last executing test programs: 5.30448655s ago: executing program 1 (id=2812): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20565, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x4}, 0x110904, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6204270018ff60000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}], 0x1}, 0x8045) 5.115248026s ago: executing program 1 (id=2815): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0d776e8000080000000007ac31b", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000022560000000000000400000020020000", @ANYRES32=0x1, @ANYBLOB="bb0c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/19], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r5, r7}, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x418000, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000080)=0x52) 2.235144388s ago: executing program 2 (id=2834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000", @ANYRES32, @ANYBLOB="000004000000000000000000000000ebffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300004f000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) close(0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002bc0)={r2, 0xe0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002980)=[0x0], 0x0, 0xe, &(0x7f00000029c0)=[{}], 0x8, 0x10, &(0x7f0000002a00), &(0x7f0000002a40), 0x8, 0x48, 0x8, 0x8, &(0x7f0000002a80)}}, 0x10) sendmsg$inet(r4, &(0x7f0000002c40)={&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002880)=[{&(0x7f0000000640)="83372350133269b2187e7de1425f69faa9c8bb14b8ab82f77da97068765c6bf6f3bd9a8343364133571e4c330f073a6119a86ddc53c7726441e010bf516300268bc343da202a1f50d23d3f09ee048c9f4237940ccd2be3d2db9d9bfa5abd168eb38910cd3961a49fd56cfaa455720d062c2209f278496acf2181022bc4499c324772faab4485b4c06285c2b690253f0cad2c85f41d147c102b3a2d5dbdddf1", 0x9f}, {&(0x7f0000000880)="2c9f799ba3996fc515c8cc74233ba2a759f98f78f1ae1b1b8dd1801558d8294f9bc6ea7707355c1cd5f0b676991d7c0d6c4eb1522408dee9ae2ebf414dec254320df38f1e700ea53b292cb2c9f9d2962d0064144a93fb802f05f5df984cd8f784e99bf2ebd71c58f11e61dcb0d32b50b7fb9872eefa7d83f37832b65a89e34f3691848ed83c90330c2c1c222cf0ac228d443003335099856eadc621e1bd69195fbad39cac05dc5", 0xa7}, {&(0x7f0000000940)="2fc98cc32728062073d0baccb9d86ad816fa115f7b009f6acb3822adc89436acfab3a680bcc4c47aa3c9b38472cad36fda540cd61120a289d2e07e3d2436b6333e4a94749728f86f74c8c78ee2d6a265aae62a89c0f4b7f3bfa23f758a398fa67a6ece713f24168184a7f585276b69e44b5af5df93d1360510aa0d758b1dbc9ced8cc93aa807770da5a1977f45e801965a0f0f6b166050437dcfd700092b568f9bde20741831dc1e0cd550548e052634eef8c42086a30a8b4fef6403c1af036aabc64653006c253501d508747ea1d63204299e476dcfd32177986e4fd73deaebbd", 0xe1}, {&(0x7f0000000a40)="99ed604f17ce3c907b5d5ff2b4ccf5a550ffcf5a2e8d27a4af5e1c64deb324fc44457ca371e7e4224a26fde837a06810fa4a781a53dc82d24a37b9ad377ff4bb28361558154d2fa05739fdac0866aa9a3e574708b1e5fd0aa3befde27615b6257e7efdf5504445bf1e34f507963f702038da02199a94189acb22df906936866cc05400851ea3741b122533ea6491fd82fa4ff150e32946caf2220fbe57586021029dc3ae4e7b7a", 0xa7}, {&(0x7f0000000b00)="4980e589be11ada2b3bb925961f905089e91bc991bbd979b546e57f9df023a3688136d8c2e661c44d056b9b06fc019a4cef2a8123466c8e09c9904419d7f1f4e818480049f70a39b3310ad090b649153918da89e461b55da1e84749ba04c39866caa2d0a12deeab9cd9840fece27e32ef02b1f53691e082105109fd7cddfa6a0be7a5d6281b37492df3cd12e58a9", 0x8e}, {&(0x7f0000000bc0)="1ab445d31e1c7a04ff4842845a", 0xd}, {&(0x7f0000001880)="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", 0x1000}], 0x7, &(0x7f0000002c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010101}}}], 0x38}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x29, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd) 2.061935943s ago: executing program 3 (id=2837): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1, 0x5, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xfffffff7, 0x1, 0x84}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r2, 0x0, &(0x7f0000001540)=""/155}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x200, 0x0, 0x0, 0x7, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x20]}}, 0x0, 0x31}, 0x20) 2.015412555s ago: executing program 2 (id=2838): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 1.995690926s ago: executing program 1 (id=2839): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, 0xffffffffffffffff, 0x0, 0x500}, 0x38) 1.85962791s ago: executing program 2 (id=2841): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 1.55909257s ago: executing program 2 (id=2842): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x8, 0x2, 0x7, 0x0, 0x1, 0xe91, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000005e00b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dd", 0x0, 0x764, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x12}, 0x40012103) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x39, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x200000000000006f, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES16=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$unix(r10, &(0x7f0000000680)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10, 0x1, 0x24}}], 0x10}, 0x40000) r11 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x24b, @mcast1, 0x4}, 0x80, &(0x7f0000000840)=[{&(0x7f00000003c0)="ce26f75732063ab4b7747a535c4cdad4ef29e81b9e541f19e72b63d40f1db565f51fb73bdc7816ef", 0x28}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x238}, 0x4800) 1.54190193s ago: executing program 3 (id=2843): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) 1.435274674s ago: executing program 0 (id=2844): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0xfffffffffffffffd, 0xf8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f7500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.434945914s ago: executing program 1 (id=2845): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa40000"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) 1.272628719s ago: executing program 2 (id=2846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000010000", @ANYRES32, @ANYBLOB="000004000000000000000000000000ebffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300004f000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) close(0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002bc0)={r2, 0xe0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002980)=[0x0], 0x0, 0xe, &(0x7f00000029c0)=[{}], 0x8, 0x10, &(0x7f0000002a00), &(0x7f0000002a40), 0x8, 0x48, 0x8, 0x8, &(0x7f0000002a80)}}, 0x10) sendmsg$inet(r4, &(0x7f0000002c40)={&(0x7f0000000180)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002880)=[{&(0x7f0000000640)="83372350133269b2187e7de1425f69faa9c8bb14b8ab82f77da97068765c6bf6f3bd9a8343364133571e4c330f073a6119a86ddc53c7726441e010bf516300268bc343da202a1f50d23d3f09ee048c9f4237940ccd2be3d2db9d9bfa5abd168eb38910cd3961a49fd56cfaa455720d062c2209f278496acf2181022bc4499c324772faab4485b4c06285c2b690253f0cad2c85f41d147c102b3a2d5dbdddf1", 0x9f}, {&(0x7f0000000880)="2c9f799ba3996fc515c8cc74233ba2a759f98f78f1ae1b1b8dd1801558d8294f9bc6ea7707355c1cd5f0b676991d7c0d6c4eb1522408dee9ae2ebf414dec254320df38f1e700ea53b292cb2c9f9d2962d0064144a93fb802f05f5df984cd8f784e99bf2ebd71c58f11e61dcb0d32b50b7fb9872eefa7d83f37832b65a89e34f3691848ed83c90330c2c1c222cf0ac228d443003335099856eadc621e1bd69195fbad39cac05dc5", 0xa7}, {&(0x7f0000000940)="2fc98cc32728062073d0baccb9d86ad816fa115f7b009f6acb3822adc89436acfab3a680bcc4c47aa3c9b38472cad36fda540cd61120a289d2e07e3d2436b6333e4a94749728f86f74c8c78ee2d6a265aae62a89c0f4b7f3bfa23f758a398fa67a6ece713f24168184a7f585276b69e44b5af5df93d1360510aa0d758b1dbc9ced8cc93aa807770da5a1977f45e801965a0f0f6b166050437dcfd700092b568f9bde20741831dc1e0cd550548e052634eef8c42086a30a8b4fef6403c1af036aabc64653006c253501d508747ea1d63204299e476dcfd32177986e4fd73deaebbd", 0xe1}, {&(0x7f0000000a40)="99ed604f17ce3c907b5d5ff2b4ccf5a550ffcf5a2e8d27a4af5e1c64deb324fc44457ca371e7e4224a26fde837a06810fa4a781a53dc82d24a37b9ad377ff4bb28361558154d2fa05739fdac0866aa9a3e574708b1e5fd0aa3befde27615b6257e7efdf5504445bf1e34f507963f702038da02199a94189acb22df906936866cc05400851ea3741b122533ea6491fd82fa4ff150e32946caf2220fbe57586021029dc3ae4e7b7a", 0xa7}, {&(0x7f0000000b00)="4980e589be11ada2b3bb925961f905089e91bc991bbd979b546e57f9df023a3688136d8c2e661c44d056b9b06fc019a4cef2a8123466c8e09c9904419d7f1f4e818480049f70a39b3310ad090b649153918da89e461b55da1e84749ba04c39866caa2d0a12deeab9cd9840fece27e32ef02b1f53691e082105109fd7cddfa6a0be7a5d6281b37492df3cd12e58a9", 0x8e}, {&(0x7f0000000bc0)="1ab445d31e1c7a04ff4842845a", 0xd}, {&(0x7f0000001880)="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", 0x1000}], 0x7, &(0x7f0000002c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010101}}}], 0x38}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x29, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd) 1.210618731s ago: executing program 1 (id=2847): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8085e25f75cd7a96, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf5a, 0x0, 0x0, 0x0, 0x5}, [@generic={0x3d, 0xa, 0x1, 0x1c27, 0xb05}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, r8, r5, 0xffffffffffffffff, r0], &(0x7f0000000400)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) 1.107211404s ago: executing program 3 (id=2848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000005c0), 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f409000a3164ae439862807a158983661a6d", 0x16}, {&(0x7f0000000040)="df3b46a13300"/17, 0x11}, {&(0x7f0000001480)}], 0x5}, 0x40000) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0210000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x3, 0x0) 1.106851814s ago: executing program 0 (id=2849): socket$kcm(0x10, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x80044942, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="10000000000000000f01000003000000400000000000000019010000f7ffffffe61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa30500e800000000000000060000000f0000006c89539a11cd1dcabbc9926cdc93eedb14f8dbbd00e83cf55c201ad1d3ae99882f705cf96d3d596fb5d8df742b608d92269ebe1385d5f92bf52446f0b7081c03091b8cc19ee29d17cfe1a9b415269ce9d9f7897bc37571a398d591213f761c1f11a2e3d09e0de29ae07e6389d064a4009644c94bf6a35f2a5ac936d586439e7a46c64560164bc94ac9a931b68c7166e2ce5876787c54aac7cd8dacdd9591cfe3ec06e867a37469ec9a8223a8bf6f97492e"], 0x138}, 0x20000000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) 984.948218ms ago: executing program 0 (id=2850): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 984.235448ms ago: executing program 2 (id=2851): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0d776e8000080000000007ac31b", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000022560000000000000400000020020000", @ANYRES32=0x1, @ANYBLOB="bb0c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/19], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r5, r7}, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x418000, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000080)=0x52) 896.040791ms ago: executing program 0 (id=2852): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1, 0x5, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xfffffff7, 0x1, 0x84}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r2, 0x0, &(0x7f0000001540)=""/155}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='(()}^+&)\x00') r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x20]}}, 0x0, 0x31}, 0x20) 732.235256ms ago: executing program 1 (id=2853): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0d776e8000080000000007ac31b", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000022560000000000000400000020020000", @ANYRES32=0x1, @ANYBLOB="bb0c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000200"/19], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r5, r7}, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x418000, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000080)=0x52) 653.581768ms ago: executing program 3 (id=2854): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x86000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 514.959523ms ago: executing program 3 (id=2855): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3f02816b4e097cfa3d46e45e7949c5b50691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa40000"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) 315.186879ms ago: executing program 0 (id=2856): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x3c, 0x3, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000001300)='GPL\x00'}, 0x94) 17.953419ms ago: executing program 3 (id=2857): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x87) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86db4e0cf9420000000000000000", 0x0, 0x55efa3f9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000340)="ffa8", 0x2}, {&(0x7f0000000400)="3cd9", 0x2}], 0x2}, 0x40810) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x14) 0s ago: executing program 0 (id=2858): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6f}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0xfffffffffffffffd, 0xf8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) kernel console output (not intermixed with test programs): ribute type 29 has an invalid length. [ 895.973845][T12382] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 896.023348][T12382] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 896.064182][T12382] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 896.226945][T11681] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 896.356028][T12387] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2053'. [ 896.893881][T12401] netlink: 'syz.2.2057': attribute type 29 has an invalid length. [ 897.126744][T12401] netlink: 'syz.2.2057': attribute type 29 has an invalid length. [ 897.134981][T12405] __nla_validate_parse: 1 callbacks suppressed [ 897.134997][T12405] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2056'. [ 897.318785][T12404] netlink: 'syz.2.2057': attribute type 29 has an invalid length. [ 897.336561][T12407] netlink: 'syz.2.2057': attribute type 29 has an invalid length. [ 897.555959][T12417] netlink: 'syz.2.2061': attribute type 29 has an invalid length. [ 897.566834][T12417] netlink: 'syz.2.2061': attribute type 29 has an invalid length. [ 899.806439][T12436] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2067'. [ 901.701601][T12458] validate_nla: 6 callbacks suppressed [ 901.701623][T12458] netlink: 'syz.3.2078': attribute type 29 has an invalid length. [ 901.726035][T12458] netlink: 'syz.3.2078': attribute type 29 has an invalid length. [ 901.754752][T12458] netlink: 'syz.3.2078': attribute type 29 has an invalid length. [ 901.773725][T12458] netlink: 'syz.3.2078': attribute type 29 has an invalid length. [ 902.038505][T12467] netlink: 'syz.1.2081': attribute type 29 has an invalid length. [ 902.080240][T12467] netlink: 'syz.1.2081': attribute type 29 has an invalid length. [ 902.113926][T12470] netlink: 'syz.1.2081': attribute type 29 has an invalid length. [ 902.127975][T12467] netlink: 'syz.1.2081': attribute type 29 has an invalid length. [ 902.335129][T12473] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2084'. [ 904.093647][T12497] netlink: 'syz.3.2094': attribute type 29 has an invalid length. [ 904.103463][T12497] netlink: 'syz.3.2094': attribute type 29 has an invalid length. [ 904.282685][T12499] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2095'. [ 904.511527][T12506] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2097'. [ 904.546428][T12501] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2096'. [ 904.677290][T12508] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2099'. [ 908.400036][T12542] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2112'. [ 908.593537][T12552] validate_nla: 10 callbacks suppressed [ 908.593557][T12552] netlink: 'syz.2.2116': attribute type 29 has an invalid length. [ 908.611368][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'. [ 908.628875][T12552] netlink: 'syz.2.2116': attribute type 29 has an invalid length. [ 908.638705][T12552] netlink: 'syz.2.2116': attribute type 29 has an invalid length. [ 908.652549][T12552] netlink: 'syz.2.2116': attribute type 29 has an invalid length. [ 908.855408][T12556] netlink: 'syz.2.2118': attribute type 21 has an invalid length. [ 908.888478][T12556] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2118'. [ 