscuous mode [ 1832.382615][T24584] wlan1: Trigger new scan to find an IBSS to join [ 1832.398512][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1832.415494][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.432137][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1832.462644][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.477458][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1832.492162][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.505232][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1832.520292][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.553536][T26637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1832.565016][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1832.579010][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.589521][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1832.601843][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.617297][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1832.628605][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.639916][T26637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1832.653250][T26637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1832.683061][T26637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1832.711272][T26637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.736300][T26637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.753883][T26637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.763915][T26637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.778299][T26901] netlink: 'syz.1.7477': attribute type 10 has an invalid length. [ 1832.828456][T26903] netlink: 'syz.2.7478': attribute type 10 has an invalid length. [ 1832.925561][ T5843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.952261][ T5843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.018209][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.039920][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.196097][T26910] netlink: 'syz.0.7481': attribute type 3 has an invalid length. [ 1833.213164][T26910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7481'. [ 1833.249340][T26913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1833.257498][T26913] IPv6: NLM_F_CREATE should be set when creating new route [ 1833.265824][T26913] IPv6: NLM_F_CREATE should be set when creating new route [ 1833.274122][T26913] IPv6: NLM_F_CREATE should be set when creating new route [ 1833.418310][ T5843] wlan1: Trigger new scan to find an IBSS to join [ 1833.788435][T26920] netlink: 'syz.0.7483': attribute type 3 has an invalid length. [ 1833.818792][T18836] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1833.830634][T26920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7483'. [ 1834.135561][T26929] netlink: 'syz.0.7487': attribute type 10 has an invalid length. [ 1834.145893][T26929] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.161181][T26929] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.172016][T26929] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.181582][T26929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.207936][T26931] netlink: 'syz.0.7487': attribute type 9 has an invalid length. [ 1834.218197][T26931] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7487'. [ 1834.360766][T26932] netlink: 'syz.0.7487': attribute type 9 has an invalid length. [ 1834.371931][T26932] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7487'. [ 1834.392522][T18836] wlan1: Creating new IBSS network, BSSID fe:d8:8d:ad:2d:1a [ 1834.503363][T26937] netlink: 'syz.2.7489': attribute type 10 has an invalid length. [ 1834.683325][T26939] FAULT_INJECTION: forcing a failure. [ 1834.683325][T26939] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.697287][T26939] CPU: 0 PID: 26939 Comm: syz.2.7490 Not tainted syzkaller #0 [ 1834.704796][T26939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1834.715574][T26939] Call Trace: [ 1834.719059][T26939] [ 1834.722298][T26939] dump_stack_lvl+0x18c/0x250 [ 1834.727473][T26939] ? show_regs_print_info+0x20/0x20 [ 1834.733098][T26939] ? load_image+0x420/0x420 [ 1834.737924][T26939] should_fail_ex+0x39d/0x4d0 [ 1834.742953][T26939] should_failslab+0x9/0x20 [ 1834.747758][T26939] slab_pre_alloc_hook+0x59/0x310 [ 1834.753181][T26939] kmem_cache_alloc+0x5a/0x2d0 [ 1834.758295][T26939] ? sctp_get_port_local+0x6d4/0x1620 [ 1834.763725][T26939] sctp_get_port_local+0x6d4/0x1620 [ 1834.769069][T26939] ? sctp_do_bind+0x990/0x990 [ 1834.773881][T26939] ? sctp_bind_addr_match+0x30/0x2a0 [ 1834.779556][T26939] sctp_do_bind+0x555/0x990 [ 1834.784282][T26939] sctp_connect_new_asoc+0x26a/0x6a0 [ 1834.789798][T26939] ? __sctp_connect+0xd80/0xd80 [ 1834.794865][T26939] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1834.800616][T26939] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1834.806363][T26939] ? security_sctp_bind_connect+0x89/0xb0 [ 1834.812540][T26939] sctp_sendmsg+0x1575/0x28c0 [ 1834.818270][T26939] ? sctp_getsockopt+0xb60/0xb60 [ 1834.823574][T26939] ? aa_sk_perm+0x83c/0x970 [ 1834.828261][T26939] ? aa_af_perm+0x330/0x330 [ 1834.833115][T26939] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1834.839709][T26939] ? sock_rps_record_flow+0x19/0x3f0 [ 1834.845266][T26939] ? inet_sendmsg+0xe9/0x2f0 [ 1834.850294][T26939] ? inet_send_prepare+0x260/0x260 [ 1834.855581][T26939] ____sys_sendmsg+0x5ba/0x960 [ 1834.860342][T26939] ? __lock_acquire+0x7d40/0x7d40 [ 1834.865560][T26939] ? __asan_memset+0x22/0x40 [ 1834.870419][T26939] ? __sys_sendmsg_sock+0x30/0x30 [ 1834.875701][T26939] ? __import_iovec+0x5f2/0x850 [ 1834.880650][T26939] ? import_iovec+0x73/0xa0 [ 1834.885331][T26939] ___sys_sendmsg+0x2a6/0x360 [ 1834.890195][T26939] ? get_pid_task+0x20/0x1e0 [ 1834.894881][T26939] ? __sys_sendmsg+0x2a0/0x2a0 [ 1834.900179][T26939] ? __lock_acquire+0x7d40/0x7d40 [ 1834.905482][T26939] __se_sys_sendmsg+0x1c2/0x2b0 [ 1834.910593][T26939] ? __x64_sys_sendmsg+0x80/0x80 [ 1834.915777][T26939] ? lockdep_hardirqs_on+0x98/0x150 [ 1834.921257][T26939] do_syscall_64+0x55/0xa0 [ 1834.925769][T26939] ? clear_bhb_loop+0x40/0x90 [ 1834.930536][T26939] ? clear_bhb_loop+0x40/0x90 [ 1834.935216][T26939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1834.941367][T26939] RIP: 0033:0x7f7adcb9c819 [ 1834.945876][T26939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.966709][T26939] RSP: 002b:00007f7add99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1834.975656][T26939] RAX: ffffffffffffffda RBX: 00007f7adce15fa0 RCX: 00007f7adcb9c819 [ 1834.984241][T26939] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1834.992498][T26939] RBP: 00007f7add99e090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.000814][T26939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.009236][T26939] R13: 00007f7adce16038 R14: 00007f7adce15fa0 R15: 00007fff7d8b9958 [ 1835.017420][T26939] [ 1835.191538][T26946] netlink: 'syz.1.7492': attribute type 10 has an invalid length. [ 1835.251151][T26947] netlink: 'syz.0.7493': attribute type 3 has an invalid length. [ 1835.282328][T26947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7493'. [ 1835.300656][T26955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1836.699659][T26969] netlink: 'syz.3.7499': attribute type 3 has an invalid length. [ 1836.710561][T26969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7499'. [ 1836.738582][T26964] netlink: 'syz.0.7498': attribute type 10 has an invalid length. [ 1837.339575][T18836] wlan1: Trigger new scan to find an IBSS to join [ 1838.143325][T26995] netlink: 'syz.2.7506': attribute type 3 has an invalid length. [ 1838.159622][T26995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7506'. [ 1839.412536][ T34] wlan1: Trigger new scan to find an IBSS to join [ 1839.487516][T26988] netlink: 'syz.0.7504': attribute type 10 has an invalid length. [ 1839.718028][T26999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1840.372823][T24584] wlan1: Trigger new scan to find an IBSS to join [ 1841.964502][T27068] netlink: 'syz.2.7511': attribute type 3 has an invalid length. [ 1842.000218][T27068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7511'. [ 