last executing test programs: 5.864289262s ago: executing program 2 (id=14959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xf}, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010002000000000000000100000d0000000000000100000000000f0000000000a71008000000090000000000000c010000000400000000000008040000000500000000000010020000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0xeac6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x10c502, 0xcd, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x0, 0x2) r2 = perf_event_open(0x0, 0x0, 0xf, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000bf828500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000079500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001d40)={&(0x7f0000000540)="c696c2078584e5b93635ee33ca6e9cd5110e83ccffbe2ee2eddd59697aaa22e2a4eb0a195ba7c1da5648449cc41699d0b0c1949cef58ed646a511cc458a01fabf0276b3e51c86e88d7734af2ace15119ac2439d84ddf1768facc32c43fc7d362e1aa313048a8b4f77693c8c91bcc1b4dc6cc41d8565433cd2608707ce2f0b32374b12f4ea7f74bd5fbdcbab788616e3b22bd6f5bdf67e03de1ac62ff441ed38c2694c710cd671321c73f827759cc0414ea5260a32012914fda1420e1a296f0e2a32c4c534dffffdd15a5b9c5ebbd2b5d1646fcc03ece6d51ea1352a90a785f818b405bb360", &(0x7f0000000c40)=""/4096, &(0x7f0000001c40)="d3b060ea19ebfc2b9319821ec0b8dbd75e9149b9c96725750a0253c5d8ec1cd1847aa4e8566413b365168cd8cbd2e2f7beaffb30c68bf0be360ef7064a2d0831dc80a1e4b7545f69d65cc0057f912110e65f265cfbd245681cd89e3b448f87cb19af0a18b872e118d0395c69b60826bf9a2ba2443ed7447ae80d1f89356d1abc84b2cbac2e1196fd63cb52420540616cc64afc854a0ec162932e29f78412fa94cdafbd03d556ea3819d47a176cd5ffbd22dd5ef7576b", &(0x7f0000001d00)="c4b8014cfaeeb0146d5d669b4e1b7a3831cbca53776e8d7d3c6a6e09ac15ea4f2a31b7c28c02a1fc06b0b51b9c1422c4", 0x6, r6, 0x4}, 0x38) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000001c0)=r7) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) 5.258015652s ago: executing program 3 (id=14972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r3, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(r1, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x13, 0x20, 0x0, @void, @void, @void, @value=r7, r5}, 0x20) r8 = perf_event_open(&(0x7f0000000780)={0x3, 0x80, 0x4, 0x6, 0x9, 0xaf, 0x0, 0x3, 0x20, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x534}, 0x15d9cd1a7b41a52, 0xffffffffffffffff, 0xfffff3d2, 0x7, 0x8000000000000001, 0x6, 0x71, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x1, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000800)='[\xf5+^#\x9d[\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1700000071009154090893b3520ba54a07"], 0xfe33) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e00", 0x22}], 0x1}, 0x40000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000240)={'veth1\x00', 0x600}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000080)="d5f6d877f59dc1074570420b353b8870e24848b7e3e7dcf9ef6138996f65d64d60a23ed5358774e862568062000a7d16f2b36d07be00c91597", &(0x7f0000000200)=""/112, &(0x7f0000000280)="528568efb985855346403b614ef961aec81ebca873329092be76ab864df16ffedbd8bab4e1f77e75305d79bdfce31ee8472b8e13c50d1b6583e877cad06eb19ab7b7160dc1c32dea19f0f02e8883818badbcbeda603207a3987b30b607de99411087aee9793cc5e9eb2b3b2d85fa97aa668bc478b46f76a6d22f2ee36e1f5ea65df396abe85650441727c6", &(0x7f0000000340)="c6d6aeb5df44961986e337ec95eb41fab1b7a4942b08000eabe4e66e4f96f55cb802efd02ae840e5fe29b5f0ea422f5ad0af17301d6b70aa47eb7d8aea13312512acb8726aa236c863db7bb7dda633dd6da872275e1496151f43bde49e", 0x1, r12}, 0x38) 2.641015975s ago: executing program 3 (id=14964): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580), 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 2.570204178s ago: executing program 2 (id=14966): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000c80)=ANY=[], 0x0, 0x1b9a, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x21ed, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0x10, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xac5d, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0, 0xad, 0x0, 0x1, 0x6}, 0x28) bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000200073013a00000000009500000000000000cabea217918e7db7fd468c25e2d6e7331d3bf54b0215d0e2dce2"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) 2.568622978s ago: executing program 4 (id=14967): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.160485901s ago: executing program 0 (id=14968): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) perf_event_open(0x0, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="11feffe00d00000024000000020000000000000071a6a2aab7a0870ebab4881d3059715a1fb3b0d4e7c80a9081c42cc2db74eb96e6155d6a017154a55306d7633dd1d4ed643c4147ba6b91875653bef1c9d47a9ce103ddd81ec41af62ce324d9991600e354316c38bf983fca2b5daf6702b9ed53a071553d2dcbf35d3ff229a8b111d6be7ca5978e775000980acf14615e35394238f03ec5626a436c622e944ee50d722b8bb508f9e331f46e55f52f03a8ae3f812419caea096f6a68ebd518473359a1925dbfaa50b19cce8d5728a8bebe112f2369c703096ff5a1cc1be17f083d78112642d1fb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000340), &(0x7f0000000140)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r5}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.099722532s ago: executing program 2 (id=14969): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004160000000006916360000000000bf67000000000000350605000fff0720670600000500feff160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.916929848s ago: executing program 1 (id=14970): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value=0xfa03}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.898314629s ago: executing program 4 (id=14971): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000d1ffffff76000000000000efdb7b9c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 1.898121289s ago: executing program 0 (id=14973): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x140, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1.686150225s ago: executing program 2 (id=14974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r3, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(r1, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x13, 0x20, 0x0, @void, @void, @void, @value=r7, r5}, 0x20) r8 = perf_event_open(&(0x7f0000000780)={0x3, 0x80, 0x4, 0x6, 0x9, 0xaf, 0x0, 0x3, 0x20, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x534}, 0x15d9cd1a7b41a52, 0xffffffffffffffff, 0xfffff3d2, 0x7, 0x8000000000000001, 0x6, 0x71, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x1, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000800)='[\xf5+^#\x9d[\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1700000071009154090893b3520ba54a07"], 0xfe33) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e00", 0x22}], 0x1}, 0x40000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000240)={'veth1\x00', 0x600}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000080)="d5f6d877f59dc1074570420b353b8870e24848b7e3e7dcf9ef6138996f65d64d60a23ed5358774e862568062000a7d16f2b36d07be00c91597", &(0x7f0000000200)=""/112, &(0x7f0000000280)="528568efb985855346403b614ef961aec81ebca873329092be76ab864df16ffedbd8bab4e1f77e75305d79bdfce31ee8472b8e13c50d1b6583e877cad06eb19ab7b7160dc1c32dea19f0f02e8883818badbcbeda603207a3987b30b607de99411087aee9793cc5e9eb2b3b2d85fa97aa668bc478b46f76a6d22f2ee36e1f5ea65df396abe85650441727c6", &(0x7f0000000340)="c6d6aeb5df44961986e337ec95eb41fab1b7a4942b08000eabe4e66e4f96f55cb802efd02ae840e5fe29b5f0ea422f5ad0af17301d6b70aa47eb7d8aea13312512acb8726aa236c863db7bb7dda633dd6da872275e1496151f43bde49e", 0x1, r12}, 0x38) 1.588884989s ago: executing program 0 (id=14975): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000006c0), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="e19a19a389be615569961d555446f47c77da2e91de84a322259455920ad00396fdc531e1b6d5017e2ff82c6ed2065d78a34e249079dc13f7b0721a9dfa949fdb048e3675", 0x44}, {&(0x7f0000000140)="9b73d2e4577978bd89e85ee9c72fde4de7942ad18ae2ce7227b71fee229c7156d033fe631c621a1bc8ba359908b8feacdbb3b9d051f2fb3cc9569e23df403a44", 0x40}, {&(0x7f0000000200)="a81cafebe1a0cd07f95c3457366c00b08e19292c4dc3272e40b27c3064a9c293b23272f72d0b51d64794072a609570f149c553c8f7d50d372ea2ccf6e4918785e5b5ccf46027eb93abfb33a5e067b704", 0x50}, {&(0x7f0000000280)="87712969353ef8fd95ff4356acbb872bf5bc6ad9793c0080dadcd9fd00eae01fdd3ed20ab195e74f92738b9d165fe5148176f09420abed129627261e1a6b1f006c80892d6783453a4ad2268251d835fd82b67300f97d99e76f2d6bad4651b8931c084815479c1516ce4f1af0", 0x6c}, {&(0x7f0000000300)="1db21a2800389d590c772a78795c8e954d750e63f8883c8e82d8b8f99f761271e1f023b3c652825d8e3f67f37b4cb13c4fc578703817d71a1094e1c8587d860502db398b164fa95a6bc4484325b3822f1de1ed781ef2553d5cb05f6712dc62b28fa55d910cc987657dcb714cc1ad88c67fbf7805117d018ddde8aec40cdadfe05d1832b5e5031081fef516a89e4fcb5a10cf7c6c2ef621223f7c8eef4e8c6b6060a55b9eb3479094e843485e2bde272c85b6f8c5694ad14f98ced4c25a6cbe573c99367fd5953f0a0ac9a8ed10eb8250a1af72138cdbf2a11869f0f2f58c9ad7fb6e", 0xe2}], 0x5, &(0x7f0000000940)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x52}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}], 0x90}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x60, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="d8000000180001004e81f782db4cb904021d0800fe000405e81556a10a000f000200142603600e12080005007f370401a802400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000002db7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6e8929559e399e1f4824b43370e97039264bc7bb600"/216, 0xd8}], 0x1}, 0x20000018) 1.56831496s ago: executing program 4 (id=14976): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000002000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xff8, &(0x7f0000002e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x1b) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, 0x0, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)}, 0x10042) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), 0x0}, 0x20) 1.352144806s ago: executing program 1 (id=14977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x2000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 1.312773038s ago: executing program 1 (id=14978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) ioctl$TUNGETVNETLE(r1, 0x8953, &(0x7f0000000040)) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x6a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22e0ee00000000000000000000000000007fc5f603ff65ec5deb004298f479a79d93014b8e7781c2"], 0xfdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x22, &(0x7f0000000200)=r8, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x7ff, 0x10}, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r10, 0x0, 0xfe61) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1}, 0x4) 1.260153659s ago: executing program 4 (id=14979): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xb0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x50001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0xce6b9b20411cf2d4, 0x800000000000c6, 0x0, 0x8, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffeffffffffd}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0xfffffffffffffdd8, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x61}, 0x10000, 0x1, 0x4000, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0x11, 0x200000000000002, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x854e2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x80400, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a42, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0xe, 0x1, 0x1000, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000004000000160000000b"], 0x50) 1.22485926s ago: executing program 3 (id=14980): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a800400ad6e911b51", 0x28}], 0x1}, 0x0) 1.172265232s ago: executing program 0 (id=14981): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000080)="e2b5ea4ff04f9a96de357b6cd9e0c3b360ada2d7cd030753b8d5e080bd029e5bf45231c726af19ab1b2062e3794b242da99d6d040aaaf839221a387157", &(0x7f00000000c0)=""/87, &(0x7f0000000140)="e56d899ad9979330881b501f2a1eee56f3cbcd8c3d4ca1e2810197c7711a440ba3b7fc2e133477873d83fe43a58ee9a7259a4c3687ef3b5dbbb14883e2415aadbeff6d394b0a80a2e92513fcef298f3edfc2adb20c3ac64b5190ed2d01fe9830f21b5718c659957311aa21202f62d95cac1c359a57e0ef0165ac2fc34b0960002388c7", &(0x7f0000000200)="9683d32dea7dff9943bc4a06d9b7315334", 0x6, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 1.119650904s ago: executing program 2 (id=14982): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.099369855s ago: executing program 0 (id=14983): socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000280)=0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05d", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x12) 956.048869ms ago: executing program 3 (id=14984): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)}], 0x1}, 0xe900) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x14b201, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4004743c, &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 940.25474ms ago: executing program 4 (id=14985): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb0ffffff}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 907.120181ms ago: executing program 2 (id=14986): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xc}, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80006, 0x1, @perf_config_ext, 0x0, 0x10003, 0x80000000, 0x0, 0x2, 0x4, 0x9, 0x0, 0x6, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) unlink(0x0) recvmsg$unix(r0, 0x0, 0x120) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xa3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0xe}, {0x9, 0x2}]}, @struct={0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000002200)=""/4109, 0x44, 0x100d, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff1000"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)}], 0x1}, 0x40080c0) 772.648545ms ago: executing program 3 (id=14987): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 760.338755ms ago: executing program 0 (id=14988): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000280), 0x35) socket$kcm(0xa, 0x3, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x2b, 0x0, 0x4) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x2, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffd1e7, 0x80010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe9770eaeb8326fd, @perf_config_ext={0x3}, 0xc002, 0x9, 0x0, 0xe, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7fffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) close(0x3) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20002880) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000a8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc3d, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="12934acfbca026257e2a576dc69d27f16c4ff82719936e02e74495d5d99b22cc7a32ad8d8205b1a9751583fb293e8a86c96c5ffcdff0dc97a06a01350eaa979a4de9b2f50952c153f1f2c9e34b08fe4503527cf688316c00343532276619763646c46e87954f7116be3d5b93bd0787da6ce7798acbc7345d6fd11a6dee7f43a14cd2dce656c6b1d709b3a2f8d0869442ebcd26268ed98776b3a63a0bcd9731d7c1305c177554362ef3ef083262e00f379cffa10aa3fa4fe1bb90562d0a2c4a933d8a280980f1abd9d4ab9b77fc1bdecefa0ccc1650c92006d67a1477403f186961cc5d93b77ea8a4", 0xe8}, {&(0x7f0000000500)="2377067dac107bb73eccc156bd6d1d9c1a995353d357c7ac777f0932909c471f0676ff7d81faf7347e2539dee81f4eb7760791e096e117b18115996f27e905ec989d7f07c97393a3a6dd607934f2f26b872808b350f849a3da154ef50c226e52cc98b07e6d0716047e0e78e4ea65f3f025a06ed7f92952f2c3617cc28ef16de2200201a4bb5a6612dbdeb9d717b379a61836ca237272440bfc7a1133b9150af11670b37df8bd78b82cabef1af3bd356efa1a0587868041", 0xb7}, {&(0x7f00000005c0)}, {&(0x7f0000002b80)}], 0x4, &(0x7f0000000740)="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", 0x1000}, 0x10) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000003040)=0x1) r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x80, 0x0}, 0x810) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x80, 0x0, 0xc2ba, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r10, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000002780)="0a28b2f19f384d125895915c829bfdc2112d61df8efeee1e7a6090b250fa807834c7522b6bdc8b7d65a655afe7b42d0f9b501aba10021f481c98bd8a447fb74921c9daedfba583bf8f491e74bd21161db3fd7cff58a3b3fd9e847219b58885beaadc5b", 0x63}, {0x0}, {&(0x7f0000002980)="68f86b3c0a778276e8b8acd9ce5db1fa2fa60c0d78d592b515029e4bcec79651f7a4f0b9f41dd456b184363c7e128809007e3f2fcc5670f98de759282bea5c46ba4bbf72f3ebec393c52c88edd1967e767fd763c04d1306aa215ba34839fd3f59e3dbee158ca310f83150501c10d", 0x6e}, {&(0x7f0000002a00)="dbc8b7b5432fdf9c0e62356b08e3b2fc8358d3d389e6c5ea60e15251326b3af99badd8bf3baba48b84a26374958e00dba05abf83e38a8d876f9d10459be9d504cbd54f1ec9131f15c3d01da2671e4805fbcf6071676f", 0x56}, {&(0x7f0000002a80)="c6ba7c6c7d8662aaa9df1a8400486112a99ef91a462854e7a0bb95df2fb894b53aa9356cde007ee98b690c58477a4f29af5c5e388c1066fce94a151230b5c74dd19767ac9c62561c267bd85b923d86ebd8f5f5661a3c3eae5d552f42", 0x5c}], 