908.907605][T12556] netlink: 'syz.2.2118': attribute type 5 has an invalid length. [ 908.937975][T12556] netlink: 'syz.2.2118': attribute type 6 has an invalid length. [ 908.945988][T12556] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2118'. [ 909.244199][T12561] netlink: 'syz.2.2121': attribute type 29 has an invalid length. [ 909.252743][T12561] netlink: 'syz.2.2121': attribute type 29 has an invalid length. [ 909.264135][T12561] netlink: 'syz.2.2121': attribute type 29 has an invalid length. [ 910.610479][T12576] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2130'. [ 914.197964][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'. [ 914.288295][T12616] validate_nla: 9 callbacks suppressed [ 914.288331][T12616] netlink: 'syz.1.2143': attribute type 10 has an invalid length. [ 914.390281][T12618] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2144'. [ 914.416454][T12624] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2146'. [ 914.634590][T12623] netlink: 'syz.1.2143': attribute type 21 has an invalid length. [ 914.700005][T12629] netlink: 'syz.2.2147': attribute type 29 has an invalid length. [ 914.717316][T12629] netlink: 'syz.2.2147': attribute type 29 has an invalid length. [ 914.752690][T12630] netlink: 'syz.2.2147': attribute type 29 has an invalid length. [ 914.763616][T12629] netlink: 'syz.2.2147': attribute type 29 has an invalid length. [ 914.796189][T12632] FAULT_INJECTION: forcing a failure. [ 914.796189][T12632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.810283][T12632] CPU: 1 PID: 12632 Comm: syz.1.2148 Not tainted syzkaller #0 [ 914.817810][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 914.827920][T12632] Call Trace: [ 914.831241][T12632] [ 914.834204][T12632] dump_stack_lvl+0x18c/0x250 [ 914.838932][T12632] ? show_regs_print_info+0x20/0x20 [ 914.844169][T12632] ? load_image+0x420/0x420 [ 914.848715][T12632] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 914.854208][T12632] ? __lock_acquire+0x7d40/0x7d40 [ 914.859268][T12632] ? __rwlock_init+0x150/0x150 [ 914.864076][T12632] should_fail_ex+0x39d/0x4d0 [ 914.868830][T12632] copy_page_from_iter_atomic+0x2a8/0x1580 [ 914.874697][T12632] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 914.880221][T12632] ? iov_iter_zero+0x1170/0x1170 [ 914.885196][T12632] ? shmem_write_begin+0x1cf/0x420 [ 914.890353][T12632] generic_perform_write+0x353/0x5c0 [ 914.895692][T12632] ? generic_file_direct_write+0x3e0/0x3e0 [ 914.901542][T12632] ? down_write+0x16e/0x200 [ 914.906132][T12632] ? file_update_time+0x98/0x1a0 [ 914.911115][T12632] shmem_file_write_iter+0xfb/0x120 [ 914.916354][T12632] vfs_write+0x46c/0x990 [ 914.920647][T12632] ? file_end_write+0x250/0x250 [ 914.925634][T12632] ? __fget_files+0x43d/0x4b0 [ 914.930366][T12632] ? __fdget_pos+0x2a3/0x330 [ 914.935019][T12632] ? ksys_write+0x75/0x260 [ 914.939503][T12632] ksys_write+0x150/0x260 [ 914.943893][T12632] ? __ia32_sys_read+0x90/0x90 [ 914.948716][T12632] ? lockdep_hardirqs_on+0x98/0x150 [ 914.953964][T12632] do_syscall_64+0x55/0xb0 [ 914.958423][T12632] ? clear_bhb_loop+0x40/0x90 [ 914.963127][T12632] ? clear_bhb_loop+0x40/0x90 [ 914.967845][T12632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.973876][T12632] RIP: 0033:0x7f074459ce59 [ 914.978337][T12632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.998102][T12632] RSP: 002b:00007f0745423028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 915.006557][T12632] RAX: ffffffffffffffda RBX: 00007f0744815fa0 RCX: 00007f074459ce59 [ 915.014560][T12632] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000004 [ 915.022556][T12632] RBP: 00007f0745423090 R08: 0000000000000000 R09: 0000000000000000 [ 915.030560][T12632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.038564][T12632] R13: 00007f0744816038 R14: 00007f0744815fa0 R15: 00007ffd01b819b8 [ 915.046582][T12632] [ 915.278483][T12640] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 915.498546][T12646] FAULT_INJECTION: forcing a failure. [ 915.498546][T12646] name failslab, interval 1, probability 0, space 0, times 0 [ 915.520119][T12646] CPU: 0 PID: 12646 Comm: syz.2.2154 Not tainted syzkaller #0 [ 915.527669][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.537859][T12646] Call Trace: [ 915.541186][T12646] [ 915.544168][T12646] dump_stack_lvl+0x18c/0x250 [ 915.548916][T12646] ? show_regs_print_info+0x20/0x20 [ 915.554174][T12646] ? load_image+0x420/0x420 [ 915.558734][T12646] ? __might_sleep+0xe0/0xe0 [ 915.563396][T12646] ? __lock_acquire+0x7d40/0x7d40 [ 915.568470][T12646] ? stack_trace_save+0xaa/0x100 [ 915.573461][T12646] ? stack_trace_snprint+0xf0/0xf0 [ 915.578631][T12646] should_fail_ex+0x39d/0x4d0 [ 915.583393][T12646] should_failslab+0x9/0x20 [ 915.587972][T12646] slab_pre_alloc_hook+0x59/0x310 [ 915.593061][T12646] ? kasan_set_track+0x5f/0x70 [ 915.597876][T12646] ? kasan_set_track+0x4e/0x70 [ 915.602694][T12646] ? __kasan_kmalloc+0x8f/0xa0 [ 915.607518][T12646] kmem_cache_alloc_node+0x60/0x320 [ 915.612782][T12646] ? netlink_sendmsg+0x8d0/0xbf0 [ 915.617770][T12646] ? __alloc_skb+0x103/0x2c0 [ 915.622424][T12646] __alloc_skb+0x103/0x2c0 [ 915.626932][T12646] netlink_dump+0x1ec/0xe50 [ 915.631494][T12646] ? end_current_label_crit_section+0x170/0x170 [ 915.637806][T12646] ? end_current_label_crit_section+0x170/0x170 [ 915.644113][T12646] ? netlink_lookup+0x200/0x200 [ 915.649032][T12646] ? ns_capable+0x89/0xe0 [ 915.653420][T12646] ? __inet_diag_dump_start+0x886/0x9f0 [ 915.659044][T12646] __netlink_dump_start+0x5f1/0x810 [ 915.664317][T12646] inet_diag_rcv_msg_compat+0x215/0x440 [ 915.669960][T12646] ? __inet_diag_dump+0x380/0x380 [ 915.675052][T12646] ? sock_diag_rcv_msg+0xd1/0x600 [ 915.680135][T12646] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 915.685904][T12646] ? inet_diag_dump_start_compat+0x20/0x20 [ 915.691765][T12646] ? inet_diag_dump+0x50/0x50 [ 915.696511][T12646] ? __inet_diag_dump+0x380/0x380 [ 915.701608][T12646] sock_diag_rcv_msg+0x3d8/0x600 [ 915.706727][T12646] netlink_rcv_skb+0x241/0x4d0 [ 915.711573][T12646] ? sock_diag_bind+0xb0/0xb0 [ 915.716316][T12646] ? netlink_ack+0x1180/0x1180 [ 915.721176][T12646] ? __lock_acquire+0x7d40/0x7d40 [ 915.726263][T12646] ? netlink_deliver_tap+0x2e/0x1b0 [ 915.731524][T12646] sock_diag_rcv+0x2a/0x40 [ 915.736003][T12646] netlink_unicast+0x751/0x8d0 [ 915.740854][T12646] netlink_sendmsg+0x8d0/0xbf0 [ 915.745695][T12646] ? netlink_getsockopt+0x590/0x590 [ 915.750978][T12646] ? aa_sock_msg_perm+0x94/0x150 [ 915.755982][T12646] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 915.761335][T12646] ? security_socket_sendmsg+0x80/0xa0 [ 915.766848][T12646] ? netlink_getsockopt+0x590/0x590 [ 915.772128][T12646] ____sys_sendmsg+0x5ba/0x960 [ 915.776958][T12646] ? __asan_memset+0x22/0x40 [ 915.781620][T12646] ? __sys_sendmsg_sock+0x30/0x30 [ 915.786694][T12646] ? __import_iovec+0x5f2/0x850 [ 915.791611][T12646] ? import_iovec+0x73/0xa0 [ 915.796165][T12646] ___sys_sendmsg+0x2a6/0x360 [ 915.800927][T12646] ? __sys_sendmsg+0x2a0/0x2a0 [ 915.805807][T12646] ? trace_call_bpf+0xc3/0x6c0 [ 915.810673][T12646] __se_sys_sendmsg+0x1c2/0x2b0 [ 915.815584][T12646] ? __x64_sys_sendmsg+0x80/0x80 [ 915.820600][T12646] ? lockdep_hardirqs_on+0x98/0x150 [ 915.825884][T12646] do_syscall_64+0x55/0xb0 [ 915.830538][T12646] ? clear_bhb_loop+0x40/0x90 [ 915.835280][T12646] ? clear_bhb_loop+0x40/0x90 [ 915.840052][T12646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 915.846094][T12646] RIP: 0033:0x7fb99f39ce59 [ 915.850559][T12646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.870222][T12646] RSP: 002b:00007fb9a01ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.878703][T12646] RAX: ffffffffffffffda RBX: 00007fb99f615fa0 RCX: 00007fb99f39ce59 [ 915.886723][T12646] RDX: 0000000004004010 RSI: 0000200000000240 RDI: 0000000000000003 [ 915.895092][T12646] RBP: 00007fb9a01ec090 R08: 0000000000000000 R09: 0000000000000000 [ 915.903122][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.911142][T12646] R13: 00007fb99f616038 R14: 00007fb99f615fa0 R15: 00007ffdead5cc68 [ 915.919190][T12646] [ 918.516094][T12655] netlink: 'syz.2.2159': attribute type 29 has an invalid length. [ 918.532403][T12653] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2157'. [ 918.542422][T12655] netlink: 'syz.2.2159': attribute type 29 has an invalid length. [ 918.551817][T12655] netlink: 'syz.2.2159': attribute type 29 has an invalid length. [ 918.565684][T12655] netlink: 'syz.2.2159': attribute type 29 has an invalid length. [ 918.749449][T12656] delete_channel: no stack [ 918.854039][T12660] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2160'. [ 919.220424][T11678] wlan1: Trigger new scan to find an IBSS to join [ 919.766685][T12686] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2169'. [ 919.967251][T12690] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2171'. [ 920.879908][T12698] netlink: 'syz.1.2174': attribute type 29 has an invalid length. [ 920.897848][T12698] netlink: 'syz.1.2174': attribute type 29 has an invalid length. [ 920.914267][T12698] netlink: 'syz.1.2174': attribute type 29 has an invalid length. [ 920.946573][T12702] FAULT_INJECTION: forcing a failure. [ 920.946573][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.966267][T12702] CPU: 1 PID: 12702 Comm: syz.3.2176 Not tainted syzkaller #0 [ 920.973823][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.983945][T12702] Call Trace: [ 920.987278][T12702] [ 920.990257][T12702] dump_stack_lvl+0x18c/0x250 [ 920.995041][T12702] ? show_regs_print_info+0x20/0x20 [ 921.000297][T12702] ? load_image+0x420/0x420 [ 921.004865][T12702] ? __might_fault+0xaa/0x120 [ 921.009616][T12702] ? __lock_acquire+0x7d40/0x7d40 [ 921.014709][T12702] should_fail_ex+0x39d/0x4d0 [ 921.019466][T12702] _copy_from_iter+0x1d9/0x12e0 [ 921.024381][T12702] ? slab_post_alloc_hook+0x8a/0x4b0 [ 921.029732][T12702] ? __virt_addr_valid+0x18c/0x540 [ 921.034914][T12702] ? __lock_acquire+0x7d40/0x7d40 [ 921.040005][T12702] ? rcu_is_watching+0x15/0xb0 [ 921.044830][T12702] ? copyout_mc+0x70/0x70 [ 921.049234][T12702] ? __virt_addr_valid+0x18c/0x540 [ 921.054404][T12702] ? __virt_addr_valid+0x18c/0x540 [ 921.059582][T12702] ? __virt_addr_valid+0x469/0x540 [ 921.064760][T12702] ? __check_object_size+0x506/0xa20 [ 921.070106][T12702] netlink_sendmsg+0x76b/0xbf0 [ 921.074941][T12702] ? netlink_getsockopt+0x590/0x590 [ 921.080202][T12702] ? aa_sock_msg_perm+0x94/0x150 [ 921.085204][T12702] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 921.090640][T12702] ? security_socket_sendmsg+0x80/0xa0 [ 921.096159][T12702] ? netlink_getsockopt+0x590/0x590 [ 921.101429][T12702] ____sys_sendmsg+0x5ba/0x960 [ 921.106354][T12702] ? __asan_memset+0x22/0x40 [ 921.111007][T12702] ? __sys_sendmsg_sock+0x30/0x30 [ 921.116088][T12702] ? __import_iovec+0x5f2/0x850 [ 921.121019][T12702] ? import_iovec+0x73/0xa0 [ 921.125595][T12702] ___sys_sendmsg+0x2a6/0x360 [ 921.130356][T12702] ? __sys_sendmsg+0x2a0/0x2a0 [ 921.135211][T12702] ? __lock_acquire+0x7d40/0x7d40 [ 921.140331][T12702] __se_sys_sendmsg+0x1c2/0x2b0 [ 921.145251][T12702] ? __x64_sys_sendmsg+0x80/0x80 [ 921.150358][T12702] ? lockdep_hardirqs_on+0x98/0x150 [ 921.155630][T12702] do_syscall_64+0x55/0xb0 [ 921.160105][T12702] ? clear_bhb_loop+0x40/0x90 [ 921.164837][T12702] ? clear_bhb_loop+0x40/0x90 [ 921.169583][T12702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.175555][T12702] RIP: 0033:0x7fd64839ce59 [ 921.180033][T12702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.199703][T12702] RSP: 002b:00007fd649248028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.208192][T12702] RAX: ffffffffffffffda RBX: 00007fd648615fa0 RCX: 00007fd64839ce59 [ 921.216226][T12702] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 921.224266][T12702] RBP: 00007fd649248090 R08: 0000000000000000 R09: 0000000000000000 [ 921.232297][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.240331][T12702] R13: 00007fd648616038 R14: 00007fd648615fa0 R15: 00007ffe767bd828 [ 921.248384][T12702] [ 924.188526][T11672] wlan1: Trigger new scan to find an IBSS to join [ 924.557913][T12728] netlink: 'syz.0.2185': attribute type 29 has an invalid length. [ 924.566176][T12728] netlink: 'syz.0.2185': attribute type 29 has an invalid length. [ 924.599122][T12728] netlink: 'syz.0.2185': attribute type 29 has an invalid length. [ 924.623908][T12728] netlink: 'syz.0.2185': attribute type 29 has an invalid length. [ 925.120720][ T6842] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 925.951363][T12758] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 925.985832][T12758] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 926.012754][T12758] netlink: 'syz.2.2192': attribute type 29 has an invalid length. [ 926.887188][T12777] netlink: 'syz.2.2198': attribute type 29 has an invalid length. [ 926.900260][T12777] netlink: 'syz.2.2198': attribute type 29 has an invalid length. [ 926.928933][T12777] netlink: 'syz.2.2198': attribute type 29 has an invalid length. [ 926.955136][T12777] netlink: 'syz.2.2198': attribute type 29 has an invalid length. [ 927.672460][T12784] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2201'. [ 928.441974][T12809] netlink: 'syz.3.2205': attribute type 29 has an invalid length. [ 928.452890][T12809] netlink: 'syz.3.2205': attribute type 29 has an invalid length. [ 928.488835][T12809] netlink: 'syz.3.2205': attribute type 29 has an invalid length. [ 928.908657][T12819] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2209'. [ 930.622729][T12849] sock: sock_timestamping_bind_phc: sock not bind to device [ 930.633410][T12848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 930.648098][T12848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 930.656718][T12848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 930.666216][T12848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 930.677834][T12848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 930.685474][T12848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 930.838650][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.989127][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.125268][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.240980][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.370922][T12847] chnl_net:caif_netlink_parms(): no params data found [ 931.866420][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.873686][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.132804][T12847] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.142836][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.170463][T12847] bridge_slave_0: entered allmulticast mode [ 932.198152][T12847] bridge_slave_0: entered promiscuous mode [ 932.267184][T12847] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.318142][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.325555][T12847] bridge_slave_1: entered allmulticast mode [ 932.341275][T12847] bridge_slave_1: entered promiscuous mode [ 932.365081][T12886] validate_nla: 9 callbacks suppressed [ 932.365100][T12886] netlink: 'syz.1.2230': attribute type 9 has an invalid length. [ 932.386064][T12886] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2230'. [ 932.627596][T12893] netlink: 'syz.0.2232': attribute type 29 has an invalid length. [ 932.644205][T12847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.660226][T12893] netlink: 'syz.0.2232': attribute type 29 has an invalid length. [ 932.685353][T12896] netlink: 'syz.0.2232': attribute type 29 has an invalid length. [ 932.712482][T12847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.737732][ T5834] Bluetooth: hci1: command tx timeout [ 932.813580][T12893] netlink: 'syz.0.2232': attribute type 29 has an invalid length. [ 932.864749][T12847] team0: Port device team_slave_0 added [ 932.963918][T12847] team0: Port device team_slave_1 added [ 933.137002][T12847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.150303][T12910] netlink: 154412 bytes leftover after parsing attributes in process `syz.3.2235'. [ 933.177630][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.280115][T12847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.567872][T12847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.574989][T12847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.604702][T12847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.981794][T12847] hsr_slave_0: entered promiscuous mode [ 934.010821][T12847] hsr_slave_1: entered promiscuous mode [ 934.067070][T12847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.112355][T12847] Cannot create hsr debugfs directory [ 934.825038][ T5834] Bluetooth: hci1: command tx timeout [ 935.112369][T12937] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2241'. [ 935.344445][T12947] netlink: 'syz.0.2244': attribute type 29 has an invalid length. [ 935.384158][T12947] netlink: 'syz.0.2244': attribute type 29 has an invalid length. [ 935.412149][T12949] netlink: 'syz.0.2244': attribute type 29 has an invalid length. [ 935.551558][T12947] netlink: 'syz.0.2244': attribute type 29 has an invalid length. [ 936.148197][ T59] hsr_slave_0: left promiscuous mode [ 936.207152][ T59] hsr_slave_1: left promiscuous mode [ 936.223597][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.250489][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.281411][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.301026][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.411893][ T59] veth1_macvtap: left promiscuous mode [ 936.446011][ T59] veth0_macvtap: left promiscuous mode [ 936.464246][ T59] veth0_vlan: left promiscuous mode [ 936.907488][ T5834] Bluetooth: hci1: command tx timeout [ 937.665159][ T59] team0 (unregistering): Port device team_slave_1 removed [ 937.720735][ T59] team0 (unregistering): Port device team_slave_0 removed [ 938.507675][T12847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 938.551044][T12847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 938.614727][T12847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 938.667243][T12996] netlink: 'syz.3.2254': attribute type 29 has an invalid length. [ 938.882160][T12847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 938.977598][ T5834] Bluetooth: hci1: command tx timeout [ 939.275554][T12996] netlink: 'syz.3.2254': attribute type 29 has an invalid length. [ 939.284842][T12998] netlink: 'syz.3.2254': attribute type 29 has an invalid length. [ 939.293335][T13000] netlink: 'syz.3.2254': attribute type 29 has an invalid length. [ 939.594110][T12847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.686117][T12847] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.798352][ T2935] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.805599][ T2935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.828303][ T2935] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.835555][ T2935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.327595][T13028] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 940.780372][T12847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.872754][T12847] veth0_vlan: entered promiscuous mode [ 940.932083][T12847] veth1_vlan: entered promiscuous mode [ 941.015959][T12847] veth0_macvtap: entered promiscuous mode [ 941.051589][T12847] veth1_macvtap: entered promiscuous mode [ 941.110499][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.143609][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.174683][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.197917][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.221769][T12847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.292303][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.346516][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.386988][T12847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.416677][T12847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.434968][T12847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.513462][T12847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.535131][T12847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.563782][T12847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.590717][T12847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.616112][T13061] netlink: 'syz.0.2265': attribute type 29 has an invalid length. [ 941.689553][T13061] netlink: 'syz.0.2265': attribute type 29 has an invalid length. [ 941.736742][T13065] netlink: 'syz.0.2265': attribute type 29 has an invalid length. [ 941.774351][T13061] netlink: 'syz.0.2265': attribute type 29 has an invalid length. [ 941.923754][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.957602][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.046648][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.069987][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.767746][T13079] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2269'. [ 943.079354][T13088] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 943.124026][T13086] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2218'. [ 944.178053][T11681] wlan1: Trigger new scan to find an IBSS to join [ 944.396123][T13111] netlink: 'syz.2.2275': attribute type 29 has an invalid length. [ 944.430279][T13111] netlink: 'syz.2.2275': attribute type 29 has an invalid length. [ 944.440756][T13111] netlink: 'syz.2.2275': attribute type 29 has an invalid length. [ 944.458910][T13111] netlink: 'syz.2.2275': attribute type 29 has an invalid length. [ 945.155356][ T6842] wlan1: Trigger new scan to find an IBSS to join [ 945.487579][T13139] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 945.497680][ T6842] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 945.505558][ T6842] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 945.554398][T13145] netlink: 'syz.0.2281': attribute type 10 has an invalid length. [ 945.580233][T13145] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2281'. [ 946.533447][T13171] netlink: 'syz.1.2286': attribute type 29 has an invalid length. [ 946.607983][T13140] delete_channel: no stack [ 946.857182][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 946.877777][T13162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2284'. [ 946.891969][T13171] netlink: 'syz.1.2286': attribute type 29 has an invalid length. [ 946.918189][T13172] netlink: 'syz.1.2286': attribute type 29 has an invalid length. [ 946.942930][T13173] netlink: 'syz.1.2286': attribute type 29 has an invalid length. [ 947.827648][T13192] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 948.044766][T13197] netlink: 'syz.3.2293': attribute type 10 has an invalid length. [ 948.067300][T13197] team0: Device hsr_slave_0 failed to register rx_handler [ 948.182952][ T2935] wlan1: Trigger new scan to find an IBSS to join [ 949.515186][T13218] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 949.531826][T13218] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 949.578192][T13218] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2300'. [ 949.599324][T13218] netlink: zone id is out of range [ 949.604839][T13218] netlink: zone id is out of range [ 949.859266][T13225] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 950.635192][T13231] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2304'. [ 950.836833][T13241] validate_nla: 4 callbacks suppressed [ 950.836897][T13241] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 950.853681][T13241] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2307'. [ 950.919984][T13247] netlink: 'syz.0.2309': attribute type 29 has an invalid length. [ 951.721587][T13240] delete_channel: no stack [ 951.823613][T13247] netlink: 'syz.0.2309': attribute type 29 has an invalid length. [ 951.841417][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2307'. [ 952.184735][T11681] wlan1: Trigger new scan to find an IBSS to join [ 952.674459][T13272] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 953.044582][T13281] netlink: 'syz.2.2319': attribute type 33 has an invalid length. [ 953.076152][T13281] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2319'. [ 953.114799][T13281] `: renamed from syz_tun (while UP) [ 953.488919][T13288] netlink: 'syz.3.2320': attribute type 29 has an invalid length. [ 953.497526][T13288] netlink: 'syz.3.2320': attribute type 29 has an invalid length. [ 953.522055][T13288] netlink: 'syz.3.2320': attribute type 29 has an invalid length. [ 953.537613][T13288] netlink: 'syz.3.2320': attribute type 29 has an invalid length. [ 953.653558][T13290] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2321'. [ 953.924666][T13299] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 954.756944][T13317] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2328'. [ 955.578467][T13326] netlink: 'syz.1.2332': attribute type 29 has an invalid length. [ 955.604606][T13326] netlink: 'syz.1.2332': attribute type 29 has an invalid length. [ 955.710660][T13334] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 956.144866][T13346] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2337'. [ 956.191189][ T6842] wlan1: Trigger new scan to find an IBSS to join [ 957.145288][T11667] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 957.166984][T13356] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2342'. [ 957.279902][T13361] validate_nla: 2 callbacks suppressed [ 957.279919][T13361] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 957.306969][T13363] netlink: 127924 bytes leftover after parsing attributes in process `syz.3.2344'. [ 957.308531][T13361] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 957.318033][T13363] netlink: 16384 bytes leftover after parsing attributes in process `syz.3.2344'. [ 957.358043][T13366] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 957.368453][T13361] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 957.383217][T13362] netlink: 'syz.0.2343': attribute type 2 has an invalid length. [ 957.391567][T13362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2343'. [ 957.465538][T13369] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 958.197603][T11667] wlan1: Trigger new scan to find an IBSS to join [ 958.655588][T13393] netlink: 'syz.3.2356': attribute type 29 has an invalid length. [ 958.664625][T13393] netlink: 'syz.3.2356': attribute type 29 has an invalid length. [ 958.679839][T13393] netlink: 'syz.3.2356': attribute type 29 has an invalid length. [ 958.691919][T13393] netlink: 'syz.3.2356': attribute type 29 has an invalid length. [ 958.863550][T13397] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2354'. [ 960.182188][T11667] wlan1: Trigger new scan to find an IBSS to join [ 960.851987][T13427] netlink: 'syz.2.2367': attribute type 29 has an invalid length. [ 961.458569][T13442] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2374'. [ 962.286262][T13475] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2384'. [ 962.334487][T13475] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 962.731524][T13487] validate_nla: 8 callbacks suppressed [ 962.731544][T13487] netlink: 'syz.1.2389': attribute type 29 has an invalid length. [ 962.894961][T13487] netlink: 'syz.1.2389': attribute type 29 has an invalid length. [ 962.910343][T13490] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2387'. [ 963.067471][T13492] netlink: 'syz.1.2389': attribute type 29 has an invalid length. [ 963.075914][T13495] netlink: 'syz.1.2389': attribute type 29 has an invalid length. [ 963.111169][T13496] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2390'. [ 963.220519][T11681] wlan1: Trigger new scan to find an IBSS to join [ 963.633264][T13514] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 964.173366][T13536] netlink: 'syz.3.2401': attribute type 29 has an invalid length. [ 964.185123][T13536] netlink: 'syz.3.2401': attribute type 29 has an invalid length. [ 964.194779][T13536] netlink: 'syz.3.2401': attribute type 29 has an invalid length. [ 964.204141][T13536] netlink: 'syz.3.2401': attribute type 29 has an invalid length. [ 964.972460][T13560] netlink: 'syz.3.2411': attribute type 29 has an invalid length. [ 964.981426][T13560] netlink: 'syz.3.2411': attribute type 29 has an invalid length. [ 965.635861][T12848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.646684][T12848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.657315][ T6842] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.673761][T12848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.691666][T12848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.700937][T12848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 965.708553][T12848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 965.852330][ T6842] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.150566][ T6842] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.177707][T11667] wlan1: Trigger new scan to find an IBSS to join [ 966.228870][ T6842] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.348811][T13567] chnl_net:caif_netlink_parms(): no params data found [ 966.554064][T13567] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.567909][T13567] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.576402][T13567] bridge_slave_0: entered allmulticast mode [ 966.584978][T13567] bridge_slave_0: entered promiscuous mode [ 966.595301][T13567] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.603278][T13567] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.615422][T13567] bridge_slave_1: entered allmulticast mode [ 966.629547][T13567] bridge_slave_1: entered promiscuous mode [ 966.826558][T13567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.888140][T13567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.428427][T13567] team0: Port device team_slave_0 added [ 967.467966][T13567] team0: Port device team_slave_1 added [ 967.665536][T13567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.947761][T12848] Bluetooth: hci0: command tx timeout [ 967.961466][T13567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.997583][T13567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.041457][T13567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.067926][T13567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.156035][T13567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.826993][T13626] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2424'. [ 969.113686][T13567] hsr_slave_0: entered promiscuous mode [ 969.133921][T13567] hsr_slave_1: entered promiscuous mode [ 969.226568][ T59] wlan1: Trigger new scan to find an IBSS to join [ 970.027811][T12848] Bluetooth: hci0: command tx timeout [ 970.501828][T13669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2433'. [ 970.841004][T13682] validate_nla: 2 callbacks suppressed [ 970.841024][T13682] netlink: 'syz.2.2436': attribute type 29 has an invalid length. [ 970.868943][T13682] netlink: 'syz.2.2436': attribute type 29 has an invalid length. [ 970.926586][T13682] netlink: 'syz.2.2436': attribute type 29 has an invalid length. [ 970.962131][T13682] netlink: 'syz.2.2436': attribute type 29 has an invalid length. [ 971.012232][T13567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 971.023530][T13567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 971.037315][T13567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 971.078173][T13567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 971.154390][ T6842] hsr_slave_0: left promiscuous mode [ 971.163434][ T6842] hsr_slave_1: left promiscuous mode [ 971.171014][ T6842] hsr0: left allmulticast mode [ 971.177537][ T6842] bridge0: port 3(hsr0) entered disabled state [ 971.194202][ T6842] bridge_slave_1: left allmulticast mode [ 971.201995][ T6842] bridge_slave_1: left promiscuous mode [ 971.208299][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.221140][ T6842] bridge_slave_0: left allmulticast mode [ 971.227064][ T6842] bridge_slave_0: left promiscuous mode [ 971.233466][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.273983][ T6842] veth1_macvtap: left promiscuous mode [ 971.279877][ T6842] veth0_macvtap: left promiscuous mode [ 971.286790][ T6842] veth1_vlan: left promiscuous mode [ 971.293974][ T6842] veth0_vlan: left promiscuous mode [ 972.110210][T12848] Bluetooth: hci0: command tx timeout [ 972.133340][ T6842] team0 (unregistering): Port device team_slave_1 removed [ 972.192829][ T6842] team0 (unregistering): Port device C removed [ 972.246177][ T6842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.299601][ T6842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.615097][ T6842] bond0 (unregistering): (slave team0): Releasing backup interface [ 972.655530][ T6842] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 972.664870][ T6842] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 972.684347][ T6842] bond0 (unregistering): Released