1842.004566][T27070] netlink: 'syz.0.7512': attribute type 10 has an invalid length. [ 1842.061922][T27073] FAULT_INJECTION: forcing a failure. [ 1842.061922][T27073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.098963][T27073] CPU: 1 PID: 27073 Comm: syz.1.7513 Not tainted syzkaller #0 [ 1842.107103][T27073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1842.117380][T27073] Call Trace: [ 1842.120866][T27073] [ 1842.123903][T27073] dump_stack_lvl+0x18c/0x250 [ 1842.128851][T27073] ? show_regs_print_info+0x20/0x20 [ 1842.134249][T27073] ? load_image+0x420/0x420 [ 1842.138945][T27073] ? __lock_acquire+0x7d40/0x7d40 [ 1842.144252][T27073] ? snprintf+0xe9/0x140 [ 1842.148719][T27073] should_fail_ex+0x39d/0x4d0 [ 1842.153601][T27073] _copy_to_user+0x2f/0xa0 [ 1842.158323][T27073] simple_read_from_buffer+0xe7/0x150 [ 1842.164281][T27073] proc_fail_nth_read+0x1e8/0x260 [ 1842.169719][T27073] ? proc_fault_inject_write+0x360/0x360 [ 1842.176002][T27073] ? fsnotify_perm+0x271/0x5e0 [ 1842.181574][T27073] ? proc_fault_inject_write+0x360/0x360 [ 1842.187566][T27073] vfs_read+0x28b/0x970 [ 1842.191964][T27073] ? kernel_read+0x1e0/0x1e0 [ 1842.196672][T27073] ? __fget_files+0x28/0x4b0 [ 1842.201390][T27073] ? __fget_files+0x28/0x4b0 [ 1842.206341][T27073] ? __fget_files+0x43d/0x4b0 [ 1842.211027][T27073] ? __fdget_pos+0x2a3/0x330 [ 1842.215904][T27073] ? ksys_read+0x75/0x260 [ 1842.220351][T27073] ksys_read+0x150/0x260 [ 1842.224970][T27073] ? vfs_write+0x990/0x990 [ 1842.229484][T27073] ? lockdep_hardirqs_on+0x98/0x150 [ 1842.234787][T27073] do_syscall_64+0x55/0xa0 [ 1842.239204][T27073] ? clear_bhb_loop+0x40/0x90 [ 1842.244147][T27073] ? clear_bhb_loop+0x40/0x90 [ 1842.249029][T27073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1842.255201][T27073] RIP: 0033:0x7f9d01d5d04e [ 1842.259810][T27073] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1842.279770][T27073] RSP: 002b:00007f9d02cc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1842.288893][T27073] RAX: ffffffffffffffda RBX: 00007f9d02cc66c0 RCX: 00007f9d01d5d04e [ 1842.297466][T27073] RDX: 000000000000000f RSI: 00007f9d02cc60a0 RDI: 0000000000000006 [ 1842.306318][T27073] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.315182][T27073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.323781][T27073] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1842.332095][T27073] [ 1842.531771][T27088] netlink: 'syz.2.7515': attribute type 10 has an invalid length. [ 1842.748773][T27092] netlink: 'syz.1.7518': attribute type 3 has an invalid length. [ 1842.762223][T27092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7518'. [ 1842.775802][T27094] netlink: 'syz.0.7520': attribute type 10 has an invalid length. [ 1842.775827][T27094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7520'. [ 1842.775917][T27094] netlink: 'syz.0.7520': attribute type 10 has an invalid length. [ 1842.775932][T27094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7520'. [ 1843.043648][T27099] FAULT_INJECTION: forcing a failure. [ 1843.043648][T27099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1843.069709][T27099] CPU: 1 PID: 27099 Comm: syz.1.7521 Not tainted syzkaller #0 [ 1843.077935][T27099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1843.088572][T27099] Call Trace: [ 1843.092132][T27099] [ 1843.095254][T27099] dump_stack_lvl+0x18c/0x250 [ 1843.100144][T27099] ? show_regs_print_info+0x20/0x20 [ 1843.105625][T27099] ? load_image+0x420/0x420 [ 1843.110440][T27099] ? __might_fault+0xaa/0x120 [ 1843.115606][T27099] should_fail_ex+0x39d/0x4d0 [ 1843.120832][T27099] copyin+0x1a/0x90 [ 1843.125088][T27099] _copy_from_iter+0x404/0x12e0 [ 1843.130158][T27099] ? copyout_mc+0x70/0x70 [ 1843.134683][T27099] ? verify_lock_unused+0x140/0x140 [ 1843.140061][T27099] ? dev_get_by_index+0x22/0x2d0 [ 1843.145083][T27099] ? dev_get_by_index+0x22/0x2d0 [ 1843.150207][T27099] packet_sendmsg+0x2e23/0x4d70 [ 1843.155529][T27099] ? aa_sk_perm+0x970/0x970 [ 1843.160459][T27099] ? __might_sleep+0xe0/0xe0 [ 1843.165523][T27099] ? verify_lock_unused+0x140/0x140 [ 1843.170824][T27099] ? mark_lock+0x94/0x320 [ 1843.175735][T27099] ? __lock_acquire+0x1273/0x7d40 [ 1843.181076][T27099] ? verify_lock_unused+0x140/0x140 [ 1843.188657][T27099] ? aa_sk_perm+0x83c/0x970 [ 1843.193637][T27099] ? packet_getsockopt+0xad0/0xad0 [ 1843.198971][T27099] ? aa_sock_msg_perm+0x94/0x150 [ 1843.204093][T27099] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1843.209703][T27099] ? security_socket_sendmsg+0x80/0xa0 [ 1843.216222][T27099] ? packet_getsockopt+0xad0/0xad0 [ 1843.221364][T27099] ____sys_sendmsg+0x5ba/0x960 [ 1843.226494][T27099] ? __lock_acquire+0x7d40/0x7d40 [ 1843.231699][T27099] ? __asan_memset+0x22/0x40 [ 1843.236399][T27099] ? __sys_sendmsg_sock+0x30/0x30 [ 1843.241519][T27099] ? __import_iovec+0x3fa/0x850 [ 1843.246390][T27099] ? import_iovec+0x73/0xa0 [ 1843.251761][T27099] ___sys_sendmsg+0x2a6/0x360 [ 1843.256732][T27099] ? get_pid_task+0x20/0x1e0 [ 1843.261863][T27099] ? __sys_sendmsg+0x2a0/0x2a0 [ 1843.266830][T27099] ? __lock_acquire+0x7d40/0x7d40 [ 1843.272052][T27099] __se_sys_sendmsg+0x1c2/0x2b0 [ 1843.277271][T27099] ? __x64_sys_sendmsg+0x80/0x80 [ 1843.282318][T27099] ? lockdep_hardirqs_on+0x98/0x150 [ 1843.287609][T27099] do_syscall_64+0x55/0xa0 [ 1843.292311][T27099] ? clear_bhb_loop+0x40/0x90 [ 1843.297275][T27099] ? clear_bhb_loop+0x40/0x90 [ 1843.302224][T27099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1843.309013][T27099] RIP: 0033:0x7f9d01d9c819 [ 1843.313804][T27099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.334571][T27099] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1843.343764][T27099] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1843.352358][T27099] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1843.361133][T27099] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.369830][T27099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.378254][T27099] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1843.386676][T27099] [ 1843.398987][T27060] wlan1: Trigger new scan to find an IBSS to join [ 1843.573255][T27101] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1843.961445][T27114] netlink: 'syz.2.7525': attribute type 3 has an invalid length. [ 1843.971339][T27114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1844.135327][T27107] netlink: 'syz.1.7524': attribute type 10 has an invalid length. [ 1844.373565][T27056] wlan1: Trigger new scan to find an IBSS to join [ 1844.590660][T27127] FAULT_INJECTION: forcing a failure. [ 1844.590660][T27127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1844.666940][T27127] CPU: 0 PID: 27127 Comm: syz.0.7531 Not tainted syzkaller #0 [ 1844.675872][T27127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1844.686492][T27127] Call Trace: [ 1844.689799][T27127] [ 1844.692758][T27127] dump_stack_lvl+0x18c/0x250 [ 1844.697648][T27127] ? show_regs_print_info+0x20/0x20 [ 1844.703124][T27127] ? load_image+0x420/0x420 [ 1844.707912][T27127] ? __might_fault+0xaa/0x120 [ 1844.712621][T27127] ? __lock_acquire+0x7d40/0x7d40 [ 1844.717844][T27127] should_fail_ex+0x39d/0x4d0 [ 1844.722896][T27127] _copy_from_user+0x2f/0xe0 [ 1844.727800][T27127] get_user_ifreq+0x6b/0x180 [ 1844.732595][T27127] sock_ioctl+0x6f1/0x7e0 [ 1844.737251][T27127] ? sock_poll+0x3e0/0x3e0 [ 1844.741678][T27127] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1844.747050][T27127] ? security_file_ioctl+0x80/0xa0 [ 1844.752492][T27127] ? sock_poll+0x3e0/0x3e0 [ 1844.756920][T27127] __se_sys_ioctl+0xfd/0x170 [ 1844.761628][T27127] do_syscall_64+0x55/0xa0 [ 1844.766190][T27127] ? clear_bhb_loop+0x40/0x90 [ 1844.771001][T27127] ? clear_bhb_loop+0x40/0x90 [ 1844.775960][T27127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1844.781869][T27127] RIP: 0033:0x7f9d03d9c819 [ 1844.786545][T27127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1844.807562][T27127] RSP: 002b:00007f9d04b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1844.816447][T27127] RAX: ffffffffffffffda RBX: 00007f9d04015fa0 RCX: 00007f9d03d9c819 [ 