0x6, &(0x7f0000003080)=ANY=[@ANYBLOB="80000000000000000301000007000000f199d4af553833da0384a1be8904fed9a9b1284a1b4ab071716e19648ab33b17493f0a693faab94db91138bfc06e0baeff8a6696b4eef32817a2f33a2130a713ef191bbb435d470f2f02fa681e77cbebc677677f11a73a0a4610464e4c989b6f4b2ee696c560e2cb24bc22a218000000f0000000000000000701000002000000b7ea6c2d7e5cf04d12da7ba648e4876440bb96efc84f7e5b7afa75f82985f1594667a1de467a50e8b618bc9b7db9bcb2a62567cabf3545c48f11c8da9bac2da0532c3fb09b9d5616f310776941cb4fc91463fd94b2a566c302650dfd9a261fa2e1264b7015beb32d193450ec87fd437f39784e76f3cfd941d8bfb4b3487afb34d48f6b963914d2f6372d6d47975dab7f143498b414e6f408b2c495ed390f2f3818860a916a4fdc6305226e641d50f724e0d712d0c6beb399bf28c315197816ffb340dfcbcee7e140b49f683500bcbbbf689a982bdb25c4e846cba0f17fdb00007000000000000000ff00000007000000c0054ed93ad225678dcb920dbf8c875c846a385f3d3dfb330b24201855b59e508d27d343cdf5daf4d355282b0ed627225d96ef80a70af1f45696965ea77d92ad3b1709d72e948ed50c43ebf9b21a0337aea0789eedceec27ec9fc01400000000d0000000000000000c01000001800000a02fcd996f1e81e0a37a8015798766399f192ed3e3d16e79e31828de1a3c8d3eebe7211bd0872622ab329216a70369c1059b23f8560e53da8939d15d514295415c29760c51cef302afcce3a7f0cdc98a80931e231e203e3c8301ed454a9847bb497e83f4dc80620d18cd6f3ffb84fd938637f3384b9e1945d646139b0a0edf508cca493c20fd2a91bf665aee93dbd4a1ca77b3543949165ebcf620d82559dedf39f78c7da627edd3840a209989ab449380f2564649d6d6c667eeaae30000000040000000000000000213000001000000b623dcc137f50d7ce80e7759d221c6413e18d94cc8b639f4efbfb50d2992440915bb28b01238db9f1b00000000000000600000000000000007000000090000008fb871e1c3a0f5b0f2b407a55feef9a70c5c4cf6606b93bb1e21c8f901eba6f53509f723622de974581052640c96d4a58cc56895216fdc3a68ce10d063b610e66d660900000000000000000000000000c0000000000000000a01000007000000a8e4e713263525724097ddee7e27d1c884e440a191ff886c693a29e194ef99b28fad7b4169baf63d3f04370cd5aee70824e0f1048bfa5c160643b4c0a6882850f3f462bf2dadf24b3f5be8d6622bc83a2d52c92252e35ae85492f7654389f7cc838bf3f5f36f3eea80cf246b93c21c04fc7096ef2a03c45c308a"], 0x410}, 0x2000004) 516.561303ms ago: executing program 3 (id=14989): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {0x0}], 0x2}, 0x1c1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 488.946704ms ago: executing program 4 (id=14990): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580), 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 350.988728ms ago: executing program 1 (id=14991): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) socket$kcm(0x29, 0x1, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x100) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) 173.599954ms ago: executing program 1 (id=14992): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async) socketpair(0x1, 0x9660fe159d2ddf34, 0x3, &(0x7f0000000140)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r2 = syz_clone(0x12012000, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) (async) recvmsg$kcm(r0, 0x0, 0x12020) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x9, 0x8, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) syz_open_procfs$namespace(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 1 (id=14993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r3, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(r1, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x13, 0x20, 0x0, @void, @void, @void, @value=r7, r5}, 0x20) r8 = perf_event_open(&(0x7f0000000780)={0x3, 0x80, 0x4, 0x6, 0x9, 0xaf, 0x0, 0x3, 0x20, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x534}, 0x15d9cd1a7b41a52, 0xffffffffffffffff, 0xfffff3d2, 0x7, 0x8000000000000001, 0x6, 0x71, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x1, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000800)='[\xf5+^#\x9d[\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1700000071009154090893b3520ba54a07"], 0xfe33) kernel console output (not intermixed with test programs): phy1 wpan1: encryption failed: -22 [ 2161.638618][T21382] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2161.669337][T21382] wlan1: Trigger new scan to find an IBSS to join [ 2163.005260][ T6033] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2163.255928][T13208] delete_channel: no stack [ 2163.524966][T13242] mac80211_hwsim hwsim128 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2164.075866][T13270] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13447'. [ 2164.284170][T13278] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13450'. [ 2164.609265][T13288] netlink: 'syz.0.13454': attribute type 3 has an invalid length. [ 2164.617149][T13288] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13454'. [ 2165.496054][T13309] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13463'. [ 2165.671331][T25673] wlan1: Trigger new scan to find an IBSS to join [ 2168.708941][ T3415] wlan1: Trigger new scan to find an IBSS to join [ 2169.886290][T13347] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13475'. [ 2169.929619][T13347] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2169.938306][T13347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2170.616573][T13379] netlink: 180 bytes leftover after parsing attributes in process `syz.1.13484'. [ 2170.699343][T13374] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13487'. [ 2170.785135][T13370] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13484'. [ 2171.577037][T13406] netlink: 'syz.1.13498': attribute type 10 has an invalid length. [ 2171.597719][T13406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13498'. [ 2171.612755][T13406] device ipvlan1 entered promiscuous mode [ 2171.659876][T13406] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2172.043553][T13418] netlink: 'syz.1.13503': attribute type 10 has an invalid length. [ 2172.099368][T13418] team0: Device hsr_slave_0 failed to register rx_handler [ 2172.417171][T13428] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.13507'. [ 2172.629065][ T4500] wlan1: Trigger new scan to find an IBSS to join [ 2172.939208][T13453] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13516'. [ 2173.244954][ T3415] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2173.247066][T13461] -: renamed from syzkaller0 [ 2173.258329][ T3415] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2173.413993][T13467] FAULT_INJECTION: forcing a failure. [ 2173.413993][T13467] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.446114][T13467] CPU: 1 PID: 13467 Comm: syz.1.13520 Not tainted syzkaller #0 [ 2173.453723][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2173.463902][T13467] Call Trace: [ 2173.467196][T13467] [ 2173.470141][T13467] dump_stack_lvl+0x188/0x24e [ 2173.474843][T13467] ? show_regs_print_info+0x12/0x12 [ 2173.480061][T13467] ? load_image+0x400/0x400 [ 2173.484591][T13467] ? __might_sleep+0xd0/0xd0 [ 2173.489205][T13467] ? __lock_acquire+0x7d10/0x7d10 [ 2173.494956][T13467] should_fail_ex+0x399/0x4d0 [ 2173.499657][T13467] should_failslab+0x5/0x20 [ 2173.504870][T13467] slab_pre_alloc_hook+0x59/0x310 [ 2173.509919][T13467] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2173.516098][T13467] __kmem_cache_alloc_node+0x4f/0x260 [ 2173.521510][T13467] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2173.527339][T13467] __kmalloc+0xa0/0x240 [ 2173.531529][T13467] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2173.537112][T13467] ? tomoyo_path_number_perm+0x205/0x650 [ 2173.542770][T13467] tomoyo_path_number_perm+0x22f/0x650 [ 2173.548260][T13467] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2173.553779][T13467] ? __fget_files+0x28/0x4b0 [ 2173.558399][T13467] ? __fget_files+0x28/0x4b0 [ 2173.563109][T13467] security_file_ioctl+0x6c/0xa0 [ 2173.568159][T13467] __se_sys_ioctl+0x48/0x170 [ 2173.572778][T13467] do_syscall_64+0x4c/0xa0 [ 2173.577218][T13467] ? clear_bhb_loop+0x60/0xb0 [ 2173.581912][T13467] ? clear_bhb_loop+0x60/0xb0 [ 2173.586617][T13467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2173.592534][T13467] RIP: 0033:0x7f63dfd9ce59 [ 2173.596962][T13467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2173.617108][T13467] RSP: 002b:00007f63e0d47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2173.625723][T13467] RAX: ffffffffffffffda RBX: 00007f63e0015fa0 RCX: 00007f63dfd9ce59 [ 2173.633716][T13467] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000a [ 2173.641705][T13467] RBP: 00007f63e0d47090 R08: 0000000000000000 R09: 0000000000000000 [ 2173.649690][T13467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2173.657676][T13467] R13: 00007f63e0016038 R14: 00007f63e0015fa0 R15: 00007ffe7ec796b8 [ 2173.666120][T13467] [ 2173.675916][ T4500] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2173.686672][T13467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2173.917613][T13475] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13523'. [ 2173.970198][T13475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2174.105088][T13476] mac80211_hwsim hwsim130 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2174.564033][T13492] netlink: 'syz.1.13529': attribute type 1 has an invalid length. [ 2174.647995][T13492] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.13529'. [ 2174.996118][T13510] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13536'. [ 2176.761956][T13544] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13549'. [ 2180.563069][T13593] netlink: 'syz.2.13563': attribute type 4 has an invalid length. [ 2180.627305][T13589] netlink: 'syz.1.13562': attribute type 10 has an invalid length. [ 2180.776975][T13599] netlink: 'syz.2.13567': attribute type 10 has an invalid length. [ 2180.792847][T13599] team0: Device hsr_slave_0 failed to register rx_handler [ 2181.728295][T13615] netlink: 'syz.1.13574': attribute type 11 has an invalid length. [ 2181.795997][T13615] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13574'. [ 2182.240945][T13628] netlink: 'syz.4.13577': attribute type 10 has an invalid length. [ 2182.268935][T13628] netlink: 140 bytes leftover after parsing attributes in process `syz.4.13577'. [ 2182.304120][T13628] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2182.331210][T13613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2182.594385][T13637] FAULT_INJECTION: forcing a failure. [ 2182.594385][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.622734][T13637] CPU: 0 PID: 13637 Comm: syz.0.13581 Not tainted syzkaller #0 [ 2182.630326][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2182.640389][T13637] Call Trace: [ 2182.643710][T13637] [ 2182.646646][T13637] dump_stack_lvl+0x188/0x24e [ 2182.651344][T13637] ? show_regs_print_info+0x12/0x12 [ 2182.656640][T13637] ? load_image+0x400/0x400 [ 2182.661186][T13637] ? __might_sleep+0xd0/0xd0 [ 2182.665771][T13637] ? __lock_acquire+0x7d10/0x7d10 [ 2182.670798][T13637] should_fail_ex+0x399/0x4d0 [ 2182.675470][T13637] should_failslab+0x5/0x20 [ 2182.679961][T13637] slab_pre_alloc_hook+0x59/0x310 [ 2182.684976][T13637] ? tomoyo_encode+0x27e/0x540 [ 2182.689737][T13637] __kmem_cache_alloc_node+0x4f/0x260 [ 2182.695104][T13637] ? tomoyo_encode+0x27e/0x540 [ 2182.699860][T13637] __kmalloc+0xa0/0x240 [ 2182.704035][T13637] tomoyo_encode+0x27e/0x540 [ 2182.708625][T13637] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2182.714346][T13637] ? tomoyo_path_number_perm+0x205/0x650 [ 2182.719972][T13637] tomoyo_path_number_perm+0x22f/0x650 [ 2182.725422][T13637] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2182.730878][T13637] ? irqentry_enter+0x33/0x50 [ 2182.735575][T13637] ? __fget_files+0x28/0x4b0 [ 2182.740156][T13637] ? __fget_files+0x28/0x4b0 [ 2182.745008][T13637] security_file_ioctl+0x6c/0xa0 [ 2182.749938][T13637] __se_sys_ioctl+0x48/0x170 [ 2182.754534][T13637] do_syscall_64+0x4c/0xa0 [ 2182.758940][T13637] ? clear_bhb_loop+0x60/0xb0 [ 2182.763611][T13637] ? clear_bhb_loop+0x60/0xb0 [ 2182.768283][T13637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2182.774169][T13637] RIP: 0033:0x7f1b4459ce59 [ 2182.778575][T13637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2182.798168][T13637] RSP: 002b:00007f1b453e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2182.806571][T13637] RAX: ffffffffffffffda RBX: 00007f1b44815fa0 RCX: 00007f1b4459ce59 [ 2182.814530][T13637] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000a [ 2182.822492][T13637] RBP: 00007f1b453e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2182.830458][T13637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2182.838415][T13637] R13: 00007f1b44816038 R14: 00007f1b44815fa0 R15: 00007ffddb6409f8 [ 2182.846414][T13637] [ 2182.852898][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 2182.880014][T13637] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2183.280837][T13646] netlink: 'syz.3.13585': attribute type 21 has an invalid length. [ 2183.305840][T13646] netlink: 'syz.3.13585': attribute type 6 has an invalid length. [ 2183.355089][T13646] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13585'. [ 2183.388179][T13651] delete_channel: no stack [ 2183.400901][T13651] delete_channel: no stack [ 2183.795530][T13669] netlink: 196 bytes leftover after parsing attributes in process `syz.2.13595'. [ 2183.844459][T13674] delete_channel: no stack [ 2183.863133][T13669] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2184.097424][T13686] FAULT_INJECTION: forcing a failure. [ 2184.097424][T13686] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.118985][T13686] CPU: 1 PID: 13686 Comm: syz.2.13602 Not tainted syzkaller #0 [ 2184.126667][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2184.136739][T13686] Call Trace: [ 2184.140029][T13686] [ 2184.142971][T13686] dump_stack_lvl+0x188/0x24e [ 2184.147677][T13686] ? show_regs_print_info+0x12/0x12 [ 2184.152888][T13686] ? load_image+0x400/0x400 [ 2184.157418][T13686] ? __might_sleep+0xd0/0xd0 [ 2184.162020][T13686] ? __lock_acquire+0x7d10/0x7d10 [ 2184.167051][T13686] should_fail_ex+0x399/0x4d0 [ 2184.171729][T13686] should_failslab+0x5/0x20 [ 2184.176228][T13686] slab_pre_alloc_hook+0x59/0x310 [ 2184.181252][T13686] kmem_cache_alloc_node+0x5a/0x320 [ 2184.186447][T13686] ? __alloc_skb+0xfc/0x7e0 [ 2184.190947][T13686] __alloc_skb+0xfc/0x7e0 [ 2184.195267][T13686] ? netlink_autobind+0xda/0x300 [ 2184.200206][T13686] netlink_sendmsg+0x654/0xbd0 [ 2184.204967][T13686] ? netlink_getsockopt+0x550/0x550 [ 2184.210159][T13686] ? aa_sock_msg_perm+0x94/0x150 [ 2184.215098][T13686] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2184.220377][T13686] ? security_socket_sendmsg+0x7c/0xa0 [ 2184.225826][T13686] ? netlink_getsockopt+0x550/0x550 [ 2184.231014][T13686] ____sys_sendmsg+0x5be/0x970 [ 2184.235781][T13686] ? __sys_sendmsg_sock+0x30/0x30 [ 2184.240800][T13686] ? __import_iovec+0x315/0x500 [ 2184.245651][T13686] ? import_iovec+0x6f/0xa0 [ 2184.250152][T13686] ___sys_sendmsg+0x2a2/0x360 [ 2184.254826][T13686] ? __sys_sendmsg+0x290/0x290 [ 2184.259593][T13686] ? __lock_acquire+0x7d10/0x7d10 [ 2184.264631][T13686] __se_sys_sendmsg+0x1bb/0x2a0 [ 2184.269476][T13686] ? __x64_sys_sendmsg+0x80/0x80 [ 2184.274413][T13686] ? lockdep_hardirqs_on+0x94/0x140 [ 2184.279604][T13686] do_syscall_64+0x4c/0xa0 [ 2184.284009][T13686] ? clear_bhb_loop+0x60/0xb0 [ 2184.288766][T13686] ? clear_bhb_loop+0x60/0xb0 [ 2184.293440][T13686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2184.299329][T13686] RIP: 0033:0x7f5623f9ce59 [ 2184.303736][T13686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2184.323334][T13686] RSP: 002b:00007f5624e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2184.331738][T13686] RAX: ffffffffffffffda RBX: 00007f5624215fa0 RCX: 00007f5623f9ce59 [ 2184.339702][T13686] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 2184.347663][T13686] RBP: 00007f5624e22090 R08: 0000000000000000 R09: 0000000000000000 [ 2184.355624][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2184.363592][T13686] R13: 00007f5624216038 R14: 00007f5624215fa0 R15: 00007fffa9adc838 [ 2184.371565][T13686] [ 2184.647248][T13689] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.13604'. [ 2184.923631][T13695] netlink: 'syz.0.13603': attribute type 21 has an invalid length. [ 2184.961280][T13695] netlink: 'syz.0.13603': attribute type 6 has an invalid length. [ 2184.998986][T13695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13603'. [ 2185.385758][T13712] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13611'. [ 2186.766470][T13743] netlink: 'syz.2.13622': attribute type 21 has an invalid length. [ 2186.775066][T13743] netlink: 'syz.2.13622': attribute type 6 has an invalid length. [ 2186.792663][T13743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13622'. [ 2190.025531][T13819] netlink: 'syz.3.13648': attribute type 4 has an invalid length. [ 2190.187686][T13824] netlink: 'syz.2.13649': attribute type 21 has an invalid length. [ 2190.212468][T13824] netlink: 'syz.2.13649': attribute type 1 has an invalid length. [ 2190.230902][T13824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13649'. [ 2190.345941][T13832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13649'. [ 2193.180828][T13845] netlink: 'syz.0.13656': attribute type 10 has an invalid length. [ 2193.255186][T13845] team0: Device hsr_slave_0 failed to register rx_handler [ 2194.383844][T13887] device veth1_macvtap entered promiscuous mode [ 2194.403768][T13887] device macsec0 entered promiscuous mode [ 2194.416809][T10948] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2194.637415][T13878] device syzkaller0 entered promiscuous mode [ 