all slaves [ 972.972115][T13567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.106378][T13567] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.124256][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.131586][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.194026][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.201338][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.885423][T13567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.996734][T13567] veth0_vlan: entered promiscuous mode [ 974.051984][T13567] veth1_vlan: entered promiscuous mode [ 974.162345][T13567] veth0_macvtap: entered promiscuous mode [ 974.187969][T12848] Bluetooth: hci0: command tx timeout [ 974.204888][T13567] veth1_macvtap: entered promiscuous mode [ 974.253965][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.266790][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.277889][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.306949][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.323366][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.339579][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.352550][T13567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.474885][T13727] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 974.495427][T13728] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2444'. [ 974.746940][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.781261][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.804168][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.856456][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.862539][T13737] netlink: 'syz.1.2450': attribute type 29 has an invalid length. [ 974.909103][T13567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.946979][T13567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.980159][T13567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.010600][T13737] netlink: 'syz.1.2450': attribute type 29 has an invalid length. [ 975.038401][T13741] netlink: 'syz.1.2450': attribute type 29 has an invalid length. [ 975.082229][T13567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.111140][T13567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.137747][T13567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.163054][T13567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.186313][T13742] netlink: 'syz.1.2450': attribute type 29 has an invalid length. [ 975.409279][T11678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.426466][T11678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.533386][ T6842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.561894][ T6842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.626801][T13753] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 975.688488][T13749] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2451'. [ 976.494007][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 976.519039][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 976.536165][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 976.546849][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 976.559010][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 976.574632][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 976.787584][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.890430][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.930139][T13761] chnl_net:caif_netlink_parms(): no params data found [ 976.993084][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.078285][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.141492][T13761] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.174463][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.194863][T13761] bridge_slave_0: entered allmulticast mode [ 977.216641][T13761] bridge_slave_0: entered promiscuous mode [ 977.237637][T13761] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.245733][T13761] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.259653][T13761] bridge_slave_1: entered allmulticast mode [ 977.267209][T13761] bridge_slave_1: entered promiscuous mode [ 977.350111][T13761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.388289][T13761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.522994][T13761] team0: Port device team_slave_0 added [ 977.540471][T13780] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2460'. [ 977.585089][T13761] team0: Port device team_slave_1 added [ 977.603267][T13780] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2460'. [ 977.741881][T13781] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2460'. [ 977.805621][T13761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.813163][T13761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.862188][T13761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.965885][T13761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.974546][T13761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.004163][T13761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.284871][T13761] hsr_slave_0: entered promiscuous mode [ 978.296911][T13761] hsr_slave_1: entered promiscuous mode [ 978.317223][T13761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.325573][T13761] Cannot create hsr debugfs directory [ 978.657670][T12848] Bluetooth: hci4: command tx timeout [ 978.902040][T13794] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 979.453474][T13801] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2465'. [ 980.740630][T12848] Bluetooth: hci4: command tx timeout [ 981.084576][T13833] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2468'. [ 981.297287][T13761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 981.319869][T13761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 981.364580][T13761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 981.392588][ T59] ªªªªªª: left allmulticast mode [ 981.399546][ T59] veth0_vlan: left allmulticast mode [ 981.407606][ T59] ªªªªªª: left promiscuous mode [ 981.413819][ T59] @: port 1(ªªªªªª) entered disabled state [ 981.439276][ T59] hsr_slave_0: left promiscuous mode [ 981.446150][ T59] hsr_slave_1: left promiscuous mode [ 981.452782][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.460717][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.471054][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.484149][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.523375][ T59] veth1_macvtap: left promiscuous mode [ 981.532978][ T59] veth0_macvtap: left promiscuous mode [ 981.541937][ T59] veth1_vlan: left promiscuous mode [ 981.548065][ T59] veth0_vlan: left promiscuous mode [ 982.431107][ T59] team0 (unregistering): Port device team_slave_1 removed [ 982.485314][ T59] team0 (unregistering): Port device team_slave_0 removed [ 982.534977][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.818345][T12848] Bluetooth: hci4: command tx timeout [ 982.978698][ T59] bond0 (unregistering): Released all slaves [ 983.025794][T13761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 983.243014][T13761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.272196][T13761] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.296398][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.303679][T11678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.321424][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.329426][ T6842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.748041][T13761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.835283][T13866] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2473'. [ 983.860154][T13761] veth0_vlan: entered promiscuous mode [ 984.103385][T13761] veth1_vlan: entered promiscuous mode [ 984.126136][T13872] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2479'. [ 984.560696][T13875] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2472'. [ 984.620538][T13880] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 984.692963][T13761] veth0_macvtap: entered promiscuous mode [ 984.725984][T13761] veth1_macvtap: entered promiscuous mode [ 984.761970][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.778653][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.791304][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.806875][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.819966][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.840824][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.854281][T13761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.873605][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.885060][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.895553][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.899226][T12848] Bluetooth: hci4: command tx timeout [ 984.908666][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.927593][T13761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.938291][T13761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.950364][T13761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.963791][T13761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.972979][T13761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.982653][T13761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.991646][T13761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.108589][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.116551][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.173706][ T6842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.184294][ T6842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.786232][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 986.807663][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 986.817333][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 986.833947][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 986.849021][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 986.856894][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 987.052962][T11672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.090337][T13922] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 987.114519][T13922] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 987.140630][T13922] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 987.150911][T11667] wlan1: Trigger new scan to find an IBSS to join [ 987.183896][T13922] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 987.236400][T11672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.351859][T11672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.459812][T11672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.012403][T13929] ªªªªªª: renamed from vlan0 (while UP) [ 988.048323][T13913] chnl_net:caif_netlink_parms(): no params data found [ 988.596020][T11672] ip6gretap0 (unregistering): left allmulticast mode [ 988.609671][T11672] ip6gretap0 (unregistering): left promiscuous mode [ 988.627595][T11672] : port 1(ip6gretap0) entered disabled state [ 988.652537][T13935] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2482'. [ 988.898416][ T5834] Bluetooth: hci2: command tx timeout [ 989.074064][T13943] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 989.140567][T13913] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.161977][T13913] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.171544][T13913] bridge_slave_0: entered allmulticast mode [ 989.183556][T13913] bridge_slave_0: entered promiscuous mode [ 989.242335][T13913] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.266885][T13913] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.287251][T13913] bridge_slave_1: entered allmulticast mode [ 989.303497][T13913] bridge_slave_1: entered promiscuous mode [ 989.539385][T13913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.554325][T13958] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2487'. [ 989.613981][T13913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.738323][T13913] team0: Port device team_slave_0 added [ 989.750858][T13913] team0: Port device team_slave_1 added [ 989.821636][T13913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.831231][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.858699][T13913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.893245][T13913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.900668][T13913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.927130][T13913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.038801][T13913] hsr_slave_0: entered promiscuous mode [ 990.046411][T13913] hsr_slave_1: entered promiscuous mode [ 990.053493][T13913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.065163][T13913] Cannot create hsr debugfs directory [ 990.190054][T11678] wlan1: Trigger new scan to find an IBSS to join [ 990.473990][T11672] hsr_slave_0: left promiscuous mode [ 990.484834][T11672] hsr_slave_1: left promiscuous mode [ 990.494358][T11672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.503309][T11672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.518566][T11672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.526078][T11672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.540076][T11672] bridge0: port 3(batadv0) entered disabled state [ 990.551307][T11672] bridge_slave_1: left allmulticast mode [ 990.557605][T11672] bridge_slave_1: left promiscuous mode [ 990.563768][T11672] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.574351][T11672] bridge_slave_0: left allmulticast mode [ 990.580836][T11672] bridge_slave_0: left promiscuous mode [ 990.587237][T11672] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.637003][T11672] veth1_macvtap: left promiscuous mode [ 990.648067][T11672] veth0_macvtap: left promiscuous mode [ 990.979013][ T5834] Bluetooth: hci2: command tx timeout [ 991.023449][T11672] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 991.228531][T11678] wlan1: Trigger new scan to find an IBSS to join [ 991.273692][T13986] netlink: 'syz.2.2489': attribute type 29 has an invalid length. [ 991.496770][T11672] team0 (unregistering): Port device team_slave_1 removed [ 991.554707][T11672] team0 (unregistering): Port device team_slave_0 removed [ 991.610584][T11672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.662432][T11672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.046171][T11672] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 992.055568][T11672] bond0 (unregistering): Released all slaves [ 992.205865][T13972] netlink: 'syz.1.2488': attribute type 39 has an invalid length. [ 992.290686][T13986] netlink: 'syz.2.2489': attribute type 29 has an invalid length. [ 993.068051][ T5834] Bluetooth: hci2: command tx timeout [ 993.265114][T13913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 993.301840][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.308437][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.312963][T13913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 993.349276][T13913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 993.384803][T13913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 993.601464][T13913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.652303][T13913] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.696902][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.704158][T11678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.748315][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.755537][T11678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.180732][T14023] ªªªªªª: renamed from vlan0 (while UP) [ 994.189190][T11681] wlan1: Trigger new scan to find an IBSS to join [ 994.932257][T13913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.023217][T14042] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2496'. [ 995.070002][T13913] veth0_vlan: entered promiscuous mode [ 995.099832][T13913] veth1_vlan: entered promiscuous mode [ 995.139008][ T5834] Bluetooth: hci2: command tx timeout [ 995.226236][T13913] veth0_macvtap: entered promiscuous mode [ 995.246665][T13913] veth1_macvtap: entered promiscuous mode [ 995.284214][T14047] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2497'. [ 