1844.824873][T27127] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 1844.833117][T27127] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1844.841353][T27127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1844.849797][T27127] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1844.857972][T27127] [ 1844.892992][T27135] netlink: 'syz.1.7530': attribute type 3 has an invalid length. [ 1844.925839][T27135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7530'. [ 1845.031415][ T5855] hsr_slave_0: left promiscuous mode [ 1845.038343][ T5855] hsr_slave_1: left promiscuous mode [ 1845.047168][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1845.059319][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1845.068608][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1845.077531][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.088050][ T5855] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1845.102377][ T5855] batman_adv: batadv0: Removing interface: veth0_vlan [ 1845.112792][ T5855] hsr0: left allmulticast mode [ 1845.118954][ T5855] bridge0: port 3(hsr0) entered disabled state [ 1845.140286][ T5855] bridge_slave_1: left allmulticast mode [ 1845.147202][ T5855] bridge_slave_1: left promiscuous mode [ 1845.153929][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.167944][ T5855] bridge_slave_0: left allmulticast mode [ 1845.174949][ T5855] bridge_slave_0: left promiscuous mode [ 1845.235542][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.403042][ T5855] veth1_vlan: left promiscuous mode [ 1845.408939][ T5855] veth0_vlan: left promiscuous mode [ 1845.571124][T27052] wlan1: Creating new IBSS network, BSSID 7e:22:d8:26:c0:bf [ 1846.377794][T19204] wlan1: Trigger new scan to find an IBSS to join [ 1846.640902][ T5855] team0 (unregistering): Port device geneve1 removed [ 1847.082706][ T5855] team0 (unregistering): Port device team_slave_1 removed [ 1847.185318][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1847.237943][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1847.578229][ T5855] team0 (unregistering): Port device dummy0 removed [ 1847.611106][ T5855] team0 (unregistering): Port device bridge0 removed [ 1847.651155][ T5855] bond0 (unregistering): Released all slaves [ 1847.768711][T27143] netlink: 'syz.0.7533': attribute type 10 has an invalid length. [ 1847.791797][T27148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1847.799915][T27148] IPv6: NLM_F_CREATE should be set when creating new route [ 1847.807545][T27148] IPv6: NLM_F_CREATE should be set when creating new route [ 1847.815211][T27148] IPv6: NLM_F_CREATE should be set when creating new route [ 1847.842200][T27155] netlink: 'syz.3.7536': attribute type 10 has an invalid length. [ 1847.874826][T27155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.882754][T27155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.956755][T27155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.965473][T27155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1847.974854][T27155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.982474][T27155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1848.008348][T27155] team0: Port device bridge0 added [ 1848.077915][T27157] netlink: 'syz.1.7537': attribute type 3 has an invalid length. [ 1848.095134][T27157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1848.486681][T27168] netlink: 'syz.2.7542': attribute type 3 has an invalid length. [ 1848.519707][T27168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1849.266251][T27186] netlink: 'syz.1.7546': attribute type 10 has an invalid length. [ 1849.412957][T27060] wlan1: Trigger new scan to find an IBSS to join [ 1849.428059][T27185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1850.248231][T27189] netlink: 'syz.2.7548': attribute type 10 has an invalid length. [ 1850.328009][T27056] wlan1: Creating new IBSS network, BSSID 62:51:aa:cc:37:55 [ 1850.359805][T27193] netlink: 'syz.3.7551': attribute type 3 has an invalid length. [ 1850.406595][T19204] wlan1: Trigger new scan to find an IBSS to join [ 1850.530225][T27193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7551'. [ 1850.595912][T27198] netlink: 'syz.2.7553': attribute type 3 has an invalid length. [ 1850.613858][T27198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1851.464684][T27216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1851.771865][T27226] netlink: 'syz.2.7557': attribute type 10 has an invalid length. [ 1852.156370][T27230] netlink: 'syz.1.7561': attribute type 10 has an invalid length. [ 1852.240415][T27232] netlink: 'syz.3.7562': attribute type 3 has an invalid length. [ 1852.255711][T27232] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7562'. [ 1852.262579][T27234] FAULT_INJECTION: forcing a failure. [ 1852.262579][T27234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.284316][T27234] CPU: 1 PID: 27234 Comm: syz.1.7563 Not tainted syzkaller #0 [ 1852.291934][T27234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1852.302725][T27234] Call Trace: [ 1852.306289][T27234] [ 1852.309264][T27234] dump_stack_lvl+0x18c/0x250 [ 1852.314063][T27234] ? show_regs_print_info+0x20/0x20 [ 1852.320031][T27234] ? load_image+0x420/0x420 [ 1852.324822][T27234] ? __lock_acquire+0x7d40/0x7d40 [ 1852.330042][T27234] ? __virt_addr_valid+0x18c/0x540 [ 1852.335429][T27234] should_fail_ex+0x39d/0x4d0 [ 1852.340242][T27234] _copy_from_user+0x2f/0xe0 [ 1852.344953][T27234] bpf_test_init+0xde/0x140 [ 1852.349556][T27234] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1852.355039][T27234] ? dev_put+0x80/0x80 [ 1852.359383][T27234] ? dev_put+0x80/0x80 [ 1852.363801][T27234] bpf_prog_test_run+0x321/0x390 [ 1852.368951][T27234] __sys_bpf+0x49d/0x890 [ 1852.373817][T27234] ? bpf_link_show_fdinfo+0x390/0x390 [ 1852.379300][T27234] ? lock_chain_count+0x20/0x20 [ 1852.384600][T27234] __x64_sys_bpf+0x7c/0x90 [ 1852.389377][T27234] do_syscall_64+0x55/0xa0 [ 1852.393864][T27234] ? clear_bhb_loop+0x40/0x90 [ 1852.398878][T27234] ? clear_bhb_loop+0x40/0x90 [ 1852.403921][T27234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1852.410015][T27234] RIP: 0033:0x7f9d01d9c819 [ 1852.414444][T27234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.434673][T27234] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1852.443548][T27234] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1852.451823][T27234] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1852.459914][T27234] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.468518][T27234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.476742][T27234] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1852.484942][T27234] [ 1852.654022][T27241] netlink: 'syz.1.7565': attribute type 3 has an invalid length. [ 1852.667402][T27241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7565'. [ 1852.681296][T27243] netlink: 'syz.2.7567': attribute type 10 has an invalid length. [ 1852.723267][T27243] team0: Device vxcan1 is of different type [ 1853.115096][T27257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1853.746956][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.753856][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.173078][T27267] netlink: 'syz.2.7572': attribute type 10 has an invalid length. [ 1854.313842][T27269] netlink: 'syz.3.7573': attribute type 10 has an invalid length. [ 1854.328007][T27269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.330397][T27271] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7574'. [ 1854.336852][T27269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.634660][T27280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7578'. [ 1854.822785][T27285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.845971][T27285] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1855.269113][T27294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1855.368310][T27060] wlan1: Trigger new scan to find an IBSS to join [ 1855.546203][T27300] validate_nla: 3 callbacks suppressed [ 1855.546237][T27300] netlink: 'syz.3.7585': attribute type 3 has an invalid length. [ 