last executing test programs: 4.503110386s ago: executing program 2 (id=3211): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x5, 0x5, 0x20002, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xa}, 0x50) socketpair(0x1e, 0x2, 0x8001, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000400)=@ll={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="e52ab20fada0dcc12292c09c9ec30ca23f24e69667cb6828e48472c609d47c23ef17ba35194c0674ff1850b36709e5a017fe53df35145203db439590264036fdac95de89b7415b499189ac177c9138db5e1562f0c0a87e51920b7b", 0x5b}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}, 0x20000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x61, 0x30, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/201, 0x50, 0x6, 0x1, 0x8005}, 0x28) sendmsg$kcm(r0, 0x0, 0x20004100) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.630541758s ago: executing program 0 (id=3213): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1981087ef642f7"], 0xffdd) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000880)={&(0x7f0000000580)="099e63d12cc6bca5e4aa279a9e54b4470b06726cb439cd04c3a9f66f4102c7059f27a79b659b919f8b28d54dba1a1d35b68bee7a75f790343ea9566de376822b9172babdaed0d59486df56c70761527d76a9adfc08ecf4a2a017bcbc67f181385eb812c5b615b8fa7b9188f41b0ccab33c90f71e132e011ee29b929eb823fc2217632d114645e50804ce9cf407b11220f30a39ec0646ef0a8ecac603a7da3fe506600f0bdca9edabb41d57c46b16b2562a893ae33f5b90f3fd44ff5e00ae0ac176b679f608405144d03cdf7e", &(0x7f0000000680)=""/82, &(0x7f0000000700)="f8e646eb743b9e8b611826730499bc292ab0251b49e25cb7e9e6e06ca9db5e1afc13bb7d7408e4330317e60db371ad853589550a14569307983ae79bb35c9109b6b4839cd480d9413f93aebd1d61035d531bf173153ab753c217774f1fd60536a7a14c98ccc3e3c2", &(0x7f0000000780)="c03dbc35956acacc91a93b5839e9ee841fae85bc69c624f8e0deec38c6a0d86c781c8bccd52959f1ecf9b060e948688c47236d8a8ce0eba6c8d24e9657956d871bc15988869fcee5ec9f0680fa2b6cbcda15bd5b13df5d71745d1aa62f8fb7491ba3d63cafcdc543ed59ab64d27df0528cf705149330063ab9cbec4b7997da653b545edd57bbc9c5a3360a0da844fd2538257246d37335bd3cc04a91e35ace01ca343a6114", 0x200, r1, 0x4}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07186702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.522751961s ago: executing program 2 (id=3214): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) (async, rerun: 32) sendmsg$tipc(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb43641c7e244598e47968fca29c733a27172e37b2e8a4ff412cedb508cac974c50ee7ab9d29276b064cf951eb2ebfec5941a4574d12a12b48cfe7810b3b67c59eb18e52029f6e3d26c892040025fa858a010931b56236e8e5d10629f17c1edb1b48374e9c2dd952e9301be03dc6dd22fd", 0xa0}], 0x1, 0x0, 0x0, 0x20048850}, 0x80) (rerun: 32) close(r1) 2.964016585s ago: executing program 0 (id=3216): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.959682315s ago: executing program 1 (id=3217): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x1b7}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {0x0}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x2, 0x0) close(r4) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x8) socket$kcm(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x4, 0xa, 0x7, 0x1, 0x0, 0x2, 0x51008, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000f40), 0x2}, 0x300208, 0xc, 0xfffffffb, 0x1, 0x9, 0x0, 0xfdc9, 0x0, 0x2800, 0x0, 0x7}, 0xffffffffffffffff, 0x6, r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000004, @local, 0x6, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="03", 0x1}], 0x1}, 0x2400c041) 2.856488548s ago: executing program 0 (id=3218): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a1bc0005000000000000000e4191000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) (fail_nth: 9) 2.726568121s ago: executing program 3 (id=3220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.584292985s ago: executing program 3 (id=3221): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x15, 0x0, 0x0, 0xfffffffc}, {0x6}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000100000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x45, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x8, 0xa, 0xa, 0xfffffffffffffffe, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x24, '\x00', r9, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r2, r2, r2], &(0x7f0000000500)=[{0x0, 0x2, 0xd, 0xe78ff4f9a4700b3a}, {0x5, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x1, 0x7}], 0x10, 0x3ff}, 0x94) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfdef) close(r11) recvmsg(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000200000005000000ee000000c4080100", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000d81009c00"/31, @ANYRES32=r3, @ANYBLOB], 0x50) r12 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3c, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.476744867s ago: executing program 0 (id=3222): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x5, 0x5, 0x20002, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xa}, 0x50) socketpair(0x1e, 0x2, 0x8001, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000400)=@ll={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="e52ab20fada0dcc12292c09c9ec30ca23f24e69667cb6828e48472c609d47c23ef17ba35194c0674ff1850b36709e5a017fe53df35145203db439590264036fdac95de89b7415b499189ac177c9138db5e1562f0c0a87e51920b7b", 0x5b}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}, 0x20000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x61, 0x30, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/201, 0x50, 0x6, 0x1, 0x8005}, 0x28) sendmsg$kcm(r0, 0x0, 0x20004100) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.504354442s ago: executing program 2 (id=3223): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1981087ef642f7"], 0xffdd) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000880)={&(0x7f0000000580)="099e63d12cc6bca5e4aa279a9e54b4470b06726cb439cd04c3a9f66f4102c7059f27a79b659b919f8b28d54dba1a1d35b68bee7a75f790343ea9566de376822b9172babdaed0d59486df56c70761527d76a9adfc08ecf4a2a017bcbc67f181385eb812c5b615b8fa7b9188f41b0ccab33c90f71e132e011ee29b929eb823fc2217632d114645e50804ce9cf407b11220f30a39ec0646ef0a8ecac603a7da3fe506600f0bdca9edabb41d57c46b16b2562a893ae33f5b90f3fd44ff5e00ae0ac176b679f608405144d03cdf7e", &(0x7f0000000680)=""/82, &(0x7f0000000700)="f8e646eb743b9e8b611826730499bc292ab0251b49e25cb7e9e6e06ca9db5e1afc13bb7d7408e4330317e60db371ad853589550a14569307983ae79bb35c9109b6b4839cd480d9413f93aebd1d61035d531bf173153ab753c217774f1fd60536a7a14c98ccc3e3c2", &(0x7f0000000780)="c03dbc35956acacc91a93b5839e9ee841fae85bc69c624f8e0deec38c6a0d86c781c8bccd52959f1ecf9b060e948688c47236d8a8ce0eba6c8d24e9657956d871bc15988869fcee5ec9f0680fa2b6cbcda15bd5b13df5d71745d1aa62f8fb7491ba3d63cafcdc543ed59ab64d27df0528cf705149330063ab9cbec4b7997da653b545edd57bbc9c5a3360a0da844fd2538257246d37335bd3cc04a91e35ace01ca343a6114", 0x200, r1, 0x4}, 0x38) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07186702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.482263162s ago: executing program 3 (id=3224): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x20, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000058500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8000000000000000) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (rerun: 64) 1.471562413s ago: executing program 0 (id=3225): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) 1.458813373s ago: executing program 1 (id=3226): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.322418976s ago: executing program 1 (id=3227): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x1b7}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x2, 0x0) close(r4) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x4, 0xa, 0x7, 0x1, 0x0, 0x2, 0x51008, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x2}, 0x300208, 0xc, 0xfffffffb, 0x1, 0x9, 0x0, 0xfdc9, 0x0, 0x2800, 0x0, 0x7}, r8, 0x6, r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000004, @local, 0x6, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="03", 0x1}], 0x1}, 0x2400c041) 979.831295ms ago: executing program 2 (id=3228): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) gettid() ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)={0x1, 0x0, [0x0]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'team_slave_1\x00', @remote}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000240)="dc6821f0f73434acec6fc742477c45c9428e02e6f20128cfc5b3284eeb920ebb46764ee9b73f14f580699ee1159e879aa18ce110655daf74da9cf6bf0d591b59d3c56c8d42f7cc07bdf13ff42864435504cc60f583b659c281f0c29f63b403740a663a49cb786a77d612897b40b2541c81c3cf32ede03b30916b7031500d3cf7120f0bd6c52e87badc295ee07f5b055dee65eee757f57057715ce87aa933bfb7db4f871cd145661b7403cd94b97c5d27bad5c196c9eb3917bc260a", &(0x7f0000000380)=""/82, &(0x7f0000000440)="2cc533b15f4a765a9cdfca1acb60e511d9d130d71a971674da69cc060f2dbf8d38e91323c4e499f4d0b7b43fc9fdd1d14c6e14c300b880d5ba5be2e2f9e38bfd06a258efb798e0b2687f94ebfe3eb2f087ab0f4b393b41a185db737e7e3af55da60259ce64a14104054e9aff5991a0430e53dc4e9a567b6a485eae5e544019bb08408163ef9f55bee6e006a6b7514b809ccecada1a6011b905db77837bfb6b62", &(0x7f0000000500)="67108295b5066182b6a396d0ea56b81ed6d7f8e1ffd63c46615994a79a0b664e3a3879e34ff6d0de84a6a7ed403f70249f4ef8b483f2bb552a6793b60dd746012596b2b7a61ca8fd5222ee950fc5da1f9ad3c6a7c7b3534e5053ca55dff652616fc362853603e1cbadafdba116f711696ba7a8f2a3547bd01c7c61c4e4936541748faeba4eea9d562b8584e1812fbe052550abd5bd504df6fc89f2ce3602d4a8536cbe7f17ee338a9dcc19f44baced75ff25248d5cc1f0fe7bed38eb9c765522413dd70294dd4d11", 0x3a9d, r2, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r5, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000900010004400000eeffff83010000000700000003a6821572f0964eab00010500000020000000000000000000000300000000020000000200000000030000006100302e61626100"], 0x0, 0x61}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x80000001) 920.860576ms ago: executing program 1 (id=3229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 740.067931ms ago: executing program 3 (id=3230): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) (fail_nth: 5) 615.378784ms ago: executing program 1 (id=3231): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8913, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\x00\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn[\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\'\x9f\xd0\xcb\xe1mN\x1cA\xe54\xfa4\x84l\xb3\xc8\xc3\xd19\xc6_n\xf3:\x01\xc2\xec\xf0j\xb0nY\xea\x94VXo~\nC\x89\'\n=JBy\xc0\xe5\xe8\xc1.\x1bd\x9d\xe3\xee\xc55)`\xda\xf7\xb1\xc9\x04\xcfc\xd8\xb3F\xd3\xaa*\xc0\xcf\xd8]1\xcd\f\x9b\xb4\x12\x9d\xf37a\x98\x01\\\xb9\xa9\xbd\xf5\\\xd8\x96o\xff\xa5a\x8bkj~7\xd8\xe7F+l]\x18`\x9d\x94\xc6c\x81\xe4n\xa1\x1a{\xf8\xb2\xf0C\x7f\x8d+\xc3z!\xac\xc6\xd4\x1f=\xa2\xc7Y\xfc\xcb\xf6~Kx\x9e\x1d\xd5T\rC\x95\x94\xa7\x85\xb1Ff<2w\xd0s\xac36\xb8\x96U\x9e(Za\xf2\x9bk\xcfK\xd3\xa1\xd6\'\xdb\x8b\x06U\xf4a\xee\xac\xaa\x8b\xe3\x053Q7\xe3\xcc\xa5\xb1\x8a7w\x9b\xaa\xb4W[\xbas_\x95.\xd3\x89\xa7\x01R\xe9\xa3\f\xb8\x15e\x04l\xb1\x03\x82\xfc\x18\xcd6-\xd1\xbe\xc9w\x8a\xbd\x98\xe8\x04\xf0`\xe0O\b;\x9a\xf5\xb8\xcdv)\xaf\x83\x94\x00\xb4\xf9\xb3:Dc\x96K?dK.\x1e\x84r\xae\xc0\xe7\xf0+\xce\x0e\xealJ\xdb\x9b2\x92.\xb4\xbdG\xf7I\xc9\x84\xe0@\x89\xb516\xd0o\x83dr%0%-\xd2\xa2\xcb\xa3\x87f\xack\xfd?\x16u~\xb8\r$&\xb4,e\xc4\xea3\xbf\xab\xfc') r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040)={'gretap0', 0x32, 0x38}, 0xa) 287.687922ms ago: executing program 3 (id=3232): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 155.227706ms ago: executing program 3 (id=3233): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x5, 0x5, 0x20002, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xa}, 0x50) socketpair(0x1e, 0x2, 0x8001, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f0000000400)=@ll={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="e52ab20fada0dcc12292c09c9ec30ca23f24e69667cb6828e48472c609d47c23ef17ba35194c0674ff1850b36709e5a017fe53df35145203db439590264036fdac95de89b7415b499189ac177c9138db5e1562f0c0a87e51920b7b", 0x5b}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x280}, 0x20000001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @float={0x1, 0x0, 0x0, 0x10, 0x10}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x61, 0x30, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/201, 0x50, 0x6, 0x1, 0x8005}, 0x28) sendmsg$kcm(r0, 0x0, 0x20004100) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 152.875995ms ago: executing program 1 (id=3234): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x1b7}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {0x0}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x2, 0x0) close(r4) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x8) socket$kcm(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x4, 0xa, 0x7, 0x1, 0x0, 0x2, 0x51008, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000f40), 0x2}, 0x300208, 0xc, 0xfffffffb, 0x1, 0x9, 0x0, 0xfdc9, 0x0, 0x2800, 0x0, 0x7}, 0xffffffffffffffff, 0x6, r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000004, @local, 0x6, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="03", 0x1}], 0x1}, 0x2400c041) 152.542275ms ago: executing program 2 (id=3235): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 146.697066ms ago: executing program 0 (id=3236): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x15, 0x0, 0x0, 0xfffffffc}, {0x6}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000100000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x45, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x8, 0xa, 0xa, 0xfffffffffffffffe, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x24, '\x00', r9, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r2, r2, r2], &(0x7f0000000500)=[{0x0, 0x2, 0xd, 0xe78ff4f9a4700b3a}, {0x5, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x1, 0x7}], 0x10, 0x3ff}, 0x94) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfdef) close(r11) recvmsg(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000200000005000000ee000000c4080100", @ANYRES32=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000d81009c00"/31, @ANYRES32=r3, @ANYBLOB], 0x50) r12 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3c, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 0s ago: executing program 2 (id=3237): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x1b7}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x2, 0x0) close(r4) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x4, 0xa, 0x7, 0x1, 0x0, 0x2, 0x51008, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x2}, 0x300208, 0xc, 0xfffffffb, 0x1, 0x9, 0x0, 0xfdc9, 0x0, 0x2800, 0x0, 0x7}, r8, 0x6, r1, 0x4) sendmsg$kcm(r0, 0x0, 0x2400c041) kernel console output (not intermixed with test programs): entered disabled state [ 561.501134][ T1143] hsr_slave_0: left promiscuous mode [ 561.545950][ T1143] hsr_slave_1: left promiscuous mode [ 561.572104][T13321] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2530'. [ 561.731694][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.739173][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.970412][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.987351][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.167975][ T1143] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 562.188644][ T1143] batman_adv: batadv0: Removing interface: virt_wifi0 [ 562.548935][ T1143] batman_adv: batadv0: Interface deactivated: vlan1 [ 562.580061][ T1143] batman_adv: batadv0: Removing interface: vlan1 [ 562.650609][ T1143] veth1_macvtap: left promiscuous mode [ 562.663415][ T1143] veth0_macvtap: left promiscuous mode [ 562.674616][ T1143] veth0_vlan: left promiscuous mode [ 563.146266][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.152942][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.917544][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.016348][ T1143] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 564.317440][ T1143] bond0 (unregistering): Released all slaves [ 564.369262][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.504370][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.537918][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.545242][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.712563][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.719847][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.945388][ T5783] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 565.106356][T13364] netlink: 151184 bytes leftover after parsing attributes in process `syz.2.2538'. [ 565.348185][T13378] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2539'. [ 565.348928][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.497315][T13103] veth0_vlan: entered promiscuous mode [ 565.544046][T13103] veth1_vlan: entered promiscuous mode [ 565.642412][T13103] veth0_macvtap: entered promiscuous mode [ 565.682395][T13103] veth1_macvtap: entered promiscuous mode [ 565.768001][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.799006][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.839638][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.874367][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.886705][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.913467][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.937596][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.967585][T13390] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.029859][T13390] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2540'. [ 566.048522][T13393] netlink: 151184 bytes leftover after parsing attributes in process `syz.1.2542'. [ 566.057477][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.078608][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.089749][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.107221][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.111897][T13393] net_ratelimit: 338 callbacks suppressed [ 566.111984][T13393] netlink: zone id is out of range [ 566.118280][T13103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.145562][T13103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.149775][T13393] netlink: zone id is out of range [ 566.165200][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.189683][T13393] netlink: zone id is out of range [ 566.195843][T13393] netlink: zone id is out of range [ 566.208801][T13103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.222520][T13393] netlink: zone id is out of range [ 566.224728][T13103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.228057][T13393] netlink: zone id is out of range [ 566.238062][T13103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.264820][T13103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.299820][T13393] netlink: zone id is out of range [ 566.305606][T13393] netlink: zone id is out of range [ 566.314302][T13393] netlink: zone id is out of range [ 566.340295][T13393] netlink: zone id is out of range [ 566.626632][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.662794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.741299][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.749174][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.982907][ T5783] Bluetooth: hci1: command tx timeout [ 567.368984][T13417] delete_channel: no stack [ 567.975254][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 567.987911][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 568.005930][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 568.015939][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 568.027338][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 568.039862][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 568.247662][T13432] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.357247][T13432] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2554'. [ 568.807803][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.217606][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.266447][T13427] chnl_net:caif_netlink_parms(): no params data found [ 569.365612][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.383078][T13454] delete_channel: no stack [ 570.012998][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.249655][ T5783] Bluetooth: hci2: command tx timeout [ 570.633815][T13427] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.642925][T13427] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.651762][T13427] bridge_slave_0: entered allmulticast mode [ 570.659198][T13427] bridge_slave_0: entered promiscuous mode [ 570.703426][T13427] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.721078][T13427] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.728340][T13427] bridge_slave_1: entered allmulticast mode [ 570.741013][T13427] bridge_slave_1: entered promiscuous mode [ 570.895160][T13427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.930208][T13427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.136179][T13427] team0: Port device team_slave_0 added [ 571.208483][T13427] team0: Port device team_slave_1 added [ 571.884887][T13427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.902826][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.947520][T13427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.047810][T13427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.065308][T13427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.127421][T13500] delete_channel: no stack [ 572.127478][T13427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.144615][T13504] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 572.158119][T13504] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 572.329732][ T5783] Bluetooth: hci2: command tx timeout [ 572.747751][T13427] hsr_slave_0: entered promiscuous mode [ 572.762111][T13427] hsr_slave_1: entered promiscuous mode [ 572.846182][T13427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.882812][T13427] Cannot create hsr debugfs directory [ 572.935930][T13519] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2574'. [ 572.972858][T13519] net_ratelimit: 164 callbacks suppressed [ 572.972941][T13519] netlink: zone id is out of range [ 572.997408][T13519] netlink: zone id is out of range [ 573.014313][T13519] netlink: zone id is out of range [ 573.030537][T13519] netlink: zone id is out of range [ 573.036648][T13519] netlink: zone id is out of range [ 573.054039][T13519] netlink: zone id is out of range [ 573.089797][T13519] netlink: zone id is out of range [ 573.100892][T13519] netlink: zone id is out of range [ 573.109899][T13519] netlink: zone id is out of range [ 573.115729][T13519] netlink: zone id is out of range [ 573.453109][T13524] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2575'. [ 574.409819][ T5783] Bluetooth: hci2: command tx timeout [ 574.877868][ T11] vlan0: left allmulticast mode [ 574.885955][ T11] veth0_vlan: left allmulticast mode [ 574.891530][ T11] vlan0: left promiscuous mode [ 574.896558][ T11] À: port 1(vlan0) entered disabled state [ 574.912089][ T11] hsr_slave_0: left promiscuous mode [ 574.918162][ T11] hsr_slave_1: left promiscuous mode [ 574.924477][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.932077][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.942675][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.950248][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.957866][ T11] hsr0: left allmulticast mode [ 574.962915][ T11] bridge0: port 3(hsr0) entered disabled state [ 574.976988][ T11] bridge_slave_1: left allmulticast mode [ 574.982898][ T11] bridge_slave_1: left promiscuous mode [ 574.989328][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.997954][ T11] bridge_slave_0: left promiscuous mode [ 575.004036][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.023127][ T11] veth1_macvtap: left promiscuous mode [ 575.028712][ T11] veth0_macvtap: left promiscuous mode [ 575.035019][ T11] veth1_vlan: left promiscuous mode [ 575.040509][ T11] veth0_vlan: left promiscuous mode [ 575.225099][ T11] »»»»»» (unregistering): (slave geneve0): Releasing backup interface [ 575.720377][ T11] »»»»»» (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.974884][ T11] »»»»»» (unregistering): (slave batadv0): Releasing backup interface [ 576.043876][ T11] »»»»»» (unregistering): (slave bridge0): Releasing backup interface [ 576.053301][ T11] »»»»»» (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 576.064930][ T11] »»»»»» (unregistering): Released all slaves [ 576.173624][T13427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 576.186566][T13427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 576.205050][T13427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 576.230802][T13427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 576.375007][T13427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.397182][T13427] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.426647][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.433843][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.466206][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.473356][ T7351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.490187][ T5783] Bluetooth: hci2: command tx timeout [ 576.569007][T13427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.806986][T13427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.855090][T13427] veth0_vlan: entered promiscuous mode [ 576.870426][T13427] veth1_vlan: entered promiscuous mode [ 576.906248][T13427] veth0_macvtap: entered promiscuous mode [ 576.919177][T13427] veth1_macvtap: entered promiscuous mode [ 576.942739][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.953622][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.966769][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.986974][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.997103][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.007983][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.020190][T13427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.034474][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.052344][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.067113][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.079218][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.090584][T13427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.106187][T13427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.118097][T13427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.136225][T13427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.146603][T13427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.159172][T13427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.172335][T13427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.277341][ T7354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.295370][ T7354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.337533][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.347028][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.557223][T13587] netlink: 'syz.2.2590': attribute type 4 has an invalid length. [ 577.603778][T13586] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2549'. [ 577.620131][T13587] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2590'. [ 577.687089][T13590] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 577.703598][T13590] netlink: 'syz.0.2588': attribute type 3 has an invalid length. [ 577.713694][T13590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2588'. [ 577.912725][T13595] delete_channel: no stack [ 578.986544][T13618] syzkaller0: entered promiscuous mode [ 578.999747][T13618] syzkaller0: entered allmulticast mode [ 579.062559][T13621] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2592'. [ 580.951549][T13627] netlink: 'syz.3.2592': attribute type 1 has an invalid length. [ 580.960484][T13635] netlink: 'syz.2.2594': attribute type 39 has an invalid length. [ 580.974964][T13640] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2597'. [ 581.130537][T13646] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 581.466061][T13645] netlink: 'syz.3.2598': attribute type 21 has an invalid length. [ 581.643370][T13658] netlink: 'syz.2.2604': attribute type 46 has an invalid length. [ 581.656720][T13658] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2604'. [ 581.717292][T13660] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2604'. [ 581.744708][T13660] net_ratelimit: 338 callbacks suppressed [ 581.744727][T13660] netlink: zone id is out of range [ 581.776073][T13665] IPv6: NLM_F_CREATE should be specified when creating new route [ 581.811870][T13665] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2603'. [ 581.841230][T13658] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.2604'. [ 582.067650][T13673] FAULT_INJECTION: forcing a failure. [ 582.067650][T13673] name failslab, interval 1, probability 0, space 0, times 0 [ 582.083935][T13673] CPU: 0 PID: 13673 Comm: syz.1.2608 Not tainted syzkaller #0 [ 582.091453][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.101539][T13673] Call Trace: [ 582.104829][T13673] [ 582.107766][T13673] dump_stack_lvl+0x18c/0x250 [ 582.112455][T13673] ? show_regs_print_info+0x20/0x20 [ 582.117665][T13673] ? load_image+0x420/0x420 [ 582.122182][T13673] ? mark_lock+0x94/0x320 [ 582.126515][T13673] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 582.132512][T13673] ? verify_lock_unused+0x140/0x140 [ 582.137775][T13673] should_fail_ex+0x394/0x4c0 [ 582.142489][T13673] should_failslab+0x9/0x20 [ 582.147017][T13673] slab_pre_alloc_hook+0x59/0x300 [ 582.152062][T13673] ? lockdep_hardirqs_on+0x98/0x150 [ 582.157275][T13673] ? ___neigh_create+0x6f4/0x23d0 [ 582.162314][T13673] ? ___neigh_create+0x6f4/0x23d0 [ 582.167356][T13673] __kmem_cache_alloc_node+0x53/0x250 [ 582.172746][T13673] ? ___neigh_create+0x6f4/0x23d0 [ 582.177795][T13673] __kmalloc+0xa7/0x240 [ 582.182064][T13673] ? __sanitizer_cov_trace_const_cmp8+0x17/0x80 [ 582.188328][T13673] ___neigh_create+0x6f4/0x23d0 [ 582.193207][T13673] ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0 [ 582.199105][T13673] ip6_finish_output2+0x156d/0x1620 [ 582.204336][T13673] ? ip6_finish_output2+0x642/0x1620 [ 582.209661][T13673] ? nf_hook+0x390/0x390 [ 582.213905][T13673] ? ip6_mtu+0x321/0x3f0 [ 582.218224][T13673] ? ip6_finish_output+0x567/0x7f0 [ 582.223346][T13673] ? ip6_send_skb+0x10a/0x380 [ 582.228040][T13673] ip6_send_skb+0x1cd/0x380 [ 582.232565][T13673] rawv6_push_pending_frames+0x74d/0x930 [ 582.238308][T13673] ? raw6_getfrag+0x390/0x390 [ 582.243033][T13673] ? rawv6_send_hdrinc+0x1660/0x1660 [ 582.248367][T13673] rawv6_sendmsg+0x12db/0x1740 [ 582.253166][T13673] ? compat_rawv6_ioctl+0x70/0x70 [ 582.258219][T13673] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 582.264642][T13673] ? aa_sock_msg_perm+0x94/0x150 [ 582.269597][T13673] ? inet_sendmsg+0x7e/0x2a0 [ 582.274192][T13673] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 582.279493][T13673] ? inet_send_prepare+0x250/0x250 [ 582.284625][T13673] ____sys_sendmsg+0x61b/0x980 [ 582.289413][T13673] ? __asan_memset+0x22/0x40 [ 582.294029][T13673] ? __sys_sendmsg_sock+0x30/0x30 [ 582.299067][T13673] ? __import_iovec+0x5f2/0x850 [ 582.303937][T13673] ? import_iovec+0x73/0xa0 [ 582.308456][T13673] ___sys_sendmsg+0x2a6/0x360 [ 582.313159][T13673] ? __sys_sendmsg+0x2b0/0x2b0 [ 582.318105][T13673] __se_sys_sendmsg+0x1d0/0x2c0 [ 582.322977][T13673] ? __x64_sys_sendmsg+0x80/0x80 [ 582.327949][T13673] ? lockdep_hardirqs_on+0x98/0x150 [ 582.333169][T13673] do_syscall_64+0x55/0xb0 [ 582.337709][T13673] ? clear_bhb_loop+0x40/0x90 [ 582.342406][T13673] ? clear_bhb_loop+0x40/0x90 [ 582.347115][T13673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.353030][T13673] RIP: 0033:0x7f7488d9e019 [ 582.357469][T13673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.377093][T13673] RSP: 002b:00007f7489bec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.385526][T13673] RAX: ffffffffffffffda RBX: 00007f7489025fa0 RCX: 00007f7488d9e019 [ 582.393521][T13673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 582.401542][T13673] RBP: 00007f7489bec090 R08: 0000000000000000 R09: 0000000000000000 [ 582.409530][T13673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.417517][T13673] R13: 00007f7489026038 R14: 00007f7489025fa0 R15: 00007ffda5454b38 [ 582.425504][T13673] [ 582.543330][T13673] netlink: 'syz.1.2608': attribute type 2 has an invalid length. [ 582.552203][T13673] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.2608'. [ 583.885952][T13697] FAULT_INJECTION: forcing a failure. [ 583.885952][T13697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.900784][T13697] CPU: 