last executing test programs: 16.378881225s ago: executing program 3 (id=9115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0xf100, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.222425854s ago: executing program 3 (id=9117): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x7, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 15.102615658s ago: executing program 3 (id=9124): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000a07f"], 0x48) 14.835291393s ago: executing program 3 (id=9126): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000200c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000100"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x7, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x7}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000001c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xffffffff, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x50) 13.730775056s ago: executing program 3 (id=9130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x60000000}, 0x2c) 13.350141688s ago: executing program 3 (id=9133): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x6, 0x95, &(0x7f0000000000)=""/149}, 0x94) socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x1, 0x106) (async) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x400c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x4}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x4}, {0xa, 0x4}, {0xf, 0x4}, {0xe}, {0x9}]}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x67, 0x0, 0x1, 0xfffffffb, 0x10000}, 0x28) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x4}, {0xa, 0x4}, {0xf, 0x4}, {0xe}, {0x9}]}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x67, 0x0, 0x1, 0xfffffffb, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x12, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018190000", @ANYRES32=r4, @ANYBLOB="f24ee002ff001600"], &(0x7f00000007c0)='syzkaller\x00', 0x196, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xf, r7, 0x8, &(0x7f0000000a40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0xfffffffb, 0x400}, 0x10, 0x0, r1, 0x2, 0x0, &(0x7f0000000b80)=[{0x2, 0x4, 0x3, 0x3}, {0x4, 0x3, 0xc, 0x7}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000e40)={r4, &(0x7f0000000c80)="a4fb6bfbcf97cab70f9752130d9c4272e179e1b9eb3609a23c15859d13abec97a47f6679690c1f21019878d1a0dab63a582fde66db2d3e0a534edc3209b4ea37e3f5ae6a49891611247fff36770ec44743cc5cdc41ab9d72c73bc481b18b0e10d91264e1cf43b2fd2bfdd67355c54009b3219c4f01ee1f9415f2c06c34eb38a187a3a0bcba24edcc9791d9c8b5b89a221d13b6e4b45e10f3489036eb35a4ec5f79606069de6d1566c8bd00942e0b40a9988939e9ecae60cfa8113a550d1dd4e94b3d14c2f23d614c66ea493321ed3f4119c8", &(0x7f0000000d80)=""/179}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000b00200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}, {&(0x7f0000000200)}], 0x2}, 0xbf28fa041556e426) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x5, 0x0, 0xee5, 0x0, r4, 0x401, '\x00', r8, r7, 0x1, 0x5, 0x0, 0xd}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r10}, 0x27) 11.718749781s ago: executing program 4 (id=9140): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x11e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 10.980847623s ago: executing program 4 (id=9141): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 10.741891377s ago: executing program 4 (id=9145): r0 = socket$kcm(0x2c, 0x3, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5, 0xffffffffffffffff, 0x6000}, 0xc) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x8, &(0x7f00000004c0)=@raw=[@tail_call, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x38}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r5, @ANYBLOB="92697ca7fd32ac854d8c7e02f6a057c3bac43c0100"], 0x50) socketpair(0x3, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x401c5820, &(0x7f0000000780)=0xffffffffffffffff) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000100)=r11, 0x4) 9.313248069s ago: executing program 4 (id=9152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000000000005eefc9bb9fd1b208", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) sendmsg$inet(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x8011) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@cgroup=r2, 0x13, 0x1, 0x5, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)={@fallback, r2, 0x11, 0x3, r3, @void, @value=r2, @void, @void, r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r5, r1, 0x23, 0x1, r1, @void, @value=r1, @void, @void, r4}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) 8.693490414s ago: executing program 4 (id=9158): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000480), &(0x7f0000000300)=""/219}, 0x20) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 8.512106634s ago: executing program 4 (id=9160): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.7306284s ago: executing program 0 (id=9169): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0xfffffffffffffffe) 4.344913862s ago: executing program 0 (id=9170): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000027c0)="d8000018300009116144f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4.277600646s ago: executing program 1 (id=9171): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2}, 0x27) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000007c0)="e79c22", &(0x7f00000009c0)=""/215}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) 4.258077087s ago: executing program 0 (id=9172): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000000c0)="bf", 0x1}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001100)="3d1fb66a38fb071293c031a45b9fdf262c767f87235568e23284e239219a4c2d176189628ba294fd92c4293de93b62dee1ba012b", 0x34}], 0x1}, 0x8011) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 4.102200676s ago: executing program 0 (id=9173): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1, 0x0, 0x0, 0xa00}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90) 3.916605876s ago: executing program 1 (id=9174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r3}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x11e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 3.874001409s ago: executing program 0 (id=9176): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffff8}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000b40)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r4, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000880), 0x0, &(0x7f00000009c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @rand_addr=0x64010100}}}], 0x40}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xab, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0xe40, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xfa, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r10) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.520183289s ago: executing program 1 (id=9178): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xfd, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x8, 0x0, 0x0}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x8008}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xffff, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x6, [@volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @enum64={0x6, 0x9, 0x0, 0x13, 0x0, 0x1, [{0x3, 0x204, 0x4}, {0xa, 0x5, 0xbb3}, {0x1, 0xffff5560, 0x10}, {0x10, 0x8, 0xa}, {0x2, 0x8001, 0x7}, {0x8, 0x800, 0x10000}, {0x5, 0x40, 0x1}, {0xb, 0x1, 0x3ff}, {0xe, 0x101, 0xe}]}, @float={0xa, 0x0, 0x0, 0x10, 0x8}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x2}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f]}}, &(0x7f00000001c0)=""/47, 0xda, 0x2f, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x10001, 0x8000, 0x1, 0x40410, r4, 0x800, '\x00', 0x0, r3, 0x4, 0x5, 0x1, 0x3}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r5, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 2.97726935s ago: executing program 1 (id=9180): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000000000800f2000000007f0000000175000000000000"], 0x0, 0x1a}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x27, 0xf, 0x0, &(0x7f0000000180)="553d87000000120b334eecd80f0645", 0x0, 0x8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x14, &(0x7f0000000500), 0x4) 2.546049095s ago: executing program 1 (id=9181): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000004000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 2.403645833s ago: executing program 1 (id=9182): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x826}, 0x10a0711fcf19841, 0x0, 0x401, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000003d3291c0d100000005dd0a00000000010073018f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20000, 0x0, 0x1}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004000)=ANY=[@ANYBLOB="000036078c6f", @ANYRESOCT=r2, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="0000000000000000000000000000000000000000000000000000000021e4f0b1bb0178e5c1816134a300aac2fe6163749e9cdcd7060655863f80e351708323e2f8b70507e2a0d24b59125df71d6fe663042c777bf414180c74da16aa21f7057f1c1c765835fa3c73a308aab0366d5d16d666"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="bca9adc614c937bf3a21f007e72133", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) 