1855.578569][T27300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7585'. [ 1855.639423][T27302] netlink: 'syz.0.7586': attribute type 10 has an invalid length. [ 1855.912433][T27310] netlink: 'syz.0.7589': attribute type 3 has an invalid length. [ 1855.927236][T27313] netlink: 'syz.2.7588': attribute type 10 has an invalid length. [ 1855.927576][T27310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7589'. [ 1856.337925][T27318] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7591'. [ 1856.351989][T27318] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1856.368476][T27318] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1856.879304][T27333] netlink: 'syz.2.7597': attribute type 10 has an invalid length. [ 1856.903567][T27331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1857.181175][T27336] netlink: 'syz.0.7598': attribute type 3 has an invalid length. [ 1857.205123][T27338] netlink: 'syz.2.7599': attribute type 3 has an invalid length. [ 1857.217084][T27336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7598'. [ 1857.229838][T27338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7599'. [ 1858.161412][T27361] netlink: 'syz.2.7605': attribute type 10 has an invalid length. [ 1858.354238][T27363] netlink: 'syz.3.7608': attribute type 3 has an invalid length. [ 1858.380101][T27363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7608'. [ 1858.432206][T27367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1858.573368][T27369] netlink: 'syz.1.7610': attribute type 10 has an invalid length. [ 1858.759274][T27375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7613'. [ 1859.040998][T27379] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7614'. [ 1860.344715][T27393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7620'. [ 1860.397338][T27056] wlan1: Trigger new scan to find an IBSS to join [ 1860.509777][T27400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7623'. [ 1860.638112][T27408] validate_nla: 5 callbacks suppressed [ 1860.638131][T27408] netlink: 'syz.1.7622': attribute type 10 has an invalid length. [ 1860.732494][T27412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7627'. [ 1860.789223][T27410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1862.391900][T27433] netlink: 'syz.2.7634': attribute type 3 has an invalid length. [ 1862.459415][T27433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7634'. [ 1862.517036][T27426] netlink: 'syz.3.7632': attribute type 10 has an invalid length. [ 1862.527061][T27426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7632'. [ 1862.541751][T27426] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1862.549697][T27426] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.580748][T27426] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1862.590857][T27440] netlink: 'syz.0.7633': attribute type 10 has an invalid length. [ 1862.606842][T27441] netlink: 'syz.1.7635': attribute type 3 has an invalid length. [ 1862.654921][T27441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7635'. [ 1862.845248][T27451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1862.939396][T27455] netlink: 'syz.3.7638': attribute type 10 has an invalid length. [ 1863.332398][T27054] wlan1: Trigger new scan to find an IBSS to join [ 1863.738906][T27455] team0: Port device geneve1 added [ 1864.345547][T27464] netlink: 'syz.1.7644': attribute type 3 has an invalid length. [ 1864.364164][T27464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7644'. [ 1864.378411][T27060] wlan1: Trigger new scan to find an IBSS to join [ 1864.412488][T27060] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1864.515385][T27473] FAULT_INJECTION: forcing a failure. [ 1864.515385][T27473] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.528514][T27472] netlink: 'syz.0.7645': attribute type 10 has an invalid length. [ 1864.535978][T27473] CPU: 0 PID: 27473 Comm: syz.2.7646 Not tainted syzkaller #0 [ 1864.546086][T27473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1864.556434][T27473] Call Trace: [ 1864.559837][T27473] [ 1864.562871][T27473] dump_stack_lvl+0x18c/0x250 [ 1864.567764][T27473] ? show_regs_print_info+0x20/0x20 [ 1864.573433][T27473] ? load_image+0x420/0x420 [ 1864.578234][T27473] ? __might_sleep+0xe0/0xe0 [ 1864.582869][T27473] ? __lock_acquire+0x7d40/0x7d40 [ 1864.588101][T27473] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1864.595510][T27473] should_fail_ex+0x39d/0x4d0 [ 1864.600481][T27473] should_failslab+0x9/0x20 [ 1864.605095][T27473] slab_pre_alloc_hook+0x59/0x310 [ 1864.610321][T27473] kmem_cache_alloc_node+0x60/0x320 [ 1864.615812][T27473] ? __alloc_skb+0x103/0x2c0 [ 1864.620609][T27473] __alloc_skb+0x103/0x2c0 [ 1864.625672][T27473] tipc_msg_build+0x161/0xee0 [ 1864.630738][T27473] ? tipc_node_find+0x3bb/0x490 [ 1864.635987][T27473] ? tipc_node_find+0xb4/0x490 [ 1864.641731][T27473] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 1864.648090][T27473] ? tipc_nametbl_lookup_anycast+0xce/0x1030 [ 1864.654365][T27473] ? tipc_nametbl_lookup_anycast+0x541/0x1030 [ 1864.661076][T27473] __tipc_sendmsg+0x1903/0x2bb0 [ 1864.666844][T27473] ? rht_unlock+0x1d0/0x1d0 [ 1864.671717][T27473] ? mark_lock+0x94/0x320 [ 1864.676154][T27473] ? __lock_acquire+0x1273/0x7d40 [ 1864.681474][T27473] ? look_up_lock_class+0x75/0x140 [ 1864.686714][T27473] ? register_lock_class+0xc4/0x8a0 [ 1864.692141][T27473] ? register_lock_class+0xc4/0x8a0 [ 1864.697630][T27473] ? is_dynamic_key+0x260/0x260 [ 1864.702685][T27473] ? mark_lock+0x94/0x320 [ 1864.707213][T27473] ? __lock_acquire+0x1347/0x7d40 [ 1864.712470][T27473] ? wait_woken+0x180/0x180 [ 1864.717125][T27473] ? verify_lock_unused+0x140/0x140 [ 1864.722806][T27473] ? perf_trace_lock_acquire+0x104/0x410 [ 1864.729012][T27473] __tipc_sendstream+0x1039/0x1270 [ 1864.734691][T27473] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1864.741624][T27473] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1864.747956][T27473] ? lock_chain_count+0x20/0x20 [ 1864.753307][T27473] ? tsk_advance_rx_queue+0x310/0x310 [ 1864.759237][T27473] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1864.764814][T27473] ? _local_bh_enable+0xa0/0xa0 [ 1864.770049][T27473] tipc_send_packet+0x7c/0x90 [ 1864.774918][T27473] ? tipc_sk_send_ack+0x580/0x580 [ 1864.780318][T27473] ____sys_sendmsg+0x5ba/0x960 [ 1864.785394][T27473] ? __lock_acquire+0x7d40/0x7d40 [ 1864.790536][T27473] ? __asan_memset+0x22/0x40 [ 1864.795682][T27473] ? __sys_sendmsg_sock+0x30/0x30 [ 1864.800899][T27473] ? __import_iovec+0x5f2/0x850 [ 1864.805964][T27473] ? import_iovec+0x73/0xa0 [ 1864.811030][T27473] ___sys_sendmsg+0x2a6/0x360 [ 1864.815826][T27473] ? get_pid_task+0x20/0x1e0 [ 1864.820711][T27473] ? __sys_sendmsg+0x2a0/0x2a0 [ 1864.825692][T27473] ? __lock_acquire+0x7d40/0x7d40 [ 1864.830938][T27473] __se_sys_sendmsg+0x1c2/0x2b0 [ 1864.835986][T27473] ? __x64_sys_sendmsg+0x80/0x80 [ 1864.841149][T27473] ? lockdep_hardirqs_on+0x98/0x150 [ 1864.846466][T27473] do_syscall_64+0x55/0xa0 [ 1864.851217][T27473] ? clear_bhb_loop+0x40/0x90 [ 1864.855915][T27473] ? clear_bhb_loop+0x40/0x90 [ 1864.860713][T27473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1864.866798][T27473] RIP: 0033:0x7f7adcb9c819 [ 1864.871413][T27473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.892356][T27473] RSP: 002b:00007f7add99e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1864.900974][T27473] RAX: ffffffffffffffda RBX: 00007f7adce15fa0 RCX: 00007f7adcb9c819 [ 1864.909494][T27473] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1864.917923][T27473] RBP: 00007f7add99e090 R08: 0000000000000000 R09: 0000000000000000 [ 1864.926364][T27473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1864.935662][T27473] R13: 00007f7adce16038 R14: 00007f7adce15fa0 R15: 00007fff7d8b9958 [ 1864.943818][T27473] [ 1865.211559][T27479] netlink: 'syz.1.7648': attribute type 3 has an invalid length. [ 1865.231603][T27479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7648'. [ 1865.423653][T27490] netlink: 'syz.3.7651': attribute type 10 has an invalid length. [ 1865.449627][T19204] wlan1: Creating new IBSS network, BSSID b6:b2:16:7d:65:f2 [ 1865.505937][T27489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1866.374302][T24584] wlan1: Trigger new scan to find an IBSS to join [ 1866.844210][T27504] netlink: 'syz.0.7656': attribute type 3 has an invalid length. [ 1866.888650][T27504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7656'. [ 1867.149211][T27510] netlink: 'syz.3.7658': attribute type 10 has an invalid length. [ 1867.378510][T27060] wlan1: Creating new IBSS network, BSSID 1a:da:b9:37:c8:35 [ 1867.468822][T27527] FAULT_INJECTION: forcing a failure. [ 1867.468822][T27527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1867.555773][T27527] CPU: 0 PID: 27527 Comm: syz.1.7664 Not tainted syzkaller #0 [ 1867.563774][T27527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1867.574201][T27527] Call Trace: [ 1867.577671][T27527] [ 1867.580709][T27527] dump_stack_lvl+0x18c/0x250 [ 1867.585599][T27527] ? show_regs_print_info+0x20/0x20 [ 1867.591118][T27527] ? load_image+0x420/0x420 [ 1867.596175][T27527] ? __might_fault+0xaa/0x120 [ 1867.601182][T27527] ? __lock_acquire+0x7d40/0x7d40 [ 1867.606587][T27527] ? unix_ioctl+0x261/0x670 [ 1867.611548][T27527] should_fail_ex+0x39d/0x4d0 [ 1867.616606][T27527] _copy_from_user+0x2f/0xe0 [ 1867.621573][T27527] sock_do_ioctl+0x190/0x310 [ 1867.626685][T27527] ? sock_show_fdinfo+0xb0/0xb0 [ 1867.631925][T27527] sock_ioctl+0x5ba/0x7e0 [ 1867.636988][T27527] ? sock_poll+0x3e0/0x3e0 [ 1867.641871][T27527] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1867.647002][T27527] ? security_file_ioctl+0x80/0xa0 [ 1867.652222][T27527] ? sock_poll+0x3e0/0x3e0 [ 1867.657450][T27527] __se_sys_ioctl+0xfd/0x170 [ 1867.662415][T27527] do_syscall_64+0x55/0xa0 [ 1867.667358][T27527] ? clear_bhb_loop+0x40/0x90 [ 1867.672235][T27527] ? clear_bhb_loop+0x40/0x90 [ 1867.677195][T27527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.683351][T27527] RIP: 0033:0x7f9d01d9c819 [ 1867.688011][T27527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.708791][T27527] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1867.718183][T27527] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1867.727009][T27527] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000006 [ 1867.735594][T27527] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.744701][T27527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.753369][T27527] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1867.761553][T27527] [ 1867.810599][T27521] netlink: 'syz.2.7661': attribute type 3 has an invalid length. [ 1867.819575][T27521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7661'. [ 1867.864765][T27532] netlink: 'syz.3.7663': attribute type 10 has an invalid length. [ 1867.999043][T27535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1869.242597][T27547] netlink: 'syz.0.7668': attribute type 10 has an invalid length. [ 1869.876204][T27554] netlink: 'syz.2.7671': attribute type 3 has an invalid length. [ 1869.897564][T27554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7671'. [ 1869.926575][T27560] netlink: 'syz.3.7672': attribute type 10 has an invalid length. [ 1870.209577][T27568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1870.300958][T27566] netlink: 'syz.3.7676': attribute type 3 has an invalid length. [ 1870.328013][T27566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7676'. [ 1870.389303][T27573] netlink: 'syz.0.7675': attribute type 10 has an invalid length. [ 1871.423393][T27056] wlan1: Trigger new scan to find an IBSS to join [ 1871.849738][T27597] netlink: 'syz.2.7685': attribute type 3 has an invalid length. [ 1871.856769][T27596] netlink: 'syz.0.7684': attribute type 10 has an invalid length. [ 1871.858699][T27597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7685'. [ 1872.124088][T27604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1872.251539][T27608] netlink: 'syz.3.7689': attribute type 3 has an invalid length. [ 1872.279673][T27611] netlink: 'syz.2.7687': attribute type 10 has an invalid length. [ 1872.282657][T27608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1873.438703][ T5855] wlan1: Trigger new scan to find an IBSS to join [ 1873.580352][T27623] mac80211_hwsim hwsim128 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1873.600315][T27629] netlink: 'syz.1.7695': attribute type 3 has an invalid length. [ 1873.612460][T27629] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7695'. [ 1873.746628][T27631] netlink: 'syz.3.7696': attribute type 10 has an invalid length. [ 1874.051843][T27642] netlink: 'syz.3.7699': attribute type 10 has an invalid length. [ 1874.307116][T27644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1874.469753][T27646] netlink: 'syz.2.7702': attribute type 3 has an invalid length. [ 1874.490261][T27646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7702'. [ 1875.299703][T27659] FAULT_INJECTION: forcing a failure. [ 1875.299703][T27659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.326948][T27659] CPU: 0 PID: 27659 Comm: syz.1.7706 Not tainted syzkaller #0 [ 1875.334830][T27659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1875.345443][T27659] Call Trace: [ 1875.349281][T27659] [ 1875.352501][T27659] dump_stack_lvl+0x18c/0x250 [ 1875.357668][T27659] ? show_regs_print_info+0x20/0x20 [ 1875.363547][T27659] ? load_image+0x420/0x420 [ 1875.368717][T27659] ? __might_fault+0xaa/0x120 [ 1875.373694][T27659] ? __lock_acquire+0x7d40/0x7d40 [ 1875.379540][T27659] should_fail_ex+0x39d/0x4d0 [ 1875.383044][T24584] wlan1: Trigger new scan to find an IBSS to join [ 1875.385540][T27659] _copy_from_iter+0x1d9/0x12e0 [ 1875.385576][T27659] ? txopt_get+0x7a/0x3f0 [ 1875.385599][T27659] ? copyout_mc+0x70/0x70 [ 1875.385617][T27659] ? txopt_get+0x344/0x3f0 [ 1875.385637][T27659] ? fl6_sock_lookup+0xc0/0xc0 [ 1875.385656][T27659] ? aa_sk_perm+0x970/0x970 [ 1875.385684][T27659] rawv6_sendmsg+0xad9/0x1770 [ 1875.385717][T27659] ? compat_rawv6_ioctl+0x70/0x70 [ 1875.385740][T27659] ? aa_sk_perm+0x83c/0x970 [ 1875.385768][T27659] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1875.385794][T27659] ? inet_sendmsg+0x7c/0x2f0 [ 1875.385811][T27659] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1875.385831][T27659] ? security_socket_sendmsg+0x80/0xa0 [ 1875.385850][T27659] ? inet_send_prepare+0x260/0x260 [ 1875.385872][T27659] ____sys_sendmsg+0x5ba/0x960 [ 1875.385890][T27659] ? __lock_acquire+0x7d40/0x7d40 [ 1875.385911][T27659] ? __asan_memset+0x22/0x40 [ 1875.479895][T27659] ? __sys_sendmsg_sock+0x30/0x30 [ 1875.485198][T27659] ? __import_iovec+0x5f2/0x850 [ 1875.490521][T27659] ? import_iovec+0x73/0xa0 [ 1875.495061][T27659] ___sys_sendmsg+0x2a6/0x360 [ 1875.499845][T27659] ? get_pid_task+0x20/0x1e0 [ 1875.504720][T27659] ? __sys_sendmsg+0x2a0/0x2a0 [ 1875.509709][T27659] ? __lock_acquire+0x7d40/0x7d40 [ 1875.514949][T27659] __se_sys_sendmsg+0x1c2/0x2b0 [ 1875.520190][T27659] ? __x64_sys_sendmsg+0x80/0x80 [ 1875.525421][T27659] ? lockdep_hardirqs_on+0x98/0x150 [ 1875.530894][T27659] do_syscall_64+0x55/0xa0 [ 1875.535408][T27659] ? clear_bhb_loop+0x40/0x90 [ 1875.540292][T27659] ? clear_bhb_loop+0x40/0x90 [ 1875.545056][T27659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1875.551213][T27659] RIP: 0033:0x7f9d01d9c819 [ 1875.555717][T27659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.576057][T27659] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1875.585013][T27659] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1875.593794][T27659] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1875.603174][T27659] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.611962][T27659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.621093][T27659] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1875.629893][T27659] [ 1875.636661][T27056] wlan1: Trigger new scan to find an IBSS to join [ 1875.667910][T27667] netlink: 'syz.0.7708': attribute type 10 has an invalid length. [ 1875.682566][T27661] netlink: 'syz.2.7707': attribute type 3 has an invalid length. [ 1875.691801][T27661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7707'. [ 1876.019291][T27682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1876.198672][T27688] netlink: 