last executing test programs: 1m41.349146082s ago: executing program 0 (id=3389): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffff0d5}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_config_ext={0xe, 0x3400000000000}, 0x100, 0x4, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0x6, r1, 0x3) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfff5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8531}, 0x0, 0x2, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x9, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1m40.961662229s ago: executing program 0 (id=3390): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891b, 0x0) (fail_nth: 3) 1m40.667341729s ago: executing program 0 (id=3394): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80110, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x5d}, 0x0, 0xca, 0x0, 0x4, 0x3, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0xfc01, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1804000000000000000000000000000085100000060000001800000000000000000000000000000065000000000000001800000000000020000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b30, &(0x7f0000000240)={'wlan1\x00', @multicast}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8a9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a06000000ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m40.103914917s ago: executing program 0 (id=3397): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e0000003b000511d25a80698c6394090124fc602f6e35401000018025581d00d1bd000000000001000000000a00", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x3, 0x2, 0x1, 0x5, 0x0, 0x2d9e, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x9d33eb28b77135d0, 0x0, 0x6, 0x8, 0x7ed1, 0x8, 0x3ac, 0x0, 0x1, 0x0, 0xb}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (async) close(r6) (async) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0xbf, 0x7, 0xb6, 0x0, 0x0, 0xd107, 0x31838, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x20, 0x7f, 0x6, 0x4, 0x100000000, 0x3, 0x1ce, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x5, r3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000000000000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113, 0x0, 0x40}, 0x94) (async) close(r1) (async) close(r0) 1m39.800552728s ago: executing program 0 (id=3400): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffff0d5}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_config_ext={0xe, 0x3400000000000}, 0x100, 0x4, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0x6, r1, 0x3) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfff5) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8531}, 0x0, 0x2, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x9, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1m39.539640846s ago: executing program 0 (id=3404): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40000100, &(0x7f00000001c0)="fad2643726305d", 0x7, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="59e65702208bef1f447d31a178cd4f3273d3e73d72142b716b91af949bb8126d553e5be42b9c441c02efb8c652fe0295601d29a4db63f6900672eac9ff86ce73deff4397410a6085ba4cb80c991e375e5bd61c7750f584a8ac0b4cf0f6ee66a158b5029c11d04edce10bacf5a245e522ba976732103a94") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 1m24.236919897s ago: executing program 32 (id=3404): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40000100, &(0x7f00000001c0)="fad2643726305d", 0x7, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="59e65702208bef1f447d31a178cd4f3273d3e73d72142b716b91af949bb8126d553e5be42b9c441c02efb8c652fe0295601d29a4db63f6900672eac9ff86ce73deff4397410a6085ba4cb80c991e375e5bd61c7750f584a8ac0b4cf0f6ee66a158b5029c11d04edce10bacf5a245e522ba976732103a94") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0xffffffffffffff8f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 3.268110488s ago: executing program 5 (id=4241): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfff, 0x0, 0xfffffff8}, 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 3.08828687s ago: executing program 5 (id=4246): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) 3.016763264s ago: executing program 3 (id=4248): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x81, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r3) 2.928368171s ago: executing program 3 (id=4252): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x4000, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x304a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 2.684217807s ago: executing program 3 (id=4256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 2.684038627s ago: executing program 2 (id=4257): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, &(0x7f0000000080)) 2.660839419s ago: executing program 2 (id=4258): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.472141482s ago: executing program 2 (id=4261): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000100), 0x90) 2.458390263s ago: executing program 3 (id=4263): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0xfffffffd}, {0x10000002, 0x10}]}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) 2.442273244s ago: executing program 4 (id=4264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0x9, 0x2, 0x6, 0x4e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xae66, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xc, 0x7ff, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r0, r0, r0], &(0x7f00000008c0)=[{0x1, 0x1, 0x8, 0x5}], 0x10, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x7, 0x80000000, 0x1, 0x2100, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x80000001, 0xa3, &(0x7f0000000540)=""/163, 0x41000, 0x74, '\x00', 0x0, 0x19, r1, 0x8, &(0x7f0000000640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x7, 0xe6b9, 0xe18}, 0x10, 0x5112, r2, 0x3, &(0x7f0000000a40)=[r0, r0, r0, r3, r0, r0, r0], &(0x7f0000000a80)=[{0x3, 0x4, 0x3, 0x1}, {0x1, 0x3, 0x6, 0x4}, {0x3, 0x1, 0x5, 0x6}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef18e43b, 0x0, @perf_config_ext={0x2, 0x5}, 0x200, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 2.380276838s ago: executing program 2 (id=4265): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.35974825s ago: executing program 4 (id=4266): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x10002, 0x1943}, 0x3a, 0x0, 0x80000001, 0x8, 0x7fff, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000018c0)={@cgroup=r0, r0, 0x2f, 0x2020, 0x4}, 0x20) 2.285226835s ago: executing program 1 (id=4267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x500, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0xff, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.228213558s ago: executing program 4 (id=4268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 2.21218628s ago: executing program 1 (id=4269): close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2.21105211s ago: executing program 5 (id=4270): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 414.845372ms ago: executing program 5 (id=4271): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a001540", 0x20}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x8, 0x1}, 0x1000, 0x6, 0xffffff7e, 0x8, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0091"], 0xfe33) 377.587834ms ago: executing program 1 (id=4272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 376.613554ms ago: executing program 3 (id=4273): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 308.386449ms ago: executing program 2 (id=4274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xff}, 0x828, 0x0, 0x0, 0x0, 0x10000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000300)=r0}, 0x20) 300.0985ms ago: executing program 4 (id=4275): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r5, r3, 0x4, r0}, 0x10) 289.26681ms ago: executing program 5 (id=4276): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0x9, 0x2, 0x6, 0x4e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xae66, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xc, 0x7ff, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r0, r0, r0], &(0x7f00000008c0)=[{0x1, 0x1, 0x8, 0x5}], 0x10, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xc, 0x7, 0x80000000, 0x1, 0x2100, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='syzkaller\x00', 0x80000001, 0xa3, &(0x7f0000000540)=""/163, 0x41000, 0x74, '\x00', 0x0, 0x19, r1, 0x8, &(0x7f0000000640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x7, 0xe6b9, 0xe18}, 0x10, 0x5112, r2, 0x3, &(0x7f0000000a40)=[r0, r0, r0, r3, r0, r0, r0], &(0x7f0000000a80)=[{0x3, 0x4, 0x3, 0x1}, {0x1, 0x3, 0x6, 0x4}, {0x3, 0x1, 0x5, 0x6}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef18e43b, 0x0, @perf_config_ext={0x2, 0x5}, 0x200, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 204.320996ms ago: executing program 3 (id=4277): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)="b8", 0x1}], 0x1}, 0x4004) 204.203066ms ago: executing program 1 (id=4278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000c900000095"], &(0x7f0000000040)='GPL\x00', 0xc}, 0x94) 204.042726ms ago: executing program 2 (id=4279): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x10008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 152.8231ms ago: executing program 4 (id=4280): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0xd}, 0x20) 128.750991ms ago: executing program 1 (id=4281): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) unlink(&(0x7f0000000040)='./file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 119.995852ms ago: executing program 5 (id=4282): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x300080c5) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x7, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000201a7c440000000000000c0000000c00"], 0x0, 0x2f, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xd}, 0x11eea, 0x4, 0x0, 0x5, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x40000020}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) 18.553118ms ago: executing program 4 (id=4283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0xe92}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 0s ago: executing program 1 (id=4284): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080003000100010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e7e67a89cf0f0c5700e686a6d0001000000e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) kernel console output (not intermixed with test programs): tlink: 13435 bytes leftover after parsing attributes in process `syz.1.3224'. [ 397.953388][T13185] netlink: 'syz.2.3226': attribute type 39 has an invalid length. [ 397.992787][T13179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3223'. [ 398.023152][T13174] chnl_net:caif_netlink_parms(): no params data found [ 398.282638][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.301454][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.339254][T13174] device bridge_slave_0 entered promiscuous mode [ 398.356012][T13194] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3230'. [ 398.365081][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.444528][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.453146][T13174] device bridge_slave_1 entered promiscuous mode [ 398.482653][ T8970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.605659][ T8970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.817378][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.841353][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.854159][ T4281] wlan1: Trigger new scan to find an IBSS to join [ 398.862127][ T4214] wlan1: Trigger new scan to find an IBSS to join [ 398.912777][ T8970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.985894][T13174] team0: Port device team_slave_0 added [ 399.019614][ T8970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.058769][T13174] team0: Port device team_slave_1 added [ 399.079830][T13213] device macsec0 entered promiscuous mode [ 399.089748][T13220] IPv6: Can't replace route, no match found [ 399.127570][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.145381][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.192139][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.233085][T13221] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.258042][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.271989][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.312841][T13228] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3238'. [ 399.344455][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.508061][T13234] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3241'. [ 399.567368][T13174] device hsr_slave_0 entered promiscuous mode [ 399.583721][ T8171] Bluetooth: hci2: command 0x0409 tx timeout [ 399.602135][T13174] device hsr_slave_1 entered promiscuous mode [ 399.631958][T13174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.650967][T13174] Cannot create hsr debugfs directory [ 399.663763][T13234] netlink: 'syz.4.3241': attribute type 3 has an invalid length. [ 399.703430][T13234] netlink: 12360 bytes leftover after parsing attributes in process `syz.4.3241'. [ 399.789358][T13238] netlink: 'syz.0.3245': attribute type 9 has an invalid length. [ 399.952632][T13249] netlink: 'syz.1.3248': attribute type 27 has an invalid length. [ 399.993128][T13249] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 400.096334][T13251] netlink: 'syz.1.3248': attribute type 21 has an invalid length. [ 400.118701][T13251] netlink: 'syz.1.3248': attribute type 6 has an invalid length. [ 400.339004][T13241] netlink: 'syz.0.3245': attribute type 9 has an invalid length. [ 400.663127][T13262] IPv6: Can't replace route, no match found [ 400.696157][T13264] device macsec0 entered promiscuous mode [ 400.721427][T13266] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 400.959823][ T8970] device gretap0 left promiscuous mode [ 401.013369][ T8970] Ÿë: port 1(gretap0) entered disabled state [ 401.516238][T13288] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 401.594259][T13174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.663628][ T8171] Bluetooth: hci2: command 0x041b tx timeout [ 401.893947][ T4281] wlan1: Trigger new scan to find an IBSS to join [ 401.978305][T13174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.010575][T13309] netlink: 'syz.2.3266': attribute type 9 has an invalid length. [ 402.040516][T13309] __nla_validate_parse: 4 callbacks suppressed [ 402.040536][T13309] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3266'. [ 402.057344][T13174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.160874][T13174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.681930][T13330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3271'. [ 402.810058][ T8970] device hsr_slave_1 left promiscuous mode [ 403.450980][ T8970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.476063][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.499800][ T8970] device bridge_slave_1 left promiscuous mode [ 403.514837][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.545690][T13357] FAULT_INJECTION: forcing a failure. [ 403.545690][T13357] name failslab, interval 1, probability 0, space 0, times 0 [ 403.561183][ T8970] device bridge_slave_0 left promiscuous mode [ 403.581388][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.591665][T13357] CPU: 0 PID: 13357 Comm: syz.2.3276 Not tainted syzkaller #0 [ 403.599281][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 403.609440][T13357] Call Trace: [ 403.612738][T13357] [ 403.616196][T13357] dump_stack_lvl+0x188/0x250 [ 403.621543][T13357] ? show_regs_print_info+0x20/0x20 [ 403.626863][T13357] ? load_image+0x400/0x400 [ 403.631361][T13357] ? __might_sleep+0xf0/0xf0 [ 403.636220][T13357] ? __lock_acquire+0x7d10/0x7d10 [ 403.641642][T13357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 403.648203][T13357] should_fail+0x38c/0x4c0 [ 403.653152][T13357] should_failslab+0x5/0x20 [ 403.657939][T13357] slab_pre_alloc_hook+0x51/0xc0 [ 403.663987][T13357] __kmalloc+0x6b/0x330 [ 403.668857][T13357] ? bpf_test_init+0xf8/0x1b0 [ 403.673992][T13357] ? __lock_acquire+0x7d10/0x7d10 [ 403.679120][T13357] bpf_test_init+0xf8/0x1b0 [ 403.683711][T13357] bpf_prog_test_run_skb+0x181/0x1180 [ 403.689349][T13357] ? __fget_files+0x40f/0x480 [ 403.694125][T13357] ? cpu_online+0x60/0x60 [ 403.698704][T13357] bpf_prog_test_run+0x31e/0x390 [ 403.703645][T13357] __sys_bpf+0x5a5/0x6f0 [ 403.707891][T13357] ? bpf_link_show_fdinfo+0x380/0x380 [ 403.713373][T13357] __x64_sys_bpf+0x78/0x90 [ 403.717982][T13357] do_syscall_64+0x4c/0xa0 [ 403.722926][T13357] ? clear_bhb_loop+0x30/0x80 [ 403.727938][T13357] ? clear_bhb_loop+0x30/0x80 [ 403.733080][T13357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.739258][T13357] RIP: 0033:0x7ff22e131819 [ 403.743877][T13357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.764270][T13357] RSP: 002b:00007ff22c38b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.773177][T13357] RAX: ffffffffffffffda RBX: 00007ff22e3aafa0 RCX: 00007ff22e131819 [ 403.781774][T13357] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 403.790878][T13357] RBP: 00007ff22c38b090 R08: 0000000000000000 R09: 0000000000000000 [ 403.799228][T13357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.808075][T13357] R13: 00007ff22e3ab038 R14: 00007ff22e3aafa0 R15: 00007ffec52dc388 [ 403.817287][T13357] [ 403.821213][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 403.865976][ T8970] device veth0_macvtap left promiscuous mode [ 403.895028][ T150] wlan1: Trigger new scan to find an IBSS to join [ 403.963011][T13365] netlink: 'syz.2.3279': attribute type 3 has an invalid length. [ 403.979608][T13365] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.3279'. [ 404.119578][ T8970] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 404.186597][ T8970] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 404.203213][ T8970] team0 (unregistering): Port device team_slave_1 removed [ 404.229336][ T8970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.245756][ T8970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.298527][ T8970] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 404.333158][ T8970] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 404.343430][ T8970] bond0 (unregistering): Released all slaves [ 404.455718][T13174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.512823][T13374] netlink: 'syz.4.3283': attribute type 2 has an invalid length. [ 404.516771][T13174] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.547540][T13374] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3283'. [ 404.583769][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.597314][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.607595][T13375] netlink: 'syz.0.3282': attribute type 3 has an invalid length. [ 404.636760][T13374] netlink: 'syz.4.3283': attribute type 10 has an invalid length. [ 404.659827][T13375] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.3282'. [ 404.681230][T13381] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3284'. [ 404.695038][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.711245][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.744607][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.752180][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.807143][T13386] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3285'. [ 404.834319][T13386] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.3285'. [ 404.882867][T13386] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3285'. [ 404.909822][T11808] wlan1: Creating new IBSS network, BSSID c2:35:f8:37:f8:4c [ 404.974569][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.995827][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.051352][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.106660][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.114269][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.140179][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.182769][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.216275][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.244241][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.288641][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.315503][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.336905][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.375410][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.445372][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.477069][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.512146][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.596182][T13396] device syzkaller0 entered promiscuous mode [ 405.893867][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 405.895986][ T4214] wlan1: Trigger new scan to find an IBSS to join [ 405.925142][T13174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.355039][T13419] netlink: 'syz.4.3295': attribute type 3 has an invalid length. [ 406.372574][T13423] netlink: 'syz.2.3296': attribute type 3 has an invalid length. [ 406.374176][T13419] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.3295'. [ 406.452472][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.473899][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.494725][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.594918][T13432] netlink: 'syz.2.3298': attribute type 27 has an invalid length. [ 406.605573][T13432] C: renamed from team_slave_0 [ 406.642747][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.663368][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.746947][T13437] netlink: 'syz.2.3298': attribute type 21 has an invalid length. [ 406.785159][T13437] netlink: 'syz.2.3298': attribute type 6 has an invalid length. [ 406.888504][T13174] device veth0_vlan entered promiscuous mode [ 406.904028][ T150] wlan1: Creating new IBSS network, BSSID 6e:70:28:f6:a0:cf [ 406.951914][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.994285][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 407.023413][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 407.032480][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 407.084719][T13446] __nla_validate_parse: 3 callbacks suppressed [ 407.084734][T13446] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3301'. [ 407.147913][T13446] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3301'. [ 407.197052][T13446] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3301'. [ 407.238199][T13174] device veth1_vlan entered promiscuous mode [ 407.287292][T13447] netlink: 'syz.4.3302': attribute type 9 has an invalid length. [ 407.331957][T13447] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.3302'. [ 407.419590][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 407.444489][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.472001][T13174] device veth0_macvtap entered promiscuous mode [ 407.526481][T13174] device veth1_macvtap entered promiscuous mode [ 407.632815][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.695561][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.733157][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.776752][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.816550][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.881429][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.948416][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.005176][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.023556][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.057936][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.092204][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.127963][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.199258][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.232025][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.352923][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 408.362126][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 408.383294][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 408.416855][T13480] netlink: 'syz.4.3313': attribute type 9 has an invalid length. [ 408.437868][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.458888][T13480] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3313'. [ 408.486425][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.528543][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.557113][T13174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.576890][T13482] netlink: 'syz.1.3311': attribute type 3 has an invalid length. [ 408.589785][T13174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.602426][T13482] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.3311'. [ 408.639475][T13174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.658711][T13174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.754001][T13483] netlink: 'syz.4.3313': attribute type 9 has an invalid length. [ 408.812968][T13483] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3313'. [ 408.993409][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.008473][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.057435][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 409.089404][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.139032][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.149911][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 409.404738][T13510] IPv6: Can't replace route, no match found [ 409.461769][T13510] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 409.528985][T13515] netlink: 'syz.4.3324': attribute type 3 has an invalid length. [ 409.634461][T13515] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3324'. [ 411.895094][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 411.973644][ T4234] Bluetooth: hci4: command 0x0409 tx timeout [ 412.747982][T13540] Q'Y]cÊRݘOC‰ÿ: renamed from lo [ 412.916422][T13525] chnl_net:caif_netlink_parms(): no params data found [ 413.089787][T13553] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3334'. [ 413.221168][T13525] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.228784][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.255886][T13525] device bridge_slave_0 entered promiscuous mode [ 413.268674][T13525] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.291600][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.309495][T13525] device bridge_slave_1 entered promiscuous mode [ 413.324284][T13560] IPv6: Can't replace route, no match found [ 413.347250][T13560] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.448858][T13525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.503378][T13525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.571453][T13525] team0: Port device team_slave_0 added [ 413.602973][T13572] validate_nla: 1 callbacks suppressed [ 413.602989][T13572] netlink: 'syz.1.3341': attribute type 3 has an invalid length. [ 413.605258][T13525] team0: Port device team_slave_1 added [ 413.625698][T13572] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3341'. [ 413.705714][T13576] device syzkaller0 entered promiscuous mode [ 413.721618][T13525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.735227][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.774329][T13525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.869105][T13525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.876830][T13525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.916119][T13525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.930213][T13581] Q'Y]cÊRݘOC‰ÿ: renamed from lo [ 414.032891][T13525] device hsr_slave_0 entered promiscuous mode [ 414.053830][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 414.061682][T13525] device hsr_slave_1 entered promiscuous mode [ 414.076979][T13525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.088272][T13525] Cannot create hsr debugfs directory [ 414.144613][T13589] netlink: 'syz.0.3346': attribute type 3 has an invalid length. [ 414.160029][T13589] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.3346'. [ 414.311350][T13597] IPv6: Can't replace route, no match found [ 414.334692][T13597] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 414.399256][T13601] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3352'. [ 414.408790][T13603] FAULT_INJECTION: forcing a failure. [ 414.408790][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 414.424908][T13603] CPU: 1 PID: 13603 Comm: syz.1.3351 Not tainted syzkaller #0 [ 414.432495][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.443467][T13603] Call Trace: [ 414.446832][T13603] [ 414.449842][T13603] dump_stack_lvl+0x188/0x250 [ 414.455890][T13603] ? show_regs_print_info+0x20/0x20 [ 414.461359][T13603] ? load_image+0x400/0x400 [ 414.466379][T13603] ? __might_sleep+0xf0/0xf0 [ 414.471338][T13603] ? __lock_acquire+0x7d10/0x7d10 [ 414.477098][T13603] should_fail+0x38c/0x4c0 [ 414.481907][T13603] should_failslab+0x5/0x20 [ 414.486606][T13603] slab_pre_alloc_hook+0x51/0xc0 [ 414.491548][T13603] kmem_cache_alloc_node_trace+0x4a/0x300 [ 414.497344][T13603] ? __get_vm_area_node+0x119/0x2d0 [ 414.502669][T13603] __get_vm_area_node+0x119/0x2d0 [ 414.507873][T13603] __vmalloc_node_range+0xef/0x8b0 [ 414.513171][T13603] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 414.519480][T13603] ? end_current_label_crit_section+0x170/0x170 [ 414.526511][T13603] ? __lock_acquire+0x7d10/0x7d10 [ 414.531554][T13603] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 414.537729][T13603] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 414.543903][T13603] __vmalloc+0x76/0x80 [ 414.548943][T13603] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 414.554859][T13603] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 414.560835][T13603] bpf_prog_alloc+0x1a/0x1e0 [ 414.565676][T13603] bpf_prog_load+0x7c6/0x1510 [ 414.570722][T13603] ? map_freeze+0x350/0x350 [ 414.575446][T13603] ? __might_fault+0xb7/0x110 [ 414.580341][T13603] ? __might_fault+0xb3/0x110 [ 414.585637][T13603] ? bpf_lsm_bpf+0x5/0x10 [ 414.590256][T13603] ? security_bpf+0x7a/0xa0 [ 414.594846][T13603] __sys_bpf+0x532/0x6f0 [ 414.599292][T13603] ? bpf_link_show_fdinfo+0x380/0x380 [ 414.604794][T13603] ? vtime_user_exit+0x2c8/0x3e0 [ 414.610227][T13603] __x64_sys_bpf+0x78/0x90 [ 414.614746][T13603] do_syscall_64+0x4c/0xa0 [ 414.619251][T13603] ? clear_bhb_loop+0x30/0x80 [ 414.624736][T13603] ? clear_bhb_loop+0x30/0x80 [ 414.629642][T13603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.635675][T13603] RIP: 0033:0x7f81709ee819 [ 414.640274][T13603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.660139][T13603] RSP: 002b:00007f816ec48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.669880][T13603] RAX: ffffffffffffffda RBX: 00007f8170c67fa0 RCX: 00007f81709ee819 [ 414.679300][T13603] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 414.688563][T13603] RBP: 00007f816ec48090 R08: 0000000000000000 R09: 0000000000000000 [ 414.696940][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.707160][T13603] R13: 00007f8170c68038 R14: 00007f8170c67fa0 R15: 00007ffe2175a8e8 [ 414.716189][T13603] [ 414.773534][T13601] netlink: 22796 bytes leftover after parsing attributes in process `syz.0.3352'. [ 414.814189][T13601] netlink: 'syz.0.3352': attribute type 10 has an invalid length. [ 414.822045][T13603] syz.1.3351: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 414.852371][T13603] CPU: 0 PID: 13603 Comm: syz.1.3351 Not tainted syzkaller #0 [ 414.860592][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.871724][T13603] Call Trace: [ 414.875146][T13603] [ 414.878375][T13603] dump_stack_lvl+0x188/0x250 [ 414.883238][T13603] ? rcu_lock_release+0x5/0x20 [ 414.888152][T13603] ? show_regs_print_info+0x20/0x20 [ 414.894075][T13603] ? load_image+0x400/0x400 [ 414.898878][T13603] warn_alloc+0x243/0x320 [ 414.903677][T13603] ? zone_watermark_ok_safe+0x240/0x240 [ 414.909248][T13603] ? __get_vm_area_node+0x2b5/0x2d0 [ 414.914728][T13603] __vmalloc_node_range+0x2b1/0x8b0 [ 414.920547][T13603] ? end_current_label_crit_section+0x170/0x170 [ 414.927072][T13603] ? __lock_acquire+0x7d10/0x7d10 [ 414.933411][T13603] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 