995.303327][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.341242][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.380356][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.397300][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.410206][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.421431][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.434125][T13913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.490129][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.510146][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.523956][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.542852][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.553070][T13913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.567302][T13913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.602848][T13913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.633781][T13913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.643554][T13913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.653325][T13913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.692759][T13913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.512036][T14055] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2499'. [ 996.590554][T14064] FAULT_INJECTION: forcing a failure. [ 996.590554][T14064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.604447][T14064] CPU: 1 PID: 14064 Comm: syz.3.2502 Not tainted syzkaller #0 [ 996.611991][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 996.622119][T14064] Call Trace: [ 996.625643][T14064] [ 996.628628][T14064] dump_stack_lvl+0x18c/0x250 [ 996.633545][T14064] ? show_regs_print_info+0x20/0x20 [ 996.638821][T14064] ? load_image+0x420/0x420 [ 996.643390][T14064] ? __might_fault+0xaa/0x120 [ 996.648141][T14064] ? __lock_acquire+0x7d40/0x7d40 [ 996.653610][T14064] should_fail_ex+0x39d/0x4d0 [ 996.658392][T14064] _copy_from_user+0x2f/0xe0 [ 996.663071][T14064] generic_map_update_batch+0x54b/0x810 [ 996.668704][T14064] ? rcu_read_unlock+0xa0/0xa0 [ 996.673551][T14064] ? __fdget+0x180/0x210 [ 996.677869][T14064] ? rcu_read_unlock+0xa0/0xa0 [ 996.682780][T14064] bpf_map_do_batch+0x3d7/0x610 [ 996.687705][T14064] __sys_bpf+0x381/0x890 [ 996.692088][T14064] ? bpf_link_show_fdinfo+0x390/0x390 [ 996.697536][T14064] ? lock_chain_count+0x20/0x20 [ 996.702436][T14064] __x64_sys_bpf+0x7c/0x90 [ 996.706931][T14064] do_syscall_64+0x55/0xb0 [ 996.711385][T14064] ? clear_bhb_loop+0x40/0x90 [ 996.716100][T14064] ? clear_bhb_loop+0x40/0x90 [ 996.720822][T14064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.726849][T14064] RIP: 0033:0x7f4ca119ce59 [ 996.731297][T14064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.751030][T14064] RSP: 002b:00007f4ca1fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 996.759493][T14064] RAX: ffffffffffffffda RBX: 00007f4ca1415fa0 RCX: 00007f4ca119ce59 [ 996.767523][T14064] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 996.775911][T14064] RBP: 00007f4ca1fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 996.784039][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 996.792055][T14064] R13: 00007f4ca1416038 R14: 00007f4ca1415fa0 R15: 00007ffc673d85b8 [ 996.800087][T14064] [ 997.040059][T11667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.069357][T11667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.151901][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.161842][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.238142][T14076] FAULT_INJECTION: forcing a failure. [ 997.238142][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 997.313001][T14076] CPU: 1 PID: 14076 Comm: syz.2.2504 Not tainted syzkaller #0 [ 997.320831][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 997.331042][T14076] Call Trace: [ 997.334557][T14076] [ 997.337626][T14076] dump_stack_lvl+0x18c/0x250 [ 997.342359][T14076] ? kasan_set_track+0x4e/0x70 [ 997.347182][T14076] ? slab_post_alloc_hook+0x6e/0x4b0 [ 997.352875][T14076] ? show_regs_print_info+0x20/0x20 [ 997.358999][T14076] ? load_image+0x420/0x420 [ 997.363583][T14076] ? release_sock+0x5f/0x1c0 [ 997.368786][T14076] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 997.373968][T14076] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.380126][T14076] should_fail_ex+0x39d/0x4d0 [ 997.384896][T14076] should_failslab+0x9/0x20 [ 997.389469][T14076] slab_pre_alloc_hook+0x59/0x310 [ 997.394747][T14076] kmem_cache_alloc_node+0x60/0x320 [ 997.400014][T14076] ? __alloc_skb+0x103/0x2c0 [ 997.404760][T14076] __alloc_skb+0x103/0x2c0 [ 997.409239][T14076] skb_copy+0x13d/0x7a0 [ 997.413467][T14076] ? __skb_clone+0x63/0x790 [ 997.418100][T14076] sctp_make_reassembled_event+0x582/0x950 [ 997.424728][T14076] sctp_ulpq_retrieve_reassembled+0x563/0x6a0 [ 997.430893][T14076] sctp_ulpq_tail_data+0x68e/0xf10 [ 997.437077][T14076] ? sctp_ulpq_free+0x20/0x20 [ 997.441837][T14076] ? sctp_sf_eat_data_6_2+0x8b0/0xb70 [ 997.447278][T14076] ? sctp_ulpq_free+0x20/0x20 [ 997.452024][T14076] sctp_do_sm+0x1a55/0x5a60 [ 997.456601][T14076] ? mark_lock+0x94/0x320 [ 997.461002][T14076] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 997.467115][T14076] ? read_tsc+0x9/0x20 [ 997.471254][T14076] sctp_assoc_bh_rcv+0x3f2/0x630 [ 997.476353][T14076] sctp_backlog_rcv+0x163/0x370 [ 997.481278][T14076] __release_sock+0x1e5/0x460 [ 997.486024][T14076] release_sock+0x5f/0x1c0 [ 997.490516][T14076] sctp_sendmsg+0x1c26/0x2910 [ 997.495273][T14076] ? sctp_getsockopt+0xb60/0xb60 [ 997.500268][T14076] ? aa_sk_perm+0x83c/0x970 [ 997.504834][T14076] ? aa_af_perm+0x330/0x330 [ 997.509381][T14076] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 997.515847][T14076] ? sock_rps_record_flow+0x19/0x3f0 [ 997.521298][T14076] ? inet_sendmsg+0x7c/0x2f0 [ 997.525952][T14076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 997.531298][T14076] ? security_socket_sendmsg+0x80/0xa0 [ 997.536813][T14076] ? inet_send_prepare+0x260/0x260 [ 997.541992][T14076] ____sys_sendmsg+0x5ba/0x960 [ 997.547249][T14076] ? __lock_acquire+0x7d40/0x7d40 [ 997.552339][T14076] ? __asan_memset+0x22/0x40 [ 997.557015][T14076] ? __sys_sendmsg_sock+0x30/0x30 [ 997.562105][T14076] ? __import_iovec+0x5f2/0x850 [ 997.567038][T14076] ? import_iovec+0x73/0xa0 [ 997.571775][T14076] ___sys_sendmsg+0x2a6/0x360 [ 997.576622][T14076] ? get_pid_task+0x20/0x1e0 [ 997.581424][T14076] ? __sys_sendmsg+0x2a0/0x2a0 [ 997.586277][T14076] ? __lock_acquire+0x7d40/0x7d40 [ 997.591457][T14076] __se_sys_sendmsg+0x1c2/0x2b0 [ 997.596377][T14076] ? __x64_sys_sendmsg+0x80/0x80 [ 997.601396][T14076] ? lockdep_hardirqs_on+0x98/0x150 [ 997.606670][T14076] do_syscall_64+0x55/0xb0 [ 997.611182][T14076] ? clear_bhb_loop+0x40/0x90 [ 997.616002][T14076] ? clear_bhb_loop+0x40/0x90 [ 997.620738][T14076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.626705][T14076] RIP: 0033:0x7f556b79ce59 [ 997.631545][T14076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.651225][T14076] RSP: 002b:00007f556c5c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 997.659699][T14076] RAX: ffffffffffffffda RBX: 00007f556ba16090 RCX: 00007f556b79ce59 [ 997.667850][T14076] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 997.675974][T14076] RBP: 00007f556c5c0090 R08: 0000000000000000 R09: 0000000000000000 [ 997.684015][T14076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 997.692121][T14076] R13: 00007f556ba16128 R14: 00007f556ba16090 R15: 00007ffcf0497068 [ 997.700255][T14076] [ 998.035733][T14089] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2507'. [ 998.167600][T14092] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2508'. [ 998.361697][T14094] FAULT_INJECTION: forcing a failure. [ 998.361697][T14094] name failslab, interval 1, probability 0, space 0, times 0 [ 998.382603][T14094] CPU: 1 PID: 14094 Comm: syz.2.2509 Not tainted syzkaller #0 [ 998.390164][T14094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 998.400278][T14094] Call Trace: [ 998.403611][T14094] [ 998.406659][T14094] dump_stack_lvl+0x18c/0x250 [ 998.411420][T14094] ? show_regs_print_info+0x20/0x20 [ 998.416781][T14094] ? load_image+0x420/0x420 [ 998.421950][T14094] ? __might_sleep+0xe0/0xe0 [ 998.427078][T14094] ? __lock_acquire+0x7d40/0x7d40 [ 998.432277][T14094] ? kasan_set_track+0x5f/0x70 [ 998.437124][T14094] ? kasan_set_track+0x4e/0x70 [ 998.441950][T14094] should_fail_ex+0x39d/0x4d0 [ 998.446706][T14094] should_failslab+0x9/0x20 [ 998.451279][T14094] slab_pre_alloc_hook+0x59/0x310 [ 998.456381][T14094] kmem_cache_alloc_node+0x60/0x320 [ 998.461705][T14094] ? __alloc_skb+0x103/0x2c0 [ 998.466370][T14094] __alloc_skb+0x103/0x2c0 [ 998.470851][T14094] netlink_dump+0x1ec/0xe50 [ 998.475427][T14094] ? __kmem_cache_alloc_node+0x13a/0x250 [ 998.481131][T14094] ? netlink_lookup+0x200/0x200 [ 998.486065][T14094] ? __inet_diag_dump_start+0x88d/0x9f0 [ 998.491785][T14094] ? netlink_lookup+0x30/0x200 [ 998.496623][T14094] __netlink_dump_start+0x5f1/0x810 [ 998.501897][T14094] inet_diag_rcv_msg_compat+0x215/0x440 [ 998.507952][T14094] ? __inet_diag_dump+0x380/0x380 [ 998.513053][T14094] ? sock_diag_rcv_msg+0xd1/0x600 [ 998.518146][T14094] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 998.524192][T14094] ? inet_diag_dump_start_compat+0x20/0x20 [ 998.530064][T14094] ? inet_diag_dump+0x50/0x50 [ 998.534832][T14094] ? __inet_diag_dump+0x380/0x380 [ 998.539921][T14094] sock_diag_rcv_msg+0x3d8/0x600 [ 998.544953][T14094] netlink_rcv_skb+0x241/0x4d0 [ 998.549841][T14094] ? sock_diag_bind+0xb0/0xb0 [ 998.554555][T14094] ? netlink_ack+0x1180/0x1180 [ 998.559362][T14094] ? __lock_acquire+0x7d40/0x7d40 [ 998.564443][T14094] ? netlink_deliver_tap+0x2e/0x1b0 [ 998.569878][T14094] sock_diag_rcv+0x2a/0x40 [ 998.574362][T14094] netlink_unicast+0x751/0x8d0 [ 998.579169][T14094] netlink_sendmsg+0x8d0/0xbf0 [ 998.583968][T14094] ? lockdep_hardirqs_on+0x98/0x150 [ 998.589273][T14094] ? netlink_getsockopt+0x590/0x590 [ 998.594602][T14094] ? netlink_getsockopt+0x590/0x590 [ 998.599837][T14094] ? netlink_getsockopt+0x590/0x590 [ 998.605341][T14094] ____sys_sendmsg+0x5ba/0x960 [ 998.610149][T14094] ? __asan_memset+0x22/0x40 [ 998.614782][T14094] ? __sys_sendmsg_sock+0x30/0x30 [ 998.619843][T14094] ? __import_iovec+0x5f2/0x850 [ 998.624739][T14094] ? import_iovec+0x73/0xa0 [ 998.629284][T14094] ___sys_sendmsg+0x2a6/0x360 [ 998.634416][T14094] ? __sys_sendmsg+0x2a0/0x2a0 [ 998.640172][T14094] ? irqentry_enter+0x37/0x50 [ 998.644929][T14094] ? __se_sys_sendmsg+0xd9/0x2b0 [ 998.649914][T14094] __se_sys_sendmsg+0x1c2/0x2b0 [ 998.654817][T14094] ? __x64_sys_sendmsg+0x80/0x80 [ 998.659812][T14094] ? lockdep_hardirqs_on+0x98/0x150 [ 998.665064][T14094] do_syscall_64+0x55/0xb0 [ 998.669518][T14094] ? clear_bhb_loop+0x40/0x90 [ 998.674226][T14094] ? clear_bhb_loop+0x40/0x90 [ 998.678931][T14094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 998.684959][T14094] RIP: 0033:0x7f556b79ce59 [ 998.689403][T14094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.709131][T14094] RSP: 002b:00007f556c5e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.717926][T14094] RAX: ffffffffffffffda RBX: 00007f556ba15fa0 RCX: 00007f556b79ce59 [ 998.726019][T14094] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000006 [ 998.734024][T14094] RBP: 00007f556c5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 998.742028][T14094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.750033][T14094] R13: 00007f556ba16038 R14: 00007f556ba15fa0 R15: 00007ffcf0497068 [ 998.758107][T14094] [ 998.923075][T14097] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2510'. [ 999.640283][T14100] netlink: 'syz.1.2511': attribute type 39 has an invalid length. [ 999.742104][T14105] FAULT_INJECTION: forcing a failure. [ 999.742104][T14105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.755649][T14105] CPU: 0 PID: 14105 Comm: syz.0.2514 Not tainted syzkaller #0 [ 999.763197][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 999.773316][T14105] Call Trace: [ 999.776709][T14105] [ 999.779696][T14105] dump_stack_lvl+0x18c/0x250 [ 999.784444][T14105] ? show_regs_print_info+0x20/0x20 [ 999.789706][T14105] ? load_image+0x420/0x420 [ 999.794274][T14105] ? __lock_acquire+0x7d40/0x7d40 [ 999.799366][T14105] should_fail_ex+0x39d/0x4d0 [ 999.804119][T14105] _copy_from_user+0x2f/0xe0 [ 999.808766][T14105] __copy_msghdr+0x3bb/0x580 [ 999.813420][T14105] ___sys_sendmsg+0x214/0x360 [ 999.818241][T14105] ? get_pid_task+0x20/0x1e0 [ 999.822875][T14105] ? __sys_sendmsg+0x2a0/0x2a0 [ 999.827889][T14105] ? __lock_acquire+0x7d40/0x7d40 [ 999.833065][T14105] __se_sys_sendmsg+0x1c2/0x2b0 [ 999.837963][T14105] ? __x64_sys_sendmsg+0x80/0x80 [ 999.843036][T14105] ? lockdep_hardirqs_on+0x98/0x150 [ 999.848624][T14105] do_syscall_64+0x55/0xb0 [ 999.853075][T14105] ? clear_bhb_loop+0x40/0x90 [ 999.857926][T14105] ? clear_bhb_loop+0x40/0x90 [ 999.863462][T14105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.869790][T14105] RIP: 0033:0x7facb1f9ce59 [ 999.874267][T14105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.894372][T14105] RSP: 002b:00007facb2d9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.902859][T14105] RAX: ffffffffffffffda RBX: 00007facb2215fa0 RCX: 00007facb1f9ce59 [ 999.910877][T14105] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 999.919061][T14105] RBP: 00007facb2d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 999.927074][T14105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.935075][T14105] R13: 00007facb2216038 R14: 00007facb2215fa0 R15: 00007fff90f91b98 [ 999.943195][T14105] [ 1000.033657][T14108] netlink: 'syz.2.2516': attribute type 29 has an invalid length. [ 1000.042936][T14108] netlink: 'syz.2.2516': attribute type 29 has an invalid length. [ 1000.057210][T14108] netlink: 'syz.2.2516': attribute type 29 has an invalid length. [ 1000.071961][T14108] netlink: 'syz.2.2516': attribute type 29 has an invalid length. [ 1000.370027][T14117] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2518'. [ 1000.626037][T14124] FAULT_INJECTION: forcing a failure. [ 1000.626037][T14124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.640635][T14124] CPU: 0 PID: 14124 Comm: syz.1.2520 Not tainted syzkaller #0 [ 1000.648158][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1000.658361][T14124] Call Trace: [ 1000.661687][T14124] [ 1000.664673][T14124] dump_stack_lvl+0x18c/0x250 [ 1000.669421][T14124] ? show_regs_print_info+0x20/0x20 [ 1000.674694][T14124] ? load_image+0x420/0x420 [ 1000.679261][T14124] ? __lock_acquire+0x7d40/0x7d40 [ 1000.684546][T14124] should_fail_ex+0x39d/0x4d0 [ 1000.689306][T14124] prepare_alloc_pages+0x1e2/0x5f0 [ 1000.694493][T14124] __alloc_pages+0x134/0x460 [ 1000.699163][T14124] ? zone_statistics+0x170/0x170 [ 1000.704480][T14124] ? alloc_pages+0x4dc/0x740 [ 1000.709138][T14124] ? do_raw_spin_unlock+0x121/0x230 [ 1000.714409][T14124] __get_free_pages+0xc/0x30 [ 1000.719044][T14124] kasan_populate_vmalloc_pte+0x35/0x100 [ 1000.724756][T14124] __apply_to_page_range+0x860/0xdd0 [ 1000.730154][T14124] ? kasan_populate_vmalloc+0x70/0x70 [ 1000.735643][T14124] ? apply_to_page_range+0x50/0x50 [ 1000.740824][T14124] ? do_raw_spin_unlock+0x121/0x230 [ 1000.746090][T14124] alloc_vmap_area+0x1d0c/0x1e30 [ 1000.751113][T14124] ? vm_map_ram+0xcb0/0xcb0 [ 1000.755679][T14124] ? rcu_is_watching+0x15/0xb0 [ 1000.760510][T14124] __get_vm_area_node+0x162/0x370 [ 1000.765685][T14124] __vmalloc_node_range+0x36e/0x1330 [ 1000.771028][T14124] ? array_map_alloc+0x280/0x6f0 [ 1000.776042][T14124] ? end_current_label_crit_section+0x170/0x170 [ 1000.782441][T14124] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1000.788482][T14124] ? free_vm_area+0x50/0x50 [ 1000.793050][T14124] ? bpf_lsm_capable+0x9/0x10 [ 1000.797799][T14124] bpf_map_area_alloc+0xf1/0x110 [ 1000.802798][T14124] ? array_map_alloc+0x280/0x6f0 [ 1000.807791][T14124] array_map_alloc+0x280/0x6f0 [ 1000.812613][T14124] map_create+0x877/0x12f0 [ 1000.817175][T14124] ? bpf_lsm_bpf+0x9/0x10 [ 1000.821588][T14124] __sys_bpf+0x651/0x890 [ 1000.825906][T14124] ? bpf_link_show_fdinfo+0x390/0x390 [ 1000.831350][T14124] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1000.837615][T14124] __x64_sys_bpf+0x7c/0x90 [ 1000.842100][T14124] do_syscall_64+0x55/0xb0 [ 1000.846582][T14124] ? clear_bhb_loop+0x40/0x90 [ 1000.851318][T14124] ? clear_bhb_loop+0x40/0x90 [ 1000.856067][T14124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1000.862036][T14124] RIP: 0033:0x7f79f1d9ce59 [ 1000.866590][T14124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.886355][T14124] RSP: 002b:00007f79f2bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1000.894930][T14124] RAX: ffffffffffffffda RBX: 00007f79f2015fa0 RCX: 00007f79f1d9ce59 [ 1000.902960][T14124] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 