'syz.2.7713': attribute type 10 has an invalid length. [ 1876.233077][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1876.994645][T27060] wlan1: Creating new IBSS network, BSSID b6:0e:c2:ec:da:ab [ 1877.412974][T27060] wlan1: Trigger new scan to find an IBSS to join [ 1877.432305][T27060] wlan1: Trigger new scan to find an IBSS to join [ 1877.438678][T27697] netlink: 'syz.1.7717': attribute type 3 has an invalid length. [ 1877.449288][T27697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1877.583192][T27705] netlink: 'syz.2.7720': attribute type 10 has an invalid length. [ 1877.680648][T27707] netlink: 'syz.3.7721': attribute type 3 has an invalid length. [ 1877.695898][T27707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1877.863282][T27716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1878.148221][T27723] netlink: 'syz.3.7726': attribute type 3 has an invalid length. [ 1878.183472][T27723] netlink: 'syz.3.7726': attribute type 1 has an invalid length. [ 1878.212773][T27723] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.7726'. [ 1878.728297][T27720] netlink: 'syz.0.7724': attribute type 10 has an invalid length. [ 1879.336193][T27739] netlink: 'syz.3.7730': attribute type 3 has an invalid length. [ 1879.374563][T27739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7730'. [ 1879.413324][T24584] wlan1: Trigger new scan to find an IBSS to join [ 1879.490411][T27741] netlink: 'syz.2.7731': attribute type 10 has an invalid length. [ 1879.716146][T27752] netlink: 'syz.3.7734': attribute type 3 has an invalid length. [ 1879.771688][T27752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7734'. [ 1879.772018][T27756] netlink: 'syz.2.7735': attribute type 10 has an invalid length. [ 1879.801960][T27755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1881.330962][T27773] FAULT_INJECTION: forcing a failure. [ 1881.330962][T27773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1881.345159][T27773] CPU: 1 PID: 27773 Comm: syz.3.7742 Not tainted syzkaller #0 [ 1881.350204][T19204] wlan1: Trigger new scan to find an IBSS to join [ 1881.352936][T27773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1881.352952][T27773] Call Trace: [ 1881.352963][T27773] [ 1881.352975][T27773] dump_stack_lvl+0x18c/0x250 [ 1881.353019][T27773] ? show_regs_print_info+0x20/0x20 [ 1881.353049][T27773] ? load_image+0x420/0x420 [ 1881.353083][T27773] ? __might_fault+0xaa/0x120 [ 1881.353110][T27773] ? __lock_acquire+0x7d40/0x7d40 [ 1881.353148][T27773] should_fail_ex+0x39d/0x4d0 [ 1881.408172][T27773] _copy_from_user+0x2f/0xe0 [ 1881.412928][T27773] ____sys_sendmsg+0x2fd/0x960 [ 1881.418001][T27773] ? __sys_sendmsg_sock+0x30/0x30 [ 1881.423309][T27773] ? __import_iovec+0x3fa/0x850 [ 1881.428294][T27773] ? import_iovec+0x73/0xa0 [ 1881.433099][T27773] ___sys_sendmsg+0x2a6/0x360 [ 1881.438315][T27773] ? get_pid_task+0x20/0x1e0 [ 1881.443196][T27773] ? __sys_sendmsg+0x2a0/0x2a0 [ 1881.448557][T27773] ? __lock_acquire+0x7d40/0x7d40 [ 1881.454272][T27773] __se_sys_sendmsg+0x1c2/0x2b0 [ 1881.459594][T27773] ? __x64_sys_sendmsg+0x80/0x80 [ 1881.464747][T27773] ? lockdep_hardirqs_on+0x98/0x150 [ 1881.470162][T27773] do_syscall_64+0x55/0xa0 [ 1881.475043][T27773] ? clear_bhb_loop+0x40/0x90 [ 1881.479916][T27773] ? clear_bhb_loop+0x40/0x90 [ 1881.484832][T27773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1881.490925][T27773] RIP: 0033:0x7f6ed839c819 [ 1881.495450][T27773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1881.515785][T27773] RSP: 002b:00007f6ed92da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1881.524578][T27773] RAX: ffffffffffffffda RBX: 00007f6ed8615fa0 RCX: 00007f6ed839c819 [ 1881.532836][T27773] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000003 [ 1881.540839][T27773] RBP: 00007f6ed92da090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.549184][T27773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1881.557498][T27773] R13: 00007f6ed8616038 R14: 00007f6ed8615fa0 R15: 00007ffcdafa8fc8 [ 1881.565971][T27773] [ 1881.580552][ T5855] wlan1: Trigger new scan to find an IBSS to join [ 1881.722815][T27775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7741'. [ 1882.015268][T27788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7746'. [ 1882.261443][T27800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1883.412704][T27052] wlan1: Trigger new scan to find an IBSS to join [ 1883.500031][T27810] validate_nla: 4 callbacks suppressed [ 1883.500065][T27810] netlink: 'syz.0.7754': attribute type 10 has an invalid length. [ 1883.570126][T27812] netlink: 'syz.3.7755': attribute type 1 has an invalid length. [ 1883.579966][T27812] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1883.808066][T27824] netlink: 'syz.2.7756': attribute type 3 has an invalid length. [ 1883.816252][T27824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7756'. [ 1883.847298][T27822] netlink: 'syz.3.7759': attribute type 3 has an invalid length. [ 1883.895908][T27822] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7759'. [ 1884.016959][T27831] FAULT_INJECTION: forcing a failure. [ 1884.016959][T27831] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.030421][T27831] CPU: 0 PID: 27831 Comm: syz.0.7761 Not tainted syzkaller #0 [ 1884.038252][T27831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1884.049551][T27831] Call Trace: [ 1884.053470][T27831] [ 1884.057643][T27831] dump_stack_lvl+0x18c/0x250 [ 1884.062967][T27831] ? show_regs_print_info+0x20/0x20 [ 1884.068570][T27831] ? load_image+0x420/0x420 [ 1884.073745][T27831] ? mark_lock+0x94/0x320 [ 1884.078924][T27831] ? __lock_acquire+0x1347/0x7d40 [ 1884.084309][T27831] should_fail_ex+0x39d/0x4d0 [ 1884.089535][T27831] should_failslab+0x9/0x20 [ 1884.094911][T27831] slab_pre_alloc_hook+0x59/0x310 [ 1884.101147][T27831] ? array_map_alloc+0x280/0x6f0 [ 1884.107178][T27831] kmem_cache_alloc+0x5a/0x2d0 [ 1884.113207][T27831] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1884.119048][T27831] radix_tree_node_alloc+0x7e/0x3a0 [ 1884.125171][T27831] idr_get_free+0x2b3/0xa60 [ 1884.130186][T27831] idr_alloc_cyclic+0x27b/0x5d0 [ 1884.135456][T27831] ? idr_alloc+0x2f0/0x2f0 [ 1884.140356][T27831] ? do_raw_spin_lock+0x11f/0x2c0 [ 1884.145518][T27831] ? bpf_map_alloc_id+0x21/0xd0 [ 1884.150702][T27831] bpf_map_alloc_id+0x40/0xd0 [ 1884.155678][T27831] map_create+0xe25/0x12f0 [ 1884.160420][T27831] __sys_bpf+0x651/0x890 [ 1884.164866][T27831] ? bpf_link_show_fdinfo+0x390/0x390 [ 1884.170550][T27831] ? lock_chain_count+0x20/0x20 [ 1884.175716][T27831] __x64_sys_bpf+0x7c/0x90 [ 1884.180535][T27831] do_syscall_64+0x55/0xa0 [ 1884.185400][T27831] ? clear_bhb_loop+0x40/0x90 [ 1884.190698][T27831] ? clear_bhb_loop+0x40/0x90 [ 1884.195557][T27831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1884.201902][T27831] RIP: 0033:0x7f9d03d9c819 [ 1884.206597][T27831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1884.227810][T27831] RSP: 002b:00007f9d04b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1884.236838][T27831] RAX: ffffffffffffffda RBX: 00007f9d04015fa0 RCX: 00007f9d03d9c819 [ 1884.245350][T27831] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 0000000000000000 [ 1884.253494][T27831] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.261927][T27831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.270510][T27831] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1884.278497][T27831] [ 1884.520036][T27841] netlink: 'syz.1.7763': attribute type 10 has an invalid length. [ 1884.698564][T27839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1885.123482][T27847] netlink: 'syz.2.7766': attribute type 10 has an invalid length. [ 1885.418703][T27060] wlan1: Creating new IBSS network, BSSID 4e:db:b6:b8:a1:6c [ 1885.686730][T27863] netlink: 'syz.2.7770': attribute type 3 has an invalid length. [ 1885.715563][T27863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7770'. [ 1885.793077][T27865] FAULT_INJECTION: forcing a failure. [ 1885.793077][T27865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.807972][T27865] CPU: 1 PID: 