0 PID: 13697 Comm: syz.1.2616 Not tainted syzkaller #0 [ 583.908292][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.918373][T13697] Call Trace: [ 583.921668][T13697] [ 583.924657][T13697] dump_stack_lvl+0x18c/0x250 [ 583.929365][T13697] ? show_regs_print_info+0x20/0x20 [ 583.934586][T13697] ? load_image+0x420/0x420 [ 583.939115][T13697] ? __lock_acquire+0x7d80/0x7d80 [ 583.944183][T13697] should_fail_ex+0x394/0x4c0 [ 583.948886][T13697] _copy_from_user+0x2f/0xe0 [ 583.953497][T13697] bpf_prog_test_run_skb+0x267/0x18f0 [ 583.958891][T13697] ? __fget_files+0x28/0x460 [ 583.963510][T13697] ? __fget_files+0x3fc/0x460 [ 583.968263][T13697] ? cpu_online+0x60/0x60 [ 583.972618][T13697] bpf_prog_test_run+0x31f/0x390 [ 583.977608][T13697] __sys_bpf+0x49d/0x890 [ 583.981874][T13697] ? bpf_link_show_fdinfo+0x390/0x390 [ 583.987286][T13697] ? lock_chain_count+0x20/0x20 [ 583.992171][T13697] __x64_sys_bpf+0x7c/0x90 [ 583.996613][T13697] do_syscall_64+0x55/0xb0 [ 584.001049][T13697] ? clear_bhb_loop+0x40/0x90 [ 584.005743][T13697] ? clear_bhb_loop+0x40/0x90 [ 584.010437][T13697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.016352][T13697] RIP: 0033:0x7f7488d9e019 [ 584.020787][T13697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.040422][T13697] RSP: 002b:00007f7489bec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.048881][T13697] RAX: ffffffffffffffda RBX: 00007f7489025fa0 RCX: 00007f7488d9e019 [ 584.056872][T13697] RDX: 0000000000000050 RSI: 0000200000000d80 RDI: 000000000000000a [ 584.064862][T13697] RBP: 00007f7489bec090 R08: 0000000000000000 R09: 0000000000000000 [ 584.072852][T13697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.080839][T13697] R13: 00007f7489026038 R14: 00007f7489025fa0 R15: 00007ffda5454b38 [ 584.088847][T13697] [ 584.103283][T13694] netlink: 'syz.2.2615': attribute type 1 has an invalid length. [ 584.119507][T13694] netlink: 'syz.2.2615': attribute type 3 has an invalid length. [ 584.127353][T13694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2615'. [ 584.367476][T13703] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2618'. [ 584.574029][T13710] FAULT_INJECTION: forcing a failure. [ 584.574029][T13710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.619675][T13710] CPU: 0 PID: 13710 Comm: syz.2.2627 Not tainted syzkaller #0 [ 584.627236][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.637343][T13710] Call Trace: [ 584.640673][T13710] [ 584.643658][T13710] dump_stack_lvl+0x18c/0x250 [ 584.648400][T13710] ? show_regs_print_info+0x20/0x20 [ 584.653666][T13710] ? load_image+0x420/0x420 [ 584.658225][T13710] ? __lock_acquire+0x7d80/0x7d80 [ 584.663270][T13710] ? snprintf+0xe9/0x140 [ 584.667534][T13710] should_fail_ex+0x394/0x4c0 [ 584.672243][T13710] _copy_to_user+0x2f/0xa0 [ 584.676679][T13710] simple_read_from_buffer+0xe7/0x150 [ 584.682074][T13710] proc_fail_nth_read+0x1e8/0x260 [ 584.687127][T13710] ? proc_fault_inject_write+0x360/0x360 [ 584.692830][T13710] ? fsnotify_perm+0x271/0x5e0 [ 584.697607][T13710] ? proc_fault_inject_write+0x360/0x360 [ 584.703258][T13710] vfs_read+0x298/0x990 [ 584.707448][T13710] ? kernel_read+0x1e0/0x1e0 [ 584.712055][T13710] ? __fget_files+0x28/0x460 [ 584.716666][T13710] ? __fget_files+0x3fc/0x460 [ 584.721376][T13710] ? __fdget_pos+0x2a3/0x330 [ 584.725979][T13710] ? ksys_read+0x74/0x260 [ 584.730352][T13710] ksys_read+0x151/0x260 [ 584.734615][T13710] ? vfs_write+0x9a0/0x9a0 [ 584.739056][T13710] ? lockdep_hardirqs_on+0x98/0x150 [ 584.744278][T13710] do_syscall_64+0x55/0xb0 [ 584.748702][T13710] ? clear_bhb_loop+0x40/0x90 [ 584.753397][T13710] ? clear_bhb_loop+0x40/0x90 [ 584.758091][T13710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.764009][T13710] RIP: 0033:0x7effde75e84e [ 584.768439][T13710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 584.788059][T13710] RSP: 002b:00007effdf6effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.796485][T13710] RAX: ffffffffffffffda RBX: 00007effdf6f06c0 RCX: 00007effde75e84e [ 584.804468][T13710] RDX: 000000000000000f RSI: 00007effdf6f00a0 RDI: 0000000000000009 [ 584.812445][T13710] RBP: 00007effdf6f0090 R08: 0000000000000000 R09: 0000000000000000 [ 584.820430][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.828588][T13710] R13: 00007effdea26128 R14: 00007effdea26090 R15: 00007ffeb117d9c8 [ 584.836610][T13710] [ 584.989172][T13715] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2619'. [ 585.198179][T13716] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2620'. [ 585.248177][T13716] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2620'. [ 585.332235][T13716] bond0: (slave bond_slave_0): Releasing backup interface [ 585.377453][T13716] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 585.545925][T13722] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2622'. [ 585.746433][T13730] FAULT_INJECTION: forcing a failure. [ 585.746433][T13730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.850054][T13730] CPU: 1 PID: 13730 Comm: syz.0.2625 Not tainted syzkaller #0 [ 585.857627][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.867717][T13730] Call Trace: [ 585.871015][T13730] [ 585.873974][T13730] dump_stack_lvl+0x18c/0x250 [ 585.878690][T13730] ? show_regs_print_info+0x20/0x20 [ 585.883963][T13730] ? load_image+0x420/0x420 [ 585.888501][T13730] ? __might_fault+0xaa/0x120 [ 585.893198][T13730] ? __lock_acquire+0x7d80/0x7d80 [ 585.898267][T13730] should_fail_ex+0x394/0x4c0 [ 585.903064][T13730] _copy_from_user+0x2f/0xe0 [ 585.907672][T13730] __sys_bpf+0x23e/0x890 [ 585.911957][T13730] ? bpf_link_show_fdinfo+0x390/0x390 [ 585.917391][T13730] ? lock_chain_count+0x20/0x20 [ 585.922325][T13730] __x64_sys_bpf+0x7c/0x90 [ 585.926770][T13730] do_syscall_64+0x55/0xb0 [ 585.931205][T13730] ? clear_bhb_loop+0x40/0x90 [ 585.935896][T13730] ? clear_bhb_loop+0x40/0x90 [ 585.940588][T13730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.946498][T13730] RIP: 0033:0x7f4adb39e019 [ 585.950937][T13730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.970567][T13730] RSP: 002b:00007f4adc27f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.978996][T13730] RAX: ffffffffffffffda RBX: 00007f4adb625fa0 RCX: 00007f4adb39e019 [ 585.986992][T13730] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 585.994973][T13730] RBP: 00007f4adc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 586.002959][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.010941][T13730] R13: 00007f4adb626038 R14: 00007f4adb625fa0 R15: 00007ffeeb1219a8 [ 586.018958][T13730] [ 586.028719][T13733] netlink: 'syz.1.2626': attribute type 2 has an invalid length. [ 586.040809][T13733] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.2626'. [ 586.742571][T13750] netlink: 'syz.2.2631': attribute type 29 has an invalid length. [ 586.855984][T13750] netlink: 'syz.2.2631': attribute type 29 has an invalid length. [ 586.870040][T13753] netlink: 'syz.2.2631': attribute type 29 has an invalid length. [ 586.887135][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 587.093154][T13764] FAULT_INJECTION: forcing a failure. [ 587.093154][T13764] name failslab, interval 1, probability 0, space 0, times 0 [ 587.128673][T13764] CPU: 1 PID: 13764 Comm: syz.3.2636 Not tainted syzkaller #0 [ 587.136219][T13764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.146357][T13764] Call Trace: [ 587.149673][T13764] [ 587.152713][T13764] dump_stack_lvl+0x18c/0x250 [ 587.157423][T13764] ? trace_event_raw_event_lock+0x240/0x240 [ 587.163342][T13764] ? show_regs_print_info+0x20/0x20 [ 587.168559][T13764] ? load_image+0x420/0x420 [ 587.173075][T13764] ? l3mdev_update_flow+0x4b1/0x5f0 [ 587.178344][T13764] should_fail_ex+0x394/0x4c0 [ 587.183053][T13764] should_failslab+0x9/0x20 [ 587.187579][T13764] slab_pre_alloc_hook+0x59/0x300 [ 587.192635][T13764] kmem_cache_alloc+0x5a/0x2c0 [ 587.197414][T13764] ? skb_clone+0x1eb/0x370 [ 587.201862][T13764] skb_clone+0x1eb/0x370 [ 587.206116][T13764] ? ip6_finish_output2+0xf77/0x1620 [ 587.211433][T13764] ip6_finish_output2+0xf93/0x1620 [ 587.216584][T13764] ? ip6_mtu+0x7d/0x3f0 [ 587.220761][T13764] ? nf_hook+0x390/0x390 [ 587.225015][T13764] ? ip6_mtu+0x321/0x3f0 [ 587.229279][T13764] ? ip6_finish_output+0x567/0x7f0 [ 587.234423][T13764] ? ip6_send_skb+0x10a/0x380 [ 587.239118][T13764] ip6_send_skb+0x1cd/0x380 [ 587.243642][T13764] rawv6_push_pending_frames+0x74d/0x930 [ 587.249308][T13764] ? raw6_getfrag+0x390/0x390 [ 587.254013][T13764] ? rawv6_send_hdrinc+0x1660/0x1660 [ 587.259332][T13764] rawv6_sendmsg+0x12db/0x1740 [ 587.264142][T13764] ? compat_rawv6_ioctl+0x70/0x70 [ 587.269231][T13764] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 587.275670][T13764] ? aa_sock_msg_perm+0x94/0x150 [ 587.280636][T13764] ? inet_sendmsg+0x7e/0x2a0 [ 587.285240][T13764] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 587.290548][T13764] ? inet_send_prepare+0x250/0x250 [ 587.295682][T13764] ____sys_sendmsg+0x61b/0x980 [ 587.300487][T13764] ? __sys_sendmsg_sock+0x30/0x30 [ 587.305518][T13764] ? __import_iovec+0x3fa/0x850 [ 587.310406][T13764] ? import_iovec+0x73/0xa0 [ 587.314936][T13764] ___sys_sendmsg+0x2a6/0x360 [ 587.319640][T13764] ? __sys_sendmsg+0x2b0/0x2b0 [ 587.324465][T13764] ? __lock_acquire+0x7d80/0x7d80 [ 587.329562][T13764] __se_sys_sendmsg+0x1d0/0x2c0 [ 587.334435][T13764] ? __x64_sys_sendmsg+0x80/0x80 [ 587.339433][T13764] ? lockdep_hardirqs_on+0x98/0x150 [ 587.344670][T13764] do_syscall_64+0x55/0xb0 [ 587.349096][T13764] ? clear_bhb_loop+0x40/0x90 [ 587.353781][T13764] ? clear_bhb_loop+0x40/0x90 [ 587.358477][T13764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.364385][T13764] RIP: 0033:0x7fe031f9e019 [ 587.368820][T13764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.388446][T13764] RSP: 002b:00007fe032e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.397330][T13764] RAX: ffffffffffffffda RBX: 00007fe032225fa0 RCX: 00007fe031f9e019 [ 587.405317][T13764] RDX: 0000000000004800 RSI: 0000200000000780 RDI: 0000000000000003 [ 587.413301][T13764] RBP: 00007fe032e44090 R08: 0000000000000000 R09: 0000000000000000 [ 587.421315][T13764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.429315][T13764] R13: 00007fe032226038 R14: 00007fe032225fa0 R15: 00007ffc1c75c978 [ 587.437345][T13764] [ 587.826391][T13773] netlink: 'syz.3.2639': attribute type 8 has an invalid length. [ 587.834755][T13773] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2639'. [ 588.048989][T13786] FAULT_INJECTION: forcing a failure. [ 588.048989][T13786] name failslab, interval 1, probability 0, space 0, times 0 [ 588.067925][T13786] CPU: 0 PID: 13786 Comm: syz.0.2645 Not tainted syzkaller #0 [ 588.075439][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.085510][T13786] Call Trace: [ 588.088803][T13786] [ 588.091750][T13786] dump_stack_lvl+0x18c/0x250 [ 588.096455][T13786] ? show_regs_print_info+0x20/0x20 [ 588.101675][T13786] ? load_image+0x420/0x420 [ 588.106211][T13786] ? __might_sleep+0xe0/0xe0 [ 588.110823][T13786] ? __lock_acquire+0x7d80/0x7d80 [ 588.115862][T13786] ? br_switchdev_port_vlan_del+0xc9/0x120 [ 588.121705][T13786] should_fail_ex+0x394/0x4c0 [ 588.126429][T13786] should_failslab+0x9/0x20 [ 588.130964][T13786] slab_pre_alloc_hook+0x59/0x300 [ 588.136035][T13786] kmem_cache_alloc_node+0x5e/0x310 [ 588.141258][T13786] ? __alloc_skb+0x103/0x2c0 [ 588.145873][T13786] __alloc_skb+0x103/0x2c0 [ 588.150309][T13786] br_vlan_notify+0x283/0x740 [ 588.155093][T13786] br_process_vlan_info+0x370/0x8a0 [ 588.160305][T13786] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.166404][T13786] ? br_getlink+0x180/0x180 [ 588.170918][T13786] ? arch_stack_walk+0x160/0x190 [ 588.175878][T13786] br_afspec+0x399/0x5f0 [ 588.180152][T13786] ? br_setport+0x1680/0x1680 [ 588.184852][T13786] ? __mutex_trylock_common+0x160/0x270 [ 588.190429][T13786] br_dellink+0x214/0x2b0 [ 588.194781][T13786] ? br_afspec+0x5f0/0x5f0 [ 588.199227][T13786] ? mutex_is_locked+0x12/0x40 [ 588.204010][T13786] rtnl_bridge_dellink+0x489/0x6f0 [ 588.209146][T13786] ? rtnl_bridge_getlink+0xd30/0xd30 [ 588.214456][T13786] ? rtnl_bridge_getlink+0xd30/0xd30 [ 588.219759][T13786] rtnetlink_rcv_msg+0x843/0xf90 [ 588.224722][T13786] ? rtnetlink_rcv_msg+0x220/0xf90 [ 588.229860][T13786] ? rtnetlink_bind+0x80/0x80 [ 588.234560][T13786] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 588.240556][T13786] ? __dev_queue_xmit+0x275/0x3630 [ 588.245689][T13786] ? lock_chain_count+0x20/0x20 [ 588.250557][T13786] ? __local_bh_enable_ip+0x13a/0x1c0 [ 588.255943][T13786] ? lockdep_hardirqs_on+0x98/0x150 [ 588.261165][T13786] ? __local_bh_enable_ip+0x13a/0x1c0 [ 588.266555][T13786] ? _local_bh_enable+0xa0/0xa0 [ 588.271425][T13786] ? __dev_queue_xmit+0x275/0x3630 [ 588.276580][T13786] ? __dev_queue_xmit+0x1bc2/0x3630 [ 588.281810][T13786] ? __dev_queue_xmit+0x275/0x3630 [ 588.286978][T13786] ? perf_trace_lock+0xfc/0x3b0 [ 588.291864][T13786] netlink_rcv_skb+0x235/0x4c0 [ 588.296643][T13786] ? rtnetlink_bind+0x80/0x80 [ 588.301337][T13786] ? netlink_ack+0x1160/0x1160 [ 588.306125][T13786] ? __lock_acquire+0x7d80/0x7d80 [ 588.311172][T13786] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.316392][T13786] netlink_unicast+0x7b1/0x930 [ 588.321192][T13786] netlink_sendmsg+0x8d0/0xbf0 [ 588.325977][T13786] ? netlink_getsockopt+0x590/0x590 [ 588.331193][T13786] ? apparmor_socket_sendmsg+0x170/0x330 [ 588.336842][T13786] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 588.342141][T13786] ? security_socket_sendmsg+0x80/0xa0 [ 588.347613][T13786] ? netlink_getsockopt+0x590/0x590 [ 588.352832][T13786] ____sys_sendmsg+0x61b/0x980 [ 588.357624][T13786] ? __asan_memset+0x22/0x40 [ 588.362243][T13786] ? __sys_sendmsg_sock+0x30/0x30 [ 588.367290][T13786] ? __import_iovec+0x5f2/0x850 [ 588.372172][T13786] ? import_iovec+0x73/0xa0 [ 588.376736][T13786] ___sys_sendmsg+0x2a6/0x360 [ 588.381442][T13786] ? __sys_sendmsg+0x2b0/0x2b0 [ 588.386248][T13786] ? __lock_acquire+0x7d80/0x7d80 [ 588.391334][T13786] __se_sys_sendmsg+0x1d0/0x2c0 [ 588.396227][T13786] ? __x64_sys_sendmsg+0x80/0x80 [ 588.401208][T13786] ? lockdep_hardirqs_on+0x98/0x150 [ 588.406435][T13786] do_syscall_64+0x55/0xb0 [ 588.410867][T13786] ? clear_bhb_loop+0x40/0x90 [ 588.415564][T13786] ? clear_bhb_loop+0x40/0x90 [ 588.420258][T13786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.426169][T13786] RIP: 0033:0x7f4adb39e019 [ 588.430600][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.450218][T13786] RSP: 002b:00007f4adc27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.458649][T13786] RAX: ffffffffffffffda RBX: 00007f4adb625fa0 RCX: 00007f4adb39e019 [ 588.466682][T13786] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 588.474676][T13786] RBP: 00007f4adc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 588.482668][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.490654][T13786] R13: 00007f4adb626038 R14: 00007f4adb625fa0 R15: 00007ffeeb1219a8 [ 588.498658][T13786] [ 588.608323][T13790] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2643'. [ 588.686413][T13782] netlink: 'syz.2.2642': attribute type 2 has an invalid length. [ 588.946869][T13799] bond0: (slave bond_slave_0): Releasing backup interface [ 589.076530][T13799] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 589.527350][T13809] __nla_validate_parse: 3 callbacks suppressed [ 589.527369][T13809] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2652'. [ 589.604844][T13821] netlink: 'syz.0.2652': attribute type 29 has an invalid length. [ 589.670428][T13821] netlink: 'syz.0.2652': attribute type 29 has an invalid length. [ 589.678532][T13809] netlink: 'syz.0.2652': attribute type 29 has an invalid length. [ 589.690269][T13809] netlink: 'syz.0.2652': attribute type 29 has an invalid length. [ 589.708036][T13823] netlink: 'syz.2.2655': attribute type 46 has an invalid length. [ 589.723223][T13823] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2655'. [ 592.071060][T13825] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 592.082424][T13828] netlink: 'syz.1.2656': attribute type 4 has an invalid length. [ 592.091908][T13830] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.2655'. [ 592.102031][T13840] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2657'. [ 592.423607][T13849] sctp: [Deprecated]: syz.0.2658 (pid 