1000.911033][T14124] RBP: 00007f79f2bac090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.919238][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1000.927434][T14124] R13: 00007f79f2016038 R14: 00007f79f2015fa0 R15: 00007ffd658f74e8 [ 1000.935579][T14124] [ 1001.076456][T14131] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2523'. [ 1001.091167][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.104001][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.114996][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.134642][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.162834][T14134] netlink: 'syz.0.2526': attribute type 29 has an invalid length. [ 1001.186842][T14131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.207522][T14131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.240039][T14131] batadv_slave_1: entered promiscuous mode [ 1001.264910][T14134] netlink: 'syz.0.2526': attribute type 29 has an invalid length. [ 1001.288079][T14138] netlink: 'syz.0.2526': attribute type 29 has an invalid length. [ 1001.332478][T14134] netlink: 'syz.0.2526': attribute type 29 has an invalid length. [ 1001.604206][T14143] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2527'. [ 1001.896558][T14154] FAULT_INJECTION: forcing a failure. [ 1001.896558][T14154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.919837][T14154] CPU: 0 PID: 14154 Comm: syz.2.2532 Not tainted syzkaller #0 [ 1001.927416][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1001.937540][T14154] Call Trace: [ 1001.940937][T14154] [ 1001.943937][T14154] dump_stack_lvl+0x18c/0x250 [ 1001.948701][T14154] ? show_regs_print_info+0x20/0x20 [ 1001.953978][T14154] ? load_image+0x420/0x420 [ 1001.958651][T14154] ? __lock_acquire+0x7d40/0x7d40 [ 1001.963773][T14154] should_fail_ex+0x39d/0x4d0 [ 1001.969075][T14154] _copy_from_user+0x2f/0xe0 [ 1001.973852][T14154] __copy_msghdr+0x3bb/0x580 [ 1001.978542][T14154] ___sys_sendmsg+0x214/0x360 [ 1001.983484][T14154] ? __sys_sendmsg+0x2a0/0x2a0 [ 1001.988384][T14154] ? __lock_acquire+0x7d40/0x7d40 [ 1001.993546][T14154] __se_sys_sendmsg+0x1c2/0x2b0 [ 1001.998475][T14154] ? __x64_sys_sendmsg+0x80/0x80 [ 1002.003524][T14154] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.008816][T14154] do_syscall_64+0x55/0xb0 [ 1002.013300][T14154] ? clear_bhb_loop+0x40/0x90 [ 1002.018152][T14154] ? clear_bhb_loop+0x40/0x90 [ 1002.023017][T14154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.028999][T14154] RIP: 0033:0x7f556b79ce59 [ 1002.033485][T14154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.053179][T14154] RSP: 002b:00007f556c5e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.061679][T14154] RAX: ffffffffffffffda RBX: 00007f556ba15fa0 RCX: 00007f556b79ce59 [ 1002.069721][T14154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1002.077767][T14154] RBP: 00007f556c5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.085869][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.093982][T14154] R13: 00007f556ba16038 R14: 00007f556ba15fa0 R15: 00007ffcf0497068 [ 1002.102028][T14154] [ 1002.289812][T14162] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2534'. [ 1002.629201][T14166] netlink: 'syz.2.2535': attribute type 39 has an invalid length. [ 1003.961286][T14189] hsr0: entered allmulticast mode [ 1003.975224][T14189] hsr_slave_0: entered allmulticast mode [ 1003.993085][T14188] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1004.004688][T14189] hsr_slave_1: entered allmulticast mode [ 1004.283615][T14193] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1005.294871][T14217] validate_nla: 10 callbacks suppressed [ 1005.294892][T14217] netlink: 'syz.3.2555': attribute type 1 has an invalid length. [ 1005.368062][T14219] netlink: 'syz.2.2556': attribute type 12 has an invalid length. [ 1005.401075][T14219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1005.420976][T14220] netlink: 'syz.2.2556': attribute type 12 has an invalid length. [ 1005.433373][T14222] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1005.437113][T14220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1005.617801][T14227] netlink: 'syz.2.2560': attribute type 29 has an invalid length. [ 1005.626579][T14227] netlink: 'syz.2.2560': attribute type 29 has an invalid length. [ 1005.636406][T14227] netlink: 'syz.2.2560': attribute type 29 has an invalid length. [ 1005.651798][T14227] netlink: 'syz.2.2560': attribute type 29 has an invalid length. [ 1005.826070][T14230] FAULT_INJECTION: forcing a failure. [ 1005.826070][T14230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.848488][T14230] CPU: 1 PID: 14230 Comm: syz.0.2561 Not tainted syzkaller #0 [ 1005.856051][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1005.866165][T14230] Call Trace: [ 1005.869581][T14230] [ 1005.872554][T14230] dump_stack_lvl+0x18c/0x250 [ 1005.877296][T14230] ? show_regs_print_info+0x20/0x20 [ 1005.882573][T14230] ? load_image+0x420/0x420 [ 1005.887159][T14230] ? __lock_acquire+0x7d40/0x7d40 [ 1005.892253][T14230] ? snprintf+0xe9/0x140 [ 1005.896572][T14230] should_fail_ex+0x39d/0x4d0 [ 1005.902752][T14230] _copy_to_user+0x2f/0xa0 [ 1005.907333][T14230] simple_read_from_buffer+0xe7/0x150 [ 1005.912805][T14230] proc_fail_nth_read+0x1e8/0x260 [ 1005.917939][T14230] ? proc_fault_inject_write+0x360/0x360 [ 1005.923692][T14230] ? fsnotify_perm+0x271/0x5e0 [ 1005.928532][T14230] ? proc_fault_inject_write+0x360/0x360 [ 1005.934842][T14230] vfs_read+0x28b/0x970 [ 1005.939089][T14230] ? kernel_read+0x1e0/0x1e0 [ 1005.944034][T14230] ? __fget_files+0x28/0x4b0 [ 1005.948710][T14230] ? __fget_files+0x28/0x4b0 [ 1005.953345][T14230] ? __fget_files+0x43d/0x4b0 [ 1005.958090][T14230] ? __fdget_pos+0x2a3/0x330 [ 1005.962897][T14230] ? ksys_read+0x75/0x260 [ 1005.967268][T14230] ksys_read+0x150/0x260 [ 1005.971558][T14230] ? vfs_write+0x990/0x990 [ 1005.976013][T14230] ? lockdep_hardirqs_on+0x98/0x150 [ 1005.981257][T14230] do_syscall_64+0x55/0xb0 [ 1005.985713][T14230] ? clear_bhb_loop+0x40/0x90 [ 1005.990508][T14230] ? clear_bhb_loop+0x40/0x90 [ 1005.995283][T14230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.001260][T14230] RIP: 0033:0x7facb1f5d68e [ 1006.005753][T14230] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1006.025416][T14230] RSP: 002b:00007facb2d9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1006.033965][T14230] RAX: ffffffffffffffda RBX: 00007facb2d9f6c0 RCX: 00007facb1f5d68e [ 1006.042077][T14230] RDX: 000000000000000f RSI: 00007facb2d9f0a0 RDI: 000000000000000a [ 1006.050119][T14230] RBP: 00007facb2d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.058564][T14230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.066575][T14230] R13: 00007facb2216038 R14: 00007facb2215fa0 R15: 00007fff90f91b98 [ 1006.074632][T14230] [ 1006.371513][T14237] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2564'. [ 1006.426503][T14242] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2564'. [ 1006.972753][T14259] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2570'. [ 1007.209713][T14264] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2573'. [ 1007.272378][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.327523][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.429459][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.441225][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.454448][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.466310][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.521316][T14264] batadv_slave_1: entered promiscuous mode [ 1008.836672][T14287] netlink: 'syz.0.2579': attribute type 29 has an invalid length. [ 1008.846444][T14287] netlink: 'syz.0.2579': attribute type 29 has an invalid length. [ 1008.877729][T14287] netlink: 'syz.0.2579': attribute type 29 has an invalid length. [ 1009.058189][T14291] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1009.694484][T14301] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2583'. [ 1010.197673][T14310] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2587'. [ 1010.306886][T14310] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2587'. [ 1011.147666][T11681] wlan1: Trigger new scan to find an IBSS to join [ 1011.204703][T14327] validate_nla: 1 callbacks suppressed [ 1011.204725][T14327] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 1011.241873][T14327] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 1011.292566][T14327] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 1011.341607][T14334] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 1013.133588][T14353] __nla_validate_parse: 1 callbacks suppressed [ 1013.133608][T14353] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1013.498566][T14359] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1014.020092][T14371] netlink: 'syz.3.2606': attribute type 25 has an invalid length. [ 1014.060903][T14371] netlink: 'syz.3.2606': attribute type 25 has an invalid length. [ 1014.204633][T14383] FAULT_INJECTION: forcing a failure. [ 1014.204633][T14383] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.218076][T14383] CPU: 1 PID: 14383 Comm: syz.1.2611 Not tainted syzkaller #0 [ 1014.225711][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.235920][T14383] Call Trace: [ 1014.239292][T14383] [ 1014.242266][T14383] dump_stack_lvl+0x18c/0x250 [ 1014.247030][T14383] ? show_regs_print_info+0x20/0x20 [ 1014.252766][T14383] ? load_image+0x420/0x420 [ 1014.257428][T14383] ? __might_sleep+0xe0/0xe0 [ 1014.262103][T14383] ? __lock_acquire+0x7d40/0x7d40 [ 1014.267196][T14383] should_fail_ex+0x39d/0x4d0 [ 1014.272436][T14383] should_failslab+0x9/0x20 [ 1014.277041][T14383] slab_pre_alloc_hook+0x59/0x310 [ 1014.282222][T14383] ? __get_vm_area_node+0x125/0x370 [ 1014.288278][T14383] __kmem_cache_alloc_node+0x53/0x250 [ 1014.293814][T14383] ? __get_vm_area_node+0x125/0x370 [ 1014.299170][T14383] kmalloc_node_trace+0x26/0xe0 [ 1014.304102][T14383] __get_vm_area_node+0x125/0x370 [ 1014.309207][T14383] __vmalloc_node_range+0x36e/0x1330 [ 1014.314565][T14383] ? netlink_sendmsg+0x602/0xbf0 [ 1014.319651][T14383] ? netlink_insert+0x109f/0x13a0 [ 1014.324775][T14383] ? netlink_data_ready+0x10/0x10 [ 1014.329983][T14383] ? free_vm_area+0x50/0x50 [ 1014.334564][T14383] ? netlink_sendmsg+0x602/0xbf0 [ 1014.339570][T14383] vmalloc+0x79/0x90 [ 1014.343541][T14383] ? netlink_sendmsg+0x602/0xbf0 [ 1014.348534][T14383] netlink_sendmsg+0x602/0xbf0 [ 1014.353373][T14383] ? netlink_getsockopt+0x590/0x590 [ 1014.358637][T14383] ? aa_sock_msg_perm+0x94/0x150 [ 1014.363645][T14383] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1014.368990][T14383] ? security_socket_sendmsg+0x80/0xa0 [ 1014.374517][T14383] sock_write_iter+0x2df/0x420 [ 1014.379363][T14383] ? sock_read_iter+0x3e0/0x3e0 [ 1014.384286][T14383] ? common_file_perm+0x198/0x1f0 [ 1014.389376][T14383] vfs_write+0x46c/0x990 [ 1014.393678][T14383] ? file_end_write+0x250/0x250 [ 1014.398585][T14383] ? __fget_files+0x43d/0x4b0 [ 1014.403337][T14383] ? __fdget_pos+0x1d8/0x330 [ 1014.407982][T14383] ? ksys_write+0x75/0x260 [ 1014.412558][T14383] ksys_write+0x150/0x260 [ 1014.416955][T14383] ? __ia32_sys_read+0x90/0x90 [ 1014.421788][T14383] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.427064][T14383] do_syscall_64+0x55/0xb0 [ 1014.431534][T14383] ? clear_bhb_loop+0x40/0x90 [ 1014.436292][T14383] ? clear_bhb_loop+0x40/0x90 [ 1014.441017][T14383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.446974][T14383] RIP: 0033:0x7f79f1d9ce59 [ 1014.451527][T14383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.471284][T14383] RSP: 002b:00007f79f2bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1014.479999][T14383] RAX: ffffffffffffffda RBX: 00007f79f2015fa0 RCX: 00007f79f1d9ce59 [ 1014.488126][T14383] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1014.496208][T14383] RBP: 00007f79f2bac090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.504227][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.512232][T14383] R13: 00007f79f2016038 R14: 00007f79f2015fa0 R15: 00007ffd658f74e8 [ 1014.520282][T14383] [ 1014.532765][T14383] syz.1.2611: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1014.547990][T14383] CPU: 1 PID: 14383 Comm: syz.1.2611 Not tainted syzkaller #0 [ 1014.555550][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.565737][T14383] Call Trace: [ 1014.569056][T14383] [ 1014.572191][T14383] dump_stack_lvl+0x18c/0x250 [ 1014.576970][T14383] ? show_regs_print_info+0x20/0x20 [ 1014.582700][T14383] ? load_image+0x420/0x420 [ 1014.587257][T14383] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1014.593750][T14383] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1014.600303][T14383] warn_alloc+0x246/0x340 [ 1014.604860][T14383] ? __get_vm_area_node+0x125/0x370 [ 1014.610200][T14383] ? zone_watermark_ok_safe+0x230/0x230 [ 1014.615798][T14383] ? rcu_is_watching+0x15/0xb0 [ 1014.620611][T14383] ? __get_vm_area_node+0x356/0x370 [ 1014.625855][T14383] __vmalloc_node_range+0x393/0x1330 [ 1014.631187][T14383] ? netlink_insert+0x109f/0x13a0 [ 1014.636262][T14383] ? netlink_data_ready+0x10/0x10 [ 1014.641331][T14383] ? free_vm_area+0x50/0x50 [ 1014.645974][T14383] ? netlink_sendmsg+0x602/0xbf0 [ 1014.650946][T14383] vmalloc+0x79/0x90 [ 1014.654887][T14383] ? netlink_sendmsg+0x602/0xbf0 [ 1014.659860][T14383] netlink_sendmsg+0x602/0xbf0 [ 1014.664665][T14383] ? netlink_getsockopt+0x590/0x590 [ 1014.669929][T14383] ? aa_sock_msg_perm+0x94/0x150 [ 1014.675080][T14383] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1014.680440][T14383] ? security_socket_sendmsg+0x80/0xa0 [ 1014.686031][T14383] sock_write_iter+0x2df/0x420 [ 1014.690930][T14383] ? sock_read_iter+0x3e0/0x3e0 [ 1014.695829][T14383] ? common_file_perm+0x198/0x1f0 [ 1014.700911][T14383] vfs_write+0x46c/0x990 [ 1014.705295][T14383] ? file_end_write+0x250/0x250 [ 1014.710221][T14383] ? __fget_files+0x43d/0x4b0 [ 1014.715032][T14383] ? __fdget_pos+0x1d8/0x330 [ 1014.719742][T14383] ? ksys_write+0x75/0x260 [ 1014.724306][T14383] ksys_write+0x150/0x260 [ 1014.728685][T14383] ? __ia32_sys_read+0x90/0x90 [ 1014.733516][T14383] ? lockdep_hardirqs_on+0x98/0x150 [ 1014.738766][T14383] do_syscall_64+0x55/0xb0 [ 1014.743304][T14383] ? clear_bhb_loop+0x40/0x90 [ 1014.748021][T14383] ? clear_bhb_loop+0x40/0x90 [ 1014.752758][T14383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1014.758695][T14383] RIP: 0033:0x7f79f1d9ce59 [ 1014.763158][T14383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.782800][T14383] RSP: 002b:00007f79f2bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1014.791251][T14383] RAX: ffffffffffffffda RBX: 00007f79f2015fa0 RCX: 00007f79f1d9ce59 [ 1014.799252][T14383] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1014.807247][T14383] RBP: 00007f79f2bac090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.815253][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.823287][T14383] R13: 00007f79f2016038 R14: 00007f79f2015fa0 R15: 00007ffd658f74e8 [ 1014.831310][T14383] [ 1014.843790][T14383] Mem-Info: [ 1014.847078][T14383] active_anon:6914 inactive_anon:0 isolated_anon:0 [ 1014.847078][T14383] active_file:19354 inactive_file:40179 isolated_file:0 [ 1014.847078][T14383] unevictable:768 dirty:264 writeback:0 [ 1014.847078][T14383] slab_reclaimable:10780 slab_unreclaimable:92684 [ 1014.847078][T14383] mapped:24864 shmem:1361 pagetables:513 [ 1014.847078][T14383] sec_pagetables:0 bounce:0 [ 1014.847078][T14383] kernel_misc_reclaimable:0 [ 1014.847078][T14383] free:1341518 free_pcp:10131 free_cma:0 [ 1014.905468][T14383] Node 0 active_anon:27656kB inactive_anon:0kB active_file:77416kB inactive_file:160516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99456kB dirty:1056kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10460kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no [ 1014.944438][T14383] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1014.952823][T14388] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1014.992620][T14383] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1015.025774][T14383] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1015.032313][T14383] Node 0 DMA32 free:1457896kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27716kB inactive_anon:0kB active_file:77416kB inactive_file:159696kB unevictable:1536kB writepending:1052kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:15272kB