414.939785][T13603] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 414.946188][T13603] __vmalloc+0x76/0x80 [ 414.950546][T13603] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 414.956710][T13603] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 414.962787][T13603] bpf_prog_alloc+0x1a/0x1e0 [ 414.968637][T13603] bpf_prog_load+0x7c6/0x1510 [ 414.974193][T13603] ? map_freeze+0x350/0x350 [ 414.978893][T13603] ? __might_fault+0xb7/0x110 [ 414.984145][T13603] ? __might_fault+0xb3/0x110 [ 414.989196][T13603] ? bpf_lsm_bpf+0x5/0x10 [ 414.994792][T13603] ? security_bpf+0x7a/0xa0 [ 414.999583][T13603] __sys_bpf+0x532/0x6f0 [ 415.003845][T13603] ? bpf_link_show_fdinfo+0x380/0x380 [ 415.010074][T13603] ? vtime_user_exit+0x2c8/0x3e0 [ 415.015325][T13603] __x64_sys_bpf+0x78/0x90 [ 415.020112][T13603] do_syscall_64+0x4c/0xa0 [ 415.024803][T13603] ? clear_bhb_loop+0x30/0x80 [ 415.029785][T13603] ? clear_bhb_loop+0x30/0x80 [ 415.034829][T13603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.040990][T13603] RIP: 0033:0x7f81709ee819 [ 415.045590][T13603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.068029][T13603] RSP: 002b:00007f816ec48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.077368][T13603] RAX: ffffffffffffffda RBX: 00007f8170c67fa0 RCX: 00007f81709ee819 [ 415.085780][T13603] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 415.094082][T13603] RBP: 00007f816ec48090 R08: 0000000000000000 R09: 0000000000000000 [ 415.102578][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.110960][T13603] R13: 00007f8170c68038 R14: 00007f8170c67fa0 R15: 00007ffe2175a8e8 [ 415.119792][T13603] [ 415.154306][T13601] netlink: 143 bytes leftover after parsing attributes in process `syz.0.3352'. [ 415.160115][T13603] Mem-Info: [ 415.168724][T13603] active_anon:272 inactive_anon:5502 isolated_anon:0 [ 415.168724][T13603] active_file:22484 inactive_file:37380 isolated_file:0 [ 415.168724][T13603] unevictable:768 dirty:249 writeback:0 [ 415.168724][T13603] slab_reclaimable:20844 slab_unreclaimable:96486 [ 415.168724][T13603] mapped:29727 shmem:1630 pagetables:566 bounce:0 [ 415.168724][T13603] kernel_misc_reclaimable:0 [ 415.168724][T13603] free:1374086 free_pcp:8922 free_cma:0 [ 415.214584][T13603] Node 0 active_anon:1056kB inactive_anon:21500kB active_file:89732kB inactive_file:149520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119108kB dirty:996kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10812kB pagetables:2264kB all_unreclaimable? no [ 415.225875][T13525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.250865][T13603] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 415.307238][T13603] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.338106][T13616] netlink: 'syz.0.3354': attribute type 3 has an invalid length. [ 415.340842][T13603] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 415.374070][T13616] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3354'. [ 415.411083][T13603] Node 0 DMA32 free:1558396kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1056kB inactive_anon:21600kB active_file:89732kB inactive_file:149520kB unevictable:1536kB writepending:996kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:34696kB local_pcp:19676kB free_cma:0kB [ 415.468923][T13525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.489697][T13603] lowmem_reserve[]: 0 0 0 0 0 [ 415.497762][T13603] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 415.542772][T13603] lowmem_reserve[]: 0 0 0 0 0 [ 415.549772][T13603] Node 1 Normal free:3921948kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:660kB free_cma:0kB [ 415.638773][T13525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.663114][T13603] lowmem_reserve[]: 0 0 0 0 0 [ 415.668376][T13603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 415.717930][T13603] Node 0 DMA32: 2055*4kB (M) 1374*8kB (UME) 863*16kB (ME) 224*32kB (ME) 463*64kB (UME) 477*128kB (UME) 152*256kB (UM) 50*512kB (UM) 12*1024kB (UM) 4*2048kB (UME) 327*4096kB (UM) = 1555260kB [ 415.783155][T13525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.814164][T13603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 415.904238][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 415.917256][T13603] Node 1 Normal: 145*4kB (UME) 43*8kB (UME) 22*16kB (UME) 175*32kB (UME) 77*64kB (UME) 22*128kB (UE) 9*256kB (UME) 5*512kB (U) 1*1024kB (U) 3*2048kB (UME) 951*4096kB (M) = 3921948kB [ 415.997974][T13603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.060406][T13629] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 416.071548][T13603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.102348][T13629] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3360'. [ 416.133833][T13603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.133851][ T8171] Bluetooth: hci4: command 0x040f tx timeout [ 416.212127][T13631] netlink: 'syz.3.3361': attribute type 3 has an invalid length. [ 416.222757][T13603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 416.254859][T13603] 61494 total pagecache pages [ 416.261220][T13631] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3361'. [ 416.274130][T13525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.295003][T13603] 0 pages in swap cache [ 416.299485][T13603] Swap cache stats: add 0, delete 0, find 0/0 [ 416.309639][T13525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.328032][T13603] Free swap = 124996kB [ 416.329954][T13525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.332331][T13603] Total swap = 124996kB [ 416.362828][T13525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.378084][T13603] 2097051 pages RAM [ 416.397303][T13636] IPv6: Can't replace route, no match found [ 416.404343][T13603] 0 pages HighMem/MovableOnly [ 416.409492][T13603] 411490 pages reserved [ 416.433660][T13603] 0 pages cma reserved [ 416.440586][T13636] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 416.514314][T13640] FAULT_INJECTION: forcing a failure. [ 416.514314][T13640] name failslab, interval 1, probability 0, space 0, times 0 [ 416.576104][T13640] CPU: 1 PID: 13640 Comm: syz.0.3364 Not tainted syzkaller #0 [ 416.585714][T13640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.600372][T13640] Call Trace: [ 416.603981][T13640] [ 416.607388][T13640] dump_stack_lvl+0x188/0x250 [ 416.613847][T13640] ? show_regs_print_info+0x20/0x20 [ 416.622378][T13640] ? load_image+0x400/0x400 [ 416.628740][T13640] ? __might_sleep+0xf0/0xf0 [ 416.636764][T13640] ? __lock_acquire+0x7d10/0x7d10 [ 416.643522][T13640] should_fail+0x38c/0x4c0 [ 416.648779][T13640] should_failslab+0x5/0x20 [ 416.653872][T13640] slab_pre_alloc_hook+0x51/0xc0 [ 416.660250][T13640] __kmalloc_node+0x6e/0x3b0 [ 416.665541][T13640] ? kvmalloc_node+0x84/0x130 [ 416.670623][T13640] kvmalloc_node+0x84/0x130 [ 416.672052][T13525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.675174][T13640] __htab_map_lookup_and_delete_batch+0x4d5/0x1cc0 [ 416.675214][T13640] ? __lock_acquire+0x7d10/0x7d10 [ 416.675244][T13640] ? __fget_files+0x40f/0x480 [ 416.675261][T13640] ? htab_free_prealloced_timers+0x330/0x330 [ 416.675281][T13640] ? __fdget+0x18b/0x210 [ 416.675296][T13640] ? __htab_percpu_map_update_elem+0x640/0x640 [ 416.675311][T13640] bpf_map_do_batch+0x2c8/0x600 [ 416.675330][T13640] ? bpf_lsm_bpf+0x5/0x10 [ 416.675347][T13640] ? security_bpf+0x7a/0xa0 [ 416.675367][T13640] __sys_bpf+0x671/0x6f0 [ 416.675386][T13640] ? bpf_link_show_fdinfo+0x380/0x380 [ 416.675414][T13640] ? vtime_user_exit+0x2c8/0x3e0 [ 416.675437][T13640] __x64_sys_bpf+0x78/0x90 [ 416.713712][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 416.721232][T13640] do_syscall_64+0x4c/0xa0 [ 416.721264][T13640] ? clear_bhb_loop+0x30/0x80 [ 416.721280][T13640] ? clear_bhb_loop+0x30/0x80 [ 416.721295][T13640] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.745576][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 416.752921][T13640] RIP: 0033:0x7fe27bab7819 [ 416.752955][T13640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.752969][T13640] RSP: 002b:00007fe279cf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.752987][T13640] RAX: ffffffffffffffda RBX: 00007fe27bd31090 RCX: 00007fe27bab7819 [ 416.752998][T13640] RDX: 0000000000000038 RSI: 0000200000000440 RDI: 0000000000000018 [ 416.753009][T13640] RBP: 00007fe279cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 416.753019][T13640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.753028][T13640] R13: 00007fe27bd31128 R14: 00007fe27bd31090 R15: 00007fff4e9dcba8 [ 416.786477][T13525] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.793679][T13640] [ 416.856716][ T150] wlan1: Trigger new scan to find an IBSS to join [ 416.972531][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 416.989198][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.029944][ T8970] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.038701][ T8970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.087894][T13653] netlink: 'syz.0.3368': attribute type 3 has an invalid length. [ 417.097142][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 417.114487][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.147062][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.154229][T13653] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3368'. [ 417.185051][ T8970] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.193166][ T8970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.234245][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 417.322686][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 417.407122][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 417.440335][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.464938][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 417.505524][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.544435][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.555336][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.582608][T13525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.644877][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.677415][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.688752][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.721679][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.776733][T13668] netlink: 'syz.0.3372': attribute type 10 has an invalid length. [ 417.841758][T13668] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.855483][T13668] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.871123][T13676] FAULT_INJECTION: forcing a failure. [ 417.871123][T13676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.962497][T13676] CPU: 0 PID: 13676 Comm: syz.4.3374 Not tainted syzkaller #0 [ 417.972849][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.986932][T13676] Call Trace: [ 417.991808][T13676] [ 417.995411][T13676] dump_stack_lvl+0x188/0x250 [ 418.001053][T13668] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.002796][T13676] ? show_regs_print_info+0x20/0x20 [ 418.002829][T13676] ? load_image+0x400/0x400 [ 418.002850][T13676] ? __lock_acquire+0x7d10/0x7d10 [ 418.002870][T13676] ? perf_trace_lock_acquire+0xed/0x3e0 [ 418.002898][T13676] should_fail+0x38c/0x4c0 [ 418.002924][T13676] _copy_from_user+0x2e/0x170 [ 418.002947][T13676] iovec_from_user+0x142/0x370 [ 418.012059][T13668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.017457][T13676] __import_iovec+0x70/0x490 [ 418.017502][T13676] import_iovec+0x6f/0xa0 [ 418.017524][T13676] ___sys_sendmsg+0x1fd/0x2e0 [ 418.017551][T13676] ? __sys_sendmsg+0x2a0/0x2a0 [ 418.017578][T13676] ? trace_event_raw_event_lock+0x270/0x270 [ 418.017599][T13676] ? vfs_write+0x8b2/0xd60 [ 418.017642][T13676] __se_sys_sendmsg+0x1af/0x290 [ 418.017666][T13676] ? __x64_sys_sendmsg+0x80/0x80 [ 418.017683][T13676] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 418.017716][T13676] ? lockdep_hardirqs_on+0x94/0x140 [ 418.017740][T13676] do_syscall_64+0x4c/0xa0 [ 418.023800][T13668] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.028685][T13676] ? clear_bhb_loop+0x30/0x80 [ 418.028717][T13676] ? clear_bhb_loop+0x30/0x80 [ 418.028740][T13676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.028759][T13676] RIP: 0033:0x7f49e1947819 [ 418.028779][T13676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.028794][T13676] RSP: 002b:00007f49dfb5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.034896][T13668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.039628][T13676] RAX: ffffffffffffffda RBX: 00007f49e1bc1180 RCX: 00007f49e1947819 [ 418.039647][T13676] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000e [ 418.039660][T13676] RBP: 00007f49dfb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.039671][T13676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.039682][T13676] R13: 00007f49e1bc1218 R14: 00007f49e1bc1180 R15: 00007ffe5b5701b8 [ 418.039714][T13676] [ 418.062942][T13668] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 418.250457][ T8171] Bluetooth: hci4: command 0x0419 tx timeout [ 418.279730][T13671] netlink: 'syz.4.3374': attribute type 10 has an invalid length. [ 418.330757][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.342636][T13671] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.454505][T13671] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.465363][T13671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.475165][T13671] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.484376][T13671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.505406][T13671] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 418.516469][T13682] netlink: 'syz.0.3375': attribute type 3 has an invalid length. [ 418.516513][T13682] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.3375'. [ 418.540657][T13666] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3373'. [ 418.680591][T13686] IPv6: Can't replace route, no match found [ 418.716911][T13686] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 418.821709][T13691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3377'. [ 418.886187][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.950690][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.979106][T13525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.022916][T13697] validate_nla: 1 callbacks suppressed [ 419.022935][T13697] netlink: 'syz.3.3381': attribute type 3 has an invalid length. [ 419.100500][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.120246][T13700] FAULT_INJECTION: forcing a failure. [ 419.120246][T13700] name failslab, interval 1, probability 0, space 0, times 0 [ 419.135459][T13697] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3381'. [ 419.135990][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.183865][T13700] CPU: 1 PID: 13700 Comm: syz.1.3382 Not tainted syzkaller #0 [ 419.191627][T13700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 419.201998][T13700] Call Trace: [ 419.205579][T13700] [ 419.208529][T13700] dump_stack_lvl+0x188/0x250 [ 419.213430][T13700] ? show_regs_print_info+0x20/0x20 [ 419.218768][T13700] ? load_image+0x400/0x400 [ 419.223425][T13700] ? __might_sleep+0xf0/0xf0 [ 419.228798][T13700] ? __lock_acquire+0x7d10/0x7d10 [ 419.234669][T13700] ? netlink_insert+0xe95/0x11f0 [ 419.240120][T13700] should_fail+0x38c/0x4c0 [ 419.245127][T13700] should_failslab+0x5/0x20 [ 419.250017][T13700] slab_pre_alloc_hook+0x51/0xc0 [ 419.255848][T13700] kmem_cache_alloc_node+0x47/0x2d0 [ 419.262293][T13700] ? __alloc_skb+0xf4/0x750 [ 419.267727][T13700] __alloc_skb+0xf4/0x750 [ 419.272725][T13700] netlink_sendmsg+0x654/0xbe0 [ 419.278036][T13700] ? netlink_getsockopt+0x570/0x570 [ 419.285897][T13700] ? aa_sock_msg_perm+0x94/0x150 [ 419.291427][T13700] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 419.297099][T13700] ? security_socket_sendmsg+0x7c/0xa0 [ 419.303318][T13700] ? netlink_getsockopt+0x570/0x570 [ 419.308860][T13700] ____sys_sendmsg+0x5b7/0x8f0 [ 419.313863][T13700] ? __sys_sendmsg_sock+0x30/0x30 [ 419.319307][T13700] ? import_iovec+0x6f/0xa0 [ 419.322716][T13525] device veth0_vlan entered promiscuous mode [ 