13849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.423607][T13849] Use struct sctp_sack_info instead [ 592.505242][T13856] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2663'. [ 592.732535][T13859] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2666'. [ 592.751097][T13866] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.808784][T13859] netlink: zone id is out of range [ 592.818717][T13866] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2665'. [ 592.856102][T13859] netlink: zone id is out of range [ 592.871135][T13859] netlink: zone id is out of range [ 592.878240][T13859] netlink: zone id is out of range [ 592.919707][T13859] netlink: zone id is out of range [ 592.950104][T13859] netlink: zone id is out of range [ 592.956401][T13859] netlink: zone id is out of range [ 592.999940][T13859] netlink: zone id is out of range [ 593.010843][T13868] netlink: 'syz.3.2667': attribute type 10 has an invalid length. [ 593.016634][T13859] netlink: zone id is out of range [ 593.325882][T13872] netlink: 'syz.2.2669': attribute type 10 has an invalid length. [ 593.516085][T13872] team0: Port device wlan1 added [ 593.575721][T13871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.989468][T13897] netlink: 151184 bytes leftover after parsing attributes in process `syz.2.2676'. [ 594.036266][T13895] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2677'. [ 594.489111][T13899] syzkaller0: entered promiscuous mode [ 594.524263][T13899] syzkaller0: entered allmulticast mode [ 597.135300][T13912] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2681'. [ 600.455581][T13914] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2683'. [ 600.582143][T13931] FAULT_INJECTION: forcing a failure. [ 600.582143][T13931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.600105][T13931] CPU: 1 PID: 13931 Comm: syz.3.2688 Not tainted syzkaller #0 [ 600.607627][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.617722][T13931] Call Trace: [ 600.621025][T13931] [ 600.623983][T13931] dump_stack_lvl+0x18c/0x250 [ 600.628732][T13931] ? show_regs_print_info+0x20/0x20 [ 600.633961][T13931] ? load_image+0x420/0x420 [ 600.638499][T13931] ? __might_fault+0xaa/0x120 [ 600.643209][T13931] ? __lock_acquire+0x7d80/0x7d80 [ 600.648274][T13931] should_fail_ex+0x394/0x4c0 [ 600.652983][T13931] _copy_from_user+0x2f/0xe0 [ 600.657630][T13931] __sys_bpf+0x23e/0x890 [ 600.661899][T13931] ? read_tsc+0x9/0x20 [ 600.666002][T13931] ? bpf_link_show_fdinfo+0x390/0x390 [ 600.671417][T13931] ? lock_chain_count+0x20/0x20 [ 600.676289][T13931] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 600.682311][T13931] __x64_sys_bpf+0x7c/0x90 [ 600.686759][T13931] do_syscall_64+0x55/0xb0 [ 600.691219][T13931] ? clear_bhb_loop+0x40/0x90 [ 600.695929][T13931] ? clear_bhb_loop+0x40/0x90 [ 600.700618][T13931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.706521][T13931] RIP: 0033:0x7fe031f9e019 [ 600.710948][T13931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.730573][T13931] RSP: 002b:00007fe032e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.739009][T13931] RAX: ffffffffffffffda RBX: 00007fe032225fa0 RCX: 00007fe031f9e019 [ 600.746991][T13931] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 600.754975][T13931] RBP: 00007fe032e44090 R08: 0000000000000000 R09: 0000000000000000 [ 600.762961][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.770946][T13931] R13: 00007fe032226038 R14: 00007fe032225fa0 R15: 00007ffc1c75c978 [ 600.778944][T13931] [ 600.956969][T13940] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2692'. [ 601.012050][T13940] net_ratelimit: 513 callbacks suppressed [ 601.012108][T13940] netlink: zone id is out of range [ 601.054333][T13940] netlink: zone id is out of range [ 601.081426][T13940] netlink: zone id is out of range [ 601.100744][T13940] netlink: zone id is out of range [ 601.121737][T13940] netlink: zone id is out of range [ 601.146555][T13940] netlink: zone id is out of range [ 601.172265][T13940] netlink: zone id is out of range [ 601.201355][T13940] netlink: zone id is out of range [ 601.225242][T13940] netlink: zone id is out of range [ 601.252445][T13940] netlink: zone id is out of range [ 604.106261][T13945] netlink: 151184 bytes leftover after parsing attributes in process `syz.1.2694'. [ 604.264466][T13952] netlink: 'syz.3.2697': attribute type 10 has an invalid length. [ 604.401145][T13952] team0: Port device wlan1 added [ 604.581184][T13958] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2699'. [ 608.299518][T13976] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2706'. [ 608.437170][T13978] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2705'. [ 608.540949][T13978] net_ratelimit: 338 callbacks suppressed [ 608.541039][T13978] netlink: zone id is out of range [ 608.561843][T13978] netlink: zone id is out of range [ 608.596173][T13978] netlink: zone id is out of range [ 608.602144][T13978] netlink: zone id is out of range [ 608.636186][T13978] netlink: zone id is out of range [ 608.641119][T13985] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2708'. [ 608.641792][T13978] netlink: zone id is out of range [ 608.704485][T13978] netlink: zone id is out of range [ 608.751827][T13978] netlink: zone id is out of range [ 608.758563][T13978] netlink: zone id is out of range [ 608.789740][T13978] netlink: zone id is out of range [ 612.958176][T14012] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2715'. [ 613.055022][T14013] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2718'. [ 613.705957][T14023] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2719'. [ 613.907734][T14024] netlink: 151184 bytes leftover after parsing attributes in process `syz.1.2727'. [ 613.944594][T14024] net_ratelimit: 338 callbacks suppressed [ 613.944653][T14024] netlink: zone id is out of range [ 613.958384][T14024] netlink: zone id is out of range [ 613.964121][T14024] netlink: zone id is out of range [ 613.970542][T14024] netlink: zone id is out of range [ 613.976555][T14024] netlink: zone id is out of range [ 613.982961][T14024] netlink: zone id is out of range [ 613.988875][T14024] netlink: zone id is out of range [ 613.995147][T14024] netlink: zone id is out of range [ 614.010228][T14024] netlink: zone id is out of range [ 614.016415][T14024] netlink: zone id is out of range [ 621.062966][T14059] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2730'. [ 622.224565][T14095] FAULT_INJECTION: forcing a failure. [ 622.224565][T14095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.249725][T14095] CPU: 0 PID: 14095 Comm: syz.0.2746 Not tainted syzkaller #0 [ 622.257232][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.267291][T14095] Call Trace: [ 622.270566][T14095] [ 622.273495][T14095] dump_stack_lvl+0x18c/0x250 [ 622.278180][T14095] ? show_regs_print_info+0x20/0x20 [ 622.283374][T14095] ? load_image+0x420/0x420 [ 622.287884][T14095] ? __might_fault+0xaa/0x120 [ 622.292556][T14095] ? __lock_acquire+0x7d80/0x7d80 [ 622.297574][T14095] ? bpf_map_update_value+0x438/0x710 [ 622.302935][T14095] ? __virt_addr_valid+0x10c/0x380 [ 622.308045][T14095] should_fail_ex+0x394/0x4c0 [ 622.312724][T14095] _copy_from_user+0x2f/0xe0 [ 622.317313][T14095] generic_map_update_batch+0x53e/0x800 [ 622.323235][T14095] ? rcu_read_unlock+0xa0/0xa0 [ 622.328014][T14095] ? __fdget+0x180/0x210 [ 622.333037][T14095] ? rcu_read_unlock+0xa0/0xa0 [ 622.337801][T14095] bpf_map_do_batch+0x3f2/0x600 [ 622.342649][T14095] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 622.349181][T14095] __sys_bpf+0x381/0x890 [ 622.353420][T14095] ? bpf_link_show_fdinfo+0x390/0x390 [ 622.358815][T14095] ? lock_chain_count+0x20/0x20 [ 622.363768][T14095] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 622.369753][T14095] __x64_sys_bpf+0x7c/0x90 [ 622.374173][T14095] do_syscall_64+0x55/0xb0 [ 622.378588][T14095] ? clear_bhb_loop+0x40/0x90 [ 622.383258][T14095] ? clear_bhb_loop+0x40/0x90 [ 622.387927][T14095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.393810][T14095] RIP: 0033:0x7f4adb39e019 [ 622.398226][T14095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.417825][T14095] RSP: 002b:00007f4adc27f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 622.426236][T14095] RAX: ffffffffffffffda RBX: 00007f4adb625fa0 RCX: 00007f4adb39e019 [ 622.434207][T14095] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 622.442174][T14095] RBP: 00007f4adc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 622.450139][T14095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 622.458102][T14095] R13: 00007f4adb626038 R14: 00007f4adb625fa0 R15: 00007ffeeb1219a8 [ 622.466077][T14095] [ 622.750856][T14109] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2748'. [ 622.830535][T14111] netlink: 'syz.0.2752': attribute type 10 has an invalid length. [ 623.305075][T14111] team0: Device wg1 is of different type [ 624.574411][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.581011][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.110703][T14169] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2768'. [ 625.881012][T14170] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2767'. [ 625.970741][T14173] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 628.859010][T14207] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2781'. [ 628.911279][T14210] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2778'. [ 628.962065][T14210] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2778'. [ 629.127969][T14215] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2783'. [ 631.204401][T14241] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2792'. [ 631.394277][T14245] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2794'. [ 631.419780][T14245] net_ratelimit: 164 callbacks suppressed [ 631.419852][T14245] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 631.765800][T14257] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 631.773765][T14257] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 632.890097][T14268] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2801'. [ 632.924896][T14268] netlink: zone id is out of range [ 632.940066][T14268] netlink: zone id is out of range [ 632.958186][T14268] netlink: zone id is out of range [ 632.967775][T14268] netlink: zone id is out of range [ 632.979764][T14268] netlink: zone id is out of range [ 632.989352][T14268] netlink: zone id is out of range [ 633.000175][T14268] netlink: zone id is out of range [ 633.021005][T14268] netlink: zone id is out of range [ 633.029973][T14268] netlink: zone id is out of range [ 633.292623][T14278] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2802'. [ 633.446429][T14285] tun0: tun_chr_ioctl cmd 1074812118 [ 634.996225][T14306] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2812'. [ 636.590215][T14327] FAULT_INJECTION: forcing a failure. [ 636.590215][T14327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.623491][T14327] CPU: 1 PID: 14327 Comm: syz.2.2821 Not tainted syzkaller #0 [ 636.631029][T14327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.641104][T14327] Call Trace: [ 636.644402][T14327] [ 636.647344][T14327] dump_stack_lvl+0x18c/0x250 [ 636.652048][T14327] ? show_regs_print_info+0x20/0x20 [ 636.657263][T14327] ? load_image+0x420/0x420 [ 636.661796][T14327] ? __lock_acquire+0x7d80/0x7d80 [ 636.666846][T14327] ? snprintf+0xe9/0x140 [ 636.671121][T14327] should_fail_ex+0x394/0x4c0 [ 636.675830][T14327] _copy_to_user+0x2f/0xa0 [ 636.680269][T14327] simple_read_from_buffer+0xe7/0x150 [ 636.685673][T14327] proc_fail_nth_read+0x1e8/0x260 [ 636.690731][T14327] ? proc_fault_inject_write+0x360/0x360 [ 636.696392][T14327] ? fsnotify_perm+0x271/0x5e0 [ 636.701182][T14327] ? proc_fault_inject_write+0x360/0x360 [ 636.706842][T14327] vfs_read+0x298/0x990 [ 636.711027][T14327] ? kernel_read+0x1e0/0x1e0 [ 636.715642][T14327] ? __fget_files+0x28/0x460 [ 636.720258][T14327] ? __fget_files+0x3fc/0x460 [ 636.724971][T14327] ? __fdget_pos+0x2a3/0x330 [ 636.729585][T14327] ? ksys_read+0x74/0x260 [ 636.733942][T14327] ksys_read+0x151/0x260 [ 636.738213][T14327] ? vfs_write+0x9a0/0x9a0 [ 636.742655][T14327] ? lockdep_hardirqs_on+0x98/0x150 [ 636.747881][T14327] do_syscall_64+0x55/0xb0 [ 636.752316][T14327] ? clear_bhb_loop+0x40/0x90 [ 636.757013][T14327] ? clear_bhb_loop+0x40/0x90 [ 636.761712][T14327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.767621][T14327] RIP: 0033:0x7effde75e84e [ 636.772061][T14327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 636.791693][T14327] RSP: 002b:00007effdf710fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.800133][T14327] RAX: ffffffffffffffda RBX: 00007effdf7116c0 RCX: 00007effde75e84e [ 636.808124][T14327] RDX: 000000000000000f RSI: 00007effdf7110a0 RDI: 0000000000000005 [ 636.816117][T14327] RBP: 00007effdf711090 R08: 0000000000000000 R09: 0000000000000000 [ 636.824211][T14327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.832210][T14327] R13: 00007effdea26038 R14: 00007effdea25fa0 R15: 00007ffeb117d9c8 [ 636.840315][T14327] [ 636.896533][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 637.347549][T14338] netlink: 151184 bytes leftover after parsing attributes in process `syz.2.2823'. [ 637.377094][T14338] net_ratelimit: 339 callbacks suppressed [ 637.377146][T14338] netlink: zone id is out of range [ 637.420133][T14338] netlink: zone id is out of range [ 637.426376][T14338] netlink: zone id is out of range [ 637.445605][T14338] netlink: zone id is out of range [ 637.453351][T14338] netlink: zone id is out of range [ 637.474458][T14338] netlink: zone id is out of range [ 637.494489][T14338] netlink: zone id is out of range [ 637.509836][T14338] netlink: zone id is out of range [ 637.515236][T14338] netlink: zone id is out of range [ 637.559653][T14338] netlink: zone id is out of range [ 639.304567][T14379] FAULT_INJECTION: forcing a failure. [ 639.304567][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.325301][T14379] CPU: 0 PID: 14379 Comm: syz.0.2838 Not tainted syzkaller #0 [ 639.332823][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.342905][T14379] Call Trace: [ 639.346203][T14379] [ 639.349154][T14379] dump_stack_lvl+0x18c/0x250 [ 639.353949][T14379] ? show_regs_print_info+0x20/0x20 [ 639.359180][T14379] ? load_image+0x420/0x420 [ 639.363704][T14379] ? __might_fault+0xaa/0x120 [ 639.368641][T14379] ? __lock_acquire+0x7d80/0x7d80 [ 639.373692][T14379] should_fail_ex+0x394/0x4c0 [ 639.378392][T14379] _copy_from_user+0x2f/0xe0 [ 639.382995][T14379] ___sys_sendmsg+0x1c7/0x360 [ 639.387677][T14379] ? get_pid_task+0x20/0x1e0 [ 639.392298][T14379] ? __sys_sendmsg+0x2b0/0x2b0 [ 639.397106][T14379] ? __lock_acquire+0x7d80/0x7d80 [ 639.402185][T14379] __se_sys_sendmsg+0x1d0/0x2c0 [ 639.407050][T14379] ? __x64_sys_sendmsg+0x80/0x80 [ 639.412008][T14379] ? lockdep_hardirqs_on+0x98/0x150 [ 639.417215][T14379] do_syscall_64+0x55/0xb0 [ 639.421641][T14379] ? clear_bhb_loop+0x40/0x90 [ 639.426319][T14379] ? clear_bhb_loop+0x40/0x90 [ 639.431001][T14379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.436897][T14379] RIP: 0033:0x7f4adb39e019 [ 639.441311][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.460920][T14379] RSP: 002b:00007f4adc27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.469341][T14379] RAX: ffffffffffffffda RBX: 00007f4adb625fa0 RCX: 00007f4adb39e019 [ 639.477394][T14379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 639.485362][T14379] RBP: 00007f4adc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 639.493333][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.501298][T14379] R13: 00007f4adb626038 R14: 00007f4adb625fa0 R15: 00007ffeeb1219a8 [ 639.509278][T14379] [ 639.812979][T14386] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2842'. [ 640.981763][T14402] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2846'. [ 642.124239][T14417] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2851'. [ 642.170290][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 642.427402][T14423] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2854'. [ 642.446728][T14423] net_ratelimit: 338 callbacks suppressed [ 642.446816][T14423] netlink: zone id is out of range [ 642.459939][T14423] netlink: zone id is out of range [ 642.466385][T14423] netlink: zone id is out of range [ 642.474125][T14423] netlink: zone id is out of range [ 642.481882][T14423] netlink: zone id is out of range [ 642.487974][T14423] netlink: zone id is out of range [ 642.526242][T14423] netlink: zone id is out of range [ 642.532630][T14423] netlink: zone id is out of range [ 642.538799][T14423] netlink: zone id is out of range [ 642.545163][T14423] netlink: zone id is out of range [ 642.871641][T14435] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2858'. [ 643.207301][T14448] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2860'. [ 645.193562][T14454] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2862'. [ 645.514125][T14463] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2866'. [ 646.199267][T14477] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 646.222030][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.827161][T14500] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2875'. [ 648.935407][T14499] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2878'. [ 649.013901][T14499] net_ratelimit: 529 callbacks suppressed [ 649.013991][T14499] netlink: zone id is out of range [ 649.031109][T14499] netlink: zone id is out of range [ 649.037144][T14499] netlink: zone id is out of range [ 649.053216][T14499] netlink: zone id is out of range [ 649.062146][T14499] netlink: zone id is out of range [ 649.068335][T14499] netlink: zone id is out of range [ 649.090431][T14499] netlink: zone id is out of range [ 649.096964][T14499] netlink: zone id is out of range [ 649.111194][T14499] netlink: zone id is out of range [ 649.128095][T14499] netlink: zone id is out of range [ 649.350450][T14502] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2879'. [ 650.216952][T14515] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 650.228539][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.242737][T14515] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 650.271011][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.557675][T14527] FAULT_INJECTION: forcing a failure. [ 650.557675][T14527] name failslab, interval 1, probability 0, space 0, times 0 [ 650.573123][T14527] CPU: 1 PID: 14527 Comm: syz.1.2887 Not tainted syzkaller #0 [ 650.580646][T14527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.590721][T14527] Call Trace: [ 650.594022][T14527] [ 650.596970][T14527] dump_stack_lvl+0x18c/0x250 [ 650.601679][T14527] ? show_regs_print_info+0x20/0x20 [ 650.606902][T14527] ? load_image+0x420/0x420 [ 650.611440][T14527] ? __might_sleep+0xe0/0xe0 [ 650.616055][T14527] ? __lock_acquire+0x7d80/0x7d80 [ 650.621121][T14527] should_fail_ex+0x394/0x4c0 [ 650.625830][T14527] should_failslab+0x9/0x20 [ 650.630359][T14527] slab_pre_alloc_hook+0x59/0x300 [ 650.635416][T14527] ? bpf_insn_prepare_dump+0xb1/0x850 [ 650.640817][T14527] ? bpf_insn_prepare_dump+0xb1/0x850 [ 650.646209][T14527] __kmem_cache_alloc_node+0x53/0x250 [ 650.651643][T14527] ? bpf_insn_prepare_dump+0xb1/0x850 [ 650.657045][T14527] __kmalloc_node_track_caller+0xa4/0x230 [ 650.662800][T14527] ? aa_get_newest_label+0xfd/0x5c0 [ 650.668028][T14527] kmemdup+0x2b/0x70 [ 650.671954][T14527] bpf_insn_prepare_dump+0xb1/0x850 [ 650.677188][T14527] ? bpf_prog_attach_check_attach_type+0x440/0x440 [ 650.683715][T14527] ? bpf_lsm_capable+0x9/0x10 [ 650.688423][T14527] ? security_capable+0x89/0xb0 [ 650.693311][T14527] bpf_obj_get_info_by_fd+0x1893/0x3120 [ 650.698904][T14527] ? bpf_map_get_fd_by_id+0x330/0x330 [ 650.704312][T14527] ? perf_trace_lock+0xfc/0x3b0 [ 650.709191][T14527] ? trace_event_raw_event_lock+0x240/0x240 [ 650.715153][T14527] ? file_end_write+0x159/0x250 [ 650.720034][T14527] ? __might_fault+0xaa/0x120 [ 650.724732][T14527] ? __might_fault+0xc6/0x120 [ 650.729426][T14527] ? __might_fault+0xaa/0x120 [ 650.734137][T14527] ? bpf_lsm_bpf+0x9/0x10 [ 650.738497][T14527] ? security_bpf+0x7e/0xa0 [ 650.743029][T14527] __sys_bpf+0x7eb/0x890 [ 650.747299][T14527] ? bpf_link_show_fdinfo+0x390/0x390 [ 650.752714][T14527] ? lock_chain_count+0x20/0x20 [ 650.757600][T14527] __x64_sys_bpf+0x7c/0x90 [ 650.762049][T14527] do_syscall_64+0x55/0xb0 [ 650.766495][T14527] ? clear_bhb_loop+0x40/0x90 [ 650.771190][T14527] ? clear_bhb_loop+0x40/0x90 [ 650.775892][T14527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.781811][T14527] RIP: 0033:0x7f7488d9e019 [ 650.786250][T14527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.805886][T14527] RSP: 002b:00007f7489bec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 650.814329][T14527] RAX: ffffffffffffffda RBX: 00007f7489025fa0 RCX: 00007f7488d9e019 [ 650.822341][T14527] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 650.830341][T14527] RBP: 00007f7489bec090 R08: 0000000000000000 R09: 0000000000000000 [ 650.838347][T14527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.846360][T14527] R13: 00007f7489026038 R14: 00007f7489025fa0 R15: 00007ffda5454b38 [ 650.854386][T14527] [ 653.420477][T14535] netlink: 151184 bytes leftover after parsing attributes in process `syz.1.2890'. [ 653.526517][T14541] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2891'. [ 653.664686][T14539] netlink: 'syz.3.2893': attribute type 10 has an invalid length. [ 653.697872][T14539] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2893'. [ 653.866553][T14545] FAULT_INJECTION: forcing a failure. [ 653.866553][T14545] name failslab, interval 1, probability 0, space 0, times 0 [ 653.907564][T14545] CPU: 1 PID: 14545 Comm: syz.1.2894 Not tainted syzkaller #0 [ 653.915102][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.925191][T14545] Call Trace: [ 653.928495][T14545] [ 653.931445][T14545] dump_stack_lvl+0x18c/0x250 [ 653.936157][T14545] ? show_regs_print_info+0x20/0x20 [ 653.941391][T14545] ? load_image+0x420/0x420 [ 653.945927][T14545] ? lockdep_hardirqs_on+0x98/0x150 [ 653.951174][T14545] should_fail_ex+0x394/0x4c0 [ 653.955891][T14545] should_failslab+0x9/0x20 [ 653.960429][T14545] slab_pre_alloc_hook+0x59/0x300 [ 653.965492][T14545] ? __lock_acquire+0x7d80/0x7d80 [ 653.970617][T14545] kmem_cache_alloc_node+0x5e/0x310 [ 653.975860][T14545] ? __alloc_skb+0x103/0x2c0 [ 653.980549][T14545] __alloc_skb+0x103/0x2c0 [ 653.985007][T14545] netlink_sendmsg+0x66a/0xbf0 [ 653.989813][T14545] ? netlink_getsockopt+0x590/0x590 [ 653.995043][T14545] ? apparmor_socket_sendmsg+0x8e/0x330 [ 654.000630][T14545] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 654.005955][T14545] ? security_socket_sendmsg+0x80/0xa0 [ 654.011444][T14545] ? netlink_getsockopt+0x590/0x590 [ 654.016671][T14545] ____sys_sendmsg+0x61b/0x980 [ 654.021439][T14545] ? __asan_memset+0x22/0x40 [ 654.026038][T14545] ? __sys_sendmsg_sock+0x30/0x30 [ 654.031059][T14545] ? __import_iovec+0x5f2/0x850 [ 654.035914][T14545] ? import_iovec+0x73/0xa0 [ 654.040427][T14545] ___sys_sendmsg+0x2a6/0x360 [ 654.045134][T14545] ? __sys_sendmsg+0x2b0/0x2b0 [ 654.049922][T14545] ? ktime_get+0x7f/0x280 [ 654.054273][T14545] __se_sys_sendmsg+0x1d0/0x2c0 [ 654.059132][T14545] ? perf_trace_preemptirq_template+0x269/0x330 [ 654.065386][T14545] ? __x64_sys_sendmsg+0x80/0x80 [ 654.070345][T14545] ? lockdep_hardirqs_on+0x98/0x150 [ 654.075556][T14545] do_syscall_64+0x55/0xb0 [ 654.079970][T14545] ? clear_bhb_loop+0x40/0x90 [ 654.084643][T14545] ? clear_bhb_loop+0x40/0x90 [ 654.089318][T14545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.095209][T14545] RIP: 0033:0x7f7488d9e019 [ 654.099664][T14545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.119363][T14545] RSP: 002b:00007f7489bec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.127792][T14545] RAX: ffffffffffffffda RBX: 00007f7489025fa0 RCX: 00007f7488d9e019 [ 654.135760][T14545] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 000000000000000a [ 654.143734][T14545] RBP: 00007f7489bec090 R08: 0000000000000000 R09: 0000000000000000 [ 654.151697][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.159662][T14545] R13: 00007f7489026038 R14: 00007f7489025fa0 R15: 00007ffda5454b38 [ 654.167639][T14545] [ 654.596944][T14563] netlink: 'syz.3.2899': attribute type 11 has an invalid length. [ 654.634166][T14563] netlink: 'syz.3.2899': attribute type 2 has an invalid length. [ 654.669625][T14563] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.2899'. [ 654.810381][T14566] netlink: 151184 bytes leftover after parsing attributes in process `syz.2.2902'. [ 654.849834][T14566] net_ratelimit: 512 callbacks suppressed [ 654.849895][T14566] netlink: zone id is out of range [ 654.868834][T14566] netlink: zone id is out of range [ 654.877973][T14566] netlink: zone id is out of range [ 654.885450][T14566] netlink: zone id is out of range [ 654.897804][T14566] netlink: zone id is out of range [ 654.906826][T14566] netlink: zone id is out of range [ 654.918148][T14566] netlink: zone id is out of range [ 654.932814][T14566] netlink: zone id is out of range [ 654.943690][T14566] netlink: zone id is out of range [ 654.952214][T14566] netlink: zone id is out of range [ 655.163727][T14575] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2905'. [ 659.334135][T14601] netlink: 151184 bytes leftover after parsing attributes in process `syz.2.2912'. [ 659.861343][T14595] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2908'. [ 660.354629][T14614] FAULT_INJECTION: forcing a failure. [ 660.354629][T14614] name failslab, interval 1, probability 0, space 0, times 0 [ 660.369605][T14614] CPU: 0 PID: 14614 Comm: syz.1.2918 Not tainted syzkaller #0 [ 660.377112][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.387191][T14614] Call Trace: [ 660.390523][T14614] [ 660.393468][T14614] dump_stack_lvl+0x18c/0x250 [ 660.398184][T14614] ? show_regs_print_info+0x20/0x20 [ 660.403411][T14614] ? load_image+0x420/0x420 [ 660.407951][T14614] ? __might_sleep+0xe0/0xe0 [ 660.412571][T14614] ? __lock_acquire+0x7d80/0x7d80 [ 660.417626][T14614] should_fail_ex+0x394/0x4c0 [ 660.422341][T14614] should_failslab+0x9/0x20 [ 660.426870][T14614] slab_pre_alloc_hook+0x59/0x300 [ 660.431925][T14614] ? genl_start+0x1c9/0x6c0 [ 660.436434][T14614] __kmem_cache_alloc_node+0x53/0x250 [ 660.441814][T14614] ? genl_start+0x1c9/0x6c0 [ 660.446317][T14614] kmalloc_trace+0x2a/0xe0 [ 660.450743][T14614] genl_start+0x1c9/0x6c0 [ 660.455072][T14614] __netlink_dump_start+0x43c/0x7a0 [ 660.460270][T14614] genl_family_rcv_msg_dumpit+0x214/0x310 [ 660.465995][T14614] ? genl_rcv_msg+0x7a0/0x7a0 [ 660.470663][T14614] ? genl_get_cmd+0x693/0x930 [ 660.475343][T14614] ? genl_family_rcv_msg_doit+0x310/0x310 [ 660.481058][T14614] ? genl_start+0x6c0/0x6c0 [ 660.485551][T14614] ? genl_dumpit+0x1a0/0x1a0 [ 660.490139][T14614] ? mark_lock+0x94/0x320 [ 660.494471][T14614] genl_rcv_msg+0x5de/0x7a0 [ 660.498973][T14614] ? genl_bind+0x360/0x360 [ 660.503383][T14614] ? ethnl_default_doit+0xba0/0xba0 [ 660.508642][T14614] ? ethnl_default_start+0x560/0x560 [ 660.514009][T14614] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 660.519371][T14614] ? lockdep_hardirqs_on+0x98/0x150 [ 660.524573][T14614] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.530745][T14614] netlink_rcv_skb+0x235/0x4c0 [ 660.535503][T14614] ? genl_bind+0x360/0x360 [ 660.539912][T14614] ? netlink_ack+0x1160/0x1160 [ 660.544676][T14614] ? __lock_acquire+0x7d80/0x7d80 [ 660.549703][T14614] ? down_read+0x1ac/0x2e0 [ 660.554120][T14614] genl_rcv+0x28/0x40 [ 660.558098][T14614] netlink_unicast+0x7b1/0x930 [ 660.562870][T14614] netlink_sendmsg+0x8d0/0xbf0 [ 660.567634][T14614] ? netlink_getsockopt+0x590/0x590 [ 660.572861][T14614] ? apparmor_socket_sendmsg+0x8e/0x330 [ 660.578401][T14614] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 660.583684][T14614] ? security_socket_sendmsg+0x80/0xa0 [ 660.589141][T14614] ? netlink_getsockopt+0x590/0x590 [ 660.594336][T14614] ____sys_sendmsg+0x61b/0x980 [ 660.599104][T14614] ? __asan_memset+0x22/0x40 [ 660.603694][T14614] ? __sys_sendmsg_sock+0x30/0x30 [ 660.608712][T14614] ? __import_iovec+0x5f2/0x850 [ 660.613567][T14614] ? import_iovec+0x73/0xa0 [ 660.618073][T14614] ___sys_sendmsg+0x2a6/0x360 [ 660.622751][T14614] ? __sys_sendmsg+0x2b0/0x2b0 [ 660.627530][T14614] ? ktime_get+0x7f/0x280 [ 660.631878][T14614] __se_sys_sendmsg+0x1d0/0x2c0 [ 660.636733][T14614] ? __x64_sys_sendmsg+0x80/0x80 [ 660.641675][T14614] ? lockdep_hardirqs_on+0x98/0x150 [ 660.646874][T14614] do_syscall_64+0x55/0xb0 [ 660.651294][T14614] ? clear_bhb_loop+0x40/0x90 [ 660.655966][T14614] ? clear_bhb_loop+0x40/0x90 [ 660.660653][T14614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.666548][T14614] RIP: 0033:0x7f7488d9e019 [ 660.670958][T14614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.690562][T14614] RSP: 002b:00007f7489bec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.698969][T14614] RAX: ffffffffffffffda RBX: 00007f7489025fa0 RCX: 00007f7488d9e019 [ 660.706931][T14614] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 660.714897][T14614] RBP: 00007f7489bec090 R08: 0000000000000000 R09: 0000000000000000 [ 660.722865][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.730829][T14614] R13: 00007f7489026038 R14: 00007f7489025fa0 R15: 00007ffda5454b38 [ 660.738833][T14614] [ 661.112356][T14629] netlink: 151184 bytes leftover after parsing attributes in process `syz.0.2922'. [ 661.155287][T14629] net_ratelimit: 338 callbacks suppressed [ 661.155343][T14629] netlink: zone id is out of range [ 661.169764][T14629] netlink: zone id is out of range [ 661.178834][T14629] netlink: zone id is out of range [ 661.186221][T14629] netlink: zone id is out of range [ 661.210289][T14629] netlink: zone id is out of range [ 661.222765][T14629] netlink: zone id is out of range [ 661.249975][T14629] netlink: zone id is out of range [ 661.279853][T14629] netlink: zone id is out of range [ 661.294300][T14629] netlink: zone id is out of range [ 661.309279][T14629] netlink: zone id is out of range [ 664.320252][T14630] delete_channel: no stack [ 664.977177][T14666] netlink: 151184 bytes leftover after parsing attributes in process `syz.1.2934'. [ 665.497508][T14675] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 666.089067][T14686] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 666.109951][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.136708][T14686] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 666.206196][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.331787][T14696] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2943'. [ 667.303404][T14703] netlink: 'syz.3.2945': attribute type 10 has an invalid length. [ 667.345237][T14703] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.352980][T14703] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.422267][T14703] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.429583][T14703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.437108][T14703] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.444401][T14703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.547534][T14703] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 667.611138][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 667.903123][T14707] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2947'. [ 667.977525][T14707] net_ratelimit: 338 callbacks suppressed [ 667.977614][T14707] netlink: zone id is out of range [ 668.019717][T14707] netlink: zone id is out of range [ 668.027356][T14707] netlink: zone id is out of range [ 668.039656][T14707] netlink: zone id is out of range [ 668.047126][T14707] netlink: zone id is out of range [ 668.060236][T14707] netlink: zone id is out of range [ 668.077923][T14707] netlink: zone id is out of range [ 668.099301][T14711] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2948'. [ 668.104376][ T11] wlan1: Trigger new scan to find an IBSS to join [ 668.109305][T14707] netlink: zone id is out of range [ 668.131316][T14707] netlink: zone id is out of range [ 668.142826][T14711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.986906][ T5086] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 672.316241][T14744] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 672.337236][T14743] netlink: 151184 bytes leftover after parsing attributes in process `syz.3.2957'. [ 672.344066][T14744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.374498][T14744] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 672.465482][T14744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.183935][T14762] netlink: 'syz.2.2963': attribute type 12 has an invalid length. [ 