27865 Comm: syz.0.7772 Not tainted syzkaller #0 [ 1885.815725][T27865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1885.826411][T27865] Call Trace: [ 1885.829884][T27865] [ 1885.833466][T27865] dump_stack_lvl+0x18c/0x250 [ 1885.838631][T27865] ? show_regs_print_info+0x20/0x20 [ 1885.844224][T27865] ? load_image+0x420/0x420 [ 1885.849047][T27865] ? __lock_acquire+0x7d40/0x7d40 [ 1885.854198][T27865] ? snprintf+0xe9/0x140 [ 1885.858469][T27865] should_fail_ex+0x39d/0x4d0 [ 1885.863431][T27865] _copy_to_user+0x2f/0xa0 [ 1885.868143][T27865] simple_read_from_buffer+0xe7/0x150 [ 1885.873820][T27865] proc_fail_nth_read+0x1e8/0x260 [ 1885.879380][T27865] ? proc_fault_inject_write+0x360/0x360 [ 1885.885947][T27865] ? fsnotify_perm+0x271/0x5e0 [ 1885.891075][T27865] ? proc_fault_inject_write+0x360/0x360 [ 1885.896808][T27865] vfs_read+0x28b/0x970 [ 1885.901129][T27865] ? kernel_read+0x1e0/0x1e0 [ 1885.905837][T27865] ? __fget_files+0x28/0x4b0 [ 1885.910694][T27865] ? __fget_files+0x28/0x4b0 [ 1885.915783][T27865] ? __fget_files+0x43d/0x4b0 [ 1885.920876][T27865] ? __fdget_pos+0x2a3/0x330 [ 1885.925831][T27865] ? ksys_read+0x75/0x260 [ 1885.930697][T27865] ksys_read+0x150/0x260 [ 1885.935091][T27865] ? vfs_write+0x990/0x990 [ 1885.939865][T27865] ? lockdep_hardirqs_on+0x98/0x150 [ 1885.945332][T27865] do_syscall_64+0x55/0xa0 [ 1885.949858][T27865] ? clear_bhb_loop+0x40/0x90 [ 1885.954669][T27865] ? clear_bhb_loop+0x40/0x90 [ 1885.959728][T27865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.965895][T27865] RIP: 0033:0x7f9d03d5d04e [ 1885.970569][T27865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1885.992659][T27865] RSP: 002b:00007f9d04b95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1886.001627][T27865] RAX: ffffffffffffffda RBX: 00007f9d04b966c0 RCX: 00007f9d03d5d04e [ 1886.010661][T27865] RDX: 000000000000000f RSI: 00007f9d04b960a0 RDI: 0000000000000004 [ 1886.019256][T27865] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.028032][T27865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.036405][T27865] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1886.044739][T27865] [ 1886.287383][T27869] netlink: 'syz.3.7773': attribute type 3 has an invalid length. [ 1886.332268][T27869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7773'. [ 1886.365700][T27877] netlink: 'syz.0.7775': attribute type 10 has an invalid length. [ 1886.388167][T27875] netlink: 'syz.2.7776': attribute type 1 has an invalid length. [ 1886.416618][T27875] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.7776'. [ 1886.452024][T27879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1886.455279][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1887.611235][T27902] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7783'. [ 1887.874543][T27914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7788'. [ 1888.025284][T27920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1888.372708][T27052] wlan1: Trigger new scan to find an IBSS to join [ 1889.282358][T27931] validate_nla: 3 callbacks suppressed [ 1889.282396][T27931] netlink: 'syz.3.7793': attribute type 10 has an invalid length. [ 1889.376641][T27935] FAULT_INJECTION: forcing a failure. [ 1889.376641][T27935] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.396058][T27935] CPU: 0 PID: 27935 Comm: syz.0.7795 Not tainted syzkaller #0 [ 1889.404209][T27935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1889.415258][T27935] Call Trace: [ 1889.418837][T27935] [ 1889.422057][T27935] dump_stack_lvl+0x18c/0x250 [ 1889.426887][T27935] ? fib_rules_lookup+0x9c/0xb40 [ 1889.432102][T27935] ? show_regs_print_info+0x20/0x20 [ 1889.437598][T27935] ? load_image+0x420/0x420 [ 1889.442485][T27935] ? fib_rules_lookup+0x9c/0xb40 [ 1889.447980][T27935] should_fail_ex+0x39d/0x4d0 [ 1889.453432][T27935] should_failslab+0x9/0x20 [ 1889.458681][T27935] slab_pre_alloc_hook+0x59/0x310 [ 1889.463999][T27935] kmem_cache_alloc+0x5a/0x2d0 [ 1889.468952][T27935] ? dst_alloc+0x105/0x170 [ 1889.473469][T27935] dst_alloc+0x105/0x170 [ 1889.478344][T27935] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 1889.485132][T27935] ? ip_route_output_key_hash_rcu+0x12b1/0x2370 [ 1889.491739][T27935] ? ip_route_output_key_hash+0x13d/0x330 [ 1889.498002][T27935] ip_route_output_key_hash+0x1f3/0x330 [ 1889.503952][T27935] ? ip_route_input_rcu+0x30f0/0x30f0 [ 1889.510446][T27935] ? __lock_acquire+0x7d40/0x7d40 [ 1889.515968][T27935] ip_route_output_flow+0x2a/0x150 [ 1889.521528][T27935] ? security_sk_classify_flow+0x7b/0x90 [ 1889.527340][T27935] raw_sendmsg+0x129a/0x1c00 [ 1889.532205][T27935] ? compat_raw_ioctl+0x70/0x70 [ 1889.537065][T27935] ? __lock_acquire+0x1273/0x7d40 [ 1889.542306][T27935] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1889.549438][T27935] ? sock_rps_record_flow+0x19/0x3f0 [ 1889.555949][T27935] ? inet_sendmsg+0x7c/0x2f0 [ 1889.561698][T27935] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1889.567462][T27935] ? security_socket_sendmsg+0x80/0xa0 [ 1889.573273][T27935] ? inet_send_prepare+0x260/0x260 [ 1889.578667][T27935] ____sys_sendmsg+0x5ba/0x960 [ 1889.584002][T27935] ? __lock_acquire+0x7d40/0x7d40 [ 1889.589629][T27935] ? __asan_memset+0x22/0x40 [ 1889.595361][T27935] ? __sys_sendmsg_sock+0x30/0x30 [ 1889.601137][T27935] ? __import_iovec+0x3fa/0x850 [ 1889.606357][T27935] ? import_iovec+0x73/0xa0 [ 1889.611212][T27935] ___sys_sendmsg+0x2a6/0x360 [ 1889.616428][T27935] ? get_pid_task+0x20/0x1e0 [ 1889.621844][T27935] ? __sys_sendmsg+0x2a0/0x2a0 [ 1889.628211][T27935] ? __lock_acquire+0x7d40/0x7d40 [ 1889.633805][T27935] __se_sys_sendmsg+0x1c2/0x2b0 [ 1889.639222][T27935] ? __x64_sys_sendmsg+0x80/0x80 [ 1889.644382][T27935] ? lockdep_hardirqs_on+0x98/0x150 [ 1889.649910][T27935] do_syscall_64+0x55/0xa0 [ 1889.654964][T27935] ? clear_bhb_loop+0x40/0x90 [ 1889.660433][T27935] ? clear_bhb_loop+0x40/0x90 [ 1889.665954][T27935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.672490][T27935] RIP: 0033:0x7f9d03d9c819 [ 1889.677238][T27935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.699689][T27935] RSP: 002b:00007f9d04b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1889.708555][T27935] RAX: ffffffffffffffda RBX: 00007f9d04015fa0 RCX: 00007f9d03d9c819 [ 1889.717184][T27935] RDX: 00000000000008d0 RSI: 0000200000000800 RDI: 0000000000000003 [ 1889.726471][T27935] RBP: 00007f9d04b96090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.735584][T27935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.744794][T27935] R13: 00007f9d04016038 R14: 00007f9d04015fa0 R15: 00007ffe8cef90c8 [ 1889.753066][T27935] [ 1889.765587][T27052] wlan1: Trigger new scan to find an IBSS to join [ 1889.773223][ T5855] wlan1: Trigger new scan to find an IBSS to join [ 1890.038384][T27941] netlink: 'syz.2.7797': attribute type 3 has an invalid length. [ 1890.073649][T27941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7797'. [ 1890.283629][T27955] netlink: 'syz.1.7801': attribute type 10 has an invalid length. [ 1890.616855][T27959] netlink: 'syz.0.7804': attribute type 10 has an invalid length. [ 1890.806439][T27964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1891.201507][T27974] FAULT_INJECTION: forcing a failure. [ 1891.201507][T27974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1891.221354][T27974] CPU: 1 PID: 27974 Comm: syz.1.7808 Not tainted syzkaller #0 [ 1891.228977][T27974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1891.239152][T27974] Call Trace: [ 1891.242661][T27974] [ 1891.245878][T27974] dump_stack_lvl+0x18c/0x250 [ 1891.250823][T27974] ? show_regs_print_info+0x20/0x20 [ 1891.256487][T27974] ? load_image+0x420/0x420 [ 1891.261102][T27974] ? __might_fault+0xaa/0x120 [ 1891.266068][T27974] ? __lock_acquire+0x7d40/0x7d40 [ 1891.271290][T27974] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1891.277406][T27974] should_fail_ex+0x39d/0x4d0 [ 1891.282593][T27974] _copy_from_user+0x2f/0xe0 [ 1891.287383][T27974] wext_handle_ioctl+0xc8/0x1d0 [ 1891.293041][T27974] ? call_commit_handler+0xf0/0xf0 [ 1891.298437][T27974] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1891.306104][T27974] ? lock_chain_count+0x20/0x20 [ 1891.311166][T27974] sock_ioctl+0x15d/0x7e0 [ 1891.315897][T27974] ? sock_poll+0x3e0/0x3e0 [ 1891.320619][T27974] ? bpf_lsm_file_free_security+0x10/0x10 [ 1891.326554][T27974] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1891.331769][T27974] ? security_file_ioctl+0x80/0xa0 [ 1891.337036][T27974] ? sock_poll+0x3e0/0x3e0 [ 1891.342315][T27974] __se_sys_ioctl+0xfd/0x170 [ 1891.346944][T27974] do_syscall_64+0x55/0xa0 [ 1891.351471][T27974] ? clear_bhb_loop+0x40/0x90 [ 1891.356263][T27974] ? clear_bhb_loop+0x40/0x90 [ 1891.361222][T27974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.367583][T27974] RIP: 0033:0x7f9d01d9c819 [ 1891.372210][T27974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.393943][T27974] RSP: 002b:00007f9d02cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1891.403700][T27974] RAX: ffffffffffffffda RBX: 00007f9d02015fa0 RCX: 00007f9d01d9c819 [ 1891.412986][T27974] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000004 [ 1891.421423][T27974] RBP: 00007f9d02cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.429862][T27974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.438430][T27974] R13: 00007f9d02016038 R14: 00007f9d02015fa0 R15: 00007ffe748aff58 [ 1891.446987][T27974] [ 1892.014647][T27989] netlink: 'syz.3.7811': attribute type 3 has an invalid length. [ 1892.146476][T27989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7811'. [ 1892.448360][T27991] netlink: 'syz.1.7814': attribute type 10 has an invalid length. [ 1892.722292][T28005] netlink: 'syz.3.7816': attribute type 10 has an invalid length. [ 1892.759489][T28006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1893.333093][T27060] wlan1: Trigger new scan to find an IBSS to join [ 1893.340231][ T5855] wlan1: Trigger new scan to find an IBSS to join [ 1893.825333][T28023] netlink: 'syz.0.7824': attribute type 3 has an invalid length. [ 1893.835515][T28023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7824'. [ 1893.860821][T28025] netlink: 'syz.3.7825': attribute type 10 has an invalid length. [ 1894.283597][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1894.372604][T27052] wlan1: Trigger new scan to find an IBSS to join [ 1894.405151][T28037] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.7829'. [ 1894.435729][T28037] netlink: 'syz.0.7829': attribute type 1 has an invalid length. [ 1894.607353][T27056] wlan1: Creating new IBSS network, BSSID 12:23:8b:1a:77:7d [ 1894.651927][T27056] ------------[ cut here ]------------ [ 1894.659065][T27056] WARNING: CPU: 0 PID: 27056 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 1894.670052][T27056] Modules linked in: [ 1894.674709][T27056] CPU: 0 PID: 27056 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1894.682629][T27056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1894.693556][T27056] Workqueue: cfg80211 cfg80211_event_work [ 1894.699591][T27056] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 1894.706024][T27056] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d5 a0 f7 0f 0b eb bb e8 0e d5 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d5 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 1894.727777][T27056] RSP: 0000:ffffc900049afa20 EFLAGS: 00010293 [ 1894.734727][T27056] RAX: ffffffff89e64cc2 RBX: dffffc0000000000 RCX: ffff88803d12da00 [ 1894.743129][T27056] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 1894.752185][T27056] RBP: ffffc900049afaf8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 1894.760487][T27056] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff888030f1cc90 [ 1894.769052][T27056] R13: 1ffff92000935f4c R14: ffff88802b79b5b8 R15: 000000000000001e [ 1894.777726][T27056] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1894.787334][T27056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1894.794790][T27056] CR2: 00007f6ed9276ff8 CR3: 000000004a6ef000 CR4: 00000000003506f0 [ 1894.803462][T27056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1894.811731][T27056] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1894.820385][T27056] Call Trace: [ 1894.823935][T27056] [ 1894.826893][T27056] ? mutex_lock_nested+0x20/0x20 [ 1894.831964][T27056] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1894.837796][T27056] cfg80211_process_wdev_events+0x3bc/0x550 [ 1894.844158][T27056] cfg80211_process_rdev_events+0xa1/0x110 [ 1894.850796][T27056] cfg80211_event_work+0x2f/0x40 [ 1894.856026][T27056] ? process_scheduled_works+0x96f/0x15d0 [ 1894.862130][T27056] process_scheduled_works+0xa5d/0x15d0 [ 1894.867938][T27056] ? worker_attach_to_pool+0x380/0x380 [ 1894.873563][T27056] ? assign_work+0x3d2/0x5d0 [ 1894.878561][T27056] worker_thread+0xa55/0xfc0 [ 1894.883490][T27056] kthread+0x2fa/0x390 [ 1894.887859][T27056] ? pr_cont_work+0x560/0x560 [ 1894.892821][T27056] ? kthread_blkcg+0xd0/0xd0 [ 1894.897621][T27056] ret_from_fork+0x48/0x80 [ 1894.902398][T27056] ? kthread_blkcg+0xd0/0xd0 [ 1894.907415][T27056] ret_from_fork_asm+0x11/0x20 [ 1894.912724][T27056] [ 1894.915873][T27056] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1894.923701][T27056] CPU: 0 PID: 27056 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 1894.931531][T27056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1894.942256][T27056] Workqueue: cfg80211 cfg80211_event_work [ 1894.948478][T27056] Call Trace: [ 1894.951781][T27056] [ 1894.954806][T27056] dump_stack_lvl+0x18c/0x250 [ 1894.959613][T27056] ? show_regs_print_info+0x20/0x20 [ 1894.965000][T27056] ? load_image+0x420/0x420 [ 1894.969721][T27056] panic+0x2dc/0x730 [ 1894.973726][T27056] ? bpf_jit_dump+0xd0/0xd0 [ 1894.978425][T27056] ? ret_from_fork_asm+0x11/0x20 [ 1894.983552][T27056] __warn+0x2e0/0x470 [ 1894.987535][T27056] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1894.993351][T27056] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1894.999000][T27056] report_bug+0x2be/0x4f0 [ 1895.003584][T27056] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1895.009751][T27056] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1895.016461][T27056] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 1895.022754][T27056] handle_bug+0xcf/0x120 [ 1895.027283][T27056] exc_invalid_op+0x1a/0x50 [ 1895.031965][T27056] asm_exc_invalid_op+0x1a/0x20 [ 1895.037009][T27056] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 1895.043530][T27056] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d5 a0 f7 0f 0b eb bb e8 0e d5 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d5 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 1895.065840][T27056] RSP: 0000:ffffc900049afa20 EFLAGS: 00010293 [ 1895.072693][T27056] RAX: ffffffff89e64cc2 RBX: dffffc0000000000 RCX: ffff88803d12da00 [ 1895.081209][T27056] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 1895.089980][T27056] RBP: ffffc900049afaf8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 1895.098507][T27056] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff888030f1cc90 [ 1895.107576][T27056] R13: 1ffff92000935f4c R14: ffff88802b79b5b8 R15: 000000000000001e [ 1895.115987][T27056] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 1895.122072][T27056] ? mutex_lock_nested+0x20/0x20 [ 1895.127387][T27056] ? trace_rdev_return_void+0x1c0/0x1c0 [ 1895.133881][T27056] cfg80211_process_wdev_events+0x3bc/0x550 [ 1895.139872][T27056] cfg80211_process_rdev_events+0xa1/0x110 [ 1895.145682][T27056] cfg80211_event_work+0x2f/0x40 [ 1895.151213][T27056] ? process_scheduled_works+0x96f/0x15d0 [ 1895.157160][T27056] process_scheduled_works+0xa5d/0x15d0 [ 1895.163356][T27056] ? worker_attach_to_pool+0x380/0x380 [ 1895.169041][T27056] ? assign_work+0x3d2/0x5d0 [ 1895.174410][T27056] worker_thread+0xa55/0xfc0 [ 1895.179125][T27056] kthread+0x2fa/0x390 [ 1895.183545][T27056] ? pr_cont_work+0x560/0x560 [ 1895.189379][T27056] ? kthread_blkcg+0xd0/0xd0 [ 1895.194694][T27056] ret_from_fork+0x48/0x80 [ 1895.199652][T27056] ? kthread_blkcg+0xd0/0xd0 [ 1895.204412][T27056] ret_from_fork_asm+0x11/0x20 [ 1895.209275][T27056] [ 1895.213938][T27056] Kernel Offset: disabled [ 1895.218536][T27056] Rebooting in 86400 seconds..