419.323853][T13700] ___sys_sendmsg+0x236/0x2e0 [ 419.323907][T13700] ? __sys_sendmsg+0x2a0/0x2a0 [ 419.323964][T13700] ? trace_event_raw_event_lock+0x270/0x270 [ 419.346112][T13700] ? vfs_write+0x8b2/0xd60 [ 419.351396][T13700] __se_sys_sendmsg+0x1af/0x290 [ 419.356665][T13700] ? __x64_sys_sendmsg+0x80/0x80 [ 419.361420][T13525] device veth1_vlan entered promiscuous mode [ 419.362158][T13700] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 419.375430][T13700] ? lockdep_hardirqs_on+0x94/0x140 [ 419.381622][T13700] do_syscall_64+0x4c/0xa0 [ 419.387341][T13700] ? clear_bhb_loop+0x30/0x80 [ 419.393221][T13700] ? clear_bhb_loop+0x30/0x80 [ 419.398842][T13700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.405778][T13700] RIP: 0033:0x7f81709ee819 [ 419.410676][T13700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.438311][T13700] RSP: 002b:00007f816ec48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.448818][T13700] RAX: ffffffffffffffda RBX: 00007f8170c67fa0 RCX: 00007f81709ee819 [ 419.461509][T13700] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 419.472240][T13700] RBP: 00007f816ec48090 R08: 0000000000000000 R09: 0000000000000000 [ 419.477078][T13525] device veth0_macvtap entered promiscuous mode [ 419.481543][T13700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.481563][T13700] R13: 00007f8170c68038 R14: 00007f8170c67fa0 R15: 00007ffe2175a8e8 [ 419.481620][T13700] [ 419.538376][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.561923][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.583412][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 419.606724][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 419.662741][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.695752][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.713877][T13525] device veth1_macvtap entered promiscuous mode [ 419.754979][T13711] netlink: 'syz.4.3386': attribute type 10 has an invalid length. [ 419.755279][T13715] netlink: 'syz.1.3388': attribute type 3 has an invalid length. [ 419.780262][T13715] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.3388'. [ 419.790507][T13711] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3386'. [ 419.843350][T13719] IPv6: Can't replace route, no match found [ 419.869655][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.904116][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.919690][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.929441][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 420.000543][T13719] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 420.034864][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.055337][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.072596][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.094442][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.113602][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.129194][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.143040][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.157212][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.170916][T13525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.191547][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.206442][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.235145][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.253401][T13724] FAULT_INJECTION: forcing a failure. [ 420.253401][T13724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.283929][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.300205][T13724] CPU: 0 PID: 13724 Comm: syz.0.3390 Not tainted syzkaller #0 [ 420.309481][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.320494][T13724] Call Trace: [ 420.323977][T13724] [ 420.327005][T13724] dump_stack_lvl+0x188/0x250 [ 420.331792][T13724] ? show_regs_print_info+0x20/0x20 [ 420.337059][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.337218][T13724] ? load_image+0x400/0x400 [ 420.352952][T13724] ? __lock_acquire+0x7d10/0x7d10 [ 420.356150][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.358391][T13724] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 420.358425][T13724] should_fail+0x38c/0x4c0 [ 420.375990][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.380337][T13724] _copy_from_user+0x2e/0x170 [ 420.380371][T13724] get_user_ifreq+0x67/0x170 [ 420.380392][T13724] inet_ioctl+0x31d/0x460 [ 420.400930][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.403724][T13724] ? inet_shutdown+0x370/0x370 [ 420.403912][T13724] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 420.403948][T13724] sock_do_ioctl+0xfb/0x320 [ 420.404055][T13724] ? sock_show_fdinfo+0xb0/0xb0 [ 420.404073][T13724] sock_ioctl+0x4d2/0x710 [ 420.404090][T13724] ? sock_poll+0x410/0x410 [ 420.404112][T13724] ? bpf_lsm_file_ioctl+0x5/0x10 [ 420.404201][T13724] ? security_file_ioctl+0x7c/0xa0 [ 420.404221][T13724] ? sock_poll+0x410/0x410 [ 420.404235][T13724] __se_sys_ioctl+0xfa/0x170 [ 420.404253][T13724] do_syscall_64+0x4c/0xa0 [ 420.409902][T13525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.420785][T13724] ? clear_bhb_loop+0x30/0x80 [ 420.420815][T13724] ? clear_bhb_loop+0x30/0x80 [ 420.420832][T13724] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 420.420848][T13724] RIP: 0033:0x7fe27bab7819 [ 420.420865][T13724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.420879][T13724] RSP: 002b:00007fe279d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.420896][T13724] RAX: ffffffffffffffda RBX: 00007fe27bd30fa0 RCX: 00007fe27bab7819 [ 420.420908][T13724] RDX: 0000000000000000 RSI: 000000000000891b RDI: 0000000000000004 [ 420.420924][T13724] RBP: 00007fe279d11090 R08: 0000000000000000 R09: 0000000000000000 [ 420.420934][T13724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.420943][T13724] R13: 00007fe27bd31038 R14: 00007fe27bd30fa0 R15: 00007fff4e9dcba8 [ 420.420968][T13724] [ 420.613100][T13525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.629246][T13525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.664528][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 420.677707][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.753173][T13525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.770258][T13525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.786235][T13525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.803030][T13525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.840256][T13743] device syzkaller0 entered promiscuous mode [ 420.942268][T13745] netlink: 'syz.1.3396': attribute type 3 has an invalid length. [ 420.965617][ T150] wlan1: Trigger new scan to find an IBSS to join [ 420.976628][ T4281] wlan1: Trigger new scan to find an IBSS to join [ 421.011857][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 421.029508][T13738] syzkaller0: mtu less than device minimum [ 421.037919][T13745] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3396'. [ 421.150738][T13749] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3397'. [ 421.193809][T13749] openvswitch: netlink: Flow actions attr not present in new flow. [ 421.318198][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.339087][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.390654][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.422761][T13758] IPv6: Can't replace route, no match found [ 421.476242][T13758] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 421.516326][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.578072][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.609117][T13763] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3402'. [ 421.637908][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.485785][ T4244] wlan1: Creating new IBSS network, BSSID e6:c2:79:3d:6c:54 [ 424.565769][T13770] netlink: 'syz.1.3401': attribute type 20 has an invalid length. [ 424.587004][T13773] netlink: 'syz.3.3405': attribute type 10 has an invalid length. [ 424.604375][T13773] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.613172][T13773] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.696751][T13773] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.704589][T13773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.712613][T13773] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.720564][T13773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.737149][T13773] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 425.129961][T13788] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3409'. [ 425.280660][T13791] netlink: 'syz.1.3410': attribute type 3 has an invalid length. [ 425.363713][T13791] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3410'. [ 425.577397][T13796] netlink: 'syz.3.3412': attribute type 9 has an invalid length. [ 425.639667][T13796] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3412'. [ 425.685678][T13797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3411'. [ 425.927750][T13803] IPv6: Can't replace route, no match found [ 425.999241][T13803] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 426.388850][T13810] netlink: 'syz.4.3416': attribute type 20 has an invalid length. [ 426.598934][T13815] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3418'. [ 426.944131][ T150] wlan1: Trigger new scan to find an IBSS to join [ 429.096887][ T150] wlan1: Creating new IBSS network, BSSID 16:70:1a:b1:25:39 [ 429.353748][T13830] netlink: 'syz.4.3423': attribute type 3 has an invalid length. [ 429.387681][T13830] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3423'. [ 429.650051][T13836] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3435'. [ 429.872070][T13841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3425'. [ 429.894113][ T150] wlan1: Trigger new scan to find an IBSS to join [ 430.232444][T13856] FAULT_INJECTION: forcing a failure. [ 430.232444][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 430.361253][T13851] IPv6: Can't replace route, no match found [ 430.386520][T13856] CPU: 1 PID: 13856 Comm: syz.1.3430 Not tainted syzkaller #0 [ 430.394834][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.405584][T13856] Call Trace: [ 430.409165][T13856] [ 430.412122][T13856] dump_stack_lvl+0x188/0x250 [ 430.417201][T13856] ? show_regs_print_info+0x20/0x20 [ 430.422616][T13856] ? load_image+0x400/0x400 [ 430.427371][T13856] ? __might_sleep+0xf0/0xf0 [ 430.432186][T13856] ? __lock_acquire+0x7d10/0x7d10 [ 430.437428][T13856] should_fail+0x38c/0x4c0 [ 430.442055][T13856] should_failslab+0x5/0x20 [ 430.446964][T13856] slab_pre_alloc_hook+0x51/0xc0 [ 430.452230][T13856] ? __alloc_file+0x25/0x240 [ 430.457114][T13856] kmem_cache_alloc+0x3d/0x290 [ 430.462353][T13856] __alloc_file+0x25/0x240 [ 430.467003][T13856] alloc_empty_file+0x90/0x180 [ 430.472005][T13856] alloc_file+0x5b/0x4f0 [ 430.476399][T13856] ? do_raw_spin_unlock+0x11d/0x230 [ 430.481767][T13856] alloc_file_pseudo+0x180/0x200 [ 430.487306][T13856] ? alloc_empty_file_noaccount+0x80/0x80 [ 430.493441][T13856] ? _raw_spin_unlock+0x24/0x40 [ 430.498459][T13856] __anon_inode_getfd+0x26b/0x3d0 [ 430.503966][T13856] ? __local_bh_enable_ip+0x136/0x1c0 [ 430.510093][T13856] ? anon_inode_getfd+0x40/0x40 [ 430.515078][T13856] ? do_raw_spin_unlock+0x11d/0x230 [ 430.520519][T13856] btf_new_fd+0x779/0x910 [ 430.524948][T13856] __sys_bpf+0x58c/0x6f0 [ 430.529541][T13856] ? bpf_link_show_fdinfo+0x380/0x380 [ 430.535200][T13856] ? rcu_nmi_exit+0x6f/0xf0 [ 430.540240][T13856] ? vtime_user_exit+0x2c8/0x3e0 [ 430.546175][T13856] __x64_sys_bpf+0x78/0x90 [ 430.550990][T13856] do_syscall_64+0x4c/0xa0 [ 430.555712][T13856] ? clear_bhb_loop+0x30/0x80 [ 430.561086][T13856] ? clear_bhb_loop+0x30/0x80 [ 430.566291][T13856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.572438][T13856] RIP: 0033:0x7f81709ee819 [ 430.576888][T13856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.598132][T13856] RSP: 002b:00007f816ec48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.606866][T13856] RAX: ffffffffffffffda RBX: 00007f8170c67fa0 RCX: 00007f81709ee819 [ 430.615124][T13856] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 430.623204][T13856] RBP: 00007f816ec48090 R08: 0000000000000000 R09: 0000000000000000 [ 430.631367][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.639918][T13856] R13: 00007f8170c68038 R14: 00007f8170c67fa0 R15: 00007ffe2175a8e8 [ 430.648217][T13856] [ 430.658069][T13855] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 431.897058][T13869] netlink: 'syz.4.3436': attribute type 10 has an invalid length. [ 431.933979][T13869] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3436'. [ 432.145832][T13876] netlink: 'syz.3.3438': attribute type 3 has an invalid length. [ 432.198089][T13876] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3438'. [ 432.395068][T13883] netlink: 'syz.2.3437': attribute type 20 has an invalid length. [ 432.699852][T13889] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3441'. [ 433.124051][T13894] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3442'. [ 434.854126][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 434.861555][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 435.654647][T13904] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3454'. [ 435.826644][T11808] wlan1: Creating new IBSS network, BSSID 1a:57:c3:f0:c2:08 [ 435.850491][T13907] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3443'. [ 435.934328][T13910] IPv6: Can't replace route, no match found [ 436.024016][T13910] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 436.129205][T13913] netlink: 'syz.3.3448': attribute type 10 has an invalid length. [ 436.154080][T13913] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3448'. [ 436.637127][T13926] netlink: 'syz.1.3452': attribute type 3 has an invalid length. [ 436.666801][T13926] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3452'. [ 437.251888][T13941] netlink: 'syz.4.3459': attribute type 10 has an invalid length. [ 437.498475][T13941] team0: Device veth1_vlan failed to register rx_handler [ 437.569543][T13944] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3460'. [ 437.897478][T11808] wlan1: Trigger new scan to find an IBSS to join [ 437.959423][T13948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3462'. [ 438.062001][T13951] IPv6: Can't replace route, no match found [ 438.241434][T13959] netlink: 'syz.3.3465': attribute type 10 has an invalid length. [ 438.279276][T13959] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3465'. [ 438.376678][T13966] netlink: 'syz.4.3467': attribute type 3 has an invalid length. [ 438.397564][T13966] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3467'. [ 438.430190][T13970] FAULT_INJECTION: forcing a failure. [ 438.430190][T13970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.513838][T13970] CPU: 0 PID: 13970 Comm: syz.1.3468 Not tainted syzkaller #0 [ 438.522755][T13970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 438.533091][T13970] Call Trace: [ 438.536570][T13970] [ 438.539778][T13970] dump_stack_lvl+0x188/0x250 [ 438.545118][T13970] ? show_regs_print_info+0x20/0x20 [ 438.550649][T13970] ? load_image+0x400/0x400 [ 438.555831][T13970] ? __lock_acquire+0x7d10/0x7d10 [ 438.561163][T13970] should_fail+0x38c/0x4c0 [ 438.565772][T13970] _copy_to_user+0x2e/0x130 [ 438.570895][T13970] simple_read_from_buffer+0xe3/0x150 [ 438.576573][T13970] proc_fail_nth_read+0x1a6/0x220 [ 438.582188][T13970] ? proc_fault_inject_write+0x310/0x310 [ 438.588418][T13970] ? fsnotify_perm+0x254/0x560 [ 438.593549][T13970] ? proc_fault_inject_write+0x310/0x310 [ 438.599470][T13970] vfs_read+0x301/0xd60 [ 438.603974][T13970] ? kernel_read+0x1e0/0x1e0 [ 438.608825][T13970] ? __fget_files+0x40f/0x480 [ 438.614108][T13970] ? mutex_lock_nested+0x17/0x20 [ 438.619314][T13970] ? __fdget_pos+0x2bf/0x370 [ 438.624154][T13970] ? ksys_read+0x71/0x260 [ 438.628656][T13970] ksys_read+0x152/0x260 [ 438.633048][T13970] ? vfs_write+0xd60/0xd60 [ 438.637686][T13970] ? lockdep_hardirqs_on+0x94/0x140 [ 438.643112][T13970] do_syscall_64+0x4c/0xa0 [ 438.647753][T13970] ? clear_bhb_loop+0x30/0x80 [ 438.652611][T13970] ? clear_bhb_loop+0x30/0x80 [ 