1.805458177s ago: executing program 2 (id=9186): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000000c0)="bf", 0x1}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001100)="3d1fb66a38fb071293c031a45b9fdf262c767f87235568e23284e239219a4c2d176189628ba294fd92c4293de93b62dee1ba012b64b6924daefccaf984c4d98b0eb840865ce5de7d2aafdf21e942", 0x4e}], 0x1}, 0x8011) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 1.720629302s ago: executing program 2 (id=9187): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x4, 0x1, 0x0, 0x5, 0x1, 0x5, [{0xb, 0x9, 0x5}]}]}, {0x0, [0x2e, 0x2e, 0x61, 0x2e, 0x61]}}, &(0x7f00000005c0)=""/223, 0x37, 0xdf, 0x1}, 0x28) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)="a7", 0x1}], 0x1}, 0xc081) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b969", 0x7eae}], 0x1}, 0x4009080) sendmsg$inet(0xffffffffffffffff, 0x0, 0x404c015) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffffb) r5 = socket$kcm(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x0, &(0x7f00000005c0)="85e312e1f6060e877470816e4444adc7f0816355796e5d8aed937809fdc729b44174fb84bdfef096931c2d3a4415fa932ed9b461ec79f28434f2628e3972250b413d9dd2a3ea8f746ccab3d44a95031f14e051f32893e7ecd029b9c0fac10ec1242d0455f76a138bb8d44beb7f4237619d9502fbf79c6e908435c8ef1c5e825a6609918bb65e2fa3be78c967781f4ec7b54139a2be684f42c9a352f001ab5c89028dc80a03fcddc44785cc0a4cefe5262f02fd1f7fdbc8c3f530382fb645cc3e19efca6e9e5ed4c7d2290cc6ec5e2d7964e50d202ceae26e02c6f4c5", 0xdc, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f00000008c0)="72a26e8f82fecbfd6f4e8cf2d35fa1e7625f9d66e606d929b27c1f2d3f734a0ccf65762b7929496b771e5a23ab4acd9e70f595f88db64c920ffc6ad7f822ff40c81d5a3ed3344379f505509b88a71513df3c16b8af7307724be2a7a80ee09c7212cd1362fd6558dc8dfc580a2af5f6adc5813090576fb72be2789811fa98d5c00a8f25d45ed383635005e72cd1d13dc050ee1eec5f498c67cb487862edc026b7c81a27fc201954d4fea546b4b8a0d4d779b332d0a9d8f83260c3d772b48dcb77c86f43cf") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r8, r7, 0x0, 0x10, &(0x7f0000000740)='veth1_virt_wifi\x00'}, 0x30) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xf6, 0x2, 0x1, 0x8, 0x0, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5be000, 0x0, @perf_config_ext={0x6, 0x8}, 0x600, 0x0, 0x6, 0xe, 0x100000000, 0xfff, 0x4, 0x0, 0x9, 0x0, 0xff}, r8, 0x6, r1, 0xa) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000040), 0xcf) 789.599375ms ago: executing program 2 (id=9188): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) (async, rerun: 32) socket$kcm(0x21, 0x2, 0x2) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)=0x20000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007"], 0x0, 0x5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x2, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 632.207844ms ago: executing program 2 (id=9189): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x52e0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf2"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) 545.378329ms ago: executing program 2 (id=9190): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000000000800f2000000007f0000000175000000000000"], 0x0, 0x1a}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x14, &(0x7f0000000500), 0x4) 308.92µs ago: executing program 0 (id=9191): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000000000800f2000000007f0000000175000000000000"], 0x0, 0x1a}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000040000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x27, 0xf, 0x0, &(0x7f0000000180)="553d87000000120b334eecd80f0645", 0x0, 0x8, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x14, &(0x7f0000000500), 0x4) 0s ago: executing program 2 (id=9192): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="14000ec016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): W filter on device bond0 [ 1447.938338][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1447.956654][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1447.991346][T23857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.024789][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1448.048972][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1448.080399][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.087643][ T4766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.153446][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1448.180807][T24110] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6293'. [ 1448.293209][T24110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1448.364527][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1448.393898][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1448.549021][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.556284][T15107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.029387][T24135] netlink: 'syz.4.6298': attribute type 11 has an invalid length. [ 1449.113752][T24135] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6298'. [ 1449.408102][T24134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.493575][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1452.510670][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1452.529738][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1452.546690][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1452.640933][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1452.671237][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1452.693118][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1452.713877][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1452.736557][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1452.751261][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1452.823723][T15107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1452.837264][T23857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1455.349162][T22078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1455.377714][T22078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1455.414316][T23857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.500840][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1455.531364][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1455.584762][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1455.609510][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1455.654515][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1455.695582][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1455.731231][T23857] device veth0_vlan entered promiscuous mode [ 1455.772341][T23857] device veth1_vlan entered promiscuous mode [ 1455.910012][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1455.939398][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1455.963004][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1455.991364][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1456.013464][T23857] device veth0_macvtap entered promiscuous mode [ 1456.067852][T23857] device veth1_macvtap entered promiscuous mode [ 1456.135743][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.167553][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.210277][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.246588][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.287564][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.320262][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.340860][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.379067][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.433552][T23857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.458180][T24210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6313'. [ 1456.483553][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1456.497247][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1456.523321][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1456.542546][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1456.566300][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.592040][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.620199][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.640422][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.670364][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.688301][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.861818][T23857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.961852][T23857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.033859][T23857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.066533][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1457.082422][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1457.105071][T23857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.123637][T23857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.137517][T23857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.153110][T23857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.337184][T15114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.357412][T15114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.378951][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1457.436342][T15114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.458274][T15114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.872774][T22078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1468.697822][T24345] FAULT_INJECTION: forcing a failure. [ 1468.697822][T24345] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.758412][T24345] CPU: 0 PID: 24345 Comm: syz.0.6359 Not tainted syzkaller #0 [ 1468.765969][T24345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1468.776068][T24345] Call Trace: [ 1468.779409][T24345] [ 1468.782379][T24345] dump_stack_lvl+0x188/0x24e [ 1468.787119][T24345] ? show_regs_print_info+0x12/0x12 [ 1468.792369][T24345] ? load_image+0x400/0x400 [ 1468.796924][T24345] ? __might_sleep+0xd0/0xd0 [ 1468.801557][T24345] ? __lock_acquire+0x7d10/0x7d10 [ 1468.806647][T24345] should_fail_ex+0x399/0x4d0 [ 1468.811388][T24345] should_failslab+0x5/0x20 [ 1468.815956][T24345] slab_pre_alloc_hook+0x59/0x310 [ 1468.821036][T24345] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1468.826809][T24345] __kmem_cache_alloc_node+0x4f/0x260 [ 1468.832227][T24345] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1468.837981][T24345] __kmalloc+0xa0/0x240 [ 1468.842173][T24345] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1468.847764][T24345] ? tomoyo_path_number_perm+0x205/0x650 [ 1468.853430][T24345] tomoyo_path_number_perm+0x22f/0x650 [ 1468.858925][T24345] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1468.864428][T24345] ? ksys_write+0x1c0/0x250 [ 1468.868971][T24345] ? common_file_perm+0x171/0x1c0 [ 1468.874044][T24345] ? __fget_files+0x28/0x4b0 [ 1468.878669][T24345] ? __fget_files+0x28/0x4b0 [ 1468.883301][T24345] security_file_ioctl+0x6c/0xa0 [ 1468.888272][T24345] __se_sys_ioctl+0x48/0x170 [ 1468.892906][T24345] do_syscall_64+0x4c/0xa0 [ 1468.897356][T24345] ? clear_bhb_loop+0x60/0xb0 [ 1468.902066][T24345] ? clear_bhb_loop+0x60/0xb0 [ 1468.906785][T24345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1468.912710][T24345] RIP: 0033:0x7fe32559bf79 [ 1468.917154][T24345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.936793][T24345] RSP: 002b:00007fe32654a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1468.945238][T24345] RAX: ffffffffffffffda RBX: 00007fe325815fa0 RCX: 00007fe32559bf79 [ 1468.953238][T24345] RDX: 0000200000001200 RSI: 0000000000008b26 RDI: 0000000000000006 [ 1468.961241][T24345] RBP: 00007fe32654a090 R08: 0000000000000000 R09: 0000000000000000 [ 1468.969245][T24345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.977243][T24345] R13: 00007fe325816038 R14: 00007fe325815fa0 R15: 00007ffdc3ed66a8 [ 1468.985259][T24345] [ 1469.082049][T24345] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1469.364800][T24366] netlink: 'syz.2.6365': attribute type 2 has an invalid length. [ 1469.384958][T24366] netlink: 'syz.2.6365': attribute type 8 has an invalid length. [ 1469.419265][T24366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1470.223127][T24375] netlink: 'syz.0.6369': attribute type 9 has an invalid length. [ 1470.235063][T24375] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1470.859301][T24396] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.6374'. [ 1470.963181][T24397] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6375'. [ 1476.008500][T24420] device syz_tun entered promiscuous mode [ 1476.205207][T24419] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6383'. [ 1476.371059][T12982] Bluetooth: hci2: command 0x0406 tx timeout [ 1477.352161][T24453] netlink: 'syz.0.6394': attribute type 1 has an invalid length. [ 1477.375033][T24453] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.6394'. [ 1477.958115][T24456] netlink: 'syz.3.6396': attribute type 10 has an invalid length. [ 1478.638804][T24456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.678593][T24456] bond0: (slave team0): Enslaving as an active interface with an up link [ 1481.193346][T24466] netlink: 'syz.1.6398': attribute type 10 has an invalid length. [ 1481.207241][T24466] team0: Port device netdevsim0 added [ 1484.338802][T24504] device bond0 entered promiscuous mode [ 1484.389413][T24504] device bond_slave_0 entered promiscuous mode [ 1484.420579][T24504] device bond_slave_1 entered promiscuous mode [ 1484.527009][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.533509][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.006025][T24516] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6415'. [ 1488.222141][T24516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1488.253678][T24516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.275104][T24516] bond0 (unregistering): Released all slaves [ 1488.290615][T24511] netlink: 'syz.1.6413': attribute type 21 has an invalid length. [ 1488.298938][T24511] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1488.320393][T24511] netlink: 'syz.1.6413': attribute type 4 has an invalid length. [ 1488.328209][T24511] netlink: 'syz.1.6413': attribute type 5 has an invalid length. [ 1488.336559][T24511] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6413'. [ 1488.641496][T24537] netlink: 'syz.3.6421': attribute type 3 has an invalid length. [ 1488.649419][T24537] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6421'. [ 1496.402125][T24590] netlink: 1011 bytes leftover after parsing attributes in process `syz.1.6437'. [ 1496.411627][T24590] bridge_slave_1: default FDB implementation only supports local addresses [ 1496.850321][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 1497.543141][T24626] @ÿ: renamed from bond_slave_0 [ 1499.605729][T24629] netlink: 'syz.4.6451': attribute type 21 has an invalid length. [ 1499.626438][T24629] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1499.668341][T24629] netlink: 'syz.4.6451': attribute type 4 has an invalid length. [ 1499.693183][T24629] netlink: 'syz.4.6451': attribute type 5 has an invalid length. [ 1499.719651][T24629] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6451'. [ 1499.768242][T24638] netlink: 'syz.2.6455': attribute type 1 has an invalid length. [ 1499.811852][T24638] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.6455'. [ 1502.660527][T24663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6460'. [ 1514.753529][T24741] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6487'. [ 1514.779199][T24741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1514.799793][T24741] net_ratelimit: 3256 callbacks suppressed [ 1514.799819][T24741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1516.494167][T24784] netlink: 'syz.2.6501': attribute type 10 has an invalid length. [ 1516.510430][T24784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1516.526501][T24784] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1520.792623][T24824] delete_channel: no stack [ 1520.930018][T24827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1520.994668][T24827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1521.121671][T24827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1522.440389][T12982] Bluetooth: hci0: command 0x0406 tx timeout [ 1525.266453][T24863] FAULT_INJECTION: forcing a failure. [ 1525.266453][T24863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1525.314156][T24863] CPU: 1 PID: 24863 Comm: syz.2.6527 Not tainted syzkaller #0 [ 1525.321712][T24863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1525.331810][T24863] Call Trace: [ 1525.335115][T24863] [ 1525.338076][T24863] dump_stack_lvl+0x188/0x24e [ 1525.342812][T24863] ? show_regs_print_info+0x12/0x12 [ 1525.348065][T24863] ? load_image+0x400/0x400 [ 1525.352625][T24863] ? __lock_acquire+0x7d10/0x7d10 [ 1525.357717][T24863] should_fail_ex+0x399/0x4d0 [ 1525.362468][T24863] _copy_to_user+0x2c/0x130 [ 1525.367028][T24863] bpf_test_finish+0x4a2/0x600 [ 1525.371848][T24863] ? convert___skb_to_skb+0x580/0x580 [ 1525.377278][T24863] ? convert_skb_to___skb+0x420/0x420 [ 1525.382692][T24863] ? __build_skb+0x257/0x3c0 [ 1525.387361][T24863] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1525.392791][T24863] ? cpu_online+0xa0/0xa0 [ 1525.397181][T24863] bpf_prog_test_run+0x31e/0x390 [ 1525.402170][T24863] __sys_bpf+0x62b/0x780 [ 1525.406469][T24863] ? bpf_link_show_fdinfo+0x380/0x380 [ 1525.411909][T24863] ? lock_chain_count+0x20/0x20 [ 1525.416828][T24863] __x64_sys_bpf+0x78/0x90 [ 1525.421300][T24863] do_syscall_64+0x4c/0xa0 [ 1525.425749][T24863] ? clear_bhb_loop+0x60/0xb0 [ 1525.430465][T24863] ? clear_bhb_loop+0x60/0xb0 [ 1525.435170][T24863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1525.441089][T24863] RIP: 0033:0x7fd0a579bf79 [ 1525.445522][T24863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.465164][T24863] RSP: 002b:00007fd0a66a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1525.473620][T24863] RAX: ffffffffffffffda RBX: 00007fd0a5a15fa0 RCX: 00007fd0a579bf79 [ 1525.481627][T24863] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 1525.489619][T24863] RBP: 00007fd0a66a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.497640][T24863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.505633][T24863] R13: 00007fd0a5a16038 R14: 00007fd0a5a15fa0 R15: 