673.192328][T14762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2963'. [ 673.712272][T14779] netlink: 151184 bytes leftover after parsing attributes in process `syz.2.2968'. [ 673.732682][T14779] net_ratelimit: 339 callbacks suppressed [ 673.732698][T14779] netlink: zone id is out of range [ 673.738595][T14778] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 673.738825][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.738855][T14778] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 673.738881][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.738908][T14778] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 673.738933][T14778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.813743][T14779] netlink: zone id is out of range [ 673.826609][T14779] netlink: zone id is out of range [ 673.832445][T14779] netlink: zone id is out of range [ 673.845719][T14779] netlink: zone id is out of range [ 673.852266][T14779] netlink: zone id is out of range [ 673.857573][T14779] netlink: zone id is out of range [ 673.868476][T14779] netlink: zone id is out of range [ 673.868665][T14780] netlink: 'syz.0.2967': attribute type 25 has an invalid length. [ 673.874383][T14779] netlink: zone id is out of range [ 673.894147][T14779] netlink: zone id is out of range [ 673.897176][T14780] netlink: 'syz.0.2967': attribute type 9 has an invalid length. [ 673.918761][T14780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2967'. [ 673.958807][T14784] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2970'. [ 673.976054][T14784] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2970'. [ 674.656275][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2972'. [ 674.685819][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2972'. [ 674.710617][T14799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2972'. [ 674.725949][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2972'. [ 675.118930][T14808] netlink: 'syz.0.2976': attribute type 25 has an invalid length. [ 675.139505][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 675.146173][T14808] netlink: 'syz.0.2976': attribute type 9 has an invalid length. [ 675.168860][T14808] FAULT_INJECTION: forcing a failure. [ 675.168860][T14808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.202756][T14808] CPU: 1 PID: 14808 Comm: syz.0.2976 Not tainted syzkaller #0 [ 675.210292][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.220380][T14808] Call Trace: [ 675.223693][T14808] [ 675.226652][T14808] dump_stack_lvl+0x18c/0x250 [ 675.231375][T14808] ? show_regs_print_info+0x20/0x20 [ 675.236617][T14808] ? load_image+0x420/0x420 [ 675.241165][T14808] ? __lock_acquire+0x7d80/0x7d80 [ 675.246229][T14808] ? snprintf+0xe9/0x140 [ 675.250517][T14808] should_fail_ex+0x394/0x4c0 [ 675.255243][T14808] _copy_to_user+0x2f/0xa0 [ 675.259699][T14808] simple_read_from_buffer+0xe7/0x150 [ 675.265123][T14808] proc_fail_nth_read+0x1e8/0x260 [ 675.270204][T14808] ? proc_fault_inject_write+0x360/0x360 [ 675.275889][T14808] ? fsnotify_perm+0x271/0x5e0 [ 675.280699][T14808] ? proc_fault_inject_write+0x360/0x360 [ 675.286385][T14808] vfs_read+0x298/0x990 [ 675.290599][T14808] ? kernel_read+0x1e0/0x1e0 [ 675.295240][T14808] ? __fget_files+0x28/0x460 [ 675.299871][T14808] ? __fget_files+0x3fc/0x460 [ 675.304612][T14808] ? __fdget_pos+0x2a3/0x330 [ 675.309233][T14808] ? ksys_read+0x74/0x260 [ 675.313617][T14808] ksys_read+0x151/0x260 [ 675.317915][T14808] ? vfs_write+0x9a0/0x9a0 [ 675.322366][T14808] ? lockdep_hardirqs_on+0x98/0x150 [ 675.327607][T14808] do_syscall_64+0x55/0xb0 [ 675.332028][T14808] ? clear_bhb_loop+0x40/0x90 [ 675.336710][T14808] ? clear_bhb_loop+0x40/0x90 [ 675.341392][T14808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.347285][T14808] RIP: 0033:0x7f4adb35e84e [ 675.351717][T14808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 675.371329][T14808] RSP: 002b:00007f4adc27efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 675.379773][T14808] RAX: ffffffffffffffda RBX: 00007f4adc27f6c0 RCX: 00007f4adb35e84e [ 675.387835][T14808] RDX: 000000000000000f RSI: 00007f4adc27f0a0 RDI: 0000000000000005 [ 675.395832][T14808] RBP: 00007f4adc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 675.403802][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.411861][T14808] R13: 00007f4adb626038 R14: 00007f4adb625fa0 R15: 00007ffeeb1219a8 [ 675.419880][T14808] [ 675.565104][T14814] netlink: 'syz.2.2979': attribute type 11 has an invalid length. [ 675.618195][T14818] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 675.658722][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.710756][T14818] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 675.762901][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.775295][T14818] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 675.791482][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.768935][T14849] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 676.783259][T14849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.802560][T14849] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 676.850785][T14849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.901384][T14849] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 676.955868][T14849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.004883][T14868] netlink: 'syz.0.2997': attribute type 21 has an invalid length. [ 678.026396][T14868] __nla_validate_parse: 4 callbacks suppressed [ 678.026415][T14868] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2997'. [ 678.099567][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 678.472391][T14868] sit0: entered allmulticast mode [ 678.584558][T14873] FAULT_INJECTION: forcing a failure. [ 678.584558][T14873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.618899][T14873] CPU: 0 PID: 14873 Comm: syz.3.2998 Not tainted syzkaller #0 [ 678.626426][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 678.636593][T14873] Call Trace: [ 678.639891][T14873] [ 678.642843][T14873] dump_stack_lvl+0x18c/0x250 [ 678.647546][T14873] ? show_regs_print_info+0x20/0x20 [ 678.652768][T14873] ? load_image+0x420/0x420 [ 678.657353][T14873] ? __might_fault+0xaa/0x120 [ 678.662058][T14873] ? __lock_acquire+0x7d80/0x7d80 [ 678.667083][T14873] ? bpf_percpu_array_update+0xec/0x490 [ 678.672630][T14873] ? __virt_addr_valid+0x10c/0x380 [ 678.677743][T14873] should_fail_ex+0x394/0x4c0 [ 678.682424][T14873] _copy_from_user+0x2f/0xe0 [ 678.687120][T14873] generic_map_update_batch+0x58c/0x800 [ 678.692670][T14873] ? rcu_read_unlock+0xa0/0xa0 [ 678.697440][T14873] ? __fdget+0x180/0x210 [ 678.701681][T14873] ? rcu_read_unlock+0xa0/0xa0 [ 678.706438][T14873] bpf_map_do_batch+0x3f2/0x600 [ 678.711285][T14873] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 678.717787][T14873] __sys_bpf+0x381/0x890 [ 678.722025][T14873] ? bpf_link_show_fdinfo+0x390/0x390 [ 678.727401][T14873] ? lock_chain_count+0x20/0x20 [ 678.732253][T14873] __x64_sys_bpf+0x7c/0x90 [ 678.736663][T14873] do_syscall_64+0x55/0xb0 [ 678.741075][T14873] ? clear_bhb_loop+0x40/0x90 [ 678.745749][T14873] ? clear_bhb_loop+0x40/0x90 [ 678.750419][T14873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.756313][T14873] RIP: 0033:0x7fe031f9e019 [ 678.760725][T14873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.780331][T14873] RSP: 002b:00007fe032e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.788769][T14873] RAX: ffffffffffffffda RBX: 00007fe032225fa0 RCX: 00007fe031f9e019 [ 678.796759][T14873] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 678.804726][T14873] RBP: 00007fe032e44090 R08: 0000000000000000 R09: 0000000000000000 [ 678.812691][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 678.820674][T14873] R13: 00007fe032226038 R14: 00007fe032225fa0 R15: 00007ffc1c75c978 [ 678.828671][T14873] [ 678.856478][T14877] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3000'. [ 679.083625][T14883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3002'. [ 679.112188][T14882] : renamed from veth1 (while UP) [ 679.250576][T14887] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 679.279888][T14887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.329749][T14887] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 679.396984][T14887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.459856][T14887] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 679.508384][T14887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.326377][T14903] netlink: 151184 bytes leftover after parsing attributes in process `syz.1.3007'. [ 680.346894][T14903] net_ratelimit: 512 callbacks suppressed [ 680.346912][T14903] netlink: zone id is out of range [ 680.367479][T14903] netlink: zone id is out of range [ 680.383176][T14903] netlink: zone id is out of range [ 680.396898][T14903] netlink: zone id is out of range [ 680.412028][T14903] netlink: zone id is out of range [ 680.424788][T14903] netlink: zone id is out of range [ 680.435459][T14903] netlink: zone id is out of range [ 680.457743][T14903] netlink: zone id is out of range [ 680.463411][T14903] netlink: zone id is out of range [ 680.469107][T14903] netlink: zone id is out of range [ 680.601630][T14913] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3011'. [ 680.657232][T14916] FAULT_INJECTION: forcing a failure. [ 680.657232][T14916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.671189][T14916] CPU: 0 PID: 14916 Comm: syz.1.3013 Not tainted syzkaller #0 [ 680.678695][T14916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.688781][T14916] Call Trace: [ 680.692092][T14916] [ 680.695039][T14916] dump_stack_lvl+0x18c/0x250 [ 680.699757][T14916] ? show_regs_print_info+0x20/0x20 [ 680.704987][T14916] ? load_image+0x420/0x420 [ 680.709531][T14916] ? __lock_acquire+0x7d80/0x7d80 [ 680.714596][T14916] should_fail_ex+0x394/0x4c0 [ 680.719300][T14916] _copy_from_user+0x2f/0xe0 [ 680.723892][T14916] __copy_msghdr+0x388/0x560 [ 680.728491][T14916] ___sys_sendmsg+0x214/0x360 [ 680.733173][T14916] ? __sys_sendmsg+0x2b0/0x2b0 [ 680.737948][T14916] ? __lock_acquire+0x7d80/0x7d80 [ 680.742994][T14916] __se_sys_sendmsg+0x1d0/0x2c0 [ 680.747929][T14916] ? __x64_sys_sendmsg+0x80/0x80 [ 680.752909][T14916] ? lockdep_hardirqs_on+0x98/0x150 [ 680.758114][T14916] do_syscall_64+0x55/0xb0 [ 680.762529][T14916] ? clear_bhb_loop+0x40/0x90 [ 680.767199][T14916] ? clear_bhb_loop+0x40/0x90 [ 680.771873][T14916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.777760][T14916] RIP: 0033:0x7f7488d9e019 [ 680.782171][T14916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.801795][T14916] RSP: 002b:00007f7489bec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.810215][T14916] RAX: ffffffffffffffda RBX: 00007f7489025fa0 RCX: 00007f7488d9e019 [ 680.818185][T14916] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 680.826156][T14916] RBP: 00007f7489bec090 R08: 0000000000000000 R09: 0000000000000000 [ 680.834415][T14916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.842384][T14916] R13: 00007f7489026038 R14: 00007f7489025fa0 R15: 00007ffda5454b38 [ 680.850363][T14916] [ 681.565810][T14931] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 681.590761][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.623885][T14931] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 681.664740][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.676033][T14931] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 681.697384][T14931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.729680][T14935] tap0: tun_chr_ioctl cmd 2147767507 [ 681.735809][T14935] tap0: tun_chr_ioctl cmd 2147767507 [ 681.832518][T14936] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3020'. [ 681.854116][T14936] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3020'. [ 681.879951][T14935] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3020'. [ 681.889604][T14936] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3020'. [ 681.937773][T14939] syz.3.3021: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 681.987271][T14939] CPU: 1 PID: 14939 Comm: syz.3.3021 Not tainted syzkaller #0 [ 681.994803][T14939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.004893][T14939] Call Trace: [ 682.008209][T14939] [ 682.011167][T14939] dump_stack_lvl+0x18c/0x250 [ 682.015969][T14939] ? show_regs_print_info+0x20/0x20 [ 682.021196][T14939] ? load_image+0x420/0x420 [ 682.025741][T14939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 682.032189][T14939] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 682.038732][T14939] warn_alloc+0x246/0x340 [ 682.043089][T14939] ? stack_trace_save+0xaa/0x100 [ 682.048056][T14939] ? zone_watermark_ok_safe+0x230/0x230 [ 682.053638][T14939] ? kasan_set_track+0x5f/0x70 [ 682.058442][T14939] ? kasan_set_track+0x4e/0x70 [ 682.063234][T14939] ? __kasan_kmalloc+0x8f/0xa0 [ 682.068027][T14939] ? xsk_init_queue+0xad/0x100 [ 682.072945][T14939] ? xsk_setsockopt+0x4c9/0x750 [ 682.077835][T14939] ? do_sock_setsockopt+0x175/0x1a0 [ 682.083063][T14939] ? __x64_sys_setsockopt+0x182/0x200 [ 682.088473][T14939] __vmalloc_node_range+0x129/0x1320 [ 682.093834][T14939] ? free_vm_area+0x50/0x50 [ 682.098390][T14939] vmalloc_user+0x74/0x80 [ 682.102767][T14939] ? xskq_create+0xbf/0x170 [ 682.107311][T14939] xskq_create+0xbf/0x170 [ 682.111687][T14939] xsk_init_queue+0xad/0x100 [ 682.116326][T14939] xsk_setsockopt+0x4c9/0x750 [ 682.121037][T14939] ? xsk_poll+0x670/0x670 [ 682.125377][T14939] ? __fget_files+0x28/0x460 [ 682.129972][T14939] ? aa_sock_opt_perm+0x74/0x100 [ 682.134911][T14939] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 682.140456][T14939] ? security_socket_setsockopt+0x7e/0xa0 [ 682.146170][T14939] ? xsk_poll+0x670/0x670 [ 682.150509][T14939] do_sock_setsockopt+0x175/0x1a0 [ 682.155529][T14939] ? __fdget+0x180/0x210 [ 682.159777][T14939] __x64_sys_setsockopt+0x182/0x200 [ 682.164982][T14939] do_syscall_64+0x55/0xb0 [ 682.169398][T14939] ? clear_bhb_loop+0x40/0x90 [ 682.174079][T14939] ? clear_bhb_loop+0x40/0x90 [ 682.178754][T14939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.184645][T14939] RIP: 0033:0x7fe031f9e019 [ 682.189062][T14939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.208671][T14939] RSP: 002b:00007fe032e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 682.217090][T14939] RAX: ffffffffffffffda RBX: 00007fe032225fa0 RCX: 00007fe031f9e019 [ 682.225056][T14939] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 682.233031][T14939] RBP: 00007fe03203500c R08: 0000000000000004 R09: 0000000000000000 [ 682.241003][T14939] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 682.248969][T14939] R13: 00007fe032226038 R14: 00007fe032225fa0 R15: 00007ffc1c75c978 [ 682.256954][T14939] [ 682.313194][T14939] Mem-Info: [ 682.316595][T14939] active_anon:6874 inactive_anon:0 isolated_anon:0 [ 682.316595][T14939] active_file:19477 inactive_file:40189 isolated_file:0 [ 682.316595][T14939] unevictable:768 dirty:476 writeback:0 [ 682.316595][T14939] slab_reclaimable:10325 slab_unreclaimable:92131 [ 682.316595][T14939] mapped:25169 shmem:1361 pagetables:565 [ 682.316595][T14939] sec_pagetables:0 bounce:0 [ 682.316595][T14939] kernel_misc_reclaimable:0 [ 682.316595][T14939] free:1342490 free_pcp:10464 free_cma:0 [ 682.371212][T14939] Node 0 active_anon:27696kB inactive_anon:0kB active_file:77908kB inactive_file:160556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100676kB dirty:1900kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10724kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no [ 682.414490][T14939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 682.467233][T14939] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.506414][T14939] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 682.516641][T14939] Node 0 DMA32 free:1448084kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27556kB inactive_anon:0kB active_file:77908kB inactive_file:159732kB unevictable:1536kB writepending:1900kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:29672kB local_pcp:18776kB free_cma:0kB [ 682.555207][T14939] lowmem_reserve[]: 0 0 0 0 0 [ 682.562856][T14950] FAULT_INJECTION: forcing a failure. [ 682.562856][T14950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 682.582553][T14939] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.609686][T14950] CPU: 1 PID: 14950 Comm: syz.1.3024 Not tainted syzkaller #0 [ 682.617189][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.627284][T14950] Call Trace: [ 682.630588][T14950] [ 682.633577][T14950] dump_stack_lvl+0x18c/0x250 [ 682.638296][T14950] ? show_regs_print_info+0x20/0x20 [ 682.643791][T14950] ? load_image+0x420/0x420 [ 682.648335][T14950] ? __lock_acquire+0x7d80/0x7d80 [ 682.653394][T14950] ? mark_lock+0x94/0x320 [ 682.657759][T14950] should_fail_ex+0x394/0x4c0 [ 682.662489][T14950] prepare_alloc_pages+0x1e1/0x5b0 [ 682.667648][T14950] __alloc_pages+0x134/0x460 [ 682.672281][T14950] ? zone_statistics+0x170/0x170 [ 682.677292][T14950] ? do_wp_page+0x733/0x34d0 [ 682.681913][T14950] ? do_wp_page+0xf17/0x34d0 [ 682.686532][T14950] ? __lock_acquire+0x7d80/0x7d80 [ 682.691593][T14950] __folio_alloc+0x10/0x20 [ 682.696037][T14950] vma_alloc_folio+0x474/0x8f0 [ 682.700840][T14950] do_wp_page+0x118d/0x34d0 [ 682.705387][T14950] ? folio_put+0xd0/0xd0 [ 682.709657][T14950] ? do_raw_spin_lock+0x11f/0x2b0 [ 682.714715][T14950] ? __rwlock_init+0x150/0x150 [ 682.719521][T14950] handle_mm_fault+0x1306/0x4a50 [ 682.724511][T14950] ? handle_mm_fault+0xe6/0x4a50 [ 682.729458][T14950] ? numa_migrate_prep+0x350/0x350 [ 682.734573][T14950] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 682.739850][T14950] do_user_addr_fault+0x736/0x12d0 [ 682.744976][T14950] exc_page_fault+0x64/0x100 [ 682.749576][T14950] asm_exc_page_fault+0x26/0x30 [ 682.754420][T14950] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 682.760223][T14950] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 682.779835][T14950] RSP: 0018:ffffc9000c65f498 EFLAGS: 00050206 [ 682.785897][T14950] RAX: ffffffff842fa601 RBX: 1ffff920018cbfc7 RCX: 0000000000003340 [ 682.793881][T14950] RDX: 0000000000000000 RSI: ffff888044594cc0 RDI: 0000200000010000 [ 682.801844][T14950] RBP: ffffc9000c65f5e8 R08: ffff888044597fff R09: 1ffff110088b2fff [ 682.809812][T14950] R10: dffffc0000000000 R11: ffffed10088b3000 R12: ffff888044590000 [ 682.817794][T14950] R13: 0000000000008000 R14: 0000000000008000 R15: ffffc9000c65fe48 [ 682.825766][T14950] ? _copy_to_iter+0x211/0x1110 [ 682.830986][T14950] _copy_to_iter+0x24f/0x1110 [ 682.835659][T14950] ? __lock_acquire+0x7d80/0x7d80 [ 682.840793][T14950] ? iov_iter_init+0x1e0/0x1e0 [ 682.845550][T14950] ? __virt_addr_valid+0x10c/0x380 [ 682.850662][T14950] ? __check_object_size+0x4fc/0xa40 [ 682.855942][T14950] __skb_datagram_iter+0x2ff/0x780 [ 682.861055][T14950] ? skb_copy_datagram_iter+0x200/0x200 [ 682.866598][T14950] skb_copy_datagram_iter+0xb1/0x200 [ 682.871884][T14950] unix_stream_read_actor+0x6c/0xa0 [ 682.877079][T14950] unix_stream_read_generic+0xcf1/0x1ea0 [ 682.882725][T14950] ? unix_stream_read_actor+0xa0/0xa0 [ 682.888089][T14950] ? wake_bit_function+0x200/0x200 [ 682.893207][T14950] ? aa_sk_perm+0x83c/0x970 [ 682.897712][T14950] unix_stream_recvmsg+0x169/0x1c0 [ 682.902820][T14950] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 682.908094][T14950] ? __lock_acquire+0x1262/0x7d80 [ 682.913131][T14950] ? __unix_stream_recvmsg+0x150/0x150 [ 682.918582][T14950] ? aa_sock_msg_perm+0x94/0x150 [ 682.923530][T14950] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 682.928829][T14950] ? security_socket_recvmsg+0x89/0xb0 [ 682.934278][T14950] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 682.939557][T14950] ____sys_recvmsg+0x2bd/0x5d0 [ 682.944328][T14950] ? __sys_recvmsg_sock+0x50/0x50 [ 682.949374][T14950] ? import_iovec+0x73/0xa0 [ 682.953889][T14950] ___sys_recvmsg+0x214/0x590 [ 682.958567][T14950] ? __sys_recvmsg+0x2a0/0x2a0 [ 682.963327][T14950] ? trace_call_bpf+0xc3/0x6c0 [ 682.968102][T14950] ? trace_call_bpf+0x5e9/0x6c0 [ 682.972973][T14950] ? __fget_files+0x3fc/0x460 [ 682.977703][T14950] __x64_sys_recvmsg+0x21e/0x2f0 [ 682.982640][T14950] ? perf_trace_preemptirq_template+0x269/0x330 [ 682.988883][T14950] ? ___sys_recvmsg+0x590/0x590 [ 682.993827][T14950] ? lockdep_hardirqs_on+0x98/0x150 [ 682.999029][T14950] do_syscall_64+0x55/0xb0 [ 683.003437][T14950] ? clear_bhb_loop+0x40/0x90 [ 683.008198][T14950] ? clear_bhb_loop+0x40/0x90 [ 683.012870][T14950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.018759][T14950] RIP: 0033:0x7f7488d9e019 [ 683.023174][T14950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.042796][T14950] RSP: 002b:00007f7489bec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 683.051209][T14950] RAX: ffffffffffffffda RBX: 00007f7489025fa0 RCX: 00007f7488d9e019 [ 683.059179][T14950] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 683.067146][T14950] RBP: 00007f7489bec090 R08: 0000000000000000 R09: 0000000000000000 [ 683.075109][T14950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.083075][T14950] R13: 00007f7489026038 R14: 00007f7489025fa0 R15: 00007ffda5454b38 [ 683.091051][T14950] [ 683.096420][T14939] lowmem_reserve[]: 0 0 0 0 0 [ 683.103451][T14939] Node 1 Normal free:3906256kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:10884kB local_pcp:3232kB free_cma:0kB [ 683.159512][T14939] lowmem_reserve[]: 0 0 0 0 0 [ 683.164328][T14939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 683.214709][T14939] Node 0 DMA32: 1885*4kB (UME) 1562*8kB (UME) 1073*16kB (UME) 2850*32kB (UME) 1110*64kB (UME) 229*128kB (UME) 117*256kB (UME) 105*512kB (UME) 39*1024kB (UM) 5*2048kB (M) 265*4096kB (UM) = 1448084kB [ 683.238893][T14954] FAULT_INJECTION: forcing a failure. [ 683.238893][T14954] name failslab, interval 1, probability 0, space 0, times 0 [ 683.258279][T14954] CPU: 0 PID: 14954 Comm: syz.0.3025 Not tainted syzkaller #0 [ 683.261637][T14939] Node 0 [ 683.265774][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 683.265786][T14954] Call Trace: [ 683.265794][T14954] [ 683.265803][T14954] dump_stack_lvl+0x18c/0x250 [ 683.268802][T14939] Normal: [ 683.278780][T14954] ? show_regs_print_info+0x20/0x20 [ 683.278801][T14954] ? load_image+0x420/0x420 [ 683.278824][T14954] ? __might_sleep+0xe0/0xe0 [ 683.278846][T14954] ? __lock_acquire+0x7d80/0x7d80 [ 683.278865][T14954] ? mark_lock+0x94/0x320 [ 683.299493][T14939] 0*4kB [ 683.302442][T14954] should_fail_ex+0x394/0x4c0 [ 683.317198][T14939] 1*8kB [ 683.319180][T14954] should_failslab+0x9/0x20 [ 683.329449][T14939] (M) [ 683.331158][T14954] slab_pre_alloc_hook+0x59/0x300 [ 683.333836][T14939] 0*16kB [ 683.338837][T14954] ? __get_vm_area_node+0x125/0x370 [ 683.338862][T14954] __kmem_cache_alloc_node+0x53/0x250 [ 683.352437][T14954] ? __get_vm_area_node+0x125/0x370 [ 683.357671][T14954] kmalloc_node_trace+0x26/0xe0 [ 683.359672][T14939] 0*32kB [ 683.362529][T14954] __get_vm_area_node+0x125/0x370 [ 683.362561][T14954] __vmalloc_node_range+0x36f/0x1320 [ 683.365483][T14939] 0*64kB [ 683.370477][T14954] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 683.370499][T14954] ? mark_lock+0x94/0x320 [ 683.370521][T14954] ? __lock_acquire+0x1336/0x7d80 [ 683.370551][T14954] ? aa_get_newest_label+0xfd/0x5c0 [ 683.370570][T14954] ? free_vm_area+0x50/0x50 [ 683.370592][T14954] ? end_current_label_crit_section+0x170/0x170 [ 683.370612][T14954] ? verify_lock_unused+0x140/0x140 [ 683.370632][T14954] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 683.401735][T14939] 0*128kB [ 683.403401][T14954] __vmalloc+0x7a/0x90 [ 683.420913][T14939] 0*256kB [ 683.423632][T14954] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 683.427678][T14939] 0*512kB [ 683.430679][T14954] bpf_prog_alloc_no_stats+0x46/0x430 [ 683.430702][T14954] bpf_prog_alloc+0x3d/0x1a0 [ 683.430721][T14954] bpf_prog_load+0x6b2/0x1610 [ 683.430755][T14954] ? map_freeze+0x420/0x420 [ 683.430776][T14954] ? __might_fault+0xaa/0x120 [ 683.430794][T14954] ? __lock_acquire+0x7d80/0x7d80 [ 683.430816][T14954] ? file_end_write+0x159/0x250 [ 683.430842][T14954] ? __might_fault+0xaa/0x120 [ 683.430859][T14954] ? __might_fault+0xc6/0x120 [ 683.449569][T14939] 0*1024kB [ 683.454012][T14954] ? __might_fault+0xaa/0x120 [ 683.458499][T14939] 0*2048kB [ 683.463240][T14954] ? bpf_lsm_bpf+0x9/0x10 [ 683.463263][T14954] ? security_bpf+0x7e/0xa0 [ 683.463284][T14954] __sys_bpf+0x5ba/0x890 [ 683.463305][T14954] ? bpf_link_show_fdinfo+0x390/0x390 [ 683.463335][T14954] ? lock_chain_count+0x20/0x20 [ 683.463361][T14954] __x64_sys_bpf+0x7c/0x90 [ 683.463382][T14954] do_syscall_64+0x55/0xb0 [ 683.463400][T14954] ? clear_bhb_loop+0x40/0x90 [ 683.463419][T14954] ? clear_bhb_loop+0x40/0x90 [ 683.463439][T14954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.463458][T14954] RIP: 0033:0x7f4adb39e019 [ 683.463476][T14954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.463492][T14954] RSP: 002b:00007f4adc27f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 683.463512][T14954] RAX: ffffffffffffffda RBX: 00007f4adb625fa0 RCX: 00007f4adb39e019 [ 683.463527][T14954] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 683.463540][T14954] RBP: 00007f4adc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 683.463553][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.463564][T14954] R13: 00007f4adb626038 R14: 00007f4adb625fa0 R15: 00007ffeeb1219a8 [ 683.463592][T14954] [ 683.699687][T14939] 0*4096kB = 8kB [ 683.703317][T14939] Node 1 Normal: 222*4kB (UME) 49*8kB (UME) 33*16kB (UME) 168*32kB (UME) 37*64kB (UE) 9*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3906256kB [ 683.721396][T14939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.761342][T14939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.771095][T14939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.780736][T14939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.790089][T14939] 61027 total pagecache pages [ 683.794787][T14939] 0 pages in swap cache [ 683.798960][T14939] Free swap = 124996kB [ 683.819585][T14939] Total swap = 124996kB [ 683.824423][T14939] 2097051 pages RAM [ 683.830589][T14939] 0 pages HighMem/MovableOnly [ 683.838665][T14939] 416955 pages reserved [ 683.845177][T14939] 0 pages cma reserved [ 684.089702][ T11] wlan1: Trigger new scan to find an IBSS to join [ 684.459355][T14978] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 684.479818][T14978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.497072][T14978] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 684.519838][T14978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.545445][T14978] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 684.557250][T14978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.024168][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.032690][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.089809][ T7354] wlan1: Trigger new scan to find an IBSS to join [ 689.034679][T15022] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 689.057874][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.069339][T15022] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 689.091992][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.110707][T15022] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 689.122360][T15022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.161542][ T1143] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 689.690073][T15035] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3049'. [ 689.717263][T15035] net_ratelimit: 164 callbacks suppressed [ 689.717282][T15035] netlink: del zone limit has 8 unknown bytes [ 693.223646][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 694.047029][T15073] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3059'. [ 694.074667][T15073] netlink: del zone limit has 8 unknown bytes [ 694.221524][T15079] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 694.247458][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.260569][T15079] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 694.272883][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.287778][T15079] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 694.302527][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.618604][T15087] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3063'. [ 694.649108][T15087] netlink: del zone limit has 8 unknown bytes [ 694.765260][T15089] netlink: 'syz.3.3064': attribute type 39 has an invalid length. [ 695.050059][ T11] wlan1: Trigger new scan to find an IBSS to join [ 696.457818][T15113] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 696.494600][T15113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.551503][T15113] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 696.639144][T15113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.669800][T15113] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 696.690163][T15113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.089560][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 698.529130][T15132] netlink: 'syz.0.3080': attribute type 39 has an invalid length. [ 699.059990][ T7353] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 699.126921][T15136] netlink: 'syz.2.3081': attribute type 21 has an invalid length. [ 699.138788][T15136] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.153843][T15136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.161429][T15136] IPv6: NLM_F_CREATE should be set when creating new route [ 699.168971][T15136] IPv6: NLM_F_CREATE should be set when creating new route [ 699.176434][T15136] IPv6: NLM_F_CREATE should be set when creating new route [ 699.437397][T15145] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 699.459058][T15145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.511141][T15145] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 699.528587][T15145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.552729][T15145] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 699.565856][T15145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.841669][T15170] netlink: 'syz.2.3093': attribute type 39 has an invalid length. [ 702.722945][T15192] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 702.750709][T15193] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3099'. [ 702.765622][T15192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.771120][T15193] netlink: del zone limit has 8 unknown bytes [ 702.790056][T15192] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 702.847874][T15192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.879951][T15192] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 702.910821][T15192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.468417][T15221] netlink: 'syz.1.3110': attribute type 2 has an invalid length. [ 705.492723][T15221] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.3110'. [ 705.626343][T15228] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 705.882605][T15230] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3115'. [ 706.025502][T15230] netlink: del zone limit has 8 unknown bytes [ 706.258946][T15237] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 706.280770][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.293601][T15237] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 706.306163][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.317287][T15237] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 706.329336][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.988625][T15262] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3123'. [ 707.007100][T15262] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3123'. [ 707.038786][T15261] netlink: 'syz.0.3125': attribute type 2 has an invalid length. [ 707.060364][T15261] netlink: 'syz.0.3125': attribute type 8 has an invalid length. [ 707.106139][T15261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3125'. [ 707.162602][T15264] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3123'. [ 707.207501][T15254] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3123'. [ 707.240387][T15262] netlink: 'syz.1.3123': attribute type 10 has an invalid length. [ 707.259730][T15262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3123'. [ 707.292457][T15262] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 707.344529][T15262] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.379759][T15262] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 708.676381][T15281] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3130'. [ 708.718436][T15281] netlink: del zone limit has 8 unknown bytes [ 709.141086][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 709.327369][T15287] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 