438.657285][T13970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.663191][T13970] RIP: 0033:0x7f81709af04e [ 438.667612][T13970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.687510][T13970] RSP: 002b:00007f816ec47fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.696187][T13970] RAX: ffffffffffffffda RBX: 00007f816ec486c0 RCX: 00007f81709af04e [ 438.704415][T13970] RDX: 000000000000000f RSI: 00007f816ec480a0 RDI: 0000000000000004 [ 438.712559][T13970] RBP: 00007f816ec48090 R08: 0000000000000000 R09: 0000000000000000 [ 438.720707][T13970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.729200][T13970] R13: 00007f8170c68038 R14: 00007f8170c67fa0 R15: 00007ffe2175a8e8 [ 438.738436][T13970] [ 438.893025][T13950] chnl_net:caif_netlink_parms(): no params data found [ 439.057836][T13986] netlink: 'syz.1.3473': attribute type 15 has an invalid length. [ 439.104031][T13986] netlink: 'syz.1.3473': attribute type 5 has an invalid length. [ 439.160165][T13986] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3473'. [ 439.279904][T13985] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3475'. [ 439.401334][T13950] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.409915][T13950] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.421028][T13950] device bridge_slave_0 entered promiscuous mode [ 439.434592][T13950] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.442200][T13950] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.453698][T13950] device bridge_slave_1 entered promiscuous mode [ 439.507331][T13950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.573499][T13997] IPv6: Can't replace route, no match found [ 439.591198][T13994] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3474'. [ 439.614028][T13950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.721449][T13950] team0: Port device team_slave_0 added [ 439.765758][T13950] team0: Port device team_slave_1 added [ 439.894847][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 439.902010][T14010] netlink: 'syz.1.3480': attribute type 3 has an invalid length. [ 439.924679][ T4281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.943085][T13950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.950667][T14010] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3480'. [ 439.960596][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.040109][T13950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.054982][T14005] netlink: 'syz.3.3479': attribute type 10 has an invalid length. [ 440.065893][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.066804][ T4233] Bluetooth: hci3: command 0x0409 tx timeout [ 440.073042][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.097362][T14005] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3479'. [ 440.162860][ T4281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.211340][T13950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.240001][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.310858][T13950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.447511][T14030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3486'. [ 440.593055][ T4281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.646825][T13950] device hsr_slave_0 entered promiscuous mode [ 440.664489][T13950] device hsr_slave_1 entered promiscuous mode [ 440.672253][T13950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.682590][T13950] Cannot create hsr debugfs directory [ 440.772933][ T4281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.842568][T14033] IPv6: Can't replace route, no match found [ 440.985280][T14045] netlink: 'syz.3.3491': attribute type 10 has an invalid length. [ 441.009301][T14045] FAULT_INJECTION: forcing a failure. [ 441.009301][T14045] name failslab, interval 1, probability 0, space 0, times 0 [ 441.034911][T14045] CPU: 0 PID: 14045 Comm: syz.3.3491 Not tainted syzkaller #0 [ 441.042865][T14045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 441.054136][T14045] Call Trace: [ 441.057981][T14045] [ 441.061176][T14045] dump_stack_lvl+0x188/0x250 [ 441.066793][T14045] ? show_regs_print_info+0x20/0x20 [ 441.072603][T14045] ? load_image+0x400/0x400 [ 441.077316][T14045] ? __might_sleep+0xf0/0xf0 [ 441.082285][T14045] ? __lock_acquire+0x7d10/0x7d10 [ 441.087528][T14045] should_fail+0x38c/0x4c0 [ 441.092339][T14045] should_failslab+0x5/0x20 [ 441.097281][T14045] slab_pre_alloc_hook+0x51/0xc0 [ 441.102419][T14045] kmem_cache_alloc_trace+0x47/0x2a0 [ 441.108206][T14045] ? nf_nat_masq_schedule+0x236/0x540 [ 441.114137][T14045] ? nf_tables_netdev_event+0x181/0x990 [ 441.120235][T14045] nf_nat_masq_schedule+0x236/0x540 [ 441.125574][T14045] ? nf_nat_masq_schedule+0x540/0x540 [ 441.131841][T14045] ? masq_device_event+0xd0/0xd0 [ 441.137953][T14045] masq_device_event+0x9e/0xd0 [ 441.143819][T14045] raw_notifier_call_chain+0xcb/0x160 [ 441.149567][T14045] __dev_notify_flags+0x158/0x300 [ 441.155843][T14045] ? __dev_change_flags+0x6a0/0x6a0 [ 441.162172][T14045] ? __dev_change_flags+0x4d0/0x6a0 [ 441.168596][T14045] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 441.175048][T14045] ? dev_get_flags+0x1c0/0x1c0 [ 441.180320][T14045] ? preempt_schedule_common+0xa5/0xd0 [ 441.186057][T14045] ? preempt_schedule+0xbc/0xd0 [ 441.191348][T14045] dev_change_flags+0xe3/0x1a0 [ 441.196229][T14045] do_setlink+0xcdb/0x3d60 [ 441.201370][T14045] ? vprintk_emit+0xf9/0x150 [ 441.206417][T14045] ? _printk+0xda/0x130 [ 441.210692][T14045] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 441.217353][T14045] ? load_image+0x400/0x400 [ 441.221960][T14045] ? __lock_acquire+0x12e8/0x7d10 [ 441.227555][T14045] ? __nla_validate_parse+0x1e23/0x2780 [ 441.233823][T14045] ? rtnetlink_rcv_msg+0x844/0xf30 [ 441.239291][T14045] ? netlink_rcv_skb+0x1f5/0x440 [ 441.244228][T14045] ? netlink_unicast+0x774/0x920 [ 441.250271][T14045] ? __nla_validate+0x50/0x50 [ 441.255058][T14045] ? validate_linkmsg+0x3db/0x4c0 [ 441.260193][T14045] rtnl_newlink+0x1658/0x1a50 [ 441.265127][T14045] ? rtnl_newlink+0x401/0x1a50 [ 441.270337][T14045] ? rtnl_setlink+0x500/0x500 [ 441.275296][T14045] ? __lock_acquire+0x13bc/0x7d10 [ 441.280660][T14045] ? rcu_lock_acquire+0x30/0x30 [ 441.285935][T14045] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 441.291688][T14045] ? rtnl_setlink+0x500/0x500 [ 441.297442][T14045] rtnetlink_rcv_msg+0x844/0xf30 [ 441.302773][T14045] ? rtnetlink_bind+0x80/0x80 [ 441.307645][T14045] ? __local_bh_enable_ip+0x136/0x1c0 [ 441.313190][T14045] ? lockdep_hardirqs_on+0x94/0x140 [ 441.318409][T14045] ? __local_bh_enable_ip+0x136/0x1c0 [ 441.323846][T14045] ? _local_bh_enable+0xa0/0xa0 [ 441.328891][T14045] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 441.334305][T14045] ? dev_queue_xmit+0x20/0x20 [ 441.339008][T14045] ? memcpy+0x3c/0x60 [ 441.343271][T14045] ? __copy_skb_header+0x3ba/0x4f0 [ 441.349358][T14045] ? __skb_clone+0x480/0x790 [ 441.354152][T14045] netlink_rcv_skb+0x1f5/0x440 [ 441.359218][T14045] ? rtnetlink_bind+0x80/0x80 [ 441.364315][T14045] ? netlink_ack+0xb50/0xb50 [ 441.369031][T14045] netlink_unicast+0x774/0x920 [ 441.373971][T14045] netlink_sendmsg+0x8ba/0xbe0 [ 441.379144][T14045] ? netlink_getsockopt+0x570/0x570 [ 441.384460][T14045] ? aa_sock_msg_perm+0x94/0x150 [ 441.389614][T14045] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 441.395340][T14045] ? security_socket_sendmsg+0x7c/0xa0 [ 441.400918][T14045] ? netlink_getsockopt+0x570/0x570 [ 441.406120][T14045] ____sys_sendmsg+0x5b7/0x8f0 [ 441.411308][T14045] ? __sys_sendmsg_sock+0x30/0x30 [ 441.416895][T14045] ? import_iovec+0x6f/0xa0 [ 441.421622][T14045] ___sys_sendmsg+0x236/0x2e0 [ 441.426541][T14045] ? __sys_sendmsg+0x2a0/0x2a0 [ 441.431772][T14045] ? vfs_write+0x8b2/0xd60 [ 441.436555][T14045] __se_sys_sendmsg+0x1af/0x290 [ 441.441695][T14045] ? __x64_sys_sendmsg+0x80/0x80 [ 441.447122][T14045] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 441.453603][T14045] ? lockdep_hardirqs_on+0x94/0x140 [ 441.459866][T14045] do_syscall_64+0x4c/0xa0 [ 441.464927][T14045] ? clear_bhb_loop+0x30/0x80 [ 441.470211][T14045] ? clear_bhb_loop+0x30/0x80 [ 441.475272][T14045] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.481871][T14045] RIP: 0033:0x7f9807fde819 [ 441.486916][T14045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.509583][T14045] RSP: 002b:00007f9806238028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.519259][T14045] RAX: ffffffffffffffda RBX: 00007f9808257fa0 RCX: 00007f9807fde819 [ 441.528401][T14045] RDX: 0000000020008800 RSI: 0000200000000600 RDI: 0000000000000003 [ 441.537307][T14045] RBP: 00007f9806238090 R08: 0000000000000000 R09: 0000000000000000 [ 441.546618][T14045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.555699][T14045] R13: 00007f9808258038 R14: 00007f9808257fa0 R15: 00007ffc30430128 [ 441.564786][T14045] [ 441.599838][T14045] team0: Device veth1_vlan failed to register rx_handler [ 441.877774][T14054] netlink: 'syz.1.3496': attribute type 10 has an invalid length. [ 441.922813][T11808] wlan1: Trigger new scan to find an IBSS to join [ 442.133781][ T4262] Bluetooth: hci3: command 0x041b tx timeout [ 442.328978][T14057] netlink: 'syz.2.3497': attribute type 10 has an invalid length. [ 442.747354][T14080] IPv6: Can't replace route, no match found [ 442.774316][T14082] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 442.851803][T13950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 442.868300][ T8970] wlan1: Trigger new scan to find an IBSS to join [ 442.914298][T13950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 442.944143][T13950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 442.977784][T11808] wlan1: Creating new IBSS network, BSSID 4a:0b:5e:85:e0:48 [ 443.134971][T13950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.175718][T14095] __nla_validate_parse: 3 callbacks suppressed [ 443.175739][T14095] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3505'. [ 443.359221][T14105] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3508'. [ 443.389999][T14101] device syzkaller0 entered promiscuous mode [ 443.544502][T14112] netlink: 'syz.1.3510': attribute type 10 has an invalid length. [ 443.557949][T14112] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3510'. [ 443.657089][T14119] IPv6: Can't replace route, no match found [ 443.707581][T14122] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 443.901627][T13950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.975415][ T8970] wlan1: Creating new IBSS network, BSSID 86:b6:c1:f5:96:d6 [ 443.986607][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.024037][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.030314][T14128] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3514'. [ 444.077291][T14129] IPv6: Can't replace route, no match found [ 444.108246][T14139] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 444.151365][T13950] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.175775][T14133] netlink: 'syz.3.3514': attribute type 39 has an invalid length. [ 444.223720][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 444.429569][T14131] netlink: 'syz.4.3513': attribute type 10 has an invalid length. [ 444.483219][T14131] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3513'. [ 444.563777][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.673314][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.719846][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.727538][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.800583][T14158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3519'. [ 444.862908][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 444.890390][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 444.931098][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 444.962713][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.970280][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.980857][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 444.998245][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.015036][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.035029][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.044965][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.101994][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.121957][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.171011][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.193617][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.238757][T14169] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3531'. [ 445.243216][T13950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.318552][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.356557][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.493817][ T4281] device hsr_slave_0 left promiscuous mode [ 445.538044][ T4281] device hsr_slave_1 left promiscuous mode [ 445.551289][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.564056][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.616601][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.636045][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.674290][ T4281] device bridge_slave_1 left promiscuous mode [ 445.680935][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.736002][ T4281] device bridge_slave_0 left promiscuous mode [ 445.744572][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.807682][ T4281] device veth1_macvtap left promiscuous mode [ 445.838757][ T4281] device veth0_macvtap left promiscuous mode [ 445.856889][ T4281] device veth1_vlan left promiscuous mode [ 445.879241][ T4281] device veth0_vlan left promiscuous mode [ 445.893870][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 446.303613][ T3519] Bluetooth: hci3: command 0x0419 tx timeout [ 446.483192][ T4281] team0 (unregistering): Port device team_slave_1 removed [ 446.505258][ T4281] team0 (unregistering): Port device team_slave_0 removed [ 446.522611][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.542657][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.632816][ T4281] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 446.645791][ T4281] bond0 (unregistering): Released all slaves [ 446.703493][T14167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3521'. [ 446.727388][T14178] netlink: 'syz.4.3525': attribute type 10 has an invalid length. [ 446.756908][T14178] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3525'. [ 446.857150][T11786] wlan1: Trigger new scan to find an IBSS to join [ 446.948061][T14216] netlink: 'syz.3.3532': attribute type 10 has an invalid length. [ 446.975039][T14216] team0: Device veth1_vlan failed to register rx_handler [ 447.178203][T14224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3535'. [ 447.279677][T14230] IPv6: Can't replace route, no match found [ 447.450654][T14230] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 447.489627][T11786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.519530][T11786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.572441][T13950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.909297][T14253] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 448.196249][T14271] __nla_validate_parse: 3 callbacks suppressed [ 448.196269][T14271] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.3544'. [ 448.595129][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.638692][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.725953][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.751704][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.782720][T13950] device veth0_vlan entered promiscuous mode [ 448.802887][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.806689][T14287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3549'. [ 448.829599][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.909648][T13950] device veth1_vlan entered promiscuous mode [ 448.956338][T14296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3552'. [ 448.982230][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 449.066183][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.095685][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.140608][T13950] device