2196.561449][T13905] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.13672'. [ 2196.571362][T13910] mac80211_hwsim hwsim126 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2197.007000][T13927] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.13680'. [ 2197.078416][T13925] netlink: 'syz.0.13681': attribute type 2 has an invalid length. [ 2197.092021][T13925] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13681'. [ 2197.188666][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13682'. [ 2197.720574][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2197.730161][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2197.737976][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2197.755872][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2197.774490][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2197.781930][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2197.817399][ T3415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.992367][ T3415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.126133][ T3415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.172902][T13962] netlink: 'syz.3.13695': attribute type 2 has an invalid length. [ 2198.198861][T13962] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13695'. [ 2198.236834][ T3415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.255034][T13969] netlink: 22 bytes leftover after parsing attributes in process `syz.0.13698'. [ 2198.679274][T13946] chnl_net:caif_netlink_parms(): no params data found [ 2198.731748][ T3415] tipc: Left network mode [ 2199.041869][T13998] netlink: 'syz.3.13707': attribute type 4 has an invalid length. [ 2199.130079][T14006] pimreg0: tun_chr_ioctl cmd 35111 [ 2199.143546][T14008] device veth1_macvtap left promiscuous mode [ 2199.676563][T14014] device veth1_macvtap entered promiscuous mode [ 2199.682970][T14014] device macsec0 entered promiscuous mode [ 2199.754767][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.777508][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.787555][T13946] device bridge_slave_0 entered promiscuous mode [ 2199.833998][T13118] Bluetooth: hci2: command 0x0409 tx timeout [ 2199.908563][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.916171][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.940666][T13946] device bridge_slave_1 entered promiscuous mode [ 2200.128194][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2200.244792][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2200.500516][T13946] team0: Port device team_slave_0 added [ 2200.536683][T13946] team0: Port device team_slave_1 added [ 2200.740461][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2200.747452][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2200.787614][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2200.853570][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2200.876139][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2200.916175][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2201.018345][T13946] device hsr_slave_0 entered promiscuous mode [ 2201.025918][T13946] device hsr_slave_1 entered promiscuous mode [ 2201.037165][T14062] netlink: 'syz.2.13722': attribute type 29 has an invalid length. [ 2201.071160][T13946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2201.091791][T13946] Cannot create hsr debugfs directory [ 2201.097686][T14062] netlink: 'syz.2.13722': attribute type 29 has an invalid length. [ 2201.129067][T14058] netlink: 'syz.2.13722': attribute type 29 has an invalid length. [ 2201.159611][T14067] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13724'. [ 2201.189978][T14065] netlink: 'syz.4.13725': attribute type 10 has an invalid length. [ 2201.200853][T14065] team0: Device hsr_slave_0 failed to register rx_handler [ 2201.216572][T14063] netlink: 'syz.2.13722': attribute type 29 has an invalid length. [ 2201.908859][T13118] Bluetooth: hci2: command 0x041b tx timeout [ 2201.957979][T14084] FAULT_INJECTION: forcing a failure. [ 2201.957979][T14084] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.983612][T14084] CPU: 1 PID: 14084 Comm: syz.2.13728 Not tainted syzkaller #0 [ 2201.991210][T14084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2202.001274][T14084] Call Trace: [ 2202.004565][T14084] [ 2202.007504][T14084] dump_stack_lvl+0x188/0x24e [ 2202.012197][T14084] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2202.018376][T14084] ? show_regs_print_info+0x12/0x12 [ 2202.023586][T14084] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2202.029772][T14084] ? audit_tree_destroy_watch+0x20/0x20 [ 2202.035422][T14084] should_fail_ex+0x399/0x4d0 [ 2202.040119][T14084] should_failslab+0x5/0x20 [ 2202.044629][T14084] slab_pre_alloc_hook+0x59/0x310 [ 2202.049670][T14084] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2202.055841][T14084] ? fib6_info_alloc+0x2e/0xe0 [ 2202.060618][T14084] __kmem_cache_alloc_node+0x4f/0x260 [ 2202.066440][T14084] ? fib6_info_alloc+0x2e/0xe0 [ 2202.071219][T14084] __kmalloc+0xa0/0x240 [ 2202.075394][T14084] fib6_info_alloc+0x2e/0xe0 [ 2202.080006][T14084] ip6_route_info_create+0x44f/0x1210 [ 2202.085396][T14084] ? mutex_lock_nested+0x10/0x10 [ 2202.090361][T14084] ip6_route_add+0x24/0x130 [ 2202.094887][T14084] ipv6_route_ioctl+0x3b0/0x500 [ 2202.099844][T14084] ? rt6_purge_dflt_routers+0xb10/0xb10 [ 2202.105423][T14084] ? _copy_from_user+0xc1/0x170 [ 2202.110298][T14084] ? copy_user_enhanced_fast_string+0xa/0x40 [ 2202.116301][T14084] inet6_ioctl+0x207/0x280 [ 2202.120740][T14084] ? __kmem_cache_free+0xb6/0x1f0 [ 2202.125776][T14084] ? inet6_getname+0x640/0x640 [ 2202.130554][T14084] ? tomoyo_path_number_perm+0x205/0x650 [ 2202.136646][T14084] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2202.142131][T14084] sock_do_ioctl+0xfb/0x320 [ 2202.146650][T14084] ? sock_show_fdinfo+0xb0/0xb0 [ 2202.151527][T14084] sock_ioctl+0x4d2/0x710 [ 2202.155875][T14084] ? sock_poll+0x410/0x410 [ 2202.160309][T14084] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2202.165265][T14084] ? security_file_ioctl+0x7c/0xa0 [ 2202.170404][T14084] ? sock_poll+0x410/0x410 [ 2202.174922][T14084] __se_sys_ioctl+0xfa/0x170 [ 2202.179542][T14084] do_syscall_64+0x4c/0xa0 [ 2202.183970][T14084] ? clear_bhb_loop+0x60/0xb0 [ 2202.188669][T14084] ? clear_bhb_loop+0x60/0xb0 [ 2202.193362][T14084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2202.199281][T14084] RIP: 0033:0x7f5623f9ce59 [ 2202.203728][T14084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2202.223352][T14084] RSP: 002b:00007f5624e22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2202.231793][T14084] RAX: ffffffffffffffda RBX: 00007f5624215fa0 RCX: 00007f5623f9ce59 [ 2202.239780][T14084] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000a [ 2202.247771][T14084] RBP: 00007f5624e22090 R08: 0000000000000000 R09: 0000000000000000 [ 2202.255756][T14084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2202.263828][T14084] R13: 00007f5624216038 R14: 00007f5624215fa0 R15: 00007fffa9adc838 [ 2202.271833][T14084] [ 2202.504367][T14094] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.13730'. [ 2203.076765][T14096] ÿ: renamed from virt_wifi0 [ 2203.199620][ T3415] device hsr_slave_0 left promiscuous mode [ 2203.249724][ T3415] device hsr_slave_1 left promiscuous mode [ 2203.274048][ T3415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2203.288893][ T3415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.350507][ T3415] device veth1_macvtap left promiscuous mode [ 2203.356581][ T3415] device veth0_macvtap left promiscuous mode [ 2203.421089][T14119] netlink: 'syz.4.13738': attribute type 29 has an invalid length. [ 2203.491697][ T3415] device veth1_vlan left promiscuous mode [ 2203.497807][ T3415] device veth0_vlan left promiscuous mode [ 2203.800171][T14129] FAULT_INJECTION: forcing a failure. [ 2203.800171][T14129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2203.823657][T14129] CPU: 0 PID: 14129 Comm: syz.3.13741 Not tainted syzkaller #0 [ 2203.831248][T14129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2203.841320][T14129] Call Trace: [ 2203.844607][T14129] [ 2203.847549][T14129] dump_stack_lvl+0x188/0x24e [ 2203.852245][T14129] ? show_regs_print_info+0x12/0x12 [ 2203.857465][T14129] ? load_image+0x400/0x400 [ 2203.861987][T14129] ? __might_fault+0xa6/0x120 [ 2203.866679][T14129] should_fail_ex+0x399/0x4d0 [ 2203.871379][T14129] copyin+0x1b/0x120 [ 2203.875282][T14129] _copy_from_iter+0x447/0x1130 [ 2203.880176][T14129] ? copyout_mc+0x110/0x110 [ 2203.884690][T14129] ? __virt_addr_valid+0x188/0x540 [ 2203.889904][T14129] ? __virt_addr_valid+0x188/0x540 [ 2203.895030][T14129] ? __virt_addr_valid+0x465/0x540 [ 2203.900160][T14129] ? __check_object_size+0x500/0xa40 [ 2203.905458][T14129] netlink_sendmsg+0x755/0xbd0 [ 2203.910292][T14129] ? netlink_getsockopt+0x550/0x550 [ 2203.915505][T14129] ? aa_sock_msg_perm+0x94/0x150 [ 2203.920464][T14129] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2203.925762][T14129] ? security_socket_sendmsg+0x7c/0xa0 [ 2203.931213][T14129] ? netlink_getsockopt+0x550/0x550 [ 2203.936405][T14129] ____sys_sendmsg+0x5be/0x970 [ 2203.941168][T14129] ? __sys_sendmsg_sock+0x30/0x30 [ 2203.946179][T14129] ? __import_iovec+0x315/0x500 [ 2203.951036][T14129] ? import_iovec+0x6f/0xa0 [ 2203.955531][T14129] ___sys_sendmsg+0x2a2/0x360 [ 2203.960204][T14129] ? __sys_sendmsg+0x290/0x290 [ 2203.964972][T14129] ? __lock_acquire+0x7d10/0x7d10 [ 2203.970010][T14129] __se_sys_sendmsg+0x1bb/0x2a0 [ 2203.974855][T14129] ? __x64_sys_sendmsg+0x80/0x80 [ 2203.979794][T14129] ? lockdep_hardirqs_on+0x94/0x140 [ 2203.984989][T14129] do_syscall_64+0x4c/0xa0 [ 2203.989406][T14129] ? clear_bhb_loop+0x60/0xb0 [ 2203.994090][T14129] ? clear_bhb_loop+0x60/0xb0 [ 2203.998767][T14129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2204.004658][T14129] RIP: 0033:0x7f6daf39ce59 [ 2204.009074][T14129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2204.028695][T14129] RSP: 002b:00007f6db0223028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2204.037152][T14129] RAX: ffffffffffffffda RBX: 00007f6daf615fa0 RCX: 00007f6daf39ce59 [ 2204.045114][T14129] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 2204.053076][T14129] RBP: 00007f6db0223090 R08: 0000000000000000 R09: 0000000000000000 [ 2204.061045][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2204.069008][T14129] R13: 00007f6daf616038 R14: 00007f6daf615fa0 R15: 00007ffe4bb8c408 [ 2204.076982][T14129] [ 2204.089057][T13118] Bluetooth: hci2: command 0x040f tx timeout [ 2204.284729][T14118] delete_channel: no stack [ 2204.945567][ T3415] team0 (unregistering): Port device team_slave_1 removed [ 2205.003476][ T3415] team0 (unregistering): Port device team_slave_0 removed [ 2205.511286][T14119] netlink: 'syz.4.13738': attribute type 29 has an invalid length. [ 2205.526463][T14133] device wlan1 entered promiscuous mode [ 2205.750413][T14145] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13745'. [ 2206.162643][T13118] Bluetooth: hci2: command 0x0419 tx timeout [ 2206.372919][T14168] mac80211_hwsim hwsim133 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2206.382411][ T4336] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2206.402657][ T4336] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2206.721453][T13946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2206.793939][T13946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2206.851697][T14183] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13755'. [ 2206.901734][T13946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2207.014931][T13946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2207.680188][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2207.743747][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2207.781484][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2207.834073][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 2207.876214][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2207.891958][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2207.939981][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.947136][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2208.013626][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2208.032121][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2208.101962][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2208.155509][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.162706][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2208.213794][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2208.300727][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2208.334099][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2208.355404][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2208.367641][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2208.383107][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2208.397717][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2208.420457][T13946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2208.431852][T13946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2208.462282][T14207] netlink: 'syz.3.13762': attribute type 2 has an invalid length. [ 2208.466453][T14204] netlink: 763 bytes leftover after parsing attributes in process `syz.4.13761'. [ 2208.509311][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2208.530781][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2208.602385][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2208.622406][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2208.647533][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2208.722989][T14207] device 1 entered promiscuous mode [ 2209.489875][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2209.497346][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2209.570450][T13946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2209.662000][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2209.696733][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2209.778474][T13946] device veth0_vlan entered promiscuous mode [ 2209.850722][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2209.876400][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2209.910767][T13946] device veth1_vlan entered promiscuous mode [ 2209.932969][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2209.948547][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2209.992393][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2210.066923][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2210.103287][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2210.145140][T25673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2210.213314][T13946] device veth0_macvtap entered promiscuous mode [ 2210.244570][T13946] device veth1_macvtap entered promiscuous mode [ 2210.314832][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2210.397182][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.433386][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2210.488916][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.529634][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2210.550712][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.570360][T13946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2210.619930][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2210.666334][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2210.693783][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2210.736546][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2210.793809][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2210.853668][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2210.906121][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2210.977372][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2211.057445][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2211.091641][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2211.117714][T13118] Bluetooth: hci3: ACL packet for unknown connection handle 1392 [ 2211.133728][T13946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2211.147447][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2211.156748][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2211.187321][T13946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.240329][T13946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.266216][T13946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.285480][T13946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.316480][T14295] netlink: 'syz.2.13787': attribute type 10 has an invalid length. [ 2211.344925][T14295] team0: Device hsr_slave_0 failed to register rx_handler [ 2211.502223][T25673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2211.532544][T25673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2211.583691][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2211.618832][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2211.636947][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2211.667579][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2211.875808][T14311] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13790'. [ 2211.936625][T14311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2212.047134][T14318] FAULT_INJECTION: forcing a failure. [ 2212.047134][T14318] name failslab, interval 1, probability 0, space 0, times 0 [ 2212.098971][T14318] CPU: 0 PID: 14318 Comm: syz.0.13794 Not tainted syzkaller #0 [ 2212.106655][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2212.116725][T14318] Call Trace: [ 2212.120021][T14318] [ 2212.123046][T14318] dump_stack_lvl+0x188/0x24e [ 2212.127744][T14318] ? show_regs_print_info+0x12/0x12 [ 2212.132958][T14318] ? load_image+0x400/0x400 [ 2212.137482][T14318] ? perf_trace_lock+0xf8/0x390 [ 2212.142359][T14318] ? verify_lock_unused+0x140/0x140 [ 2212.147578][T14318] ? perf_trace_lock+0xf8/0x390 [ 2212.152451][T14318] should_fail_ex+0x399/0x4d0 [ 2212.157173][T14318] should_failslab+0x5/0x20 [ 2212.161689][T14318] slab_pre_alloc_hook+0x59/0x310 [ 2212.166730][T14318] kmem_cache_alloc+0x56/0x2f0 [ 2212.171495][T14318] ? skb_clone+0x1e7/0x370 [ 2212.175907][T14318] skb_clone+0x1e7/0x370 [ 2212.180157][T14318] __netlink_deliver_tap+0x3ed/0x800 [ 2212.185442][T14318] ? netlink_deliver_tap+0x2e/0x1b0 [ 2212.190719][T14318] netlink_deliver_tap+0x19c/0x1b0 [ 2212.195830][T14318] netlink_unicast+0x728/0x8d0 [ 2212.200604][T14318] netlink_sendmsg+0x8ad/0xbd0 [ 2212.205369][T14318] ? netlink_getsockopt+0x550/0x550 [ 2212.210574][T14318] ? aa_sock_msg_perm+0x94/0x150 [ 2212.215516][T14318] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2212.220793][T14318] ? security_socket_sendmsg+0x7c/0xa0 [ 2212.226241][T14318] ? netlink_getsockopt+0x550/0x550 [ 2212.231427][T14318] ____sys_sendmsg+0x5be/0x970 [ 2212.236188][T14318] ? __sys_sendmsg_sock+0x30/0x30 [ 2212.241205][T14318] ? __import_iovec+0x315/0x500 [ 2212.246056][T14318] ? import_iovec+0x6f/0xa0 [ 2212.250551][T14318] ___sys_sendmsg+0x2a2/0x360 [ 2212.255221][T14318] ? __sys_sendmsg+0x290/0x290 [ 2212.259992][T14318] ? __lock_acquire+0x7d10/0x7d10 [ 2212.265040][T14318] __se_sys_sendmsg+0x1bb/0x2a0 [ 2212.269890][T14318] ? ct_nmi_exit+0x145/0x1c0 [ 2212.274474][T14318] ? __x64_sys_sendmsg+0x80/0x80 [ 2212.279434][T14318] ? lockdep_hardirqs_on+0x94/0x140 [ 2212.284722][T14318] do_syscall_64+0x4c/0xa0 [ 2212.289132][T14318] ? clear_bhb_loop+0x60/0xb0 [ 2212.293812][T14318] ? clear_bhb_loop+0x60/0xb0 [ 2212.298489][T14318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2212.304390][T14318] RIP: 0033:0x7f1b4459ce59 [ 2212.308804][T14318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2212.328411][T14318] RSP: 002b:00007f1b453e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2212.336822][T14318] RAX: ffffffffffffffda RBX: 00007f1b44815fa0 RCX: 00007f1b4459ce59 [ 2212.344790][T14318] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 2212.352756][T14318] RBP: 00007f1b453e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2212.360722][T14318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2212.368872][T14318] R13: 00007f1b44816038 R14: 00007f1b44815fa0 R15: 00007ffddb6409f8 [ 2212.376855][T14318] [ 2213.018853][T14320] netlink: 61955 bytes leftover after parsing attributes in process `syz.3.13793'. [ 2213.042426][T14320] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13793'. [ 2213.085952][T14319] netlink: 'syz.3.13793': attribute type 6 has an invalid length. [ 2219.170442][T14530] netlink: 'syz.2.13851': attribute type 29 has an invalid length. [ 2219.308317][T14532] netlink: 'syz.4.13852': attribute type 10 has an invalid length. [ 2219.333858][T14532] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.347019][T14532] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.617252][T14532] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.626591][T14532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2219.640903][T14532] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.649550][T14532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2219.821226][T14532] team0: Port device bridge0 added [ 2219.852327][T14530] netlink: 'syz.2.13851': attribute type 29 has an invalid length. [ 2219.868889][T14539] netlink: 'syz.2.13851': attribute type 21 has an invalid length. [ 2219.899950][T14539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13851'. [ 2220.014523][T14533] netlink: 'syz.2.13851': attribute type 29 has an invalid length. [ 2220.241389][T14556] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13859'. [ 2220.286562][T14562] FAULT_INJECTION: forcing a failure. [ 2220.286562][T14562] name failslab, interval 1, probability 0, space 0, times 0 [ 2220.301022][T14562] CPU: 0 PID: 14562 Comm: syz.3.13861 Not tainted syzkaller #0 [ 2220.308594][T14562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2220.318641][T14562] Call Trace: [ 2220.321914][T14562] [ 2220.324924][T14562] dump_stack_lvl+0x188/0x24e [ 2220.329598][T14562] ? show_regs_print_info+0x12/0x12 [ 2220.334785][T14562] ? load_image+0x400/0x400 [ 2220.339280][T14562] ? __might_sleep+0xd0/0xd0 [ 2220.343863][T14562] ? __lock_acquire+0x7d10/0x7d10 [ 2220.348883][T14562] should_fail_ex+0x399/0x4d0 [ 2220.353555][T14562] should_failslab+0x5/0x20 [ 2220.358044][T14562] slab_pre_alloc_hook+0x59/0x310 [ 2220.363062][T14562] ? __inet_diag_dump_start+0x8b/0x970 [ 2220.368523][T14562] __kmem_cache_alloc_node+0x4f/0x260 [ 2220.373889][T14562] ? __netlink_dump_start+0x11f/0x6f0 [ 2220.379252][T14562] ? __inet_diag_dump_start+0x8b/0x970 [ 2220.384703][T14562] kmalloc_trace+0x26/0xe0 [ 2220.389206][T14562] __inet_diag_dump_start+0x8b/0x970 [ 2220.394519][T14562] ? netlink_lookup+0x30/0x200 [ 2220.399278][T14562] __netlink_dump_start+0x3f9/0x6f0 [ 2220.404473][T14562] inet_diag_rcv_msg_compat+0x207/0x420 [ 2220.410018][T14562] ? __inet_diag_dump+0x380/0x380 [ 2220.415036][T14562] ? sock_diag_rcv_msg+0x142/0x5f0 [ 2220.420142][T14562] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 2220.425855][T14562] ? inet_diag_dump_start_compat+0x20/0x20 [ 2220.431651][T14562] ? inet_diag_dump+0x50/0x50 [ 2220.436437][T14562] ? __inet_diag_dump+0x380/0x380 [ 2220.441454][T14562] sock_diag_rcv_msg+0x3cc/0x5f0 [ 2220.446401][T14562] netlink_rcv_skb+0x1fb/0x450 [ 2220.451178][T14562] ? sock_diag_bind+0xa0/0xa0 [ 2220.455879][T14562] ? netlink_ack+0x1170/0x1170 [ 2220.460650][T14562] ? netlink_deliver_tap+0x2e/0x1b0 [ 2220.465847][T14562] sock_diag_rcv+0x26/0x40 [ 2220.470261][T14562] netlink_unicast+0x74d/0x8d0 [ 2220.475036][T14562] netlink_sendmsg+0x8ad/0xbd0 [ 2220.479802][T14562] ? netlink_getsockopt+0x550/0x550 [ 2220.485082][T14562] ? aa_sock_msg_perm+0x94/0x150 [ 2220.490012][T14562] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2220.495289][T14562] ? security_socket_sendmsg+0x7c/0xa0 [ 2220.500740][T14562] ? netlink_getsockopt+0x550/0x550 [ 2220.505929][T14562] ____sys_sendmsg+0x5be/0x970 [ 2220.510695][T14562] ? __sys_sendmsg_sock+0x30/0x30 [ 2220.515710][T14562] ? __import_iovec+0x315/0x500 [ 2220.520557][T14562] ? import_iovec+0x6f/0xa0 [ 2220.525053][T14562] ___sys_sendmsg+0x2a2/0x360 [ 2220.529725][T14562] ? __sys_sendmsg+0x290/0x290 [ 2220.534493][T14562] ? __lock_acquire+0x7d10/0x7d10 [ 2220.539529][T14562] __se_sys_sendmsg+0x1bb/0x2a0 [ 2220.544371][T14562] ? __x64_sys_sendmsg+0x80/0x80 [ 2220.549571][T14562] ? lockdep_hardirqs_on+0x94/0x140 [ 2220.554769][T14562] do_syscall_64+0x4c/0xa0 [ 2220.559176][T14562] ? clear_bhb_loop+0x60/0xb0 [ 2220.563847][T14562] ? clear_bhb_loop+0x60/0xb0 [ 2220.568519][T14562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2220.574404][T14562] RIP: 0033:0x7f6daf39ce59 [ 2220.579163][T14562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2220.598758][T14562] RSP: 002b:00007f6db0223028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2220.607165][T14562] RAX: ffffffffffffffda RBX: 00007f6daf615fa0 RCX: 00007f6daf39ce59 [ 2220.615126][T14562] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 2220.623089][T14562] RBP: 00007f6db0223090 R08: 0000000000000000 R09: 0000000000000000 [ 2220.631048][T14562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2220.639117][T14562] R13: 00007f6daf616038 R14: 00007f6daf615fa0 R15: 00007ffe4bb8c408 [ 2220.647090][T14562] [ 2221.046708][T14577] mac80211_hwsim hwsim128 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2221.603224][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.609666][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.465176][T14616] netlink: 'syz.2.13879': attribute type 29 has an invalid length. [ 2224.528514][T14616] netlink: 'syz.2.13879': attribute type 29 has an invalid length. [ 2224.600319][T14616] netlink: 'syz.2.13879': attribute type 29 has an invalid length. [ 2226.047646][T14668] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.13898'. [ 2226.651609][T14690] FAULT_INJECTION: forcing a failure. [ 2226.651609][T14690] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.688652][T14690] CPU: 1 PID: 14690 Comm: syz.1.13908 Not tainted syzkaller #0 [ 2226.696249][T14690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2226.706313][T14690] Call Trace: [ 2226.709605][T14690] [ 2226.712547][T14690] dump_stack_lvl+0x188/0x24e [ 2226.717247][T14690] ? show_regs_print_info+0x12/0x12 [ 2226.722461][T14690] ? load_image+0x400/0x400 [ 2226.726984][T14690] ? __might_sleep+0xd0/0xd0 [ 2226.731589][T14690] ? __lock_acquire+0x7d10/0x7d10 [ 2226.736804][T14690] ? do_syscall_64+0x4c/0xa0 [ 2226.741412][T14690] should_fail_ex+0x399/0x4d0 [ 2226.746107][T14690] should_failslab+0x5/0x20 [ 2226.750623][T14690] slab_pre_alloc_hook+0x59/0x310 [ 2226.755669][T14690] ? bpf_sk_storage_diag_alloc+0x222/0x690 [ 2226.761591][T14690] __kmem_cache_alloc_node+0x4f/0x260 [ 2226.766964][T14690] ? bpf_sk_storage_diag_alloc+0x222/0x690 [ 2226.772767][T14690] __kmalloc+0xa0/0x240 [ 2226.776922][T14690] bpf_sk_storage_diag_alloc+0x222/0x690 [ 2226.782552][T14690] __inet_diag_dump_start+0x325/0x970 [ 2226.787927][T14690] __netlink_dump_start+0x3f9/0x6f0 [ 2226.793182][T14690] inet_diag_rcv_msg_compat+0x207/0x420 [ 2226.798743][T14690] ? __inet_diag_dump+0x380/0x380 [ 2226.803781][T14690] ? sock_diag_rcv_msg+0x142/0x5f0 [ 2226.808895][T14690] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 2226.814616][T14690] ? inet_diag_dump_start_compat+0x20/0x20 [ 2226.820420][T14690] ? inet_diag_dump+0x50/0x50 [ 2226.825103][T14690] ? __inet_diag_dump+0x380/0x380 [ 2226.830126][T14690] sock_diag_rcv_msg+0x3cc/0x5f0 [ 2226.835235][T14690] netlink_rcv_skb+0x1fb/0x450 [ 2226.839993][T14690] ? sock_diag_bind+0xa0/0xa0 [ 2226.844668][T14690] ? netlink_ack+0x1170/0x1170 [ 2226.849431][T14690] ? netlink_deliver_tap+0x2e/0x1b0 [ 2226.854743][T14690] sock_diag_rcv+0x26/0x40 [ 2226.859169][T14690] netlink_unicast+0x74d/0x8d0 [ 2226.863936][T14690] netlink_sendmsg+0x8ad/0xbd0 [ 2226.868702][T14690] ? netlink_getsockopt+0x550/0x550 [ 2226.873904][T14690] ? aa_sock_msg_perm+0x94/0x150 [ 2226.878837][T14690] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2226.884118][T14690] ? security_socket_sendmsg+0x7c/0xa0 [ 2226.889573][T14690] ? netlink_getsockopt+0x550/0x550 [ 2226.894763][T14690] ____sys_sendmsg+0x5be/0x970 [ 2226.899526][T14690] ? __sys_sendmsg_sock+0x30/0x30 [ 2226.904556][T14690] ? __import_iovec+0x315/0x500 [ 2226.909402][T14690] ? import_iovec+0x6f/0xa0 [ 2226.913898][T14690] ___sys_sendmsg+0x2a2/0x360 [ 2226.918573][T14690] ? __sys_sendmsg+0x290/0x290 [ 2226.923344][T14690] ? __lock_acquire+0x7d10/0x7d10 [ 2226.928382][T14690] __se_sys_sendmsg+0x1bb/0x2a0 [ 2226.933227][T14690] ? __x64_sys_sendmsg+0x80/0x80 [ 2226.938613][T14690] ? lockdep_hardirqs_on+0x94/0x140 [ 2226.943810][T14690] do_syscall_64+0x4c/0xa0 [ 2226.948217][T14690] ? clear_bhb_loop+0x60/0xb0 [ 2226.952888][T14690] ? clear_bhb_loop+0x60/0xb0 [ 2226.957562][T14690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2226.963451][T14690] RIP: 0033:0x7f548c99ce59 [ 2226.967858][T14690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.987478][T14690] RSP: 002b:00007f548d903028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2226.995897][T14690] RAX: ffffffffffffffda RBX: 00007f548cc15fa0 RCX: 00007f548c99ce59 [ 2227.003868][T14690] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000003 [ 2227.011834][T14690] RBP: 00007f548d903090 R08: 0000000000000000 R09: 0000000000000000 [ 2227.019887][T14690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2227.027852][T14690] R13: 00007f548cc16038 R14: 00007f548cc15fa0 R15: 00007fff029d9d98 [ 2227.035830][T14690] [ 2227.192637][ T4330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2227.202196][ T4330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2227.210328][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2227.218249][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2227.226914][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2227.235003][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2227.452163][T14696] chnl_net:caif_netlink_parms(): no params data found [ 2228.726974][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 2228.813463][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.830657][T14696] device bridge_slave_0 entered promiscuous mode [ 2228.839400][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 2228.846490][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.886575][T14696] device bridge_slave_1 entered promiscuous mode [ 2229.007092][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2229.047947][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2229.062433][T14724] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2229.165337][T14696] team0: Port device team_slave_0 added [ 2229.249616][T14696] team0: Port device team_slave_1 added [ 2229.269092][ T4330] Bluetooth: hci5: command 0x0409 tx timeout [ 2229.324361][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2229.371630][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2229.413407][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2229.454389][T14734] mac80211_hwsim hwsim143 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2229.499465][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2229.511185][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2229.553133][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2229.670933][T14696] device hsr_slave_0 entered promiscuous mode [ 2229.690101][T14696] device hsr_slave_1 entered promiscuous mode [ 2229.708026][T14696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2229.717157][T14696] Cannot create hsr debugfs directory [ 2230.090466][T14696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.564956][T14696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.805835][T14696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.057160][T14696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.358836][ T4330] Bluetooth: hci5: command 0x041b tx timeout [ 2231.389429][T14696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2231.445628][T14696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2231.503210][T14696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2231.544034][T14696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2231.669481][ T3415] wlan1: Trigger new scan to find an IBSS to join [ 2231.746294][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2231.802904][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 2231.849441][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2231.857368][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2231.904927][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2231.941032][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2231.979406][T21382] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.986538][T21382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2232.049190][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2232.078816][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2232.107774][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2232.159345][T21382] bridge0: port 2(bridge_slave_1) entered blocking state [ 2232.166502][T21382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2232.205054][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2232.239698][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2232.304378][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2232.332002][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2232.361393][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2232.403187][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2232.494820][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2232.521164][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2232.554942][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2232.577238][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2232.595678][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2232.631228][T14696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2232.820891][T14819] netlink: 'syz.4.13949': attribute type 15 has an invalid length. [ 2232.875613][T14819] netlink: 'syz.4.13949': attribute type 7 has an invalid length. [ 2232.910538][T14823] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.13949'. [ 2233.429322][ T4330] Bluetooth: hci5: command 0x040f tx timeout [ 2233.579701][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2233.589455][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2233.663936][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2233.747437][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2233.766415][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2233.855278][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2233.885491][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2233.906511][T14696] device