00007ffe42d6ba78 [ 1525.513670][T24863] [ 1529.836665][T24916] netlink: 'syz.0.6540': attribute type 4 has an invalid length. [ 1529.861617][T24916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6540'. [ 1530.543965][T24914] delete_channel: no stack [ 1530.958053][T24921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6543'. [ 1534.746185][T24895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1534.754319][T24895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1534.764135][T24895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1534.772614][T24895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1534.933289][T24924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1534.962709][T24925] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1535.266450][T24948] FAULT_INJECTION: forcing a failure. [ 1535.266450][T24948] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.280598][T24948] CPU: 1 PID: 24948 Comm: syz.4.6551 Not tainted syzkaller #0 [ 1535.288132][T24948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1535.298238][T24948] Call Trace: [ 1535.301571][T24948] [ 1535.304536][T24948] dump_stack_lvl+0x188/0x24e [ 1535.309272][T24948] ? show_regs_print_info+0x12/0x12 [ 1535.314533][T24948] ? load_image+0x400/0x400 [ 1535.319090][T24948] ? __might_sleep+0xd0/0xd0 [ 1535.323735][T24948] ? __lock_acquire+0x7d10/0x7d10 [ 1535.328824][T24948] should_fail_ex+0x399/0x4d0 [ 1535.333580][T24948] should_failslab+0x5/0x20 [ 1535.338158][T24948] slab_pre_alloc_hook+0x59/0x310 [ 1535.343226][T24948] ? __get_vm_area_node+0x122/0x330 [ 1535.348470][T24948] __kmem_cache_alloc_node+0x4f/0x260 [ 1535.353880][T24948] ? __get_vm_area_node+0x122/0x330 [ 1535.359129][T24948] kmalloc_node_trace+0x22/0xe0 [ 1535.364021][T24948] __get_vm_area_node+0x122/0x330 [ 1535.369097][T24948] __vmalloc_node_range+0x357/0x13b0 [ 1535.374766][T24948] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1535.380351][T24948] ? ct_nmi_exit+0x145/0x1c0 [ 1535.384983][T24948] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1535.391007][T24948] ? lock_chain_count+0x20/0x20 [ 1535.395907][T24948] ? free_vm_area+0x50/0x50 [ 1535.400447][T24948] ? end_current_label_crit_section+0x170/0x170 [ 1535.406730][T24948] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1535.412315][T24948] __vmalloc+0x76/0x80 [ 1535.416442][T24948] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1535.422026][T24948] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1535.427441][T24948] ? bpf_lsm_capable+0x5/0x10 [ 1535.432165][T24948] bpf_prog_alloc+0x1c/0x1b0 [ 1535.436797][T24948] bpf_prog_load+0x7c9/0x1560 [ 1535.441548][T24948] ? map_freeze+0x390/0x390 [ 1535.446085][T24948] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1535.452271][T24948] ? lockdep_hardirqs_on+0x94/0x140 [ 1535.457512][T24948] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1535.463529][T24948] ? bpf_lsm_bpf+0x5/0x10 [ 1535.467889][T24948] ? security_bpf+0x7a/0xa0 [ 1535.472430][T24948] __sys_bpf+0x5b8/0x780 [ 1535.476708][T24948] ? bpf_link_show_fdinfo+0x380/0x380 [ 1535.482132][T24948] ? lock_chain_count+0x20/0x20 [ 1535.487018][T24948] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1535.493055][T24948] __x64_sys_bpf+0x78/0x90 [ 1535.497505][T24948] do_syscall_64+0x4c/0xa0 [ 1535.501956][T24948] ? clear_bhb_loop+0x60/0xb0 [ 1535.506660][T24948] ? clear_bhb_loop+0x60/0xb0 [ 1535.511370][T24948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1535.517294][T24948] RIP: 0033:0x7fecc159bf79 [ 1535.521740][T24948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.541383][T24948] RSP: 002b:00007fecc2505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1535.549825][T24948] RAX: ffffffffffffffda RBX: 00007fecc1815fa0 RCX: 00007fecc159bf79 [ 1535.557824][T24948] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1535.565820][T24948] RBP: 00007fecc2505090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.573815][T24948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.581818][T24948] R13: 00007fecc1816038 R14: 00007fecc1815fa0 R15: 00007ffd53d029a8 [ 1535.589837][T24948] [ 1535.611370][T24948] syz.4.6551: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1535.633850][T24948] CPU: 0 PID: 24948 Comm: syz.4.6551 Not tainted syzkaller #0 [ 1535.641507][T24948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1535.651701][T24948] Call Trace: [ 1535.655113][T24948] [ 1535.658096][T24948] dump_stack_lvl+0x188/0x24e [ 1535.662830][T24948] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1535.669295][T24948] ? show_regs_print_info+0x12/0x12 [ 1535.674559][T24948] ? load_image+0x400/0x400 [ 1535.679120][T24948] ? __rcu_read_unlock+0x78/0xd0 [ 1535.684114][T24948] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1535.690597][T24948] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1535.697156][T24948] warn_alloc+0x242/0x330 [ 1535.701575][T24948] ? __get_vm_area_node+0x122/0x330 [ 1535.706828][T24948] ? zone_watermark_ok_safe+0x270/0x270 [ 1535.712433][T24948] ? rcu_is_watching+0x11/0xa0 [ 1535.717351][T24948] ? __get_vm_area_node+0x318/0x330 [ 1535.723051][T24948] __vmalloc_node_range+0x37c/0x13b0 [ 1535.728392][T24948] ? ct_nmi_exit+0x145/0x1c0 [ 1535.733038][T24948] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1535.739079][T24948] ? lock_chain_count+0x20/0x20 [ 1535.744089][T24948] ? free_vm_area+0x50/0x50 [ 1535.748647][T24948] ? end_current_label_crit_section+0x170/0x170 [ 1535.754954][T24948] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1535.760600][T24948] __vmalloc+0x76/0x80 [ 1535.764729][T24948] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1535.770347][T24948] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 1535.775788][T24948] ? bpf_lsm_capable+0x5/0x10 [ 1535.780523][T24948] bpf_prog_alloc+0x1c/0x1b0 [ 1535.785192][T24948] bpf_prog_load+0x7c9/0x1560 [ 1535.789937][T24948] ? map_freeze+0x390/0x390 [ 1535.794493][T24948] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1535.800702][T24948] ? lockdep_hardirqs_on+0x94/0x140 [ 1535.805973][T24948] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1535.812020][T24948] ? bpf_lsm_bpf+0x5/0x10 [ 1535.816414][T24948] ? security_bpf+0x7a/0xa0 [ 1535.820979][T24948] __sys_bpf+0x5b8/0x780 [ 1535.825286][T24948] ? bpf_link_show_fdinfo+0x380/0x380 [ 1535.830736][T24948] ? lock_chain_count+0x20/0x20 [ 1535.835645][T24948] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1535.841697][T24948] __x64_sys_bpf+0x78/0x90 [ 1535.846171][T24948] do_syscall_64+0x4c/0xa0 [ 1535.850644][T24948] ? clear_bhb_loop+0x60/0xb0 [ 1535.855369][T24948] ? clear_bhb_loop+0x60/0xb0 [ 1535.860098][T24948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1535.866043][T24948] RIP: 0033:0x7fecc159bf79 [ 1535.870509][T24948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.890169][T24948] RSP: 002b:00007fecc2505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1535.898644][T24948] RAX: ffffffffffffffda RBX: 00007fecc1815fa0 RCX: 00007fecc159bf79 [ 1535.906677][T24948] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1535.914721][T24948] RBP: 00007fecc2505090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.922758][T24948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.930792][T24948] R13: 00007fecc1816038 R14: 00007fecc1815fa0 R15: 00007ffd53d029a8 [ 1535.938843][T24948] [ 1535.978624][T24948] Mem-Info: [ 1535.983730][T24948] active_anon:7106 inactive_anon:0 isolated_anon:0 [ 1535.983730][T24948] active_file:21800 inactive_file:40495 isolated_file:0 [ 1535.983730][T24948] unevictable:768 dirty:94 writeback:0 [ 1535.983730][T24948] slab_reclaimable:21174 slab_unreclaimable:110108 [ 1535.983730][T24948] mapped:30007 shmem:1361 pagetables:583 [ 1535.983730][T24948] sec_pagetables:0 bounce:0 [ 1535.983730][T24948] kernel_misc_reclaimable:0 [ 1535.983730][T24948] free:1302405 free_pcp:7341 free_cma:0 [ 1536.209375][T24948] Node 0 active_anon:28624kB inactive_anon:0kB active_file:87200kB inactive_file:161780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120328kB dirty:376kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11212kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 1536.297901][T24948] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1536.347983][T24948] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1536.429713][T24948] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1536.445150][T24948] Node 0 DMA32 free:1297128kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:28624kB inactive_anon:0kB active_file:87200kB inactive_file:161780kB unevictable:1536kB writepending:376kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:12152kB local_pcp:9528kB free_cma:0kB [ 1536.496602][T24948] lowmem_reserve[]: 0 0 1 1 1 [ 1536.506469][T24948] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1536.557536][T24948] lowmem_reserve[]: 0 0 0 0 0 [ 1536.562919][T24948] Node 1 Normal free:3897116kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18140kB local_pcp:10096kB free_cma:0kB [ 1536.602386][T24948] lowmem_reserve[]: 0 0 0 0 0 [ 1536.607744][T24948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1536.639228][T24948] Node 0 DMA32: 2319*4kB (UM) 2146*8kB (UME) 1520*16kB (UME) 997*32kB (UME) 358*64kB (UME) 245*128kB (UM) 287*256kB (UME) 208*512kB (UM) 157*1024kB (UM) 16*2048kB (UM) 192*4096kB (UM) = 1296876kB [ 1536.665054][T24948] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1536.679051][T24948] Node 1 Normal: 237*4kB (UME) 47*8kB (UME) 31*16kB (UME) 34*32kB (UME) 21*64kB (UME) 9*128kB (UE) 4*256kB (UME) 1*512kB (M) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3897116kB [ 1536.716618][T24948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1536.740419][T24948] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1536.754571][T24948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1536.766641][T24948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1536.794436][T24948] 63656 total pagecache pages [ 1536.809711][T24948] 0 pages in swap cache [ 1536.827259][T24948] Free swap = 124996kB [ 1536.834956][T24948] Total swap = 124996kB [ 1536.839421][T24948] 2097051 pages RAM [ 1536.848491][T24948] 0 pages HighMem/MovableOnly [ 1536.857384][T24948] 415205 pages reserved [ 1536.864889][T24948] 0 pages cma reserved [ 1538.663880][T24972] netlink: 'syz.2.6560': attribute type 10 has an invalid length. [ 1539.014589][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.086491][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.096440][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.106131][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.116024][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.125671][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.135426][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.145084][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.155036][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1539.164745][T24981] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1545.616490][T24985] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6565'. [ 1545.626463][T24985] bridge_slave_1: default FDB implementation only supports local addresses [ 1545.963829][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.970586][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.670631][T25066] netlink: 'syz.1.6594': attribute type 10 has an invalid length. [ 1552.721842][T25117] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6610'. [ 1554.331680][T25117] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1554.339486][T25117] CPU: 1 PID: 25117 Comm: syz.2.6610 Not tainted syzkaller #0 [ 1554.346989][T25117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1554.357081][T25117] Call Trace: [ 1554.360422][T25117] [ 1554.363387][T25117] dump_stack_lvl+0x188/0x24e [ 1554.368107][T25117] ? show_regs_print_info+0x12/0x12 [ 1554.373343][T25117] ? load_image+0x400/0x400 [ 1554.377935][T25117] sysfs_warn_dup+0x8a/0xa0 [ 1554.382478][T25117] sysfs_do_create_link_sd+0xc0/0x110 [ 1554.388319][T25117] device_add+0x7ed/0xfb0 [ 1554.392708][T25117] wiphy_register+0x1d9f/0x2ac0 [ 1554.397641][T25117] ? cfg80211_event_work+0x40/0x40 [ 1554.402810][T25117] ? minstrel_ht_alloc+0x894/0xa20 [ 1554.407973][T25117] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1554.414075][T25117] ieee80211_register_hw+0x2d00/0x39f0 [ 1554.419584][T25117] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1554.425204][T25117] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1554.430810][T25117] ? ieee80211_tasklet_handler+0x20/0x20 [ 1554.436487][T25117] ? memset+0x1e/0x40 [ 1554.440501][T25117] ? __hrtimer_init+0x186/0x270 [ 1554.445402][T25117] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1554.451185][T25117] hwsim_new_radio_nl+0xafa/0xce0 [ 1554.456250][T25117] genl_family_rcv_msg_doit+0x22a/0x330 [ 1554.461817][T25117] ? end_current_label_crit_section+0x170/0x170 [ 1554.468083][T25117] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1554.474017][T25117] ? bpf_lsm_capable+0x5/0x10 [ 1554.478745][T25117] ? security_capable+0x85/0xb0 [ 1554.483632][T25117] genl_rcv_msg+0x604/0x790 [ 1554.488181][T25117] ? genl_bind+0x360/0x360 [ 1554.492634][T25117] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1554.499109][T25117] netlink_rcv_skb+0x1fb/0x450 [ 1554.503918][T25117] ? genl_bind+0x360/0x360 [ 1554.508377][T25117] ? netlink_ack+0x1170/0x1170 [ 1554.513181][T25117] ? down_read+0x1a8/0x2d0 [ 1554.517630][T25117] genl_rcv+0x24/0x40 [ 1554.521645][T25117] netlink_unicast+0x74d/0x8d0 [ 1554.526448][T25117] netlink_sendmsg+0x8ad/0xbd0 [ 1554.531257][T25117] ? netlink_getsockopt+0x550/0x550 [ 1554.536489][T25117] ? aa_sock_msg_perm+0x94/0x150 [ 1554.541457][T25117] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1554.546763][T25117] ? security_socket_sendmsg+0x7c/0xa0 [ 1554.552273][T25117] ? netlink_getsockopt+0x550/0x550 [ 1554.557504][T25117] ____sys_sendmsg+0x5be/0x970 [ 1554.562398][T25117] ? __sys_sendmsg_sock+0x30/0x30 [ 1554.567455][T25117] ? __import_iovec+0x315/0x500 [ 1554.572348][T25117] ? import_iovec+0x6f/0xa0 [ 1554.576877][T25117] ___sys_sendmsg+0x2a2/0x360 [ 1554.581592][T25117] ? try_to_wake_up+0x6ae/0x1080 [ 1554.586587][T25117] ? __sys_sendmsg+0x290/0x290 [ 1554.591399][T25117] ? __lock_acquire+0x7d10/0x7d10 [ 1554.596455][T25117] ? rcu_read_lock_sched_held+0x86/0x110 [ 1554.602139][T25117] __se_sys_sendmsg+0x1bb/0x2a0 [ 1554.607036][T25117] ? __x64_sys_sendmsg+0x80/0x80 [ 1554.612016][T25117] ? lockdep_hardirqs_on+0x94/0x140 [ 1554.617290][T25117] do_syscall_64+0x4c/0xa0 [ 1554.621766][T25117] ? clear_bhb_loop+0x60/0xb0 [ 1554.626471][T25117] ? clear_bhb_loop+0x60/0xb0 [ 1554.631177][T25117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1554.637096][T25117] RIP: 0033:0x7fd0a579bf79 [ 1554.641536][T25117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.661313][T25117] RSP: 002b:00007fd0a6682028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1554.669766][T25117] RAX: ffffffffffffffda RBX: 00007fd0a5a16090 RCX: 00007fd0a579bf79 [ 1554.677895][T25117] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1554.685916][T25117] RBP: 00007fd0a58327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1554.693929][T25117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.701947][T25117] R13: 00007fd0a5a16128 R14: 00007fd0a5a16090 R15: 00007ffe42d6ba78 [ 1554.709990][T25117] [ 1554.767335][T25120] device syzkaller0 entered promiscuous mode [ 1558.280319][T12982] Bluetooth: hci1: command 0x0406 tx timeout [ 1558.549027][T25162] netlink: 'syz.3.6624': attribute type 3 has an invalid length. [ 1558.586401][T25162] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1568.270164][T25235] netlink: 'syz.3.6649': attribute type 1 has an invalid length. [ 1568.282953][T25235] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6649'. [ 1568.597317][T25202] netlink: 'syz.2.6637': attribute type 21 has an invalid length. [ 1568.630237][T25202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1568.639668][T25231] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6648'. [ 1579.667574][T25348] netlink: 'syz.2.6686': attribute type 29 has an invalid length. [ 1579.734055][T25348] netlink: 'syz.2.6686': attribute type 29 has an invalid length. [ 1580.462549][T25366] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6692'. [ 1580.831945][T25366] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1582.488730][T25379] netlink: 'syz.4.6696': attribute type 10 has an invalid length. [ 1582.539592][T25379] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1582.709834][T25387] device syzkaller0 entered promiscuous mode [ 1585.610335][T25396] netlink: 'syz.1.6703': attribute type 28 has an invalid length. [ 1586.171622][T25428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6714'. [ 1586.549990][T25435] netlink: 'syz.3.6716': attribute type 3 has an invalid length. [ 1586.567912][T25435] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6716'. [ 1588.340908][T25442] netlink: 'syz.2.6719': attribute type 21 has an invalid length. [ 1591.267091][T25510] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1591.292563][T25510] netlink: 'syz.2.6739': attribute type 29 has an invalid length. [ 1592.624747][T25503] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.6738'. [ 1592.637828][T25510] netlink: 'syz.2.6739': attribute type 29 has an invalid length. [ 1592.674227][T25508] device syzkaller0 entered promiscuous mode [ 1593.284742][T25534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.293442][T25534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.566976][T25549] FAULT_INJECTION: forcing a failure. [ 1594.566976][T25549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.597295][T25549] CPU: 0 PID: 25549 Comm: syz.4.6751 Not tainted syzkaller #0 [ 1594.604866][T25549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1594.614998][T25549] Call Trace: [ 1594.618353][T25549] [ 1594.621347][T25549] dump_stack_lvl+0x188/0x24e [ 1594.626171][T25549] ? show_regs_print_info+0x12/0x12 [ 1594.631453][T25549] ? load_image+0x400/0x400 [ 1594.636041][T25549] ? __lock_acquire+0x7d10/0x7d10 [ 1594.641141][T25549] ? __fget_files+0x28/0x4b0 [ 1594.645841][T25549] should_fail_ex+0x399/0x4d0 [ 1594.650628][T25549] _copy_from_user+0x2c/0x170 [ 1594.655404][T25549] generic_map_update_batch+0x4f3/0x810 [ 1594.661108][T25549] ? rcu_read_unlock+0xa0/0xa0 [ 1594.665985][T25549] ? __fdget+0x17c/0x200 [ 1594.670345][T25549] ? rcu_read_unlock+0xa0/0xa0 [ 1594.675186][T25549] bpf_map_do_batch+0x466/0x600 [ 1594.680138][T25549] __sys_bpf+0x6f7/0x780 [ 1594.684477][T25549] ? bpf_link_show_fdinfo+0x380/0x380 [ 1594.689993][T25549] ? lock_chain_count+0x20/0x20 [ 1594.694967][T25549] __x64_sys_bpf+0x78/0x90 [ 1594.699475][T25549] do_syscall_64+0x4c/0xa0 [ 1594.703967][T25549] ? clear_bhb_loop+0x60/0xb0 [ 1594.708735][T25549] ? clear_bhb_loop+0x60/0xb0 [ 1594.713500][T25549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.719461][T25549] RIP: 0033:0x7fecc159bf79 [ 1594.723948][T25549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.743628][T25549] RSP: 002b:00007fecc2505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1594.752122][T25549] RAX: ffffffffffffffda RBX: 00007fecc1815fa0 RCX: 00007fecc159bf79 [ 1594.758499][T25550] netlink: 'syz.1.6750': attribute type 10 has an invalid length. [ 1594.760136][T25549] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 1594.760171][T25549] RBP: 00007fecc2505090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.760188][T25549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1594.760205][T25549] R13: 00007fecc1816038 R14: 00007fecc1815fa0 R15: 00007ffd53d029a8 [ 1594.760271][T25549] [ 1594.880370][T25550] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6750'. [ 1597.483636][T25578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1597.627690][T25551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6750'. [ 1597.690870][T25578] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1600.258738][T25580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1600.289978][T25605] netlink: 'syz.1.6766': attribute type 41 has an invalid length. [ 1600.298359][T25605] netlink: 'syz.1.6766': attribute type 4 has an invalid length. [ 1600.308843][T25605] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6766'. [ 1600.382614][T25605] net_ratelimit: 3256 callbacks suppressed [ 1600.382654][T25605] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1600.785912][T25621] FAULT_INJECTION: forcing a failure. [ 1600.785912][T25621] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.799193][T25621] CPU: 0 PID: 25621 Comm: syz.3.6772 Not tainted syzkaller #0 [ 1600.806710][T25621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1600.816817][T25621] Call Trace: [ 1600.820135][T25621] [ 1600.823105][T25621] dump_stack_lvl+0x188/0x24e [ 1600.827855][T25621] ? show_regs_print_info+0x12/0x12 [ 1600.833106][T25621] ? load_image+0x400/0x400 [ 1600.837661][T25621] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1600.843694][T25621] ? lockdep_hardirqs_on+0x94/0x140 [ 1600.848937][T25621] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1600.854858][T25621] should_fail_ex+0x399/0x4d0 [ 1600.859601][T25621] should_failslab+0x5/0x20 [ 1600.864157][T25621] slab_pre_alloc_hook+0x59/0x310 [ 1600.869226][T25621] ? __mod_timer+0x91e/0xd00 [ 1600.873848][T25621] kmem_cache_alloc+0x56/0x2f0 [ 1600.878632][T25621] ? skb_clone+0x1e7/0x370 [ 1600.883085][T25621] skb_clone+0x1e7/0x370 [ 1600.887365][T25621] ? __neigh_event_send+0xea7/0x15f0 [ 1600.892680][T25621] __neigh_event_send+0xeb4/0x15f0 [ 1600.897833][T25621] neigh_resolve_output+0x197/0x730 [ 1600.903070][T25621] ? ip_finish_output2+0x11b0/0x11b0 [ 1600.908417][T25621] ? ip_finish_output2+0x3ff/0x11b0 [ 1600.913649][T25621] ip_finish_output2+0xd05/0x11b0 [ 1600.918708][T25621] ? ip_finish_output2+0x3ff/0x11b0 [ 1600.923935][T25621] ? nf_hook+0x9e/0x390 [ 1600.928114][T25621] ? __ip_local_out+0x5d0/0x5d0 [ 1600.932986][T25621] ? nf_hook+0x9e/0x390 [ 1600.937183][T25621] ? ip_fragment+0x210/0x210 [ 1600.941817][T25621] ? ip_mc_finish_output+0x250/0x250 [ 1600.947123][T25621] ? ip_skb_dst_mtu+0x587/0x9c0 [ 1600.952092][T25621] ? ip_finish_output+0x3eb/0x4c0 [ 1600.957148][T25621] ip_output+0x2df/0x410 [ 1600.961414][T25621] ? ip_output+0x5c/0x410 [ 1600.965770][T25621] ip_send_skb+0x129/0x1c0 [ 1600.970216][T25621] udp_send_skb+0xa88/0x1580 [ 1600.974861][T25621] udp_sendmsg+0x1b33/0x23b0 [ 1600.979491][T25621] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1600.984393][T25621] ? udp_cmsg_send+0x350/0x350 [ 1600.989286][T25621] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1600.995313][T25621] ? lock_chain_count+0x20/0x20 [ 1601.000206][T25621] ? __local_bh_enable_ip+0x136/0x1c0 [ 1601.005611][T25621] ? _local_bh_enable+0xa0/0xa0 [ 1601.010518][T25621] ? inet_sendmsg+0x147/0x2f0 [ 1601.015238][T25621] ? inet_sendmsg+0x147/0x2f0 [ 1601.019952][T25621] ? inet_send_prepare+0x260/0x260 [ 1601.025098][T25621] ____sys_sendmsg+0x5be/0x970 [ 1601.029901][T25621] ? __sys_sendmsg_sock+0x30/0x30 [ 1601.034954][T25621] ? __import_iovec+0x315/0x500 [ 1601.039832][T25621] ? import_iovec+0x6f/0xa0 [ 1601.044360][T25621] ___sys_sendmsg+0x2a2/0x360 [ 1601.049077][T25621] ? __sys_sendmsg+0x290/0x290 [ 1601.053885][T25621] ? trace_call_bpf+0xbf/0x6b0 [ 1601.058697][T25621] __se_sys_sendmsg+0x1bb/0x2a0 [ 1601.063584][T25621] ? __x64_sys_sendmsg+0x80/0x80 [ 1601.068565][T25621] ? lockdep_hardirqs_on+0x94/0x140 [ 1601.073792][T25621] do_syscall_64+0x4c/0xa0 [ 1601.078240][T25621] ? clear_bhb_loop+0x60/0xb0 [ 1601.082942][T25621] ? clear_bhb_loop+0x60/0xb0 [ 1601.087650][T25621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1601.093566][T25621] RIP: 0033:0x7f690599bf79 [ 1601.098004][T25621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.117636][T25621] RSP: 002b:00007f69067ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.126092][T25621] RAX: ffffffffffffffda RBX: 00007f6905c15fa0 RCX: 00007f690599bf79 [ 1601.134086][T25621] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 1601.142081][T25621] RBP: 00007f69067ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.150073][T25621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1601.158067][T25621] R13: 00007f6905c16038 R14: 00007f6905c15fa0 R15: 00007ffc34da8908 [ 1601.166072][T25621] [ 1601.393068][T25630] netlink: 'syz.2.6776': attribute type 1 has an invalid length. [ 1601.401224][T25630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6776'. [ 1601.668126][T25638] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6779'. [ 1601.693568][T25638] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1601.749030][T25641] delete_channel: no stack [ 1607.405151][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.411878][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.594789][T25645] netlink: 'syz.4.6781': attribute type 10 has an invalid length. [ 1610.822466][T25714] netlink: 'syz.3.6807': attribute type 4 has an invalid length. [ 1610.860409][T25714] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6807'. [ 1611.017017][T25711] delete_channel: no stack [ 1611.253160][T25723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6811'. [ 1611.310287][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6811'. [ 1611.338655][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6811'. [ 1617.402371][T25802] IPv6: pim6reg1: Disabled Multicast RS [ 1622.512877][T25883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6867'. [ 1622.548109][T25885] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6868'. [ 1622.894837][T25899] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6874'. [ 1622.964685][T25899] netlink: 'syz.0.6874': attribute type 21 has an invalid length. [ 1628.409763][T25976] netlink: 'syz.3.6903': attribute type 10 has an invalid length. [ 1630.379704][T26012] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6914'. [ 1630.821215][T26024] netlink: 'syz.1.6919': attribute type 2 has an invalid length. [ 1630.858600][T26024] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6919'. [ 1631.960538][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1631.972516][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1631.990852][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1632.004255][T22549] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1632.014532][T22549] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1632.022379][T22549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1632.435994][T22078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.649681][T22078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.761255][T22078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.948215][T22078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.145427][T26040] chnl_net:caif_netlink_parms(): no params data found [ 1633.390181][T22078] device 0 left promiscuous mode [ 1633.444754][T26040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.478929][T26040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.539531][T26040] device bridge_slave_0 entered promiscuous mode [ 1633.718274][T26040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.730818][T26040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.761250][T26040] device bridge_slave_1 entered promiscuous mode [ 1634.045839][T22549] Bluetooth: hci3: command 0x0409 tx timeout [ 