local_pcp:13764kB free_cma:0kB [ 1015.072209][T14383] lowmem_reserve[]: 0 0 0 0 0 [ 1015.079393][T14383] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1015.130020][T14383] lowmem_reserve[]: 0 0 0 0 0 [ 1015.138603][T11672] wlan1: Trigger new scan to find an IBSS to join [ 1015.142630][T14383] Node 1 Normal free:3891956kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25284kB local_pcp:12616kB free_cma:0kB [ 1015.204122][T14383] lowmem_reserve[]: 0 0 0 0 0 [ 1015.221643][T14383] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1015.256684][T14383] Node 0 DMA32: 492*4kB (U) 567*8kB (UME) 778*16kB (UME) 587*32kB (UME) 369*64kB (UME) 232*128kB (UM) 87*256kB (UM) 30*512kB (UM) 18*1024kB (UME) 4*2048kB (UME) 318*4096kB (UM) = 1457832kB [ 1015.281136][T14383] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1015.294722][T14383] Node 1 Normal: 213*4kB (UME) 58*8kB (UME) 41*16kB (UME) 46*32kB (UME) 16*64kB (UE) 9*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3891956kB [ 1015.321256][T14383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1015.335297][T14383] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1015.345887][T14383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1015.358371][T14383] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1015.373357][T14383] 60896 total pagecache pages [ 1015.378265][T14383] 0 pages in swap cache [ 1015.383713][T14383] Free swap = 124996kB [ 1015.388125][T14383] Total swap = 124996kB [ 1015.392349][T14383] 2097051 pages RAM [ 1015.396306][T14383] 0 pages HighMem/MovableOnly [ 1015.401224][T14383] 416933 pages reserved [ 1015.405851][T14392] C: renamed from team_slave_0 (while UP) [ 1015.406083][T14383] 0 pages cma reserved [ 1015.420497][T14392] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2613'. [ 1015.731611][T14406] FAULT_INJECTION: forcing a failure. [ 1015.731611][T14406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.763621][T14406] CPU: 0 PID: 14406 Comm: syz.2.2618 Not tainted syzkaller #0 [ 1015.771176][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.781287][T14406] Call Trace: [ 1015.784621][T14406] [ 1015.787618][T14406] dump_stack_lvl+0x18c/0x250 [ 1015.792454][T14406] ? show_regs_print_info+0x20/0x20 [ 1015.797716][T14406] ? load_image+0x420/0x420 [ 1015.802280][T14406] ? __lock_acquire+0x7d40/0x7d40 [ 1015.807363][T14406] ? snprintf+0xe9/0x140 [ 1015.811688][T14406] should_fail_ex+0x39d/0x4d0 [ 1015.816476][T14406] _copy_to_user+0x2f/0xa0 [ 1015.820956][T14406] simple_read_from_buffer+0xe7/0x150 [ 1015.826498][T14406] proc_fail_nth_read+0x1e8/0x260 [ 1015.831598][T14406] ? proc_fault_inject_write+0x360/0x360 [ 1015.837337][T14406] ? fsnotify_perm+0x271/0x5e0 [ 1015.842181][T14406] ? proc_fault_inject_write+0x360/0x360 [ 1015.847884][T14406] vfs_read+0x28b/0x970 [ 1015.852108][T14406] ? kernel_read+0x1e0/0x1e0 [ 1015.856766][T14406] ? __fget_files+0x28/0x4b0 [ 1015.861414][T14406] ? __fget_files+0x28/0x4b0 [ 1015.866071][T14406] ? __fget_files+0x43d/0x4b0 [ 1015.870818][T14406] ? __fdget_pos+0x2a3/0x330 [ 1015.875469][T14406] ? ksys_read+0x75/0x260 [ 1015.879865][T14406] ksys_read+0x150/0x260 [ 1015.884167][T14406] ? vfs_write+0x990/0x990 [ 1015.888658][T14406] ? lockdep_hardirqs_on+0x98/0x150 [ 1015.893922][T14406] do_syscall_64+0x55/0xb0 [ 1015.898388][T14406] ? clear_bhb_loop+0x40/0x90 [ 1015.903114][T14406] ? clear_bhb_loop+0x40/0x90 [ 1015.907835][T14406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.913790][T14406] RIP: 0033:0x7f556b75d68e [ 1015.918252][T14406] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1015.937913][T14406] RSP: 002b:00007f556c5e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.946391][T14406] RAX: ffffffffffffffda RBX: 00007f556c5e16c0 RCX: 00007f556b75d68e [ 1015.954433][T14406] RDX: 000000000000000f RSI: 00007f556c5e10a0 RDI: 0000000000000004 [ 1015.962463][T14406] RBP: 00007f556c5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.970587][T14406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.978618][T14406] R13: 00007f556ba16038 R14: 00007f556ba15fa0 R15: 00007ffcf0497068 [ 1015.986664][T14406] [ 1016.179216][ T2935] wlan1: Trigger new scan to find an IBSS to join [ 1016.399938][T14419] tap0: tun_chr_ioctl cmd 1074025677 [ 1016.411589][T14419] tap0: linktype set to 805 [ 1016.472686][T11678] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1017.276194][T14437] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2628'. [ 1017.526759][T14437] netlink: 'syz.3.2628': attribute type 10 has an invalid length. [ 1017.572573][T14437] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2628'. [ 1017.638910][T14437] hsr0: entered promiscuous mode [ 1017.672196][T14437] bridge0: port 3(hsr0) entered blocking state [ 1017.700021][T14437] bridge0: port 3(hsr0) entered disabled state [ 1017.718673][T14437] hsr0: entered allmulticast mode [ 1017.726898][T14437] hsr_slave_0: entered allmulticast mode [ 1017.757812][T14437] hsr_slave_1: entered allmulticast mode [ 1017.816337][T14437] bridge0: port 3(hsr0) entered blocking state [ 1017.823524][T14437] bridge0: port 3(hsr0) entered forwarding state [ 1018.796434][T14452] netlink: 'syz.0.2633': attribute type 10 has an invalid length. [ 1018.834108][T14452] geneve0: entered promiscuous mode [ 1018.999529][T14452] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1019.220534][T14455] netlink: 'syz.1.2634': attribute type 25 has an invalid length. [ 1019.231398][T11681] wlan1: Trigger new scan to find an IBSS to join [ 1019.257779][T14455] netlink: 'syz.1.2634': attribute type 25 has an invalid length. [ 1019.615107][T14463] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2638'. [ 1019.893470][T14481] FAULT_INJECTION: forcing a failure. [ 1019.893470][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.932360][T14481] CPU: 1 PID: 14481 Comm: syz.1.2642 Not tainted syzkaller #0 [ 1019.940100][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.950219][T14481] Call Trace: [ 1019.953581][T14481] [ 1019.956573][T14481] dump_stack_lvl+0x18c/0x250 [ 1019.961354][T14481] ? show_regs_print_info+0x20/0x20 [ 1019.966652][T14481] ? load_image+0x420/0x420 [ 1019.971226][T14481] ? __might_sleep+0xe0/0xe0 [ 1019.976066][T14481] ? __lock_acquire+0x7d40/0x7d40 [ 1019.981340][T14481] should_fail_ex+0x39d/0x4d0 [ 1019.986091][T14481] should_failslab+0x9/0x20 [ 1019.990666][T14481] slab_pre_alloc_hook+0x59/0x310 [ 1019.995756][T14481] ? __rwlock_init+0x150/0x150 [ 1020.000602][T14481] kmem_cache_alloc_lru+0x4d/0x2d0 [ 1020.005866][T14481] ? sock_alloc_inode+0x28/0xc0 [ 1020.010789][T14481] sock_alloc_inode+0x28/0xc0 [ 1020.015525][T14481] ? sockfs_init_fs_context+0xb0/0xb0 [ 1020.020968][T14481] new_inode_pseudo+0x63/0x1d0 [ 1020.025803][T14481] sock_alloc+0x46/0x220 [ 1020.030125][T14481] kcm_ioctl+0xea/0x1090 [ 1020.034694][T14481] ? __kmem_cache_free+0xba/0x1e0 [ 1020.039800][T14481] ? kcm_release+0x5b0/0x5b0 [ 1020.044449][T14481] ? tomoyo_path_number_perm+0x5b4/0x620 [ 1020.050284][T14481] ? tomoyo_path_number_perm+0x217/0x620 [ 1020.055980][T14481] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1020.061525][T14481] sock_do_ioctl+0xfc/0x310 [ 1020.066096][T14481] ? sock_show_fdinfo+0xb0/0xb0 [ 1020.071198][T14481] sock_ioctl+0x5ba/0x7e0 [ 1020.075680][T14481] ? sock_poll+0x3e0/0x3e0 [ 1020.080265][T14481] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1020.085344][T14481] ? security_file_ioctl+0x80/0xa0 [ 1020.090545][T14481] ? sock_poll+0x3e0/0x3e0 [ 1020.095021][T14481] __se_sys_ioctl+0xfd/0x170 [ 1020.099803][T14481] do_syscall_64+0x55/0xb0 [ 1020.104283][T14481] ? clear_bhb_loop+0x40/0x90 [ 1020.109011][T14481] ? clear_bhb_loop+0x40/0x90 [ 1020.113739][T14481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.119704][T14481] RIP: 0033:0x7f79f1d9ce59 [ 1020.124178][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.143931][T14481] RSP: 002b:00007f79f2bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1020.152413][T14481] RAX: ffffffffffffffda RBX: 00007f79f2015fa0 RCX: 00007f79f1d9ce59 [ 1020.160463][T14481] RDX: 0000200000000180 RSI: 00000000000089e2 RDI: 0000000000000003 [ 1020.168488][T14481] RBP: 00007f79f2bac090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.176505][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.184517][T14481] R13: 00007f79f2016038 R14: 00007f79f2015fa0 R15: 00007ffd658f74e8 [ 1020.192544][T14481] [ 1020.288140][T14485] FAULT_INJECTION: forcing a failure. [ 1020.288140][T14485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.367711][T14479] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2639'. [ 1020.367723][T14485] CPU: 1 PID: 14485 Comm: syz.0.2643 Not tainted syzkaller #0 [ 1020.384342][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1020.394452][T14485] Call Trace: [ 1020.397787][T14485] [ 1020.400777][T14485] dump_stack_lvl+0x18c/0x250 [ 1020.405518][T14485] ? show_regs_print_info+0x20/0x20 [ 1020.410774][T14485] ? load_image+0x420/0x420 [ 1020.415336][T14485] ? __might_fault+0xaa/0x120 [ 1020.420074][T14485] ? __lock_acquire+0x7d40/0x7d40 [ 1020.425172][T14485] should_fail_ex+0x39d/0x4d0 [ 1020.429937][T14485] _copy_from_user+0x2f/0xe0 [ 1020.434682][T14485] kstrtouint_from_user+0xde/0x170 [ 1020.439885][T14485] ? kstrtol_from_user+0x190/0x190 [ 1020.445083][T14485] proc_fail_nth_write+0x8f/0x250 [ 1020.450178][T14485] ? proc_fail_nth_read+0x260/0x260 [ 1020.455467][T14485] ? proc_fail_nth_read+0x260/0x260 [ 1020.460747][T14485] vfs_write+0x296/0x990 [ 1020.465158][T14485] ? file_end_write+0x250/0x250 [ 1020.470092][T14485] ? __fget_files+0x28/0x4b0 [ 1020.474748][T14485] ? __fget_files+0x28/0x4b0 [ 1020.479410][T14485] ? __fget_files+0x43d/0x4b0 [ 1020.484166][T14485] ? __fdget_pos+0x2a3/0x330 [ 1020.488835][T14485] ? ksys_write+0x75/0x260 [ 1020.493333][T14485] ksys_write+0x150/0x260 [ 1020.497735][T14485] ? __ia32_sys_read+0x90/0x90 [ 1020.502653][T14485] ? lockdep_hardirqs_on+0x98/0x150 [ 1020.507923][T14485] do_syscall_64+0x55/0xb0 [ 1020.512497][T14485] ? clear_bhb_loop+0x40/0x90 [ 1020.517332][T14485] ? clear_bhb_loop+0x40/0x90 [ 1020.522162][T14485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.528570][T14485] RIP: 0033:0x7facb1f5d68e [ 1020.533048][T14485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1020.552719][T14485] RSP: 002b:00007facb2d7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1020.561290][T14485] RAX: ffffffffffffffda RBX: 00007facb2d7e6c0 RCX: 00007facb1f5d68e [ 1020.569324][T14485] RDX: 0000000000000001 RSI: 00007facb2d7e0a0 RDI: 0000000000000004 [ 1020.577357][T14485] RBP: 00007facb2d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.585407][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.593444][T14485] R13: 00007facb2216128 R14: 00007facb2216090 R15: 00007fff90f91b98 [ 1020.601507][T14485] [ 1020.607002][T14484] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1021.074439][T14495] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 1021.100936][T14495] geneve0: entered promiscuous mode [ 1021.279042][T14495] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1021.306168][T14499] mac80211_hwsim hwsim31 ..ãc¤±: renamed from wlan1 (while UP) [ 1021.397613][T14499] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2648'. [ 1021.438185][T14499] openvswitch: netlink: Flow key attribute not present in set flow. [ 1021.639684][T14503] netlink: 'syz.0.2649': attribute type 25 has an invalid length. [ 1021.659919][T14503] netlink: 'syz.0.2649': attribute type 25 has an invalid length. [ 1022.366168][T14515] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2653'. [ 1022.521976][T14515] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 1022.552666][T14515] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2653'. [ 1022.563684][T14515] hsr0: entered promiscuous mode [ 1022.620163][T14515] bridge0: port 3(hsr0) entered blocking state [ 1022.638500][T14515] bridge0: port 3(hsr0) entered disabled state [ 1022.690453][T14515] bridge0: port 3(hsr0) entered blocking state [ 1022.697973][T14515] bridge0: port 3(hsr0) entered forwarding state [ 1022.866299][T14515] syz.0.2653 (14515) used greatest stack depth: 17704 bytes left [ 1023.308632][ T2935] wlan1: Trigger new scan to find an IBSS to join [ 1023.445379][T14539] netlink: 'syz.2.2660': attribute type 25 has an invalid length. [ 1023.489925][T14539] netlink: 'syz.2.2660': attribute type 25 has an invalid length. [ 1023.520588][T14541] netlink: 'syz.1.2659': attribute type 10 has an invalid length. [ 1023.550576][T14541] geneve0: entered promiscuous mode [ 1023.603307][T14541] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1023.732711][T14537] ªªªªªª: renamed from tunl0 (while UP) [ 1024.039384][T14549] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2663'. [ 1024.198053][T14557] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1024.242554][T14559] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1024.399012][T14563] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2668'. [ 1024.504313][T14563] netlink: 'syz.1.2668': attribute type 10 has an invalid length. [ 1024.517574][T14563] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2668'. [ 1024.527117][T14563] hsr0: entered promiscuous mode [ 1024.534886][T14563] bridge0: port 3(hsr0) entered blocking state [ 1024.542401][T14563] bridge0: port 3(hsr0) entered disabled state [ 1024.560212][T14563] hsr0: entered allmulticast mode [ 1024.566680][T14563] hsr_slave_0: entered allmulticast mode [ 1024.577610][T14563] hsr_slave_1: entered allmulticast mode [ 1024.617975][T14563] bridge0: port 3(hsr0) entered blocking state [ 1024.625378][T14563] bridge0: port 3(hsr0) entered forwarding state [ 1025.013844][T14574] netlink: 'syz.1.2672': attribute type 21 has an invalid length. [ 1025.037446][T14574] netlink: 14532 bytes leftover after parsing attributes in process `syz.1.2672'. [ 1025.749744][T14577] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1025.777840][T14579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2674'. [ 1025.892458][T14581] netlink: 'syz.3.2673': attribute type 3 has an invalid length. [ 1025.922935][T14581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2673'. [ 1026.497681][T14594] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1026.652676][T14600] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2679'. [ 1026.662737][T14599] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2679'. [ 1026.696862][T14599] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1026.747646][T14600] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1026.849385][T14606] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2682'. [ 1027.367234][T14621] netlink: 'syz.2.2688': attribute type 10 has an invalid length. [ 1027.547621][T14623] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1027.844462][T14630] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2691'. [ 1028.356032][T14641] netlink: 'syz.2.2693': attribute type 9 has an invalid length. [ 1028.382641][T14641] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2693'. [ 1028.400844][T14639] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2692'. [ 1028.419051][T14637] netlink: 'syz.2.2693': attribute type 10 has an invalid length. [ 1028.442847][T14637] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1029.174726][T14644] netlink: 'syz.3.2694': attribute type 2 has an invalid length. [ 1029.197850][T14644] netlink: 'syz.3.2694': attribute type 8 has an invalid length. [ 1029.205961][T14644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2694'. [ 1029.263853][T14644] netlink: 'syz.3.2694': attribute type 11 has an invalid length. [ 1029.915018][T14659] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1031.741018][T14689] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1032.090851][T14696] __nla_validate_parse: 1 callbacks suppressed [ 1032.090872][T14696] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.2712'. [ 1032.133808][T14696] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2712'. [ 1032.799558][T14702] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2713'. [ 1033.304286][T14708] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2714'. [ 1033.526410][T14719] netlink: 'syz.1.2716': attribute type 3 has an invalid length. [ 1033.535091][T14719] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2716'. [ 