veth0_vlan entered promiscuous mode [ 2233.975648][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2233.988456][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2234.035112][T14696] device veth1_vlan entered promiscuous mode [ 2234.224177][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2234.292222][T14857] netlink: 'syz.4.13961': attribute type 2 has an invalid length. [ 2234.329132][T14857] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13961'. [ 2234.344585][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2234.424073][T14696] device veth0_macvtap entered promiscuous mode [ 2234.465014][T14696] device veth1_macvtap entered promiscuous mode [ 2234.512148][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.546916][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.584537][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.608793][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.618647][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.638998][T21382] wlan1: Trigger new scan to find an IBSS to join [ 2234.662403][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.688913][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2234.724991][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.750599][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2234.768952][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.809016][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.848994][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.869311][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.884502][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.910063][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.933427][T14696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2234.958980][T14696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2234.981577][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2234.998879][T14860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13963'. [ 2235.017855][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2235.032629][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2235.057826][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2235.078069][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2235.097600][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2235.116816][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2235.144042][T14871] netlink: 'syz.3.13967': attribute type 10 has an invalid length. [ 2235.178070][T14871] device geneve0 entered promiscuous mode [ 2235.234709][T14696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2235.272980][T14696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2235.303152][T14696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2235.328752][T14696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2235.508982][ T4330] Bluetooth: hci5: command 0x0419 tx timeout [ 2235.569354][T21382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2235.577216][T21382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2235.585032][ T4770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2235.602186][ T4770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2235.626798][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2235.636971][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2236.048237][T14896] FAULT_INJECTION: forcing a failure. [ 2236.048237][T14896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2236.085022][T14896] CPU: 0 PID: 14896 Comm: syz.3.13977 Not tainted syzkaller #0 [ 2236.092630][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2236.102793][T14896] Call Trace: [ 2236.106088][T14896] [ 2236.109036][T14896] dump_stack_lvl+0x188/0x24e [ 2236.113712][T14896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2236.119875][T14896] ? show_regs_print_info+0x12/0x12 [ 2236.125071][T14896] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2236.131234][T14896] should_fail_ex+0x399/0x4d0 [ 2236.135907][T14896] _copy_from_user+0x2c/0x170 [ 2236.140585][T14896] ___sys_sendmsg+0x1c3/0x360 [ 2236.145263][T14896] ? __sys_sendmsg+0x290/0x290 [ 2236.150019][T14896] ? rcu_is_watching+0x5a/0xa0 [ 2236.154809][T14896] __se_sys_sendmsg+0x1bb/0x2a0 [ 2236.159655][T14896] ? __x64_sys_sendmsg+0x80/0x80 [ 2236.164596][T14896] ? lockdep_hardirqs_on+0x94/0x140 [ 2236.169798][T14896] do_syscall_64+0x4c/0xa0 [ 2236.174206][T14896] ? clear_bhb_loop+0x60/0xb0 [ 2236.178987][T14896] ? clear_bhb_loop+0x60/0xb0 [ 2236.183666][T14896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2236.189556][T14896] RIP: 0033:0x7f6daf39ce59 [ 2236.193961][T14896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2236.213905][T14896] RSP: 002b:00007f6db0223028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2236.222581][T14896] RAX: ffffffffffffffda RBX: 00007f6daf615fa0 RCX: 00007f6daf39ce59 [ 2236.230554][T14896] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000005 [ 2236.238528][T14896] RBP: 00007f6db0223090 R08: 0000000000000000 R09: 0000000000000000 [ 2236.246497][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2236.254471][T14896] R13: 00007f6daf616038 R14: 00007f6daf615fa0 R15: 00007ffe4bb8c408 [ 2236.262900][T14896] [ 2236.831426][T14912] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13980'. [ 2236.875784][T14912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2237.572783][T14942] netlink: 'syz.2.13993': attribute type 40 has an invalid length. [ 2237.676738][T25673] wlan1: Trigger new scan to find an IBSS to join [ 2238.649692][T25673] wlan1: Creating new IBSS network, BSSID 32:20:43:d5:94:71 [ 2239.450085][T14982] netlink: 'syz.4.14004': attribute type 3 has an invalid length. [ 2239.468297][T14982] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.14004'. [ 2239.543924][T14982] netlink: 'syz.4.14004': attribute type 10 has an invalid length. [ 2239.559438][T14982] team0: Device hsr_slave_0 failed to register rx_handler [ 2240.657659][T15015] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.14013'. [ 2242.802962][ T4336] tipc: Left network mode [ 2242.967115][T15044] FAULT_INJECTION: forcing a failure. [ 2242.967115][T15044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2243.040385][T15044] CPU: 1 PID: 15044 Comm: syz.3.14022 Not tainted syzkaller #0 [ 2243.048148][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2243.058276][T15044] Call Trace: [ 2243.061617][T15044] [ 2243.064592][T15044] dump_stack_lvl+0x188/0x24e [ 2243.069343][T15044] ? show_regs_print_info+0x12/0x12 [ 2243.074575][T15044] ? load_image+0x400/0x400 [ 2243.079136][T15044] ? __lock_acquire+0x7d10/0x7d10 [ 2243.084246][T15044] should_fail_ex+0x399/0x4d0 [ 2243.089410][T15044] _copy_from_user+0x2c/0x170 [ 2243.094145][T15044] __sys_bpf+0x2ea/0x780 [ 2243.098452][T15044] ? bpf_link_show_fdinfo+0x380/0x380 [ 2243.103935][T15044] ? lock_chain_count+0x20/0x20 [ 2243.108884][T15044] __x64_sys_bpf+0x78/0x90 [ 2243.113446][T15044] do_syscall_64+0x4c/0xa0 [ 2243.117905][T15044] ? clear_bhb_loop+0x60/0xb0 [ 2243.122609][T15044] ? clear_bhb_loop+0x60/0xb0 [ 2243.127331][T15044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2243.133247][T15044] RIP: 0033:0x7f6daf39ce59 [ 2243.137695][T15044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2243.157356][T15044] RSP: 002b:00007f6db0223028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2243.165806][T15044] RAX: ffffffffffffffda RBX: 00007f6daf615fa0 RCX: 00007f6daf39ce59 [ 2243.173812][T15044] RDX: 000000000000000c RSI: 0000200000000f80 RDI: 000000000000000a [ 2243.181804][T15044] RBP: 00007f6db0223090 R08: 0000000000000000 R09: 0000000000000000 [ 2243.189799][T15044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2243.197784][T15044] R13: 00007f6daf616038 R14: 00007f6daf615fa0 R15: 00007ffe4bb8c408 [ 2243.205843][T15044] [ 2243.282669][T15053] netlink: 'syz.4.14026': attribute type 39 has an invalid length. [ 2243.595938][T15061] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14029'. [ 2243.773503][T15061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2243.864323][T15061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2243.891887][T15061] bond0 (unregistering): Released all slaves [ 2244.754826][T15106] netlink: 'syz.3.14042': attribute type 29 has an invalid length. [ 2244.795643][T15106] netlink: 'syz.3.14042': attribute type 29 has an invalid length. [ 2245.239471][ T4336] device hsr_slave_0 left promiscuous mode [ 2245.274534][ T4336] device hsr_slave_1 left promiscuous mode [ 2245.285287][ T4336] device bridge_slave_1 left promiscuous mode [ 2245.302672][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2245.334592][ T4336] device bridge_slave_0 left promiscuous mode [ 2245.370814][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2245.467185][ T4336] device veth1_macvtap left promiscuous mode [ 2245.494239][ T4336] device veth0_macvtap left promiscuous mode [ 2245.510340][ T4336] device veth1_vlan left promiscuous mode [ 2245.526369][ T4336] device veth0_vlan left promiscuous mode [ 2247.791990][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 2247.852570][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 2248.466456][T15130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14050'. [ 2248.584525][T15130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2248.628158][T15130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2248.661700][T15130] bond0 (unregistering): Released all slaves [ 2248.700038][T15164] device wlan1 left promiscuous mode [ 2249.062462][T15182] netlink: 'syz.1.14065': attribute type 3 has an invalid length. [ 2249.080764][T15182] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.14065'. [ 2249.121770][T15182] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14065'. [ 2249.493750][T15196] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14070'. [ 2250.110276][T15206] netlink: 'syz.4.14072': attribute type 1 has an invalid length. [ 2250.118140][T15206] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.14072'. [ 2250.623366][T15218] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14077'. [ 2252.305805][T15262] netlink: 'syz.0.14092': attribute type 1 has an invalid length. [ 2252.344731][T15262] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.14092'. [ 2254.061806][T15293] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.14105'. [ 2254.240532][T15295] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.14105'. [ 2254.517963][T15301] netlink: 'syz.0.14107': attribute type 10 has an invalid length. [ 2254.615779][T15301] team0: Device ipvlan1 failed to register rx_handler [ 2254.709337][T15304] netlink: 'syz.2.14109': attribute type 1 has an invalid length. [ 2254.728193][T15304] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.14109'. [ 2255.215726][T15326] netlink: 'syz.3.14116': attribute type 3 has an invalid length. [ 2255.234564][T15326] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.14116'. [ 2255.541889][T15334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14118'. [ 2257.413608][T15385] netlink: 'syz.4.14137': attribute type 10 has an invalid length. [ 2258.234815][T15407] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14145'. [ 2259.495112][T15444] device syzkaller0 entered promiscuous mode [ 2259.523824][T15461] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.14162'. [ 2259.534289][T15461] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.14162'. [ 2264.271211][T15485] FAULT_INJECTION: forcing a failure. [ 2264.271211][T15485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.319690][T15485] CPU: 1 PID: 15485 Comm: syz.1.14166 Not tainted syzkaller #0 [ 2264.327364][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2264.337487][T15485] Call Trace: [ 2264.340822][T15485] [ 2264.343784][T15485] dump_stack_lvl+0x188/0x24e [ 2264.348521][T15485] ? show_regs_print_info+0x12/0x12 [ 2264.353776][T15485] ? load_image+0x400/0x400 [ 2264.358331][T15485] ? __lock_acquire+0x7d10/0x7d10 [ 2264.363391][T15485] ? snprintf+0xe5/0x140 [ 2264.367678][T15485] should_fail_ex+0x399/0x4d0 [ 2264.372413][T15485] _copy_to_user+0x2c/0x130 [ 2264.376964][T15485] simple_read_from_buffer+0xe3/0x150 [ 2264.382473][T15485] proc_fail_nth_read+0x1a6/0x220 [ 2264.387584][T15485] ? proc_fault_inject_write+0x310/0x310 [ 2264.393289][T15485] ? fsnotify_perm+0x248/0x550 [ 2264.398095][T15485] ? proc_fault_inject_write+0x310/0x310 [ 2264.403770][T15485] vfs_read+0x2de/0xa00 [ 2264.407992][T15485] ? kernel_read+0x1e0/0x1e0 [ 2264.412633][T15485] ? __fget_files+0x28/0x4b0 [ 2264.417248][T15485] ? __fget_files+0x28/0x4b0 [ 2264.421886][T15485] ? __fget_files+0x43d/0x4b0 [ 2264.426635][T15485] ? __fdget_pos+0x2ae/0x360 [ 2264.431249][T15485] ? ksys_read+0x71/0x250 [ 2264.435628][T15485] ksys_read+0x14c/0x250 [ 2264.439923][T15485] ? vfs_write+0xa30/0xa30 [ 2264.444397][T15485] ? lockdep_hardirqs_on+0x94/0x140 [ 2264.449642][T15485] do_syscall_64+0x4c/0xa0 [ 2264.454105][T15485] ? clear_bhb_loop+0x60/0xb0 [ 2264.458828][T15485] ? clear_bhb_loop+0x60/0xb0 [ 2264.463544][T15485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2264.469491][T15485] RIP: 0033:0x7f548c95d68e [ 2264.473947][T15485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2264.493784][T15485] RSP: 002b:00007f548d902fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2264.502252][T15485] RAX: ffffffffffffffda RBX: 00007f548d9036c0 RCX: 00007f548c95d68e [ 2264.510250][T15485] RDX: 000000000000000f RSI: 00007f548d9030a0 RDI: 0000000000000008 [ 2264.518253][T15485] RBP: 00007f548d903090 R08: 0000000000000000 R09: 0000000000000000 [ 2264.526246][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.534247][T15485] R13: 00007f548cc16038 R14: 00007f548cc15fa0 R15: 00007fff029d9d98 [ 2264.542482][T15485] [ 2264.820973][T15505] pimreg: tun_chr_ioctl cmd 2147767520 [ 2265.043010][T15524] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14181'. [ 2266.315508][T15553] netlink: 'syz.2.14193': attribute type 10 has an invalid length. [ 2266.330194][T15559] delete_channel: no stack [ 2266.348769][T15553] netlink: 'syz.2.14193': attribute type 11 has an invalid length. [ 2266.356889][T15553] netlink: 5145 bytes leftover after parsing attributes in process `syz.2.14193'. [ 2266.366679][T15559] delete_channel: no stack [ 2267.236813][T15585] device sit0 entered promiscuous mode [ 2268.348499][T15625] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14220'. [ 2268.379185][T15625] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14220'. [ 2268.390886][T15623] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14220'. [ 2268.406166][T15631] netlink: 'syz.0.14223': attribute type 10 has an invalid length. [ 2268.462357][T15631] team0: Device ipvlan1 failed to register rx_handler [ 2268.925648][T15648] delete_channel: no stack [ 2270.212727][T15670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14236'. [ 2270.415021][T15681] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.14242'. [ 2275.427141][T15734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14259'. [ 2275.935075][T15750] netlink: 'syz.4.14264': attribute type 10 has an invalid length. [ 2276.400291][T15756] mac80211_hwsim hwsim145 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2279.809297][T15849] syz.2.14299[15849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2279.809400][T15849] syz.2.14299[15849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2280.119317][T15856] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14302'. [ 2280.208448][T15859] netlink: 'syz.3.14303': attribute type 17 has an invalid length. [ 2280.243945][T15859] netlink: 'syz.3.14303': attribute type 16 has an invalid length. [ 2280.310644][T15859] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14303'. [ 2283.031035][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.037387][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.521316][T15918] syz.4.14321[15918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2283.521437][T15918] syz.4.14321[15918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2283.932284][T15929] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.14325'. [ 2287.184942][T15975] syz.3.14339[15975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2287.185043][T15975] syz.3.14339[15975] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2289.382574][T16020] netlink: 'syz.3.14355': attribute type 10 has an invalid length. [ 2289.439423][T16020] team0: Device hsr_slave_0 failed to register rx_handler [ 2289.640303][T16032] syz.1.14358[16032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2289.640404][T16032] syz.1.14358[16032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2290.945254][T16063] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14367'. [ 2291.197159][T16057] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.14367'. [ 2291.313748][T16053] netlink: 'syz.0.14367': attribute type 7 has an invalid length. [ 2291.701043][T16076] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14374'. [ 2292.033383][T16089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14380'. [ 