709.350219][T15287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.363187][T15287] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 709.376804][T15287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.388361][T15287] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 709.401649][T15287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.696475][T15314] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3143'. [ 711.063232][T15325] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3147'. [ 711.179538][T15325] netlink: del zone limit has 8 unknown bytes [ 711.209087][T15337] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 711.250714][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.262292][T15337] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 711.273479][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.284783][T15337] batman_adv: The newly added mac address (0a:62:74:66:5f:74) already exists on: batadv_slave_0 [ 711.297058][T15337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.091849][ T7353] wlan1: Trigger new scan to find an IBSS to join [ 715.231612][ T7354] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 718.142504][T15390] netlink: 'syz.1.3172': attribute type 33 has an invalid length. [ 718.151032][T15390] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3172'. [ 721.839072][T15421] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.3181'. [ 721.941925][T15423] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3182'. [ 722.099279][T15423] team0: Port device team_slave_0 removed [ 722.122948][T15423] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 722.178810][T15428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3183'. [ 722.337333][T15436] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3186'. [ 722.347148][T15436] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 722.364072][T15436] openvswitch: netlink: Message has 1 unknown bytes. [ 722.870504][T15450] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3189'. [ 722.897090][T15450] netlink: del zone limit has 8 unknown bytes [ 724.597837][T15482] netlink: 'syz.2.3195': attribute type 1 has an invalid length. [ 724.635771][T15482] netlink: 'syz.2.3195': attribute type 4 has an invalid length. [ 724.646317][T15482] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3195'. [ 724.689073][T15485] netlink: 'syz.2.3195': attribute type 1 has an invalid length. [ 724.745398][T15485] netlink: 'syz.2.3195': attribute type 4 has an invalid length. [ 724.766212][T15485] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3195'. [ 725.822958][T15491] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3200'. [ 725.917640][T15491] netlink: del zone limit has 8 unknown bytes [ 726.089864][ T1143] wlan1: Trigger new scan to find an IBSS to join [ 728.540700][T15524] FAULT_INJECTION: forcing a failure. [ 728.540700][T15524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.585080][T15524] CPU: 0 PID: 15524 Comm: syz.3.3212 Not tainted syzkaller #0 [ 728.592605][T15524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 728.602685][T15524] Call Trace: [ 728.605961][T15524] [ 728.608886][T15524] dump_stack_lvl+0x18c/0x250 [ 728.613563][T15524] ? show_regs_print_info+0x20/0x20 [ 728.618757][T15524] ? load_image+0x420/0x420 [ 728.623266][T15524] ? __might_fault+0xaa/0x120 [ 728.627941][T15524] ? __lock_acquire+0x7d80/0x7d80 [ 728.632962][T15524] should_fail_ex+0x394/0x4c0 [ 728.637645][T15524] _copy_from_iter+0x1cd/0x1290 [ 728.642504][T15524] ? __might_fault+0xaa/0x120 [ 728.647181][T15524] ? copyout_mc+0x70/0x70 [ 728.651510][T15524] ? copyout_mc+0x70/0x70 [ 728.655861][T15524] ? __virt_addr_valid+0x10c/0x380 [ 728.660975][T15524] ? page_copy_sane+0x16a/0x270 [ 728.665821][T15524] copy_page_from_iter+0x7b/0x100 [ 728.670847][T15524] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 728.676659][T15524] unix_stream_sendmsg+0x562/0xbf0 [ 728.681772][T15524] ? unix_show_fdinfo+0x280/0x280 [ 728.686786][T15524] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 728.693202][T15524] ? apparmor_socket_sendmsg+0x8e/0x330 [ 728.698742][T15524] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 728.704024][T15524] ? security_socket_sendmsg+0x80/0xa0 [ 728.709472][T15524] ? unix_show_fdinfo+0x280/0x280 [ 728.714490][T15524] ____sys_sendmsg+0x61b/0x980 [ 728.719255][T15524] ? __asan_memset+0x22/0x40 [ 728.723844][T15524] ? __sys_sendmsg_sock+0x30/0x30 [ 728.728858][T15524] ? __import_iovec+0x5f2/0x850 [ 728.733740][T15524] ? import_iovec+0x73/0xa0 [ 728.738243][T15524] ___sys_sendmsg+0x2a6/0x360 [ 728.742921][T15524] ? __sys_sendmsg+0x2b0/0x2b0 [ 728.747689][T15524] ? trace_call_bpf+0xc3/0x6c0 [ 728.752458][T15524] __se_sys_sendmsg+0x1d0/0x2c0 [ 728.757299][T15524] ? perf_trace_preemptirq_template+0x269/0x330 [ 728.763562][T15524] ? __x64_sys_sendmsg+0x80/0x80 [ 728.768507][T15524] ? lockdep_hardirqs_on+0x98/0x150 [ 728.773708][T15524] do_syscall_64+0x55/0xb0 [ 728.778138][T15524] ? clear_bhb_loop+0x40/0x90 [ 728.782808][T15524] ? clear_bhb_loop+0x40/0x90 [ 728.787476][T15524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 728.793361][T15524] RIP: 0033:0x7fe031f9e019 [ 728.797768][T15524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.817366][T15524] RSP: 002b:00007fe032e44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.825777][T15524] RAX: ffffffffffffffda RBX: 00007fe032225fa0 RCX: 00007fe031f9e019 [ 728.833768][T15524] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006 [ 728.841731][T15524] RBP: 00007fe032e44090 R08: 0000000000000000 R09: 0000000000000000 [ 728.849715][T15524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.857676][T15524] R13: 00007fe032226038 R14: 00007fe032225fa0 R15: 00007ffc1c75c978 [ 728.865669][T15524] [ 729.178390][T15539] netlink: 'syz.0.3218': attribute type 5 has an invalid length. [ 729.189627][T15539] FAULT_INJECTION: forcing a failure. [ 729.189627][T15539] name failslab, interval 1, probability 0, space 0, times 0 [ 729.209587][T15539] CPU: 1 PID: 15539 Comm: syz.0.3218 Not tainted syzkaller #0 [ 729.217090][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 729.227168][T15539] Call Trace: [ 729.230470][T15539] [ 729.233419][T15539] dump_stack_lvl+0x18c/0x250 [ 729.238124][T15539] ? show_regs_print_info+0x20/0x20 [ 729.243349][T15539] ? load_image+0x420/0x420 [ 729.247875][T15539] ? __might_sleep+0xe0/0xe0 [ 729.252472][T15539] ? __lock_acquire+0x7d80/0x7d80 [ 729.257527][T15539] should_fail_ex+0x394/0x4c0 [ 729.262235][T15539] should_failslab+0x9/0x20 [ 729.266763][T15539] slab_pre_alloc_hook+0x59/0x300 [ 729.271814][T15539] ? lockdep_hardirqs_on+0x98/0x150 [ 729.277038][T15539] kmem_cache_alloc_node+0x5e/0x310 [ 729.282269][T15539] ? __alloc_skb+0x103/0x2c0 [ 729.286978][T15539] __alloc_skb+0x103/0x2c0 [ 729.291418][T15539] netlink_ack+0x377/0x1160 [ 729.295955][T15539] ? netlink_dump+0xec0/0xec0 [ 729.300646][T15539] ? ref_tracker_free+0x686/0x830 [ 729.305708][T15539] netlink_rcv_skb+0x2b3/0x4c0 [ 729.310493][T15539] ? rtnetlink_bind+0x80/0x80 [ 729.315195][T15539] ? netlink_ack+0x1160/0x1160 [ 729.319989][T15539] ? __lock_acquire+0x7d80/0x7d80 [ 729.325040][T15539] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.330262][T15539] netlink_unicast+0x7b1/0x930 [ 729.335062][T15539] netlink_sendmsg+0x8d0/0xbf0 [ 729.339852][T15539] ? netlink_getsockopt+0x590/0x590 [ 729.345069][T15539] ? apparmor_socket_sendmsg+0x8e/0x330 [ 729.350634][T15539] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 729.355940][T15539] ? security_socket_sendmsg+0x80/0xa0 [ 729.361431][T15539] ? netlink_getsockopt+0x590/0x590 [ 729.366656][T15539] ____sys_sendmsg+0x61b/0x980 [ 729.371453][T15539] ? __asan_memset+0x22/0x40 [ 729.376065][T15539] ? __sys_sendmsg_sock+0x30/0x30 [ 729.381105][T15539] ? __import_iovec+0x5f2/0x850 [ 729.385990][T15539] ? import_iovec+0x73/0xa0 [ 729.390517][T15539] ___sys_sendmsg+0x2a6/0x360 [ 729.395212][T15539] ? get_pid_task+0x20/0x1e0 [ 729.399826][T15539] ? __sys_sendmsg+0x2b0/0x2b0 [ 729.404632][T15539] ? __lock_acquire+0x7d80/0x7d80 [ 729.409709][T15539] __se_sys_sendmsg+0x1d0/0x2c0 [ 729.414587][T15539] ? __x64_sys_sendmsg+0x80/0x80 [ 729.419603][T15539] ? lockdep_hardirqs_on+0x98/0x150 [ 729.424831][T15539] do_syscall_64+0x55/0xb0 [ 729.429270][T15539] ? clear_bhb_loop+0x40/0x90 [ 729.433967][T15539] ? clear_bhb_loop+0x40/0x90 [ 729.438670][T15539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.444590][T15539] RIP: 0033:0x7f4adb39e019 [ 729.449030][T15539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.468713][T15539] RSP: 002b:00007f4adc27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.477189][T15539] RAX: ffffffffffffffda RBX: 00007f4adb625fa0 RCX: 00007f4adb39e019 [ 729.485184][T15539] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 729.493174][T15539] RBP: 00007f4adc27f090 R08: 0000000000000000 R09: 0000000000000000 [ 729.501159][T15539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.509149][T15539] R13: 00007f4adb626038 R14: 00007f4adb625fa0 R15: 00007ffeeb1219a8 [ 729.517157][T15539] [ 731.050272][ T1151] wlan1: Trigger new scan to find an IBSS to join [ 731.459234][T15568] FAULT_INJECTION: forcing a failure. [ 731.459234][T15568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.512904][T15568] CPU: 1 PID: 15568 Comm: syz.3.3230 Not tainted syzkaller #0 [ 731.520474][T15568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 731.530557][T15568] Call Trace: [ 731.533851][T15568] [ 731.536787][T15568] dump_stack_lvl+0x18c/0x250 [ 731.541493][T15568] ? show_regs_print_info+0x20/0x20 [ 731.546712][T15568] ? load_image+0x420/0x420 [ 731.551232][T15568] ? __might_fault+0xaa/0x120 [ 731.555923][T15568] ? __lock_acquire+0x7d80/0x7d80 [ 731.560961][T15568] ? __virt_addr_valid+0x10c/0x380 [ 731.566093][T15568] should_fail_ex+0x394/0x4c0 [ 731.570800][T15568] _copy_from_user+0x2f/0xe0 [ 731.575410][T15568] btf_new_fd+0x366/0x9e0 [ 731.579768][T15568] ? bpf_btf_show_fdinfo+0x80/0x80 [ 731.584900][T15568] ? capable+0x88/0xe0 [ 731.589079][T15568] __sys_bpf+0x670/0x890 [ 731.593342][T15568] ? bpf_link_show_fdinfo+0x390/0x390 [ 731.598812][T15568] ? lock_chain_count+0x20/0x20 [ 731.603693][T15568] __x64_sys_bpf+0x7c/0x90 [ 731.608123][T15568] do_syscall_64+0x55/0xb0 [ 731.612552][T15568] ? clear_bhb_loop+0x40/0x90 [ 731.617244][T15568] ? clear_bhb_loop+0x40/0x90 [ 731.621939][T15568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.627854][T15568] RIP: 0033:0x7fe031f9e019 [ 731.632282][T15568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.651907][T15568] RSP: 002b:00007fe032e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.660338][T15568] RAX: ffffffffffffffda RBX: 00007fe032225fa0 RCX: 00007fe031f9e019 [ 731.668326][T15568] RDX: 0000000000000020 RSI: 0000200000000d80 RDI: 0000000000000012 [ 731.676315][T15568] RBP: 00007fe032e44090 R08: 0000000000000000 R09: 0000000000000000 [ 731.684295][T15568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.692300][T15568] R13: 00007fe032226038 R14: 00007fe032225fa0 R15: 00007ffc1c75c978 [ 731.700298][T15568] [ 732.826082][ T1151] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 732.880838][ T11] ------------[ cut here ]------------ [ 732.886747][ T11] WARNING: CPU: 1 PID: 11 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 732.896722][ T11] Modules linked in: [ 732.900679][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 732.908075][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.918204][ T11] Workqueue: cfg80211 cfg80211_event_work [ 732.924524][ T11] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 732.930755][ T11] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 39 9a f7 0f 0b eb bf e8 c5 39 9a f7 <0f> 0b eb b6 e8 bc 39 9a f7 0f 0b e9 e2 fd ff ff e8 b0 39 9a f7 0f [ 732.950706][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 732.956792][ T11] RAX: ffffffff89ed37bb RBX: dffffc0000000000 RCX: ffff88801aa4bc00 [ 732.964833][ T11] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 732.972943][ T11] RBP: ffffc90000107af8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 732.981083][ T11] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff8880682acd10 [ 732.989084][ T11] R13: ffff88807d11b618 R14: 1ffff92000020f4c R15: 000000000000001f [ 732.997447][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 733.006748][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.013803][ T11] CR2: 0000001b2f20cff8 CR3: 000000007f7af000 CR4: 00000000003506e0 [ 733.021908][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 733.030448][ T11] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 733.038455][ T11] Call Trace: [ 733.041802][ T11] [ 733.044760][ T11] ? trace_rdev_return_void+0x1c0/0x1c0 [ 733.050461][ T11] cfg80211_process_wdev_events+0x396/0x500 [ 733.056482][ T11] cfg80211_process_rdev_events+0xa1/0x110 [ 733.062375][ T11] cfg80211_event_work+0x2f/0x40 [ 733.067346][ T11] ? process_scheduled_works+0x975/0x1600 [ 733.073147][ T11] process_scheduled_works+0xa60/0x1600 [ 733.078762][ T11] ? worker_attach_to_pool+0x370/0x370 [ 733.084329][ T11] ? assign_work+0x3cc/0x5d0 [ 733.088957][ T11] worker_thread+0xa5e/0xfe0 [ 733.093639][ T11] kthread+0x2fa/0x390 [ 733.097732][ T11] ? pr_cont_work+0x550/0x550 [ 733.102516][ T11] ? kthread_blkcg+0xd0/0xd0 [ 733.107132][ T11] ret_from_fork+0x48/0x80 [ 733.111641][ T11] ? kthread_blkcg+0xd0/0xd0 [ 733.116261][ T11] ret_from_fork_asm+0x11/0x20 [ 733.121164][ T11] [ 733.124217][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 733.131548][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 733.138942][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.149013][ T11] Workqueue: cfg80211 cfg80211_event_work [ 733.154765][ T11] Call Trace: [ 733.158061][ T11] [ 733.161002][ T11] dump_stack_lvl+0x18c/0x250 [ 733.165704][ T11] ? show_regs_print_info+0x20/0x20 [ 733.170929][ T11] ? load_image+0x420/0x420 [ 733.175470][ T11] panic+0x2ca/0x720 [ 733.179397][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 733.184025][ T11] ? ret_from_fork_asm+0x11/0x20 [ 733.188984][ T11] __warn+0x2e0/0x470 [ 733.192971][ T11] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 733.198514][ T11] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 733.204052][ T11] report_bug+0x2be/0x4f0 [ 733.208445][ T11] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 733.213983][ T11] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 733.219521][ T11] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 733.225060][ T11] handle_bug+0xcf/0x120 [ 733.229297][ T11] exc_invalid_op+0x1a/0x50 [ 733.233795][ T11] asm_exc_invalid_op+0x1a/0x20 [ 733.238636][ T11] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 733.244788][ T11] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 39 9a f7 0f 0b eb bf e8 c5 39 9a f7 <0f> 0b eb b6 e8 bc 39 9a f7 0f 0b e9 e2 fd ff ff e8 b0 39 9a f7 0f [ 733.264387][ T11] RSP: 0018:ffffc90000107a40 EFLAGS: 00010293 [ 733.270460][ T11] RAX: ffffffff89ed37bb RBX: dffffc0000000000 RCX: ffff88801aa4bc00 [ 733.278442][ T11] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 733.286413][ T11] RBP: ffffc90000107af8 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 733.294381][ T11] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: ffff8880682acd10 [ 733.302348][ T11] R13: ffff88807d11b618 R14: 1ffff92000020f4c R15: 000000000000001f [ 733.310496][ T11] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 733.316051][ T11] ? trace_rdev_return_void+0x1c0/0x1c0 [ 733.321597][ T11] cfg80211_process_wdev_events+0x396/0x500 [ 733.327493][ T11] cfg80211_process_rdev_events+0xa1/0x110 [ 733.333298][ T11] cfg80211_event_work+0x2f/0x40 [ 733.338228][ T11] ? process_scheduled_works+0x975/0x1600 [ 733.343943][ T11] process_scheduled_works+0xa60/0x1600 [ 733.349504][ T11] ? worker_attach_to_pool+0x370/0x370 [ 733.354960][ T11] ? assign_work+0x3cc/0x5d0 [ 733.359547][ T11] worker_thread+0xa5e/0xfe0 [ 733.364150][ T11] kthread+0x2fa/0x390 [ 733.368225][ T11] ? pr_cont_work+0x550/0x550 [ 733.372898][ T11] ? kthread_blkcg+0xd0/0xd0 [ 733.377479][ T11] ret_from_fork+0x48/0x80 [ 733.381888][ T11] ? kthread_blkcg+0xd0/0xd0 [ 733.386471][ T11] ret_from_fork_asm+0x11/0x20 [ 733.391272][ T11] [ 733.394524][ T11] Kernel Offset: disabled [ 733.398900][ T11] Rebooting in 86400 seconds..