veth0_macvtap entered promiscuous mode [ 449.169575][T13950] device veth1_macvtap entered promiscuous mode [ 449.264319][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.314109][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.365198][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.380784][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.398740][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.410397][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.428198][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.440952][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.473198][T13950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.516816][T14313] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3554'. [ 449.559011][T14315] netlink: 'syz.1.3555': attribute type 10 has an invalid length. [ 449.584816][T14315] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3555'. [ 449.629624][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 449.664991][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.700173][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.721816][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.796701][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.812518][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.812727][T14326] FAULT_INJECTION: forcing a failure. [ 449.812727][T14326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.836056][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.871108][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.882057][T14326] CPU: 1 PID: 14326 Comm: syz.3.3559 Not tainted syzkaller #0 [ 449.890032][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 449.901134][T14326] Call Trace: [ 449.904717][T14326] [ 449.907783][T14326] dump_stack_lvl+0x188/0x250 [ 449.912511][T14326] ? show_regs_print_info+0x20/0x20 [ 449.917834][T14326] ? load_image+0x400/0x400 [ 449.922779][T14326] ? __lock_acquire+0x7d10/0x7d10 [ 449.928025][T14326] ? trace_call_bpf+0x515/0x5b0 [ 449.933292][T14326] should_fail+0x38c/0x4c0 [ 449.937471][ T150] wlan1: Trigger new scan to find an IBSS to join [ 449.938221][T14326] _copy_from_user+0x2e/0x170 [ 449.950847][T14326] __copy_msghdr_from_user+0xc9/0x630 [ 449.957108][T14326] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 449.963292][T14326] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 449.969156][T14326] ___sys_sendmsg+0x19a/0x2e0 [ 449.974254][T14326] ? __sys_sendmsg+0x2a0/0x2a0 [ 449.979468][T14326] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 449.986133][T14326] __se_sys_sendmsg+0x1af/0x290 [ 449.991345][T14326] ? __x64_sys_sendmsg+0x80/0x80 [ 449.996501][T14326] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 450.003007][T14326] ? lockdep_hardirqs_on+0x94/0x140 [ 450.008277][T14326] do_syscall_64+0x4c/0xa0 [ 450.012942][T14326] ? clear_bhb_loop+0x30/0x80 [ 450.017741][T14326] ? clear_bhb_loop+0x30/0x80 [ 450.022466][T14326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 450.028939][T14326] RIP: 0033:0x7f9807fde819 [ 450.033626][T14326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.053734][T14326] RSP: 002b:00007f9806238028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.062760][T14326] RAX: ffffffffffffffda RBX: 00007f9808257fa0 RCX: 00007f9807fde819 [ 450.071112][T14326] RDX: 00000000000009fc RSI: 0000200000001180 RDI: 0000000000000005 [ 450.079758][T14326] RBP: 00007f9806238090 R08: 0000000000000000 R09: 0000000000000000 [ 450.088242][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.096513][T14326] R13: 00007f9808258038 R14: 00007f9808257fa0 R15: 00007ffc30430128 [ 450.104649][T14326] [ 450.122690][T11786] wlan1: Trigger new scan to find an IBSS to join [ 450.156766][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.169505][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.180454][T13950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.192119][T13950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.205996][T13950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.229195][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 450.251186][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 450.317122][T13950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.347820][T13950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.384167][T13950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.400761][T13950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.417041][T14335] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3562'. [ 450.660876][T14350] netlink: 'syz.4.3565': attribute type 3 has an invalid length. [ 450.707656][T14350] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3565'. [ 450.768416][ T8970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.798495][ T8970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.840563][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 450.892545][ T8970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.908781][T14356] netlink: 'syz.2.3568': attribute type 3 has an invalid length. [ 450.950498][ T8970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.976247][T14356] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3568'. [ 451.008041][T11808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 451.149221][T11808] wlan1: Creating new IBSS network, BSSID e6:1c:6e:42:62:e8 [ 451.208074][T14360] netlink: 'syz.3.3570': attribute type 10 has an invalid length. [ 451.237686][T14360] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3570'. [ 451.287472][T14371] netlink: 'syz.5.3456': attribute type 3 has an invalid length. [ 451.338196][T14371] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3456'. [ 451.346051][T14373] netlink: 'syz.2.3583': attribute type 3 has an invalid length. [ 451.458145][T14385] netlink: 'syz.1.3574': attribute type 2 has an invalid length. [ 451.488914][T14385] netlink: 'syz.1.3574': attribute type 1 has an invalid length. [ 451.522162][T14385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.011065][T14413] netlink: 'syz.5.3582': attribute type 3 has an invalid length. [ 452.735845][T14445] FAULT_INJECTION: forcing a failure. [ 452.735845][T14445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.825000][T14445] CPU: 0 PID: 14445 Comm: syz.3.3595 Not tainted syzkaller #0 [ 452.833983][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.847090][T14445] Call Trace: [ 452.850993][T14445] [ 452.854698][T14445] dump_stack_lvl+0x188/0x250 [ 452.859851][T14445] ? show_regs_print_info+0x20/0x20 [ 452.866035][T14445] ? load_image+0x400/0x400 [ 452.870757][T14445] ? __lock_acquire+0x7d10/0x7d10 [ 452.876310][T14445] ? __alloc_skb+0x473/0x750 [ 452.881225][T14445] should_fail+0x38c/0x4c0 [ 452.885966][T14445] _copy_from_iter+0x22e/0x1170 [ 452.891024][T14445] ? __lock_acquire+0x7d10/0x7d10 [ 452.896166][T14445] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 452.901927][T14445] ? __virt_addr_valid+0x3c6/0x470 [ 452.907388][T14445] ? __phys_addr_symbol+0x2b/0x70 [ 452.912785][T14445] ? __check_object_size+0x30c/0x410 [ 452.918286][T14445] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 452.924313][T14445] ? skb_put+0x117/0x210 [ 452.928865][T14445] packet_sendmsg+0x3840/0x5060 [ 452.934407][T14445] ? __might_sleep+0xf0/0xf0 [ 452.939298][T14445] ? aa_sk_perm+0x7dc/0x910 [ 452.944436][T14445] ? packet_getsockopt+0x9a0/0x9a0 [ 452.950065][T14445] ? aa_sock_msg_perm+0x94/0x150 [ 452.955295][T14445] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 452.960959][T14445] ? security_socket_sendmsg+0x7c/0xa0 [ 452.967017][T14445] ? packet_getsockopt+0x9a0/0x9a0 [ 452.972499][T14445] ____sys_sendmsg+0x5b7/0x8f0 [ 452.977641][T14445] ? __sys_sendmsg_sock+0x30/0x30 [ 452.982997][T14445] ? import_iovec+0x6f/0xa0 [ 452.987553][T14445] ___sys_sendmsg+0x236/0x2e0 [ 452.992265][T14445] ? __sys_sendmsg+0x2a0/0x2a0 [ 452.997137][T14445] ? trace_event_raw_event_lock+0x270/0x270 [ 453.003213][T14445] ? vfs_write+0x8b2/0xd60 [ 453.007936][T14445] __se_sys_sendmsg+0x1af/0x290 [ 453.013168][T14445] ? __x64_sys_sendmsg+0x80/0x80 [ 453.018459][T14445] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 453.024946][T14445] ? lockdep_hardirqs_on+0x94/0x140 [ 453.030597][T14445] do_syscall_64+0x4c/0xa0 [ 453.035447][T14445] ? clear_bhb_loop+0x30/0x80 [ 453.040374][T14445] ? clear_bhb_loop+0x30/0x80 [ 453.045414][T14445] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.051528][T14445] RIP: 0033:0x7f9807fde819 [ 453.056131][T14445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.076831][T14445] RSP: 002b:00007f9806238028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.085701][T14445] RAX: ffffffffffffffda RBX: 00007f9808257fa0 RCX: 00007f9807fde819 [ 453.093873][T14445] RDX: 0000000000000085 RSI: 0000200000000b00 RDI: 0000000000000003 [ 453.102707][T14445] RBP: 00007f9806238090 R08: 0000000000000000 R09: 0000000000000000 [ 453.110977][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.119595][T14445] R13: 00007f9808258038 R14: 00007f9808257fa0 R15: 00007ffc30430128 [ 453.127868][T14445] [ 453.144353][ T150] wlan1: Trigger new scan to find an IBSS to join [ 453.353743][T14460] __nla_validate_parse: 6 callbacks suppressed [ 453.353763][T14460] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3599'. [ 453.620248][T14466] validate_nla: 3 callbacks suppressed [ 453.620451][T14466] netlink: 'syz.2.3603': attribute type 10 has an invalid length. [ 453.677919][T14476] netlink: 'syz.1.3605': attribute type 3 has an invalid length. [ 453.716065][T14466] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3603'. [ 453.729826][T14476] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3605'. [ 453.861376][T14489] device syzkaller0 entered promiscuous mode [ 454.092138][T14500] netlink: 'syz.2.3611': attribute type 10 has an invalid length. [ 454.129952][T14500] team0: Device veth1_macvtap failed to register rx_handler [ 454.541203][T14521] netlink: 'syz.2.3618': attribute type 10 has an invalid length. [ 454.600093][T14528] netlink: 'syz.1.3622': attribute type 3 has an invalid length. [ 454.643825][T14528] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3622'. [ 454.692962][T14521] team0: Device veth1_macvtap failed to register rx_handler [ 454.945070][T14529] netlink: 'syz.5.3620': attribute type 10 has an invalid length. [ 454.987170][T14529] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3620'. [ 455.032541][T14543] netlink: 'syz.4.3626': attribute type 3 has an invalid length. [ 455.081188][T14543] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3626'. [ 455.196761][T14559] netlink: 'syz.4.3626': attribute type 3 has an invalid length. [ 455.231582][T14551] netlink: 'syz.4.3626': attribute type 3 has an invalid length. [ 455.248255][T14558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.285589][T14558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.297035][T14559] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3626'. [ 455.326274][T14551] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3626'. [ 455.339856][T14558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.360366][T14558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.578014][T14563] netlink: 'syz.1.3629': attribute type 39 has an invalid length. [ 455.973531][T14587] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3634'. [ 456.178893][T14591] FAULT_INJECTION: forcing a failure. [ 456.178893][T14591] name failslab, interval 1, probability 0, space 0, times 0 [ 456.218553][T14591] CPU: 0 PID: 14591 Comm: syz.5.3637 Not tainted syzkaller #0 [ 456.226591][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 456.235563][T14596] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3639'. [ 456.236755][T14591] Call Trace: [ 456.236765][T14591] [ 456.252984][T14591] dump_stack_lvl+0x188/0x250 [ 456.257861][T14591] ? show_regs_print_info+0x20/0x20 [ 456.263349][T14591] ? load_image+0x400/0x400 [ 456.269378][T14591] should_fail+0x38c/0x4c0 [ 456.274446][T14591] should_failslab+0x5/0x20 [ 456.279213][T14591] slab_pre_alloc_hook+0x51/0xc0 [ 456.284441][T14591] kmem_cache_alloc_trace+0x47/0x2a0 [ 456.289834][T14591] ? sctp_add_bind_addr+0x89/0x350 [ 456.295063][T14591] sctp_add_bind_addr+0x89/0x350 [ 456.300128][T14591] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 456.306485][T14591] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 456.312692][T14591] ? sctp_v4_is_any+0x31/0x50 [ 456.317673][T14591] ? sctp_copy_one_addr+0x93/0x660 [ 456.322819][T14591] sctp_bind_addr_copy+0xaf/0x3c0 [ 456.328057][T14591] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 456.334502][T14591] sctp_connect_new_asoc+0x2f5/0x6a0 [ 456.339917][T14591] ? __sctp_connect+0xd80/0xd80 [ 456.345380][T14591] ? __local_bh_enable_ip+0x136/0x1c0 [ 456.351181][T14591] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 456.356754][T14591] ? security_sctp_bind_connect+0x85/0xb0 [ 456.362507][T14591] sctp_sendmsg+0x158d/0x2900 [ 456.367591][T14591] ? aa_sk_perm+0x7dc/0x910 [ 456.372229][T14591] ? sctp_getsockopt+0x8a0/0x8a0 [ 456.377616][T14591] ? aa_af_perm+0x340/0x340 [ 456.382275][T14591] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 456.389195][T14591] ? sock_rps_record_flow+0x17/0x3b0 [ 456.394682][T14591] ? inet_sendmsg+0xe5/0x2f0 [ 456.399302][T14591] ? inet_send_prepare+0x260/0x260 [ 456.404597][T14591] ____sys_sendmsg+0x5b7/0x8f0 [ 456.409679][T14591] ? __sys_sendmsg_sock+0x30/0x30 [ 456.414918][T14591] ? import_iovec+0x6f/0xa0 [ 456.419630][T14591] ___sys_sendmsg+0x236/0x2e0 [ 456.424530][T14591] ? __sys_sendmsg+0x2a0/0x2a0 [ 456.429428][T14591] ? trace_event_raw_event_lock+0x270/0x270 [ 456.435524][T14591] ? vfs_write+0x8b2/0xd60 [ 456.440257][T14591] __se_sys_sendmsg+0x1af/0x290 [ 456.445406][T14591] ? __x64_sys_sendmsg+0x80/0x80 [ 456.450722][T14591] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 456.456963][T14591] ? lockdep_hardirqs_on+0x94/0x140 [ 456.462308][T14591] do_syscall_64+0x4c/0xa0 [ 456.466976][T14591] ? clear_bhb_loop+0x30/0x80 [ 456.472070][T14591] ? clear_bhb_loop+0x30/0x80 [ 456.476858][T14591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.482780][T14591] RIP: 0033:0x7f5b550ce819 [ 456.487313][T14591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.508085][T14591] RSP: 002b:00007f5b53328028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.516780][T14591] RAX: ffffffffffffffda RBX: 00007f5b55347fa0 RCX: 00007f5b550ce819 [ 456.525043][T14591] RDX: 0000000000000054 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 456.533494][T14591] RBP: 00007f5b53328090 R08: 0000000000000000 R09: 0000000000000000 [ 456.541751][T14591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.550088][T14591] R13: 00007f5b55348038 R14: 00007f5b55347fa0 R15: 00007fff69aeb5f8 [ 456.558498][T14591] [ 456.853623][ T8970] wlan1: Trigger new scan to find an IBSS to join [ 456.994535][T14620] device lo entered promiscuous mode [ 457.668391][T14649] syz.3.3658[14649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.668732][T14649] syz.3.3658[14649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.894454][ T8970] wlan1: Creating new IBSS network, BSSID 06:11:ad:fa:26:ad [ 458.323404][T14674] tipc: Started in network mode [ 458.362595][T14674] tipc: Node identity e, cluster identity 4711 [ 458.382852][T14674] tipc: Node number set to 14 [ 458.400602][T14681] __nla_validate_parse: 9 callbacks suppressed [ 458.400621][T14681] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3669'. [ 458.650568][T14689] IPv6: Can't replace route, no match found [ 458.687527][T14689] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 458.838820][T14694] validate_nla: 9 callbacks suppressed [ 458.838868][T14694] netlink: 'syz.2.3675': attribute type 10 has an invalid length. [ 458.925530][T14694] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3675'. [ 458.985149][T14697] netlink: 'syz.4.3677': attribute type 21 has an invalid length. [ 459.107576][T14708] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3679'. [ 459.188802][T14717] netlink: 'syz.4.3683': attribute type 3 has an invalid