2292.164877][T16094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14379'. [ 2292.288816][T16094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14379'. [ 2292.422291][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14379'. [ 2292.481075][T16094] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14379'. [ 2293.200776][T16119] netlink: 'syz.2.14389': attribute type 1 has an invalid length. [ 2293.218947][T16119] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.14389'. [ 2293.239501][T16121] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14390'. [ 2296.597538][T16163] syz.3.14405[16163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2296.597640][T16163] syz.3.14405[16163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2298.444493][T16192] netlink: 'syz.0.14415': attribute type 10 has an invalid length. [ 2299.493582][T16206] syz.1.14419[16206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2299.493678][T16206] syz.1.14419[16206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2299.994356][T16222] tipc: Started in network mode [ 2300.138878][T16222] tipc: Node identity 9215a268, cluster identity 4711 [ 2300.157803][T16222] tipc: Node number set to 2450891368 [ 2300.391467][T16235] __nla_validate_parse: 1 callbacks suppressed [ 2300.391484][T16235] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14431'. [ 2300.652490][T16243] syz.4.14434[16243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2300.652584][T16243] syz.4.14434[16243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2301.708426][T16273] netlink: 'syz.2.14445': attribute type 2 has an invalid length. [ 2301.813266][T16273] netlink: 'syz.2.14445': attribute type 9 has an invalid length. [ 2301.858552][T16273] netlink: 'syz.2.14445': attribute type 10 has an invalid length. [ 2301.867386][T16273] netlink: 'syz.2.14445': attribute type 11 has an invalid length. [ 2301.875670][T16273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14445'. [ 2303.329608][T16325] netlink: 'syz.4.14459': attribute type 21 has an invalid length. [ 2303.337714][T16325] netlink: 'syz.4.14459': attribute type 6 has an invalid length. [ 2303.504302][T16325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14459'. [ 2303.853747][T16330] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2307.262887][T16379] netlink: 'syz.1.14476': attribute type 27 has an invalid length. [ 2307.486061][T16386] syz.3.14480[16386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2307.486153][T16386] syz.3.14480[16386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2307.797453][T16383] netlink: 'syz.2.14479': attribute type 2 has an invalid length. [ 2307.841929][T16383] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14479'. [ 2308.606936][T13118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2308.616314][T13118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2308.624835][T13118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2308.653089][T13118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2308.671376][T13118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2308.679187][T13118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2308.884189][T16412] chnl_net:caif_netlink_parms(): no params data found [ 2309.023743][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2309.035969][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2309.055832][T16412] device bridge_slave_0 entered promiscuous mode [ 2309.078284][T16412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2309.101622][T16412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2309.126643][T16412] device bridge_slave_1 entered promiscuous mode [ 2309.185798][T16412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2310.872043][T13118] Bluetooth: hci4: command 0x0409 tx timeout [ 2310.892808][T16412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2311.006224][T16412] team0: Port device team_slave_0 added [ 2311.040907][T16412] team0: Port device team_slave_1 added [ 2311.105373][T16412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2311.136512][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2311.229460][T16412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2311.329524][T16412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2311.336607][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2311.376429][T16412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2311.393362][T16436] syz.4.14493[16436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2311.393454][T16436] syz.4.14493[16436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2311.475524][T15442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.618910][T16412] device hsr_slave_0 entered promiscuous mode [ 2311.632689][T16412] device hsr_slave_1 entered promiscuous mode [ 2311.684350][T16412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2311.697530][T16412] Cannot create hsr debugfs directory [ 2311.741239][T15442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.847875][T15442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2311.975154][T15442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2312.198669][T15442] device 0 left promiscuous mode [ 2312.289435][T15442] device 1 left promiscuous mode [ 2312.418919][T15442] tipc: Left network mode [ 2312.730531][T16476] syz.1.14506[16476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2312.730629][T16476] syz.1.14506[16476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2312.950280][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 2313.024836][T16486] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.14508'. [ 2313.362772][T16412] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2313.486872][T16412] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2313.507703][T16412] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2313.551806][T16502] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14513'. [ 2313.568113][T16412] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2313.644888][T16505] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2313.999072][T16412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2314.062083][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2314.096623][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2314.196954][T16412] 8021q: adding VLAN 0 to HW filter on device team0 [ 2314.257733][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2314.286985][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2314.346269][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state [ 2314.353473][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2314.417635][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2314.476662][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2314.500733][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2314.573093][T15440] bridge0: port 2(bridge_slave_1) entered blocking state [ 2314.580275][T15440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2314.612089][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2314.682907][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2314.755716][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2314.806593][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2315.031916][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 2315.129807][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2315.148021][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2315.175644][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2315.208458][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2315.235192][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2315.276681][T16412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2315.327903][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2315.357928][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2315.536475][T16550] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14527'. [ 2315.749891][T15442] device hsr_slave_0 left promiscuous mode [ 2315.756972][T15442] device hsr_slave_1 left promiscuous mode [ 2315.853395][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2315.871233][T15442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2315.889578][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2315.957955][T15442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2316.021832][T15442] device bridge_slave_0 left promiscuous mode [ 2316.064385][T15442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.177987][T15442] device veth1_macvtap left promiscuous mode [ 2316.258463][T15442] device veth0_macvtap left promiscuous mode [ 2316.290763][T15442] device veth1_vlan left promiscuous mode [ 2316.322417][T15442] device veth0_vlan left promiscuous mode [ 2317.110469][T13118] Bluetooth: hci4: command 0x0419 tx timeout [ 2317.143941][T15442] team0 (unregistering): Port device team_slave_1 removed [ 2317.187615][T15442] team0 (unregistering): Port device team_slave_0 removed [ 2317.308624][T15442] team0 (unregistering): Port device bridge_slave_1 removed [ 2317.940763][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2317.948501][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2318.024438][T16412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2318.249732][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2318.282700][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2318.389635][T16593] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14536'. [ 2318.537523][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2318.580937][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2318.706292][T16412] device veth0_vlan entered promiscuous mode [ 2318.767040][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2318.838979][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2319.444028][T16412] device veth1_vlan entered promiscuous mode [ 2319.584327][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2319.667204][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2319.752068][T16412] device veth0_macvtap entered promiscuous mode [ 2319.786304][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2319.807857][T16412] device veth1_macvtap entered promiscuous mode [ 2319.885794][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.948141][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.967110][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2319.986299][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2319.997615][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2320.009018][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.020231][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2320.032523][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.053618][T16412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2320.075505][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.097482][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.108173][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.125340][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.139443][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.154097][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.164622][T16412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2320.175442][T16412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2320.215029][T16412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2320.235188][T16615] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14544'. [ 2320.269628][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2320.289354][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2320.300923][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2320.321111][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2320.340989][T16626] netlink: 'syz.0.14545': attribute type 21 has an invalid length. [ 2320.369720][T16626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14545'. [ 2320.425397][T16412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.465214][T16412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.494436][T16412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.539377][T16412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2320.950304][T13118] Bluetooth: hci2: command 0x0406 tx timeout [ 2320.983373][T15446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2321.017427][T15446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2321.076376][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2322.796907][T16640] netlink: 'syz.1.14549': attribute type 1 has an invalid length. [ 2322.806757][T16640] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14549'. [ 2322.829282][T15438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2322.837133][T15438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2322.920360][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2324.174918][T16666] netlink: 'syz.3.14556': attribute type 10 has an invalid length. [ 2324.250568][T16666] team0: Device ipvlan1 failed to register rx_handler [ 2324.871791][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2324.883964][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2324.892001][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2324.901680][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2324.919875][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2324.927351][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2326.846382][T16669] chnl_net:caif_netlink_parms(): no params data found [ 2327.028847][T13118] Bluetooth: hci3: command 0x0409 tx timeout [ 2327.260879][T16669] bridge0: port 1(bridge_slave_0) entered blocking state [ 2327.268284][T16669] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.320209][T16669] device bridge_slave_0 entered promiscuous mode [ 2327.365729][T16669] bridge0: port 2(bridge_slave_1) entered blocking state [ 2327.394553][T16669] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.418239][T16669] device bridge_slave_1 entered promiscuous mode [ 2327.514210][T16669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2327.526674][T16669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2327.642402][T16669] team0: Port device team_slave_0 added [ 2327.684830][T16669] team0: Port device team_slave_1 added [ 2327.763673][T16669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2327.795748][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2327.891221][T16669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2327.934229][T16669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2327.958977][T16669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2327.997843][T16716] netlink: 'syz.1.14567': attribute type 29 has an invalid length. [ 2328.008791][T16669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2328.055922][T16716] netlink: 'syz.1.14567': attribute type 29 has an invalid length. [ 2328.076051][T16719] netlink: 'syz.1.14567': attribute type 29 has an invalid length. [ 2328.137293][T16669] device hsr_slave_0 entered promiscuous mode [ 2328.155644][T16669] device hsr_slave_1 entered promiscuous mode [ 2328.178637][T16669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2328.196630][T16669] Cannot create hsr debugfs directory [ 2328.219048][T16716] netlink: 'syz.1.14567': attribute type 29 has an invalid length. [ 2328.287694][T15442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.482124][T15442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.635441][T15442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.696499][T16738] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14573'. [ 2328.778660][T15442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2328.815404][T16739] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14573'. [ 2329.113632][T13118] Bluetooth: hci3: command 0x041b tx timeout [ 2329.133487][T15442] tipc: Left network mode [ 2329.660158][T16760] netlink: 'syz.1.14582': attribute type 21 has an invalid length. [ 2329.703387][T16760] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14582'. [ 2329.758234][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14582'. [ 2330.325628][T16788] netlink: 'syz.2.14590': attribute type 21 has an invalid length. [ 2330.366709][T16788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14590'. [ 2330.475174][T16669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2330.574747][T16669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2330.753429][T16669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2330.887480][T16669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2331.196639][T13118] Bluetooth: hci3: command 0x040f tx timeout [ 2331.453410][T16669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2332.053299][T16669] 8021q: adding VLAN 0 to HW filter on device team0 [ 