1033.781519][T14727] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1034.498542][T14738] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2723'. [ 1035.625378][T14752] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2728'. [ 1035.708701][T14754] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1036.407988][T14758] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2730'. [ 1036.701281][T14760] netlink: 'syz.0.2732': attribute type 2 has an invalid length. [ 1036.709671][T14760] netlink: 'syz.0.2732': attribute type 8 has an invalid length. [ 1036.718687][T14760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2732'. [ 1036.750005][T14760] netlink: 'syz.0.2732': attribute type 11 has an invalid length. [ 1037.384596][T14776] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1038.183379][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1039.091683][T14798] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2743'. [ 1039.492753][T14806] netlink: 'syz.3.2745': attribute type 10 has an invalid length. [ 1039.579884][T14806] team0 (unregistering): Port device C removed [ 1039.604517][T14806] team0 (unregistering): Port device team_slave_1 removed [ 1039.762486][T14811] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1040.144701][T14824] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2751'. [ 1041.137612][ T2935] wlan1: Trigger new scan to find an IBSS to join [ 1041.957839][T14831] netlink: 'syz.0.2761': attribute type 5 has an invalid length. [ 1042.567579][T14843] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2755'. [ 1042.904472][T14849] FAULT_INJECTION: forcing a failure. [ 1042.904472][T14849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.917937][T14849] CPU: 1 PID: 14849 Comm: syz.1.2759 Not tainted syzkaller #0 [ 1042.925457][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1042.935652][T14849] Call Trace: [ 1042.938983][T14849] [ 1042.941955][T14849] dump_stack_lvl+0x18c/0x250 [ 1042.946696][T14849] ? show_regs_print_info+0x20/0x20 [ 1042.951945][T14849] ? load_image+0x420/0x420 [ 1042.956496][T14849] ? __might_fault+0xaa/0x120 [ 1042.961226][T14849] ? __lock_acquire+0x7d40/0x7d40 [ 1042.966353][T14849] should_fail_ex+0x39d/0x4d0 [ 1042.971196][T14849] _copy_to_user+0x2f/0xa0 [ 1042.975787][T14849] map_lookup_and_delete_elem+0x8b0/0xa50 [ 1042.981587][T14849] __sys_bpf+0x528/0x890 [ 1042.985895][T14849] ? bpf_link_show_fdinfo+0x390/0x390 [ 1042.991336][T14849] ? lock_chain_count+0x20/0x20 [ 1042.996235][T14849] __x64_sys_bpf+0x7c/0x90 [ 1043.000868][T14849] do_syscall_64+0x55/0xb0 [ 1043.005336][T14849] ? clear_bhb_loop+0x40/0x90 [ 1043.010042][T14849] ? clear_bhb_loop+0x40/0x90 [ 1043.014757][T14849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.020779][T14849] RIP: 0033:0x7f79f1d9ce59 [ 1043.025224][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.045155][T14849] RSP: 002b:00007f79f2bac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1043.053616][T14849] RAX: ffffffffffffffda RBX: 00007f79f2015fa0 RCX: 00007f79f1d9ce59 [ 1043.061718][T14849] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000015 [ 1043.069754][T14849] RBP: 00007f79f2bac090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.077767][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.085900][T14849] R13: 00007f79f2016038 R14: 00007f79f2015fa0 R15: 00007ffd658f74e8 [ 1043.093953][T14849] [ 1043.238110][T14855] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2760'. [ 1043.286897][T14856] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2757'. [ 1043.467046][T14860] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2763'. [ 1043.589663][T14861] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2762'. [ 1045.343842][T14874] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2767'. [ 1045.517462][T14880] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2766'. [ 1045.785341][T14888] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2771'. [ 1046.034284][T14894] netlink: 'syz.1.2774': attribute type 10 has an invalid length. [ 1046.091147][T14894] team0 (unregistering): Port device team_slave_0 removed [ 1046.114326][T14894] team0 (unregistering): Port device team_slave_1 removed [ 1046.272874][T14898] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2775'. [ 1046.403705][T14900] netlink: 'syz.3.2776': attribute type 21 has an invalid length. [ 1046.412927][T14900] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2776'. [ 1046.437694][T14900] netlink: 'syz.3.2776': attribute type 5 has an invalid length. [ 1047.322076][T14931] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1047.666330][T14940] __nla_validate_parse: 3 callbacks suppressed [ 1047.666345][T14940] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2790'. [ 1047.805045][T14942] netlink: 'syz.3.2791': attribute type 10 has an invalid length. [ 1048.803002][T14960] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1048.903225][T14962] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2799'. [ 1049.173731][T14968] netlink: 'syz.0.2802': attribute type 21 has an invalid length. [ 1049.188043][T14968] IPv6: NLM_F_CREATE should be specified when creating new route [ 1049.228974][T14970] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.2803'. [ 1049.495908][T14973] netlink: 'syz.2.2804': attribute type 10 has an invalid length. [ 1050.117730][T14973] team0 (unregistering): Port device team_slave_0 removed [ 1050.154005][T14973] team0 (unregistering): Port device team_slave_1 removed [ 1050.276411][T14980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1050.284015][T14980] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.291633][T14980] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.299000][T14980] IPv6: NLM_F_CREATE should be set when creating new route [ 1050.509901][T14991] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1050.611348][T14993] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2809'. [ 1050.766131][T14996] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1050.947686][T15007] netlink: 'syz.3.2814': attribute type 25 has an invalid length. [ 1050.969908][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2814'. [ 1051.140910][T15013] netlink: 'syz.3.2817': attribute type 21 has an invalid length. [ 1051.150877][T11672] wlan1: Trigger new scan to find an IBSS to join [ 1051.169713][T15013] netlink: 'syz.3.2817': attribute type 6 has an invalid length. [ 1051.189832][T15015] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2815'. [ 1052.451181][T15031] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2823'. [ 1053.137658][T11683] wlan1: Trigger new scan to find an IBSS to join [ 1053.765146][T15061] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1054.255276][T15078] FAULT_INJECTION: forcing a failure. [ 1054.255276][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.277808][T15078] CPU: 1 PID: 15078 Comm: syz.0.2840 Not tainted syzkaller #0 [ 1054.285362][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.295681][T15078] Call Trace: [ 1054.299007][T15078] [ 1054.301986][T15078] dump_stack_lvl+0x18c/0x250 [ 1054.306731][T15078] ? show_regs_print_info+0x20/0x20 [ 1054.312001][T15078] ? load_image+0x420/0x420 [ 1054.316567][T15078] ? __might_sleep+0xe0/0xe0 [ 1054.321408][T15078] ? __lock_acquire+0x7d40/0x7d40 [ 1054.326535][T15078] should_fail_ex+0x39d/0x4d0 [ 1054.331292][T15078] should_failslab+0x9/0x20 [ 1054.335874][T15078] slab_pre_alloc_hook+0x59/0x310 [ 1054.340971][T15078] ? tomoyo_encode+0x28b/0x540 [ 1054.345792][T15078] ? tomoyo_encode+0x28b/0x540 [ 1054.350614][T15078] __kmem_cache_alloc_node+0x53/0x250 [ 1054.356061][T15078] ? tomoyo_encode+0x28b/0x540 [ 1054.360888][T15078] __kmalloc+0xa4/0x230 [ 1054.365148][T15078] tomoyo_encode+0x28b/0x540 [ 1054.369804][T15078] tomoyo_realpath_from_path+0x592/0x5d0 [ 1054.375516][T15078] tomoyo_path_number_perm+0x248/0x620 [ 1054.381041][T15078] ? tomoyo_path_number_perm+0x217/0x620 [ 1054.386734][T15078] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1054.392257][T15078] ? ksys_write+0x1c4/0x260 [ 1054.396887][T15078] ? __fget_files+0x28/0x4b0 [ 1054.401532][T15078] ? __fget_files+0x28/0x4b0 [ 1054.406195][T15078] security_file_ioctl+0x70/0xa0 [ 1054.411193][T15078] __se_sys_ioctl+0x48/0x170 [ 1054.415939][T15078] do_syscall_64+0x55/0xb0 [ 1054.420446][T15078] ? clear_bhb_loop+0x40/0x90 [ 1054.425169][T15078] ? clear_bhb_loop+0x40/0x90 [ 1054.429903][T15078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.435867][T15078] RIP: 0033:0x7facb1f9ce59 [ 1054.440338][T15078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.460101][T15078] RSP: 002b:00007facb2d9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1054.468672][T15078] RAX: ffffffffffffffda RBX: 00007facb2215fa0 RCX: 00007facb1f9ce59 [ 1054.476738][T15078] RDX: 0000200000000080 RSI: 00000000000089f9 RDI: 0000000000000004 [ 1054.484845][T15078] RBP: 00007facb2d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.492869][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.500898][T15078] R13: 00007facb2216038 R14: 00007facb2215fa0 R15: 00007fff90f91b98 [ 1054.508943][T15078] [ 1054.549579][T15078] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1054.771934][T15086] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2844'. [ 1054.786258][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.793022][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.021305][T15095] delete_channel: no stack [ 1055.464433][T15107] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2851'. [ 1055.959902][T15118] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2853'. [ 1056.167140][T15126] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2858'. [ 1056.826196][T12848] Bluetooth: hci1: command 0x0406 tx timeout [ 1058.425060][T15118] ------------[ cut here ]------------ [ 1058.431073][T15118] WARNING: CPU: 0 PID: 15118 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 1058.441141][T15118] Modules linked in: [ 1058.445401][T15118] CPU: 0 PID: 15118 Comm: syz.1.2853 Not tainted syzkaller #0 [ 1058.453024][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.463255][T15118] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1058.469107][T15118] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 1058.488964][T15118] RSP: 0018:ffffc900036f79c0 EFLAGS: 00010293 [ 1058.495131][T15118] RAX: ffffffff81b1603c RBX: ffff888020ec7830 RCX: ffff88802d77da00 [ 1058.503503][T15118] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1058.511724][T15118] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 1058.519892][T15118] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802d77da00 [ 1058.527985][T15118] R13: ffff88805ceff930 R14: ffff888020ec75f0 R15: 1ffff110041d8ebe [ 1058.536272][T15118] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1058.545328][T15118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1058.552808][T15118] CR2: 00007f647884c80e CR3: 000000001bfba000 CR4: 00000000003506f0 [ 1058.561015][T15118] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1058.569216][T15118] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1058.577255][T15118] Call Trace: [ 1058.581555][T15118] [ 1058.584556][T15118] task_work_run+0x1d4/0x260 [ 1058.589316][T15118] ? task_work_cancel+0x220/0x220 [ 1058.594439][T15118] do_exit+0x95a/0x2460 [ 1058.598895][T15118] ? put_task_struct+0xc0/0xc0 [ 1058.603724][T15118] ? lockdep_hardirqs_on+0x98/0x150 [ 1058.609065][T15118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.615310][T15118] do_group_exit+0x21b/0x2d0 [ 1058.620086][T15118] ? _raw_spin_unlock_irq+0x29/0x50 [ 1058.625388][T15118] get_signal+0x12fc/0x13f0 [ 1058.630456][T15118] arch_do_signal_or_restart+0xc2/0x800 [ 1058.636093][T15118] ? get_sigframe_size+0x20/0x20 [ 1058.641206][T15118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.647518][T15118] exit_to_user_mode_loop+0x70/0x110 [ 1058.653661][T15118] exit_to_user_mode_prepare+0xee/0x180 [ 1058.659922][T15118] syscall_exit_to_user_mode+0x1a/0x50 [ 1058.665561][T15118] do_syscall_64+0x61/0xb0 [ 1058.670278][T15118] ? clear_bhb_loop+0x40/0x90 [ 1058.675032][T15118] ? clear_bhb_loop+0x40/0x90 [ 1058.679842][T15118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1058.685811][T15118] RIP: 0033:0x7f79f1d9ce59 [ 1058.690382][T15118] Code: Unable to access opcode bytes at 0x7f79f1d9ce2f. [ 1058.697638][T15118] RSP: 002b:00007f79f2b8b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1058.706127][T15118] RAX: fffffffffffffe00 RBX: 00007f79f2016098 RCX: 00007f79f1d9ce59 [ 1058.714250][T15118] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79f2016098 [ 1058.722740][T15118] RBP: 00007f79f2016090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.730928][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.739006][T15118] R13: 00007f79f2016128 R14: 00007ffd658f7400 R15: 00007ffd658f74e8 [ 1058.747094][T15118] [ 1058.750272][T15118] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1058.757603][T15118] CPU: 0 PID: 15118 Comm: syz.1.2853 Not tainted syzkaller #0 [ 1058.765117][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1058.775232][T15118] Call Trace: [ 1058.778554][T15118] [ 1058.781545][T15118] dump_stack_lvl+0x18c/0x250 [ 1058.786298][T15118] ? show_regs_print_info+0x20/0x20 [ 1058.791595][T15118] ? load_image+0x420/0x420 [ 1058.796163][T15118] panic+0x2dc/0x730 [ 1058.800126][T15118] ? bpf_jit_dump+0xd0/0xd0 [ 1058.804716][T15118] __warn+0x2e0/0x470 [ 1058.808751][T15118] ? perf_pending_task+0x35c/0x470 [ 1058.813941][T15118] ? perf_pending_task+0x35c/0x470 [ 1058.819119][T15118] report_bug+0x2be/0x4f0 [ 1058.823512][T15118] ? perf_pending_task+0x35c/0x470 [ 1058.828770][T15118] ? perf_pending_task+0x35c/0x470 [ 1058.833941][T15118] ? perf_pending_task+0x35e/0x470 [ 1058.839122][T15118] handle_bug+0xcf/0x120 [ 1058.843559][T15118] exc_invalid_op+0x1a/0x50 [ 1058.848128][T15118] asm_exc_invalid_op+0x1a/0x20 [ 1058.853041][T15118] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1058.858838][T15118] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 1058.878509][T15118] RSP: 0018:ffffc900036f79c0 EFLAGS: 00010293 [ 1058.884635][T15118] RAX: ffffffff81b1603c RBX: ffff888020ec7830 RCX: ffff88802d77da00 [ 1058.892657][T15118] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1058.900674][T15118] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 1058.908702][T15118] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802d77da00 [ 1058.916733][T15118] R13: ffff88805ceff930 R14: ffff888020ec75f0 R15: 1ffff110041d8ebe [ 1058.924772][T15118] ? perf_pending_task+0x35c/0x470 [ 1058.929971][T15118] task_work_run+0x1d4/0x260 [ 1058.934654][T15118] ? task_work_cancel+0x220/0x220 [ 1058.939858][T15118] do_exit+0x95a/0x2460 [ 1058.944094][T15118] ? put_task_struct+0xc0/0xc0 [ 1058.948922][T15118] ? lockdep_hardirqs_on+0x98/0x150 [ 1058.954192][T15118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.960441][T15118] do_group_exit+0x21b/0x2d0 [ 1058.965196][T15118] ? _raw_spin_unlock_irq+0x29/0x50 [ 1058.970471][T15118] get_signal+0x12fc/0x13f0 [ 1058.975226][T15118] arch_do_signal_or_restart+0xc2/0x800 [ 1058.980848][T15118] ? get_sigframe_size+0x20/0x20 [ 1058.985851][T15118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.992107][T15118] exit_to_user_mode_loop+0x70/0x110 [ 1058.997459][T15118] exit_to_user_mode_prepare+0xee/0x180 [ 1059.003165][T15118] syscall_exit_to_user_mode+0x1a/0x50 [ 1059.008689][T15118] do_syscall_64+0x61/0xb0 [ 1059.013164][T15118] ? clear_bhb_loop+0x40/0x90 [ 1059.017890][T15118] ? clear_bhb_loop+0x40/0x90 [ 1059.022710][T15118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.028679][T15118] RIP: 0033:0x7f79f1d9ce59 [ 1059.033183][T15118] Code: Unable to access opcode bytes at 0x7f79f1d9ce2f. [ 1059.040240][T15118] RSP: 002b:00007f79f2b8b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1059.048728][T15118] RAX: fffffffffffffe00 RBX: 00007f79f2016098 RCX: 00007f79f1d9ce59 [ 1059.056750][T15118] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79f2016098 [ 1059.064842][T15118] RBP: 00007f79f2016090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.072906][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.080932][T15118] R13: 00007f79f2016128 R14: 00007ffd658f7400 R15: 00007ffd658f74e8 [ 1059.089697][T15118] [ 1059.093728][T15118] Kernel Offset: disabled [ 1059.098082][T15118] Rebooting in 86400 seconds..