length. [ 459.202447][T14717] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3683'. [ 459.427440][T14723] IPv6: Can't replace route, no match found [ 459.552855][T14727] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 459.751944][T14741] netlink: 'syz.5.3692': attribute type 10 has an invalid length. [ 459.798504][T14741] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3692'. [ 460.047910][T14748] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3696'. [ 460.067057][T14752] netlink: 'syz.1.3697': attribute type 3 has an invalid length. [ 460.131465][T14752] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3697'. [ 460.516756][T14768] syz.3.3702[14768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.517310][T14768] syz.3.3702[14768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.607109][T14772] IPv6: Can't replace route, no match found [ 460.742044][T14778] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 460.901259][T14782] netlink: 'syz.4.3708': attribute type 10 has an invalid length. [ 460.944641][ T8970] wlan1: Trigger new scan to find an IBSS to join [ 460.962329][T14782] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3708'. [ 461.209809][T14787] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3711'. [ 461.210683][T14793] netlink: 'syz.4.3712': attribute type 3 has an invalid length. [ 461.333923][T14793] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3712'. [ 461.893812][ T8970] wlan1: Trigger new scan to find an IBSS to join [ 462.380938][T14822] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 462.404744][T14831] netlink: 'syz.3.3722': attribute type 10 has an invalid length. [ 462.944011][ T150] wlan1: Trigger new scan to find an IBSS to join [ 464.765792][T14871] netlink: 'syz.3.3728': attribute type 3 has an invalid length. [ 464.774791][T14871] __nla_validate_parse: 1 callbacks suppressed [ 464.774809][T14871] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3728'. [ 464.853876][ T4281] wlan1: Trigger new scan to find an IBSS to join [ 464.907083][T14873] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3729'. [ 465.300175][T14903] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3739'. [ 465.302524][T14898] netlink: 'syz.2.3737': attribute type 3 has an invalid length. [ 465.378215][T14898] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3737'. [ 465.438945][T14909] netlink: 'syz.5.3738': attribute type 10 has an invalid length. [ 465.507293][T14909] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3738'. [ 465.790164][T14923] netlink: 'syz.1.3745': attribute type 3 has an invalid length. [ 465.813608][T14923] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3745'. [ 466.126398][T14936] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3747'. [ 466.176545][T14944] syz.5.3750[14944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.194007][T14944] syz.5.3750[14944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.880566][ T4214] wlan1: Trigger new scan to find an IBSS to join [ 466.880568][ T4281] wlan1: Trigger new scan to find an IBSS to join [ 467.142197][T14956] netlink: 'syz.2.3754': attribute type 10 has an invalid length. [ 467.212008][T14956] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3754'. [ 467.451787][T14983] netlink: 'syz.2.3762': attribute type 3 has an invalid length. [ 467.483559][T14983] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3762'. [ 467.635898][T14987] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3764'. [ 467.653383][T15003] FAULT_INJECTION: forcing a failure. [ 467.653383][T15003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 467.697273][T15004] FAULT_INJECTION: forcing a failure. [ 467.697273][T15004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.711032][T15004] CPU: 0 PID: 15004 Comm: syz.3.3768 Not tainted syzkaller #0 [ 467.718725][T15004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.728805][T15004] Call Trace: [ 467.732532][T15004] [ 467.735655][T15004] dump_stack_lvl+0x188/0x250 [ 467.740526][T15004] ? show_regs_print_info+0x20/0x20 [ 467.745929][T15004] ? load_image+0x400/0x400 [ 467.750535][T15004] ? _raw_spin_lock_irq+0xb7/0xf0 [ 467.755926][T15004] ? _raw_spin_lock_irqsave+0x100/0x100 [ 467.762589][T15004] should_fail+0x38c/0x4c0 [ 467.767306][T15004] copy_page_from_iter_atomic+0x43a/0x1540 [ 467.774038][T15004] ? pipe_zero+0x370/0x370 [ 467.779921][T15004] ? shmem_write_begin+0xcd/0x1a0 [ 467.785901][T15004] generic_perform_write+0x30b/0x550 [ 467.792476][T15004] ? atime_needs_update+0x780/0x780 [ 467.797893][T15004] ? grab_cache_page_write_begin+0xa0/0xa0 [ 467.804878][T15004] ? file_remove_privs+0x5d0/0x5d0 [ 467.810562][T15004] ? rwsem_write_trylock+0x135/0x1c0 [ 467.816212][T15004] ? clear_nonspinnable+0x60/0x60 [ 467.821468][T15004] __generic_file_write_iter+0x25f/0x4e0 [ 467.827335][T15004] generic_file_write_iter+0xa6/0x1b0 [ 467.833113][T15004] vfs_write+0x745/0xd60 [ 467.837388][T15004] ? file_end_write+0x250/0x250 [ 467.842564][T15004] ? __fget_files+0x40f/0x480 [ 467.848277][T15004] ? mutex_lock_nested+0x17/0x20 [ 467.853713][T15004] ? __fdget_pos+0x2bf/0x370 [ 467.858825][T15004] ? ksys_write+0x71/0x260 [ 467.863613][T15004] ksys_write+0x152/0x260 [ 467.868294][T15004] ? __ia32_sys_read+0x80/0x80 [ 467.873594][T15004] ? lockdep_hardirqs_on+0x94/0x140 [ 467.880388][T15004] do_syscall_64+0x4c/0xa0 [ 467.885776][T15004] ? clear_bhb_loop+0x30/0x80 [ 467.890986][T15004] ? clear_bhb_loop+0x30/0x80 [ 467.893768][ T8970] wlan1: Trigger new scan to find an IBSS to join [ 467.895936][T15004] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 467.909354][T15004] RIP: 0033:0x7f9807fde819 [ 467.914119][T15004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.936354][T15004] RSP: 002b:00007f9806238028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.945370][T15004] RAX: ffffffffffffffda RBX: 00007f9808257fa0 RCX: 00007f9807fde819 [ 467.956483][T15004] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000006 [ 467.966536][T15004] RBP: 00007f9806238090 R08: 0000000000000000 R09: 0000000000000000 [ 467.977132][T15004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.986459][T15004] R13: 00007f9808258038 R14: 00007f9808257fa0 R15: 00007ffc30430128 [ 467.995127][T15004] [ 468.004574][T15003] CPU: 0 PID: 15003 Comm: syz.4.3769 Not tainted syzkaller #0 [ 468.004758][T11808] wlan1: Creating new IBSS network, BSSID e2:7e:30:cc:83:fc [ 468.013063][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 468.013082][T15003] Call Trace: [ 468.013091][T15003] [ 468.013100][T15003] dump_stack_lvl+0x188/0x250 [ 468.013123][T15003] ? show_regs_print_info+0x20/0x20 [ 468.013142][T15003] ? load_image+0x400/0x400 [ 468.013159][T15003] ? __lock_acquire+0x7d10/0x7d10 [ 468.058856][T15003] should_fail+0x38c/0x4c0 [ 468.063362][T15003] prepare_alloc_pages+0x1e4/0x5f0 [ 468.068825][T15003] __alloc_pages+0x11b/0x480 [ 468.073512][T15003] ? zone_statistics+0x170/0x170 [ 468.079191][T15003] ? __rwlock_init+0x140/0x140 [ 468.084210][T15003] ? alloc_pages+0x438/0x550 [ 468.088894][T15003] __get_free_pages+0x8/0x30 [ 468.093733][T15003] kasan_populate_vmalloc_pte+0x21/0xc0 [ 468.099358][T15003] __apply_to_page_range+0x983/0xd10 [ 468.104738][T15003] ? kasan_populate_vmalloc+0x70/0x70 [ 468.110409][T15003] alloc_vmap_area+0x18d5/0x1a10 [ 468.116338][T15003] ? vm_map_ram+0xba0/0xba0 [ 468.121009][T15003] __get_vm_area_node+0x14f/0x2d0 [ 468.126223][T15003] __vmalloc_node_range+0xef/0x8b0 [ 468.131606][T15003] ? stack_map_alloc+0x31e/0x570 [ 468.137438][T15003] ? apparmor_capable+0x12c/0x190 [ 468.142768][T15003] ? bpf_lsm_capable+0x5/0x10 [ 468.148055][T15003] bpf_map_area_alloc+0xd4/0xe0 [ 468.153018][T15003] ? stack_map_alloc+0x31e/0x570 [ 468.158053][T15003] stack_map_alloc+0x31e/0x570 [ 468.162819][T15003] map_create+0x485/0x2350 [ 468.167869][T15003] __sys_bpf+0x30a/0x6f0 [ 468.172257][T15003] ? bpf_link_show_fdinfo+0x380/0x380 [ 468.177931][T15003] ? vtime_user_exit+0x2c8/0x3e0 [ 468.182970][T15003] __x64_sys_bpf+0x78/0x90 [ 468.187396][T15003] do_syscall_64+0x4c/0xa0 [ 468.191899][T15003] ? clear_bhb_loop+0x30/0x80 [ 468.196822][T15003] ? clear_bhb_loop+0x30/0x80 [ 468.202272][T15003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 468.208704][T15003] RIP: 0033:0x7f49e1947819 [ 468.213308][T15003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.236395][T15003] RSP: 002b:00007f49dfba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 468.246916][T15003] RAX: ffffffffffffffda RBX: 00007f49e1bc0fa0 RCX: 00007f49e1947819 [ 468.255252][T15003] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 468.263769][T15003] RBP: 00007f49dfba1090 R08: 0000000000000000 R09: 0000000000000000 [ 468.272492][T15003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.280758][T15003] R13: 00007f49e1bc1038 R14: 00007f49e1bc0fa0 R15: 00007ffe5b5701b8 [ 468.289257][T15003] [ 468.304625][ T4214] wlan1: Creating new IBSS network, BSSID ea:b3:11:6b:38:13 [ 468.588951][T15018] netlink: 'syz.4.3772': attribute type 27 has an invalid length. [ 468.649023][T15018] netlink: 'syz.4.3772': attribute type 4 has an invalid length. [ 468.775851][T15030] netlink: 'syz.2.3773': attribute type 10 has an invalid length. [ 468.882237][T15039] netlink: 'syz.1.3777': attribute type 3 has an invalid length. [ 469.068190][T15046] syz.2.3778[15046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.068829][T15046] syz.2.3778[15046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.373939][T15061] device bridge_slave_1 left promiscuous mode [ 469.524569][T15061] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.612630][T15061] device bridge_slave_0 left promiscuous mode [ 469.662945][T15061] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.764014][T15061] bond0: (slave bridge0): Releasing backup interface [ 470.025853][T15078] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 470.197772][T15084] validate_nla: 1 callbacks suppressed [ 470.197790][T15084] netlink: 'syz.3.3792': attribute type 3 has an invalid length. [ 470.274751][T15084] __nla_validate_parse: 6 callbacks suppressed [ 470.274772][T15084] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3792'. [ 470.619503][T15106] netlink: 'syz.2.3795': attribute type 10 has an invalid length. [ 470.669763][T15106] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3795'. [ 470.903165][T15116] netlink: 17071 bytes leftover after parsing attributes in process `syz.4.3801'. [ 471.139869][T15127] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.257296][T15135] netlink: 'syz.1.3805': attribute type 21 has an invalid length. [ 471.287081][T15135] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3805'. [ 471.335337][T15138] netlink: 'syz.5.3807': attribute type 3 has an invalid length. [ 471.367844][T15138] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3807'. [ 471.398159][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3808'. [ 471.852485][T15164] netlink: 17071 bytes leftover after parsing attributes in process `syz.2.3818'. [ 471.897821][ T150] wlan1: Trigger new scan to find an IBSS to join [ 472.142314][T15182] netlink: 'syz.5.3823': attribute type 21 has an invalid length. [ 472.142661][T15185] netlink: 'syz.2.3826': attribute type 2 has an invalid length. [ 472.181281][T15182] netlink: 'syz.5.3823': attribute type 6 has an invalid length. [ 472.202174][T15193] netlink: 'syz.4.3828': attribute type 3 has an invalid length. [ 472.204988][T15182] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3823'. [ 472.224429][T15185] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 472.247278][T15193] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3828'. [ 472.264245][T15185] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3826'. [ 472.333394][T15185] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 472.947590][T15240] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 473.896247][T11786] wlan1: Trigger new scan to find an IBSS to join [ 473.913396][ T4281] wlan1: Trigger new scan to find an IBSS to join [ 474.244234][ T8970] wlan1: Creating new IBSS network, BSSID 02:d4:01:90:f7:13 [ 474.551403][T15264] device syzkaller0 entered promiscuous mode [ 474.601130][T15264] team0: Device wg1 is up. Set it down before adding it as a team port [ 475.368594][T15298] validate_nla: 3 callbacks suppressed [ 475.368615][T15298] netlink: 'syz.2.3850': attribute type 10 has an invalid length. [ 475.430314][T15298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.434517][T15301] __nla_validate_parse: 4 callbacks suppressed [ 475.434553][T15301] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.3851'. [ 475.476143][T15298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.502036][T15298] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 475.752947][T15320] netlink: 'syz.3.3857': attribute type 3 has an invalid length. [ 475.760724][T15319] netlink: 'syz.4.3858': attribute type 6 has an invalid length. [ 475.764159][T15320] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3857'. [ 476.287185][T15339] netlink: 'syz.4.3865': attribute type 10 has an invalid length. [ 476.323073][T15339] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3865'. [ 476.360857][T15342] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3867'. [ 476.872834][T15355] netlink: 'syz.3.3873': attribute type 3 has an invalid length. [ 476.906659][T15355] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3873'. [ 476.942392][ T4281] wlan1: Trigger new scan to find an IBSS to join [ 476.950065][T11801] wlan1: Trigger new scan to find an IBSS to join [ 477.409177][T15370] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3879'. [ 477.461613][T15373] netlink: 'syz.3.3880': attribute type 10 has an invalid length. [ 477.517065][T15373] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3880'. [ 477.914536][T15385] netlink: 'syz.5.3885': attribute type 3 has an invalid length. [ 477.951381][T15385] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3885'. [ 477.969659][ T150] wlan1: Creating new IBSS network, BSSID 02:89:77:a6:e3:42 [ 478.156798][T15393] hsr0: VLAN not yet supported [ 478.436870][T15402] netlink: 'syz.5.3892': attribute type 1 has an invalid length. [ 478.477630][T15402] netlink: 'syz.5.3892': attribute type 4 has an invalid length. [ 478.498710][T15402] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3892'. [ 479.502210][T15430] tap0: tun_chr_ioctl cmd 35108 [ 479.600163][T15437] netlink: 'syz.1.3905': attribute type 10 has an invalid length. [ 479.643051][T15437] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 479.684424][T15440] syz.5.3906[15440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.684519][T15440] syz.5.3906[15440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.893841][T11786] wlan1: Creating new IBSS network, BSSID 8a:90:ca:0a:80:6d [ 480.185626][T15456] sctp: [Deprecated]: syz.3.3911 (pid 15456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.185626][T15456] Use struct sctp_sack_info instead [ 480.769202][T15468] netlink: 'syz.5.3919': attribute type 1 has an invalid length. [ 480.804307][T15468] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3919'. [ 480.946187][T15472] netlink: 'syz.3.3920': attribute type 10 has an invalid length. [ 480.961866][T15472] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3920'. [ 480.986265][T15472] device hsr0 entered promiscuous mode [ 482.362439][T15498] : port 1(ip6gretap0) entered blocking state [ 482.430431][T15498] : port 1(ip6gretap0) entered disabled state [ 482.461793][T15498] device ip6gretap0 entered promiscuous mode [ 484.012274][T15529] tap0: tun_chr_ioctl cmd 35108 [ 484.048902][T15534] netlink: 'syz.4.3943': attribute type 13 has an invalid length. [ 484.088138][T15534] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3943'. [ 484.233788][T15540] netlink: 'syz.2.3949': attribute type 13 has an invalid length. [ 484.242811][T15540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3949'. [ 484.269379][T15540] syz_tun: refused to change device tx_queue_len [ 484.314067][T15540] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 