1634.114803][T26040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.181711][T26040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.446807][T26040] team0: Port device team_slave_0 added [ 1634.496794][T26040] team0: Port device team_slave_1 added [ 1634.528192][T26096] sctp: [Deprecated]: syz.3.6942 (pid 26096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1634.528192][T26096] Use struct sctp_sack_info instead [ 1634.601136][T26102] netlink: 22 bytes leftover after parsing attributes in process `syz.3.6942'. [ 1634.730885][T26040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.737904][T26040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1634.791057][T26040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.049985][T26040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.076960][T26040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.120314][T22549] Bluetooth: hci3: command 0x041b tx timeout [ 1636.160519][T26040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.185853][T26117] netlink: 'syz.1.6945': attribute type 21 has an invalid length. [ 1636.199418][T26117] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6945'. [ 1636.212988][T26117] netlink: 'syz.1.6945': attribute type 5 has an invalid length. [ 1636.468429][T26040] device hsr_slave_0 entered promiscuous mode [ 1636.492445][T26040] device hsr_slave_1 entered promiscuous mode [ 1636.513927][T26040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1636.535181][T26040] Cannot create hsr debugfs directory [ 1637.487733][T22078] device hsr_slave_0 left promiscuous mode [ 1637.505375][T22078] device hsr_slave_1 left promiscuous mode [ 1637.623422][T22078] device veth1_macvtap left promiscuous mode [ 1637.672928][T22078] device veth0_macvtap left promiscuous mode [ 1638.200598][T22549] Bluetooth: hci3: command 0x040f tx timeout [ 1639.478072][T22078] team0 (unregistering): Port device team_slave_1 removed [ 1639.595694][T22078] team0 (unregistering): Port device team_slave_0 removed [ 1640.289532][T22549] Bluetooth: hci3: command 0x0419 tx timeout [ 1641.372289][T26169] netlink: 'syz.1.6958': attribute type 10 has an invalid length. [ 1641.389697][T26169] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1642.586148][T26200] device syzkaller0 entered promiscuous mode [ 1644.025555][T26224] netlink: 'syz.1.6975': attribute type 3 has an invalid length. [ 1644.033519][T26224] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6975'. [ 1646.759809][T26230] netlink: 979 bytes leftover after parsing attributes in process `syz.0.6978'. [ 1646.780269][T26230] bridge_slave_1: default FDB implementation only supports local addresses [ 1646.793147][T26241] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6981'. [ 1647.207880][T26241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.251289][T26241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.284634][T26241] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1647.328129][T26241] bond0 (unregistering): Released all slaves [ 1647.342453][T26040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1647.379117][T26040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1647.435280][T26040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1647.443073][T26255] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6984'. [ 1647.465089][T26040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1647.739991][T26040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.774329][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1647.788239][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1647.806530][T26040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.841680][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1647.861296][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1647.900291][T22077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.907560][T22077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.954962][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1647.984506][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1648.001979][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1648.015491][T22077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.022745][T22077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.037058][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1648.067238][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1648.106674][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1648.130587][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1648.152027][T26281] netlink: 'syz.1.6990': attribute type 10 has an invalid length. [ 1648.189512][T26281] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1648.230300][T26281] device batadv_slave_1 entered promiscuous mode [ 1648.239762][T26281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.252697][T26281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.276487][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1648.295586][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1648.319105][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1648.364822][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1648.401827][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1648.412370][T26283] netlink: 'syz.1.6990': attribute type 1 has an invalid length. [ 1648.444477][T26283] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6990'. [ 1648.453923][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1648.484736][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1648.535000][T26040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1648.666487][T26297] delete_channel: no stack [ 1648.839499][T26305] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.6995'. [ 1649.680754][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1649.688362][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1649.753364][T26040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.870547][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1649.891944][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1650.069726][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1650.090930][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1650.122394][T26336] netlink: 'syz.1.7002': attribute type 3 has an invalid length. [ 1650.139305][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1650.149369][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1650.157698][T26336] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7002'. [ 1650.179582][T26338] netlink: 'syz.1.7002': attribute type 8 has an invalid length. [ 1650.190453][T26040] device veth0_vlan entered promiscuous mode [ 1651.034889][T26040] device veth1_vlan entered promiscuous mode [ 1651.070351][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1651.149780][T26040] device veth0_macvtap entered promiscuous mode [ 1651.190320][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1651.284105][T26360] FAULT_INJECTION: forcing a failure. [ 1651.284105][T26360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1651.297919][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1651.335049][T26040] device veth1_macvtap entered promiscuous mode [ 1651.351378][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1651.360882][T26360] CPU: 1 PID: 26360 Comm: syz.1.7004 Not tainted syzkaller #0 [ 1651.368425][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1651.378529][T26360] Call Trace: [ 1651.381848][T26360] [ 1651.384817][T26360] dump_stack_lvl+0x188/0x24e [ 1651.389565][T26360] ? show_regs_print_info+0x12/0x12 [ 1651.394828][T26360] ? load_image+0x400/0x400 [ 1651.399394][T26360] ? __lock_acquire+0x7d10/0x7d10 [ 1651.404488][T26360] ? snprintf+0xe5/0x140 [ 1651.408788][T26360] should_fail_ex+0x399/0x4d0 [ 1651.413540][T26360] _copy_to_user+0x2c/0x130 [ 1651.418105][T26360] simple_read_from_buffer+0xe3/0x150 [ 1651.423570][T26360] proc_fail_nth_read+0x1a6/0x220 [ 1651.428657][T26360] ? proc_fault_inject_write+0x310/0x310 [ 1651.434366][T26360] ? fsnotify_perm+0x248/0x550 [ 1651.439189][T26360] ? proc_fault_inject_write+0x310/0x310 [ 1651.444871][T26360] vfs_read+0x2de/0xa00 [ 1651.449099][T26360] ? kernel_read+0x1e0/0x1e0 [ 1651.453751][T26360] ? __fget_files+0x28/0x4b0 [ 1651.458396][T26360] ? __fget_files+0x28/0x4b0 [ 1651.463052][T26360] ? __fget_files+0x43d/0x4b0 [ 1651.467797][T26360] ? __fdget_pos+0x2ae/0x360 [ 1651.472436][T26360] ? ksys_read+0x71/0x250 [ 1651.476817][T26360] ksys_read+0x14c/0x250 [ 1651.481109][T26360] ? vfs_write+0xa30/0xa30 [ 1651.485561][T26360] ? lockdep_hardirqs_on+0x94/0x140 [ 1651.490795][T26360] do_syscall_64+0x4c/0xa0 [ 1651.495236][T26360] ? clear_bhb_loop+0x60/0xb0 [ 1651.499938][T26360] ? clear_bhb_loop+0x60/0xb0 [ 1651.504645][T26360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1651.510565][T26360] RIP: 0033:0x7ff92e95c84e [ 1651.515002][T26360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1651.534633][T26360] RSP: 002b:00007ff92cbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1651.543071][T26360] RAX: ffffffffffffffda RBX: 00007ff92cbf66c0 RCX: 00007ff92e95c84e [ 1651.551098][T26360] RDX: 000000000000000f RSI: 00007ff92cbf60a0 RDI: 0000000000000005 [ 1651.559102][T26360] RBP: 