2332.085553][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2332.169667][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2332.244034][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2332.276704][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2332.305855][T15438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2332.313064][T15438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2332.330808][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2332.347365][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2332.357141][T15438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.364292][T15438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2332.390804][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2332.406126][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2332.430982][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2332.465381][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2332.475605][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2332.505362][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2332.529889][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2332.549201][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2332.579883][T16669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2332.630150][T16669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2332.669483][T16823] netlink: 763 bytes leftover after parsing attributes in process `syz.0.14604'. [ 2332.868362][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2332.888291][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2332.898436][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2332.914414][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2333.021765][T15442] device hsr_slave_0 left promiscuous mode [ 2333.037862][T15442] device hsr_slave_1 left promiscuous mode [ 2333.077171][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2333.100367][T15442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2333.128585][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2333.161675][T15442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2333.189907][T15442] device bridge_slave_1 left promiscuous mode [ 2333.196156][T15442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2333.206805][T16842] netlink: 'syz.0.14598': attribute type 2 has an invalid length. [ 2333.216169][T15442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2333.232355][T16842] netlink: 169396 bytes leftover after parsing attributes in process `syz.0.14598'. [ 2333.266626][T15442] device veth1_macvtap left promiscuous mode [ 2333.278321][T13118] Bluetooth: hci3: command 0x0419 tx timeout [ 2333.289900][T15442] device veth0_macvtap left promiscuous mode [ 2334.128666][T15442] team0 (unregistering): Port device team_slave_1 removed [ 2334.175801][T15442] team0 (unregistering): Port device team_slave_0 removed [ 2334.477462][T15442] team0 (unregistering): Port device bridge0 removed [ 2334.573288][T16852] netlink: 'syz.0.14602': attribute type 2 has an invalid length. [ 2334.586466][T16852] netlink: 'syz.0.14602': attribute type 8 has an invalid length. [ 2334.595205][T16852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14602'. [ 2334.877259][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2334.887460][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2334.927495][T16669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2335.110132][T16872] netlink: 'syz.3.14611': attribute type 10 has an invalid length. [ 2335.130636][T16872] team0: Device ipvlan1 failed to register rx_handler [ 2336.060492][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2336.087965][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2336.193379][T16669] device veth0_vlan entered promiscuous mode [ 2336.227937][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2336.266817][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2336.297855][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2336.322392][T15440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2336.383349][T16669] device veth1_vlan entered promiscuous mode [ 2336.472525][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2336.491398][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2336.529366][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2336.556067][T15446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2336.585909][T16669] device veth0_macvtap entered promiscuous mode [ 2336.601275][T16669] device veth1_macvtap entered promiscuous mode [ 2336.626902][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.637670][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.658411][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.686086][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.725193][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.764561][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.778166][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.806192][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.827524][T16669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2336.838810][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2336.902427][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2336.969380][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2337.001014][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2337.025450][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2337.063469][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2337.094859][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2337.126887][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2337.158831][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2337.169592][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2337.179492][T16669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2337.190562][T16669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2337.202305][T16669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2337.213813][T16669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2337.232916][T16669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2337.248868][T16669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2337.268951][T16669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2337.291985][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2337.306884][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2339.070068][T15437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2339.078225][T15437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2339.155725][T15448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2339.211730][T15437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2339.222112][T15437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2339.253970][T15449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2339.342337][T16931] netlink: 'syz.2.14625': attribute type 2 has an invalid length. [ 2339.558240][T16931] device 0 entered promiscuous mode [ 2339.928647][T16939] netlink: 188 bytes leftover after parsing attributes in process `syz.4.14554'. [ 2339.945297][T16941] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14630'. [ 2339.962835][T16941] ..ÿÿ: renamed from caif0 [ 2339.994173][T16941] A link change request failed with some changes committed already. Interface ..ÿÿ may have been left with an inconsistent configuration, please check. [ 2342.380734][T16999] device syzkaller0 entered promiscuous mode [ 2344.485762][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.492231][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.698615][T17022] mac80211_hwsim hwsim138 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2347.654690][T17076] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14678'. [ 2348.223837][T17084] device pim6reg1 entered promiscuous mode [ 2348.837175][T17103] netlink: 'syz.3.14687': attribute type 10 has an invalid length. [ 2348.873721][T17103] team0: Device hsr_slave_0 failed to register rx_handler [ 2349.071311][T17109] netlink: 'syz.3.14690': attribute type 4 has an invalid length. [ 2349.087953][T17109] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.14690'. [ 2349.763630][T17121] netlink: 'syz.1.14694': attribute type 21 has an invalid length. [ 2350.404320][T17146] netlink: 'syz.4.14705': attribute type 10 has an invalid length. [ 2350.439922][T17146] team0: Device ipvlan1 failed to register rx_handler [ 2350.531134][T17152] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.14704'. [ 2350.611371][T17152] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2350.627408][T17152] CPU: 1 PID: 17152 Comm: syz.1.14704 Not tainted syzkaller #0 [ 2350.635001][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2350.645072][T17152] Call Trace: [ 2350.648375][T17152] [ 2350.651322][T17152] dump_stack_lvl+0x188/0x24e [ 2350.656026][T17152] ? show_regs_print_info+0x12/0x12 [ 2350.661256][T17152] ? load_image+0x400/0x400 [ 2350.665885][T17152] sysfs_warn_dup+0x8a/0xa0 [ 2350.670410][T17152] sysfs_do_create_link_sd+0xc0/0x110 [ 2350.675809][T17152] device_add+0x7f6/0x1000 [ 2350.680252][T17152] wiphy_register+0x1d9f/0x2ac0 [ 2350.685131][T17152] ? cfg80211_event_work+0x40/0x40 [ 2350.690262][T17152] ? minstrel_ht_alloc+0x894/0xa20 [ 2350.695378][T17152] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2350.701449][T17152] ieee80211_register_hw+0x2d00/0x39f0 [ 2350.706912][T17152] ? ieee80211_register_hw+0xec1/0x39f0 [ 2350.712451][T17152] ? ieee80211_register_hw+0xec1/0x39f0 [ 2350.717997][T17152] ? ieee80211_tasklet_handler+0x20/0x20 [ 2350.723639][T17152] ? memset+0x1e/0x40 [ 2350.727631][T17152] ? __hrtimer_init+0x186/0x270 [ 2350.732492][T17152] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2350.738309][T17152] hwsim_new_radio_nl+0xafa/0xce0 [ 2350.743334][T17152] genl_family_rcv_msg_doit+0x22a/0x330 [ 2350.748900][T17152] ? end_current_label_crit_section+0x170/0x170 [ 2350.755163][T17152] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2350.761069][T17152] ? bpf_lsm_capable+0x5/0x10 [ 2350.765777][T17152] ? security_capable+0x85/0xb0 [ 2350.770633][T17152] genl_rcv_msg+0x604/0x790 [ 2350.775143][T17152] ? genl_bind+0x360/0x360 [ 2350.779556][T17152] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2350.785892][T17152] netlink_rcv_skb+0x1fb/0x450 [ 2350.790654][T17152] ? genl_bind+0x360/0x360 [ 2350.795070][T17152] ? netlink_ack+0x1170/0x1170 [ 2350.799923][T17152] ? down_read+0x1a8/0x2d0 [ 2350.804333][T17152] genl_rcv+0x24/0x40 [ 2350.808594][T17152] netlink_unicast+0x74d/0x8d0 [ 2350.813370][T17152] netlink_sendmsg+0x8ad/0xbd0 [ 2350.818140][T17152] ? netlink_getsockopt+0x550/0x550 [ 2350.823338][T17152] ? aa_sock_msg_perm+0x94/0x150 [ 2350.828284][T17152] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2350.833568][T17152] ? security_socket_sendmsg+0x7c/0xa0 [ 2350.839024][T17152] ? netlink_getsockopt+0x550/0x550 [ 2350.844222][T17152] ____sys_sendmsg+0x5be/0x970 [ 2350.848999][T17152] ? __sys_sendmsg_sock+0x30/0x30 [ 2350.854014][T17152] ? __import_iovec+0x315/0x500 [ 2350.858870][T17152] ? import_iovec+0x6f/0xa0 [ 2350.863371][T17152] ___sys_sendmsg+0x2a2/0x360 [ 2350.868043][T17152] ? try_to_wake_up+0x67c/0x1080 [ 2350.873010][T17152] ? __sys_sendmsg+0x290/0x290 [ 2350.877804][T17152] __se_sys_sendmsg+0x1bb/0x2a0 [ 2350.882654][T17152] ? __x64_sys_sendmsg+0x80/0x80 [ 2350.887595][T17152] ? lockdep_hardirqs_on+0x94/0x140 [ 2350.892793][T17152] do_syscall_64+0x4c/0xa0 [ 2350.897310][T17152] ? clear_bhb_loop+0x60/0xb0 [ 2350.901985][T17152] ? clear_bhb_loop+0x60/0xb0 [ 2350.906665][T17152] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2350.912559][T17152] RIP: 0033:0x7f548c99ce59 [ 2350.916970][T17152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2350.936575][T17152] RSP: 002b:00007f548d8a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2350.944985][T17152] RAX: ffffffffffffffda RBX: 00007f548cc16270 RCX: 00007f548c99ce59 [ 2350.953398][T17152] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2350.961373][T17152] RBP: 00007f548ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2350.969346][T17152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2350.977311][T17152] R13: 00007f548cc16308 R14: 00007f548cc16270 R15: 00007fff029d9d98 [ 2350.985294][T17152] [ 2351.669037][ T4330] Bluetooth: hci5: command 0x0406 tx timeout [ 2351.772193][T17176] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14713'. [ 2351.890507][T17180] netlink: 'syz.4.14715': attribute type 21 has an invalid length. [ 2351.950349][T17180] netlink: 'syz.4.14715': attribute type 1 has an invalid length. [ 2352.006118][T17180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14715'. [ 2352.178312][T17191] tipc: Started in network mode [ 2352.245278][T17191] tipc: Node identity 9215a268, cluster identity 4711 [ 2352.288929][T17191] tipc: Node number set to 2450891368 [ 2356.355775][T17231] device syzkaller0 entered promiscuous mode [ 2356.541310][T17243] tc_dump_action: action bad kind [ 2357.163177][T17264] mac80211_hwsim hwsim138 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2358.869688][T17314] netlink: 'syz.4.14755': attribute type 5 has an invalid length. [ 2359.007184][T17322] FAULT_INJECTION: forcing a failure. [ 2359.007184][T17322] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.036312][T17322] CPU: 0 PID: 17322 Comm: syz.0.14756 Not tainted syzkaller #0 [ 2359.043916][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2359.053986][T17322] Call Trace: [ 2359.057277][T17322] [ 2359.060227][T17322] dump_stack_lvl+0x188/0x24e [ 2359.064925][T17322] ? show_regs_print_info+0x12/0x12 [ 2359.070141][T17322] ? load_image+0x400/0x400 [ 2359.074666][T17322] ? __might_sleep+0xd0/0xd0 [ 2359.079273][T17322] ? __lock_acquire+0x7d10/0x7d10 [ 2359.084323][T17322] should_fail_ex+0x399/0x4d0 [ 2359.089032][T17322] should_failslab+0x5/0x20 [ 2359.093546][T17322] slab_pre_alloc_hook+0x59/0x310 [ 2359.098574][T17322] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2359.104307][T17322] __kmem_cache_alloc_node+0x4f/0x260 [ 2359.109684][T17322] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2359.115412][T17322] __kmalloc+0xa0/0x240 [ 2359.119584][T17322] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2359.125138][T17322] ? tomoyo_path_number_perm+0x205/0x650 [ 2359.130769][T17322] tomoyo_path_number_perm+0x22f/0x650 [ 2359.136239][T17322] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2359.142832][T17322] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2359.148294][T17322] ? ksys_write+0x1c0/0x250 [ 2359.152795][T17322] ? common_file_perm+0x171/0x1c0 [ 2359.157838][T17322] ? __fget_files+0x28/0x4b0 [ 2359.162421][T17322] ? __fget_files+0x28/0x4b0 [ 2359.167021][T17322] security_file_ioctl+0x6c/0xa0 [ 2359.171955][T17322] __se_sys_ioctl+0x48/0x170 [ 2359.176541][T17322] do_syscall_64+0x4c/0xa0 [ 2359.180969][T17322] ? clear_bhb_loop+0x60/0xb0 [ 2359.185637][T17322] ? clear_bhb_loop+0x60/0xb0 [ 2359.190312][T17322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2359.196283][T17322] RIP: 0033:0x7f1b4459ce59 [ 2359.200690][T17322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2359.220463][T17322] RSP: 002b:00007f1b453e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2359.228872][T17322] RAX: ffffffffffffffda RBX: 00007f1b44815fa0 RCX: 00007f1b4459ce59 [ 2359.236921][T17322] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 2359.244885][T17322] RBP: 00007f1b453e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2359.252849][T17322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2359.260808][T17322] R13: 00007f1b44816038 R14: 00007f1b44815fa0 R15: 00007ffddb6409f8 [ 2359.268812][T17322] [ 2359.389149][T17322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2361.833759][T17374] device bridge_slave_1 left promiscuous mode [ 2361.865786][T17374] bridge0: port 2(bridge_slave_1) entered disabled state [ 2361.914332][T17374] device bridge_slave_0 left promiscuous mode [ 2361.951303][T17374] bridge0: port 1(bridge_slave_0) entered disabled state [ 2362.227807][T17375] netlink: 'syz.2.14771': attribute type 10 has an invalid length. [ 2362.310495][T17375] team0: Device ipvlan1 failed to register rx_handler [ 2362.486407][T17390] netlink: 111 bytes leftover after parsing attributes in process `syz.3.14777'. [ 2363.614899][T17414] netlink: 'syz.4.14786': attribute type 10 has an invalid length. [ 2363.640703][T17414] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14786'. [ 2364.272157][T17436] device bond_slave_1 entered promiscuous mode [ 2364.301456][T15438] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2364.527148][T17449] netlink: 'syz.3.14799': attribute type 2 has an invalid length. [ 2367.526587][T17472] sock: sock_set_timeout: `syz.1.14806' (pid 17472) tries to set negative timeout [ 2367.697818][T17472] netlink: 'syz.1.14806': attribute type 13 has an invalid length. [ 2367.724992][T17472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14806'. [ 2367.762355][T17472] syz_tun: refused to change device tx_queue_len [ 2367.786449][T17472] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2367.820692][T17485] mac80211_hwsim hwsim138 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2367.903762][T17480] netlink: 'syz.1.14806': attribute type 13 has an invalid length. [ 2367.935477][T17480] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14806'. [ 2367.984577][T17480] syz_tun: refused to change device tx_queue_len [ 2367.999544][T17480] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2368.050484][T17490] netlink: 'syz.1.14806': attribute type 10 has an invalid length. [ 2368.115535][T17490] team0: Port device netdevsim0 added [ 2368.134450][T17495] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14813'. [ 2368.149445][T17495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2368.592862][T17512] FAULT_INJECTION: forcing a failure. [ 2368.592862][T17512] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.657997][T17512] CPU: 0 PID: 17512 Comm: syz.1.14819 Not tainted syzkaller #0 [ 2368.665598][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2368.675661][T17512] Call Trace: [ 2368.678958][T17512] [ 2368.681877][T17512] dump_stack_lvl+0x188/0x24e [ 2368.686552][T17512] ? show_regs_print_info+0x12/0x12 [ 2368.691747][T17512] ? load_image+0x400/0x400 [ 2368.696263][T17512] ? __might_sleep+0xd0/0xd0 [ 2368.700857][T17512] ? __lock_acquire+0x7d10/0x7d10 [ 2368.705877][T17512] should_fail_ex+0x399/0x4d0 [ 2368.710556][T17512] should_failslab+0x5/0x20 [ 2368.715070][T17512] slab_pre_alloc_hook+0x59/0x310 [ 2368.717917][T17514] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.14821'. [ 2368.720096][T17512] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2368.720127][T17512] __kmem_cache_alloc_node+0x4f/0x260 [ 2368.720150][T17512] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2368.720171][T17512] __kmalloc+0xa0/0x240 [ 2368.720198][T17512] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2368.720231][T17512] ? tomoyo_path_number_perm+0x205/0x650 [ 2368.720253][T17512] tomoyo_path_number_perm+0x22f/0x650 [ 2368.767517][T17512] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2368.772999][T17512] ? ksys_write+0x1c0/0x250 [ 2368.777594][T17512] ? common_file_perm+0x171/0x1c0 [ 2368.782644][T17512] ? __fget_files+0x28/0x4b0 [ 2368.787241][T17512] ? __fget_files+0x28/0x4b0 [ 2368.791848][T17512] security_file_ioctl+0x6c/0xa0 [ 2368.796970][T17512] __se_sys_ioctl+0x48/0x170 [ 2368.801570][T17512] do_syscall_64+0x4c/0xa0 [ 2368.806515][T17512] ? clear_bhb_loop+0x60/0xb0 [ 2368.811373][T17512] ? clear_bhb_loop+0x60/0xb0 [ 2368.816061][T17512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2368.821966][T17512] RIP: 0033:0x7f548c99ce59 [ 2368.826642][T17512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2368.846326][T17512] RSP: 002b:00007f548d903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2368.854909][T17512] RAX: ffffffffffffffda RBX: 00007f548cc15fa0 RCX: 00007f548c99ce59 [ 2368.862891][T17512] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 2368.870866][T17512] RBP: 00007f548d903090 R08: 0000000000000000 R09: 0000000000000000 [ 2368.879270][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2368.887849][T17512] R13: 00007f548cc16038 R14: 00007f548cc15fa0 R15: 00007fff029d9d98 [ 2368.895847][T17512] [ 2368.909920][T17512] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2369.216390][T17521] netlink: 'syz.1.14823': attribute type 3 has an invalid length. [ 2369.230591][T17521] netlink: 'syz.1.14823': attribute type 153 has an invalid length. [ 2369.260482][T17521] netlink: 85736 bytes leftover after parsing attributes in process `syz.1.14823'. [ 2369.337909][T17520] delete_channel: no stack [ 2369.981784][T17536] FAULT_INJECTION: forcing a failure. [ 2369.981784][T17536] name failslab, interval 1, probability 0, space 0, times 0 [ 2370.137608][T17536] CPU: 0 PID: 17536 Comm: syz.1.14828 Not tainted syzkaller #0 [ 2370.145232][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2370.155322][T17536] Call Trace: [ 2370.158631][T17536] [ 2370.161589][T17536] dump_stack_lvl+0x188/0x24e [ 2370.166407][T17536] ? show_regs_print_info+0x12/0x12 [ 2370.171645][T17536] ? load_image+0x400/0x400 [ 2370.176204][T17536] ? __might_sleep+0xd0/0xd0 [ 2370.180827][T17536] ? __lock_acquire+0x7d10/0x7d10 [ 2370.185918][T17536] should_fail_ex+0x399/0x4d0 [ 2370.190649][T17536] should_failslab+0x5/0x20 [ 2370.195188][T17536] slab_pre_alloc_hook+0x59/0x310 [ 2370.200252][T17536] ? tomoyo_encode+0x27e/0x540 [ 2370.205062][T17536] __kmem_cache_alloc_node+0x4f/0x260 [ 2370.210485][T17536] ? tomoyo_encode+0x27e/0x540 [ 2370.215292][T17536] __kmalloc+0xa0/0x240 [ 2370.219504][T17536] tomoyo_encode+0x27e/0x540 [ 2370.224149][T17536] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2370.229881][T17536] ? tomoyo_path_number_perm+0x205/0x650 [ 2370.235555][T17536] tomoyo_path_number_perm+0x22f/0x650 [ 2370.241060][T17536] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2370.246645][T17536] ? ksys_write+0x1c0/0x250 [ 2370.251196][T17536] ? common_file_perm+0x171/0x1c0 [ 2370.256461][T17536] ? __fget_files+0x28/0x4b0 [ 2370.261085][T17536] ? __fget_files+0x28/0x4b0 [ 2370.265739][T17536] security_file_ioctl+0x6c/0xa0 [ 2370.270708][T17536] __se_sys_ioctl+0x48/0x170 [ 2370.275382][T17536] do_syscall_64+0x4c/0xa0 [ 2370.279821][T17536] ? clear_bhb_loop+0x60/0xb0 [ 2370.284517][T17536] ? clear_bhb_loop+0x60/0xb0 [ 2370.289221][T17536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2370.295130][T17536] RIP: 0033:0x7f548c99ce59 [ 2370.299552][T17536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2370.319175][T17536] RSP: 002b:00007f548d903028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2370.327602][T17536] RAX: ffffffffffffffda RBX: 00007f548cc15fa0 RCX: 00007f548c99ce59 [ 2370.335579][T17536] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 2370.343558][T17536] RBP: 00007f548d903090 R08: 0000000000000000 R09: 0000000000000000 [ 2370.351533][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2370.359507][T17536] R13: 00007f548cc16038 R14: 00007f548cc15fa0 R15: 00007fff029d9d98 [ 2370.367519][T17536] [ 2370.492943][T17536] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2371.365889][T17567] netlink: 'syz.4.14838': attribute type 10 has an invalid length. [ 2371.413240][T17567] team0: Device hsr_slave_0 failed to register rx_handler [ 2376.331115][T17623] device bridge_slave_1 left promiscuous mode [ 2376.361583][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2376.408185][T17623] device bridge_slave_0 left promiscuous mode [ 2376.422607][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2376.708228][T17639] sock: sock_set_timeout: `syz.4.14862' (pid 17639) tries to set negative timeout [ 2376.795277][T17639] netlink: 'syz.4.14862': attribute type 13 has an invalid length. [ 2376.820698][T17639] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14862'. [ 2376.852362][T17639] syz_tun: refused to change device tx_queue_len [ 2376.870786][T17639] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2376.946054][T17640] netlink: 'syz.4.14862': attribute type 13 has an invalid length. [ 2377.008170][T17640] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14862'. [ 2377.120994][T17640] syz_tun: refused to change device tx_queue_len [ 2377.181561][T17640] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2377.264290][T17643] netlink: 'syz.4.14862': attribute type 10 has an invalid length. [ 2377.375956][T17643] team0: Port device netdevsim0 added [ 2377.842252][T17652] netlink: 'syz.0.14865': attribute type 10 has an invalid length. [ 2377.878263][T17652] team0: Device ipvlan1 failed to register rx_handler [ 2377.981840][T17655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14867'. [ 2378.359535][T17668] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.14871'. [ 2379.154571][T17681] netlink: 'syz.4.14876': attribute type 5 has an invalid length. [ 2379.188965][T17681] netlink: 'syz.4.14876': attribute type 30 has an invalid length. [ 2380.781674][T17724] delete_channel: no stack [ 2380.920685][T17728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14892'. [ 2384.960015][T17812] FAULT_INJECTION: forcing a failure. [ 2384.960015][T17812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2385.209776][T17812] CPU: 0 PID: 17812 Comm: syz.3.14918 Not tainted syzkaller #0 [ 2385.217395][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2385.227479][T17812] Call Trace: [ 2385.230804][T17812] [ 2385.233757][T17812] dump_stack_lvl+0x188/0x24e [ 2385.238474][T17812] ? show_regs_print_info+0x12/0x12 [ 2385.243706][T17812] ? load_image+0x400/0x400 [ 2385.248258][T17812] ? __lock_acquire+0x7d10/0x7d10 [ 2385.253499][T17812] ? snprintf+0xe5/0x140 [ 2385.257792][T17812] should_fail_ex+0x399/0x4d0 [ 2385.262647][T17812] _copy_to_user+0x2c/0x130 [ 2385.267195][T17812] simple_read_from_buffer+0xe3/0x150 [ 2385.272627][T17812] proc_fail_nth_read+0x1a6/0x220 [ 2385.277695][T17812] ? proc_fault_inject_write+0x310/0x310 [ 2385.283388][T17812] ? fsnotify_perm+0x248/0x550 [ 2385.288192][T17812] ? proc_fault_inject_write+0x310/0x310 [ 2385.293857][T17812] vfs_read+0x2de/0xa00 [ 2385.298065][T17812] ? kernel_read+0x1e0/0x1e0 [ 2385.302697][T17812] ? __fget_files+0x28/0x4b0 [ 2385.307316][T17812] ? __fget_files+0x28/0x4b0 [ 2385.311950][T17812] ? __fget_files+0x43d/0x4b0 [ 2385.316685][T17812] ? __fdget_pos+0x2ae/0x360 [ 2385.321308][T17812] ? ksys_read+0x71/0x250 [ 2385.325678][T17812] ksys_read+0x14c/0x250 [ 2385.329959][T17812] ? vfs_write+0xa30/0xa30 [ 2385.334420][T17812] ? lockdep_hardirqs_on+0x94/0x140 [ 2385.339658][T17812] do_syscall_64+0x4c/0xa0 [ 2385.344104][T17812] ? clear_bhb_loop+0x60/0xb0 [ 2385.348813][T17812] ? clear_bhb_loop+0x60/0xb0 [ 2385.353525][T17812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2385.359457][T17812] RIP: 0033:0x7f4c29f5d68e [ 2385.363906][T17812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2385.383636][T17812] RSP: 002b:00007f4c2ae91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2385.392094][T17812] RAX: ffffffffffffffda RBX: 00007f4c2ae926c0 RCX: 00007f4c29f5d68e [ 2385.400099][T17812] RDX: 000000000000000f RSI: 00007f4c2ae920a0 RDI: 0000000000000005 [ 2385.408089][T17812] RBP: 00007f4c2ae92090 R08: 0000000000000000 R09: 0000000000000000 [ 2385.416095][T17812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2385.424071][T17812] R13: 00007f4c2a216038 R14: 00007f4c2a215fa0 R15: 00007ffc328206c8 [ 2385.432123][T17812] [ 2385.545926][T17817] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.14919'. [ 2387.315222][T17846] mac80211_hwsim hwsim150 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2388.325430][T17882] netlink: 'syz.3.14941': attribute type 11 has an invalid length. [ 2388.374154][T17882] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14941'. [ 2389.033839][T17898] mac80211_hwsim hwsim138 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2389.329575][T17902] netlink: 'syz.3.14951': attribute type 2 has an invalid length. [ 2389.337479][T17902] netlink: 'syz.3.14951': attribute type 1 has an invalid length. [ 2389.668954][T15438] wlan1: Trigger new scan to find an IBSS to join [ 2390.510500][T17923] netlink: 'syz.1.14957': attribute type 29 has an invalid length. [ 2390.854760][T17921] device syzkaller0 entered promiscuous mode [ 2390.940718][T17938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14962'. [ 2390.968570][T17923] netlink: 'syz.1.14957': attribute type 29 has an invalid length. [ 2391.152948][T17930] netlink: 'syz.1.14957': attribute type 29 has an invalid length. [ 2393.320927][T17931] netlink: 'syz.1.14957': attribute type 29 has an invalid length. [ 2393.773608][T17948] mac80211_hwsim hwsim143 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2394.629153][T15440] wlan1: Trigger new scan to find an IBSS to join [ 2394.777082][T17979] netlink: 'syz.0.14975': attribute type 15 has an invalid length. [ 2394.789123][T17979] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14975'. [ 2395.737066][T18016] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14991'. [ 2396.231717][T15442] wlan1: Creating new IBSS network, BSSID 06:99:fd:b1:92:7f [ 2396.261365][T18018] mac80211_hwsim hwsim150 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2396.262141][T15440] ------------[ cut here ]------------ [ 2396.276631][T15440] WARNING: CPU: 0 PID: 15440 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 2396.286690][T15440] Modules linked in: [ 2396.290628][T15440] CPU: 0 PID: 15440 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 2396.298361][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2396.308493][T15440] Workqueue: cfg80211 cfg80211_event_work [ 2396.314294][T15440] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2396.320518][T15440] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d1 2f ec f7 0f 0b eb bb e8 c8 2f ec f7 <0f> 0b eb b2 e8 bf 2f ec f7 0f 0b e9 77 fd ff ff e8 b3 2f ec f7 0f [ 2396.340359][T15440] RSP: 0018:ffffc90003427aa0 EFLAGS: 00010293 [ 2396.346458][T15440] RAX: ffffffff89964bd8 RBX: dffffc0000000000 RCX: ffff888020655a00 [ 2396.354495][T15440] RDX: 0000000000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 2396.362536][T15440] RBP: ffffc90003427b70 R08: ffffffff90aff2a7 R09: 1ffffffff215fe54 [ 2396.370574][T15440] R10: dffffc0000000000 R11: fffffbfff215fe55 R12: ffff888060a535b8 [ 2396.378572][T15440] R13: 1ffff92000684f5c R14: 000000000000001f R15: ffff888060c7cc90 [ 2396.386612][T15440] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2396.395603][T15440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2396.402249][T15440] CR2: 000000110c380501 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 2396.410278][T15440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2396.418267][T15440] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2396.426313][T15440] Call Trace: [ 2396.429732][T15440] [ 2396.432677][T15440] ? mutex_lock_nested+0x10/0x10 [ 2396.437646][T15440] ? trace_rdev_return_void+0x240/0x240 [ 2396.443289][T15440] cfg80211_process_wdev_events+0x3ad/0x550 [ 2396.449690][T15440] cfg80211_process_rdev_events+0x9d/0x110 [ 2396.455528][T15440] ? process_one_work+0x7b0/0x1160 [ 2396.460793][T15440] cfg80211_event_work+0x2b/0x40 [ 2396.465757][T15440] process_one_work+0x8a2/0x1160 [ 2396.470795][T15440] ? worker_detach_from_pool+0x240/0x240 [ 2396.476456][T15440] ? _raw_spin_lock_irq+0x86/0xf0 [ 2396.481550][T15440] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2396.486585][T15440] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2396.492203][T15440] ? kthread_data+0x4b/0xc0 [ 2396.496811][T15440] worker_thread+0xaa2/0x1270 [ 2396.501554][T15440] ? __kthread_parkme+0x162/0x1c0 [ 2396.506599][T15440] kthread+0x29d/0x330 [ 2396.510749][T15440] ? worker_clr_flags+0x1a0/0x1a0 [ 2396.515781][T15440] ? kthread_blkcg+0xd0/0xd0 [ 2396.520427][T15440] ret_from_fork+0x1f/0x30 [ 2396.524951][T15440] [ 2396.527964][T15440] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2396.535230][T15440] CPU: 0 PID: 15440 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 2396.543372][T15440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2396.553430][T15440] Workqueue: cfg80211 cfg80211_event_work [ 2396.559677][T15440] Call Trace: [ 2396.562962][T15440] [ 2396.565892][T15440] dump_stack_lvl+0x188/0x24e [ 2396.570661][T15440] ? memcpy+0x3c/0x60 [ 2396.574630][T15440] ? show_regs_print_info+0x12/0x12 [ 2396.579826][T15440] ? load_image+0x400/0x400 [ 2396.584485][T15440] panic+0x2e5/0x730 [ 2396.588390][T15440] ? bpf_jit_dump+0xd0/0xd0 [ 2396.592898][T15440] ? ret_from_fork+0x1f/0x30 [ 2396.597492][T15440] __warn+0x2f8/0x4f0 [ 2396.601484][T15440] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2396.607112][T15440] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2396.612652][T15440] report_bug+0x2ba/0x4f0 [ 2396.617039][T15440] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2396.622579][T15440] handle_bug+0x3a/0x70 [ 2396.626727][T15440] exc_invalid_op+0x16/0x40 [ 2396.631246][T15440] asm_exc_invalid_op+0x16/0x20 [ 2396.636113][T15440] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2396.642257][T15440] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d1 2f ec f7 0f 0b eb bb e8 c8 2f ec f7 <0f> 0b eb b2 e8 bf 2f ec f7 0f 0b e9 77 fd ff ff e8 b3 2f ec f7 0f [ 2396.661870][T15440] RSP: 0018:ffffc90003427aa0 EFLAGS: 00010293 [ 2396.667940][T15440] RAX: ffffffff89964bd8 RBX: dffffc0000000000 RCX: ffff888020655a00 [ 2396.675912][T15440] RDX: 0000000000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 2396.683985][T15440] RBP: ffffc90003427b70 R08: ffffffff90aff2a7 R09: 1ffffffff215fe54 [ 2396.691971][T15440] R10: dffffc0000000000 R11: fffffbfff215fe55 R12: ffff888060a535b8 [ 2396.699935][T15440] R13: 1ffff92000684f5c R14: 000000000000001f R15: ffff888060c7cc90 [ 2396.707918][T15440] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2396.713484][T15440] ? mutex_lock_nested+0x10/0x10 [ 2396.718416][T15440] ? trace_rdev_return_void+0x240/0x240 [ 2396.723963][T15440] cfg80211_process_wdev_events+0x3ad/0x550 [ 2396.729869][T15440] cfg80211_process_rdev_events+0x9d/0x110 [ 2396.735683][T15440] ? process_one_work+0x7b0/0x1160 [ 2396.740788][T15440] cfg80211_event_work+0x2b/0x40 [ 2396.745737][T15440] process_one_work+0x8a2/0x1160 [ 2396.750677][T15440] ? worker_detach_from_pool+0x240/0x240 [ 2396.756334][T15440] ? _raw_spin_lock_irq+0x86/0xf0 [ 2396.761356][T15440] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2396.766383][T15440] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2396.772036][T15440] ? kthread_data+0x4b/0xc0 [ 2396.776532][T15440] worker_thread+0xaa2/0x1270 [ 2396.781234][T15440] ? __kthread_parkme+0x162/0x1c0 [ 2396.786287][T15440] kthread+0x29d/0x330 [ 2396.790345][T15440] ? worker_clr_flags+0x1a0/0x1a0 [ 2396.795360][T15440] ? kthread_blkcg+0xd0/0xd0 [ 2396.799937][T15440] ret_from_fork+0x1f/0x30 [ 2396.804353][T15440] [ 2396.807612][T15440] Kernel Offset: disabled [ 2396.811997][T15440] Rebooting in 86400 seconds..