484.426276][T15543] netlink: 'syz.2.3949': attribute type 10 has an invalid length. [ 484.801931][T15543] team0: Port device netdevsim0 added [ 486.615345][T15576] tap0: tun_chr_ioctl cmd 35108 [ 487.051856][ T4196] Bluetooth: hci3: wrong event for mode 0 [ 487.152608][T15597] netlink: 'syz.2.3968': attribute type 10 has an invalid length. [ 489.828501][T15597] team0 (unregistering): Port device team_slave_0 removed [ 489.879640][T15597] team0 (unregistering): Port device team_slave_1 removed [ 489.934486][T15597] team0 (unregistering): Port device netdevsim0 removed [ 489.980699][T15602] netlink: 'syz.5.3970': attribute type 13 has an invalid length. [ 489.984062][T11786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 490.010613][T15602] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.3970'. [ 490.040868][T15614] netlink: 'syz.3.3973': attribute type 10 has an invalid length. [ 490.069067][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.108966][T15614] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 490.209988][T15624] netlink: 'syz.1.3978': attribute type 10 has an invalid length. [ 490.248735][T15627] syz.2.3979[15627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.248827][T15627] syz.2.3979[15627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.472948][T15624] bond0: (slave bond_slave_0): Releasing backup interface [ 490.549380][T15635] tap0: tun_chr_ioctl cmd 35108 [ 490.739339][T15652] netlink: 'syz.5.3983': attribute type 1 has an invalid length. [ 490.748152][T15652] netlink: 'syz.5.3983': attribute type 4 has an invalid length. [ 490.758005][T15652] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3983'. [ 492.554130][T15656] netlink: 'syz.2.3985': attribute type 27 has an invalid length. [ 492.841729][T15663] team0: Port device team_slave_0 removed [ 492.883592][T15673] netlink: 'syz.5.3986': attribute type 10 has an invalid length. [ 493.000214][T15673] team0 (unregistering): Port device team_slave_1 removed [ 493.322950][T15685] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.3996'. [ 493.785556][T15705] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4004'. [ 493.810790][T15705] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4004'. [ 493.871479][T15712] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4004'. [ 494.206323][T15723] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4013'. [ 494.248334][T15723] bridge_slave_1: default FDB implementation only supports local addresses [ 494.329278][T15730] netlink: 'syz.2.4015': attribute type 10 has an invalid length. [ 494.436195][T15730] bond0: (slave bond_slave_0): Releasing backup interface [ 494.944898][T15754] netlink: 'syz.4.4023': attribute type 21 has an invalid length. [ 494.974617][T15754] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4023'. [ 495.028522][T15754] netlink: 'syz.4.4023': attribute type 4 has an invalid length. [ 495.067524][T15754] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4023'. [ 495.473040][T15777] device bond0 entered promiscuous mode [ 495.493691][T15777] device bond_slave_1 entered promiscuous mode [ 495.503372][T15777] device batadv_slave_0 entered promiscuous mode [ 495.696287][T15785] netlink: 'syz.3.4037': attribute type 10 has an invalid length. [ 495.771265][T15785] bond0: (slave bond_slave_0): Releasing backup interface [ 495.861672][T15789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4040'. [ 495.965812][T15799] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4053'. [ 496.016256][T15799] netlink: 6316 bytes leftover after parsing attributes in process `syz.2.4053'. [ 497.032181][T15833] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 497.038787][T15833] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 497.218786][T15839] netlink: 'syz.5.4058': attribute type 10 has an invalid length. [ 497.244092][T15841] netlink: 'syz.2.4059': attribute type 29 has an invalid length. [ 497.305692][T15839] bond0: (slave bond_slave_0): Releasing backup interface [ 497.392995][T15841] netlink: 'syz.2.4059': attribute type 29 has an invalid length. [ 497.412663][T15840] netlink: 'syz.2.4059': attribute type 29 has an invalid length. [ 498.388405][ T4281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.412801][ T4281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.614209][T15888] netlink: 20404 bytes leftover after parsing attributes in process `syz.1.4077'. [ 500.822667][T15901] validate_nla: 1 callbacks suppressed [ 500.822687][T15901] netlink: 'syz.3.4083': attribute type 29 has an invalid length. [ 500.894042][T15901] netlink: 'syz.3.4083': attribute type 29 has an invalid length. [ 500.918760][T15902] netlink: 'syz.3.4083': attribute type 29 has an invalid length. [ 500.933820][T15906] netlink: 'syz.3.4083': attribute type 29 has an invalid length. [ 501.161546][T15916] netlink: 'syz.1.4089': attribute type 10 has an invalid length. [ 501.190537][T15916] bond0: (slave Q'Y]cÊRݘOC‰ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 501.496961][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.504865][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.504692][T15932] netlink: 'syz.4.4095': attribute type 21 has an invalid length. [ 502.526903][T15932] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.4095'. [ 503.573687][ T8171] Bluetooth: hci0: command 0x0406 tx timeout [ 504.327506][T11801] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.249919][ T150] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 508.015065][T11786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 508.027279][T11808] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 508.626077][T16017] netlink: 'syz.4.4132': attribute type 39 has an invalid length. [ 508.699485][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 512.192743][T16080] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4158'. [ 512.233769][T16080] bridge_slave_1: default FDB implementation only supports local addresses [ 512.273857][T16084] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4158'. [ 512.361241][T16090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4164'. [ 514.260641][T16094] netlink: 'syz.1.4166': attribute type 39 has an invalid length. [ 514.425002][T16100] device syzkaller0 entered promiscuous mode [ 514.778800][T16127] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4179'. [ 514.812153][T16127] bridge_slave_1: default FDB implementation only supports local addresses [ 514.840503][T16127] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4179'. [ 515.709811][T16192] netlink: 'syz.5.4209': attribute type 29 has an invalid length. [ 515.722472][T16192] netlink: 'syz.5.4209': attribute type 29 has an invalid length. [ 515.738444][T16192] netlink: 'syz.5.4209': attribute type 29 has an invalid length. [ 515.762821][T16192] netlink: 'syz.5.4209': attribute type 29 has an invalid length. [ 516.530297][T16240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4232'. [ 516.554651][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4232'. [ 518.318948][T16292] netlink: 'syz.4.4253': attribute type 29 has an invalid length. [ 518.349110][T16292] netlink: 'syz.4.4253': attribute type 29 has an invalid length. [ 518.366936][T16292] netlink: 'syz.4.4253': attribute type 29 has an invalid length. [ 518.565553][T16303] tap0: tun_chr_ioctl cmd 1074025677 [ 518.572743][T16303] tap0: linktype set to 804 [ 520.710263][T16333] tap0: tun_chr_ioctl cmd 2147767520 [ 521.060853][T16353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4279'. [ 521.103687][T16363] ------------[ cut here ]------------ [ 521.110241][T16363] trace type BPF program uses run-time allocation [ 521.126512][T16363] WARNING: CPU: 1 PID: 16363 at kernel/bpf/verifier.c:11746 check_map_prog_compatibility+0x6cf/0x870 [ 521.143059][T16363] Modules linked in: [ 521.160561][T16363] CPU: 1 PID: 16363 Comm: syz.4.4283 Not tainted syzkaller #0 [ 521.171267][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.196078][T16363] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 521.203372][T16363] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 82 d0 ec 0b 01 48 c7 c7 80 3e 31 8a e8 01 0f 28 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 521.245996][T16363] RSP: 0018:ffffc9000331f450 EFLAGS: 00010246 [ 521.263862][T16363] RAX: a805a29e0a400100 RBX: 0000000000000001 RCX: 0000000000080000 [ 521.277605][T16363] RDX: ffffc900038f2000 RSI: 0000000000004bd5 RDI: 0000000000004bd6 [ 521.287212][T16363] RBP: ffff888064830000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 521.296714][T16363] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc90001476038 [ 521.306617][T16363] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200028ec07 [ 521.320769][T16363] FS: 00007f49dfba16c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 521.332457][T16363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.345325][T16363] CR2: 00007f816ec47ff8 CR3: 000000004f5c9000 CR4: 00000000003506e0 [ 521.355372][T16363] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 521.365073][T16363] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 521.374059][T16363] Call Trace: [ 521.377787][T16363] [ 521.381272][T16363] resolve_pseudo_ldimm64+0x681/0x1040 [ 521.387651][T16363] ? check_attach_btf_id+0xe70/0xe70 [ 521.394324][T16363] ? __mark_reg_known+0x1a0/0x1a0 [ 521.399563][T16363] bpf_check+0x4e00/0xf270 [ 521.405514][T16363] ? mark_lock+0x94/0x320 [ 521.410713][T16363] ? __lock_acquire+0x13bc/0x7d10 [ 521.418215][T16363] ? bpf_get_btf_vmlinux+0x10/0x10 [ 521.424225][T16363] ? mark_lock+0x94/0x320 [ 521.430041][T16363] ? verify_lock_unused+0x140/0x140 [ 521.436893][T16363] ? __mutex_trylock_common+0x155/0x260 [ 521.443185][T16363] ? verify_lock_unused+0x140/0x140 [ 521.449109][T16363] ? rcu_lock_release+0x5/0x20 [ 521.454792][T16363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 521.462201][T16363] ? lock_chain_count+0x20/0x20 [ 521.467473][T16363] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 521.474457][T16363] ? lockdep_hardirqs_on+0x94/0x140 [ 521.479983][T16363] ? ktime_get_with_offset+0xff/0x320 [ 521.485952][T16363] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 521.492485][T16363] ? ktime_get_real_ts64+0x440/0x440 [ 521.502837][T16363] ? pcpu_alloc+0x1121/0x1770 [ 521.508006][T16363] ? __might_fault+0xb3/0x110 [ 521.513011][T16363] ? memset+0x1e/0x40 [ 521.518295][T16363] ? bpf_obj_name_cpy+0x190/0x1d0 [ 521.524572][T16363] bpf_prog_load+0xfec/0x1510 [ 521.530418][T16363] ? map_freeze+0x350/0x350 [ 521.536336][T16363] ? __might_fault+0xb7/0x110 [ 521.541725][T16363] ? __might_fault+0xb3/0x110 [ 521.546901][T16363] ? bpf_lsm_bpf+0x5/0x10 [ 521.552152][T16363] ? security_bpf+0x7a/0xa0 [ 521.557652][T16363] __sys_bpf+0x532/0x6f0 [ 521.562985][T16363] ? bpf_link_show_fdinfo+0x380/0x380 [ 521.568961][T16363] ? vtime_user_exit+0x2c8/0x3e0 [ 521.574943][T16363] __x64_sys_bpf+0x78/0x90 [ 521.580605][T16363] do_syscall_64+0x4c/0xa0 [ 521.585890][T16363] ? clear_bhb_loop+0x30/0x80 [ 521.591692][T16363] ? clear_bhb_loop+0x30/0x80 [ 521.597494][T16363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 521.604634][T16363] RIP: 0033:0x7f49e1947819 [ 521.609606][T16363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.633978][T16363] RSP: 002b:00007f49dfba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.643192][T16363] RAX: ffffffffffffffda RBX: 00007f49e1bc0fa0 RCX: 00007f49e1947819 [ 521.652062][T16363] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 521.660951][T16363] RBP: 00007f49e19ddc91 R08: 0000000000000000 R09: 0000000000000000 [ 521.669641][T16363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.678245][T16363] R13: 00007f49e1bc1038 R14: 00007f49e1bc0fa0 R15: 00007ffe5b5701b8 [ 521.687084][T16363] [ 521.690992][T16363] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 521.699224][T16363] CPU: 1 PID: 16363 Comm: syz.4.4283 Not tainted syzkaller #0 [ 521.707124][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.718550][T16363] Call Trace: [ 521.721851][T16363] [ 521.724859][T16363] dump_stack_lvl+0x188/0x250 [ 521.729544][T16363] ? show_regs_print_info+0x20/0x20 [ 521.735390][T16363] ? load_image+0x400/0x400 [ 521.741031][T16363] panic+0x2e5/0x810 [ 521.745376][T16363] ? bpf_jit_dump+0xd0/0xd0 [ 521.750040][T16363] ? check_map_prog_compatibility+0x6cf/0x870 [ 521.756455][T16363] __warn+0x248/0x2b0 [ 521.760592][T16363] ? check_map_prog_compatibility+0x6cf/0x870 [ 521.767381][T16363] report_bug+0x1b7/0x2e0 [ 521.771910][T16363] handle_bug+0x3a/0x70 [ 521.776612][T16363] exc_invalid_op+0x16/0x40 [ 521.781407][T16363] asm_exc_invalid_op+0x16/0x20 [ 521.786704][T16363] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 521.793593][T16363] Code: ff e8 d5 b6 ef ff 48 c7 c6 20 42 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 82 d0 ec 0b 01 48 c7 c7 80 3e 31 8a e8 01 0f 28 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 521.813717][T16363] RSP: 0018:ffffc9000331f450 EFLAGS: 00010246 [ 521.819898][T16363] RAX: a805a29e0a400100 RBX: 0000000000000001 RCX: 0000000000080000 [ 521.828553][T16363] RDX: ffffc900038f2000 RSI: 0000000000004bd5 RDI: 0000000000004bd6 [ 521.837265][T16363] RBP: ffff888064830000 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 521.846387][T16363] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffffc90001476038 [ 521.856459][T16363] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200028ec07 [ 521.864812][T16363] resolve_pseudo_ldimm64+0x681/0x1040 [ 521.870766][T16363] ? check_attach_btf_id+0xe70/0xe70 [ 521.876353][T16363] ? __mark_reg_known+0x1a0/0x1a0 [ 521.881963][T16363] bpf_check+0x4e00/0xf270 [ 521.887356][T16363] ? mark_lock+0x94/0x320 [ 521.892070][T16363] ? __lock_acquire+0x13bc/0x7d10 [ 521.897305][T16363] ? bpf_get_btf_vmlinux+0x10/0x10 [ 521.902609][T16363] ? mark_lock+0x94/0x320 [ 521.907347][T16363] ? verify_lock_unused+0x140/0x140 [ 521.912857][T16363] ? __mutex_trylock_common+0x155/0x260 [ 521.918859][T16363] ? verify_lock_unused+0x140/0x140 [ 521.924172][T16363] ? rcu_lock_release+0x5/0x20 [ 521.929206][T16363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 521.936272][T16363] ? lock_chain_count+0x20/0x20 [ 521.942606][T16363] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 521.949948][T16363] ? lockdep_hardirqs_on+0x94/0x140 [ 521.955701][T16363] ? ktime_get_with_offset+0xff/0x320 [ 521.961991][T16363] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 521.968641][T16363] ? ktime_get_real_ts64+0x440/0x440 [ 521.974398][T16363] ? pcpu_alloc+0x1121/0x1770 [ 521.979472][T16363] ? __might_fault+0xb3/0x110 [ 521.984391][T16363] ? memset+0x1e/0x40 [ 521.988597][T16363] ? bpf_obj_name_cpy+0x190/0x1d0 [ 521.993953][T16363] bpf_prog_load+0xfec/0x1510 [ 521.999161][T16363] ? map_freeze+0x350/0x350 [ 522.004043][T16363] ? __might_fault+0xb7/0x110 [ 522.009260][T16363] ? __might_fault+0xb3/0x110 [ 522.014215][T16363] ? bpf_lsm_bpf+0x5/0x10 [ 522.018991][T16363] ? security_bpf+0x7a/0xa0 [ 522.024481][T16363] __sys_bpf+0x532/0x6f0 [ 522.028741][T16363] ? bpf_link_show_fdinfo+0x380/0x380 [ 522.034306][T16363] ? vtime_user_exit+0x2c8/0x3e0 [ 522.039569][T16363] __x64_sys_bpf+0x78/0x90 [ 522.044117][T16363] do_syscall_64+0x4c/0xa0 [ 522.048957][T16363] ? clear_bhb_loop+0x30/0x80 [ 522.053994][T16363] ? clear_bhb_loop+0x30/0x80 [ 522.059204][T16363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 522.065377][T16363] RIP: 0033:0x7f49e1947819 [ 522.069899][T16363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.091506][T16363] RSP: 002b:00007f49dfba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.100195][T16363] RAX: ffffffffffffffda RBX: 00007f49e1bc0fa0 RCX: 00007f49e1947819 [ 522.108299][T16363] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 522.116640][T16363] RBP: 00007f49e19ddc91 R08: 0000000000000000 R09: 0000000000000000 [ 522.125509][T16363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.134029][T16363] R13: 00007f49e1bc1038 R14: 00007f49e1bc0fa0 R15: 00007ffe5b5701b8 [ 522.143161][T16363] [ 522.146526][T16363] Kernel Offset: disabled [ 522.151244][T16363] Rebooting in 86400 seconds..