00007ff92cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.567092][T26360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1651.575094][T26360] R13: 00007ff92ec16038 R14: 00007ff92ec15fa0 R15: 00007fff80625f88 [ 1651.583108][T26360] [ 1651.603098][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1651.659514][T26040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.685972][T26040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.705845][T26040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.718991][T26040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.738147][T26040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.748940][T26040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.765134][T26040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1651.776433][T26040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1651.807198][T26040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1651.826895][T22078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1651.837881][T22078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1652.122935][T26040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.133842][T26040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.166831][T26040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.216781][T26040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.240171][T26040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.260064][T26040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.296356][T26040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.321258][T26371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1652.353293][T26040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.370619][T26040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.379496][T26040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.388789][T26040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.408044][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1652.433878][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1652.596613][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.609560][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.632610][T15114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1652.698589][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.713774][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.744100][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1658.439419][T26419] netlink: 'syz.4.7023': attribute type 10 has an invalid length. [ 1658.467173][T26419] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7023'. [ 1658.478344][T26419] device batadv_slave_1 entered promiscuous mode [ 1658.485408][T26419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.494687][T26419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.651501][T26420] netlink: 'syz.4.7023': attribute type 1 has an invalid length. [ 1658.659312][T26420] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.7023'. [ 1659.914449][T26452] netlink: 'syz.4.7032': attribute type 10 has an invalid length. [ 1659.931840][T26452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7032'. [ 1659.947092][T26452] netlink: 'syz.4.7032': attribute type 10 has an invalid length. [ 1659.958258][T26452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7032'. [ 1663.909416][T26484] netlink: 'syz.1.7045': attribute type 9 has an invalid length. [ 1663.917539][T26484] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7045'. [ 1664.040309][T26489] netlink: 'syz.1.7046': attribute type 29 has an invalid length. [ 1665.140336][T26482] netlink: 'syz.2.7044': attribute type 21 has an invalid length. [ 1665.148296][T26482] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7044'. [ 1665.190164][T26489] netlink: 'syz.1.7046': attribute type 29 has an invalid length. [ 1665.378982][T26497] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7048'. [ 1665.438661][T26497] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1665.467330][T26502] netlink: 'syz.4.7051': attribute type 10 has an invalid length. [ 1665.479090][T26502] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1667.049013][T26535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1667.237678][T26545] netlink: 'syz.3.7062': attribute type 29 has an invalid length. [ 1668.846163][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.852835][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.615865][T26535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1669.634650][T26545] netlink: 'syz.3.7062': attribute type 29 has an invalid length. [ 1669.706771][T26558] netlink: 'syz.0.7065': attribute type 39 has an invalid length. [ 1671.813902][T26584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7072'. [ 1672.533956][T26566] netlink: 'syz.2.7067': attribute type 10 has an invalid length. [ 1672.543061][T26566] bond0: (slave bond_slave_0): Releasing backup interface [ 1672.566092][T26568] netlink: 'syz.4.7066': attribute type 10 has an invalid length. [ 1672.700768][T26568] team0 (unregistering): Port device team_slave_0 removed [ 1672.885321][T26568] team0 (unregistering): Port device team_slave_1 removed [ 1672.926416][T26584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7072'. [ 1673.724597][T26616] netlink: 'syz.0.7082': attribute type 11 has an invalid length. [ 1673.747263][T26616] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1673.763630][T26618] netlink: 'syz.0.7082': attribute type 11 has an invalid length. [ 1673.771772][T26618] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1679.719020][T26621] netlink: 'syz.2.7083': attribute type 10 has an invalid length. [ 1680.539572][T26672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7101'. [ 1681.410904][T26682] netlink: 'syz.2.7108': attribute type 19 has an invalid length. [ 1681.423984][T26682] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1681.541284][T26690] netlink: 'syz.2.7108': attribute type 21 has an invalid length. [ 1681.645976][T26690] IPv6: NLM_F_CREATE should be specified when creating new route [ 1681.790252][T26690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1681.797686][T26690] IPv6: NLM_F_CREATE should be set when creating new route [ 1681.805201][T26690] IPv6: NLM_F_CREATE should be set when creating new route [ 1681.812562][T26690] IPv6: NLM_F_CREATE should be set when creating new route [ 1681.880562][T26694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1681.895634][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1681.918214][T26694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1683.024966][T26723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1686.935905][T26739] device syzkaller0 entered promiscuous mode [ 1686.945641][T26742] netlink: 'syz.0.7124': attribute type 19 has an invalid length. [ 1686.957511][T26742] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1688.994239][T26742] netlink: 'syz.0.7124': attribute type 21 has an invalid length. [ 1689.005564][T26742] IPv6: NLM_F_CREATE should be specified when creating new route [ 1689.014294][T26742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1689.021632][T26742] IPv6: NLM_F_CREATE should be set when creating new route [ 1689.028883][T26742] IPv6: NLM_F_CREATE should be set when creating new route [ 1689.036176][T26742] IPv6: NLM_F_CREATE should be set when creating new route [ 1689.056023][T26745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1689.068903][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1689.081024][T26745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1691.697628][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7130'. [ 1692.052854][T26774] netlink: 'syz.2.7132': attribute type 21 has an invalid length. [ 1692.075938][T26774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1701.002318][T26843] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7159'. [ 1702.812587][T26858] netlink: 'syz.2.7163': attribute type 21 has an invalid length. [ 1705.731249][T26902] netlink: 'syz.1.7175': attribute type 1 has an invalid length. [ 1705.740119][T26902] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7175'. [ 1706.563315][T26916] netlink: 'syz.4.7178': attribute type 21 has an invalid length. [ 1706.579220][T26916] netlink: 'syz.4.7178': attribute type 1 has an invalid length. [ 1708.077878][T26931] FAULT_INJECTION: forcing a failure. [ 1708.077878][T26931] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.120157][T26931] CPU: 0 PID: 26931 Comm: syz.1.7184 Not tainted syzkaller #0 [ 1708.127735][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1708.137879][T26931] Call Trace: [ 1708.141225][T26931] [ 1708.144215][T26931] dump_stack_lvl+0x188/0x24e [ 1708.148990][T26931] ? show_regs_print_info+0x12/0x12 [ 1708.154276][T26931] ? load_image+0x400/0x400 [ 1708.158889][T26931] ? __might_sleep+0xd0/0xd0 [ 1708.163546][T26931] ? __lock_acquire+0x7d10/0x7d10 [ 1708.168673][T26931] should_fail_ex+0x399/0x4d0 [ 1708.173454][T26931] should_failslab+0x5/0x20 [ 1708.178032][T26931] slab_pre_alloc_hook+0x59/0x310 [ 1708.183151][T26931] ? trace_probe_init+0x2ec/0x380 [ 1708.188254][T26931] __kmem_cache_alloc_node+0x4f/0x260 [ 1708.193690][T26931] ? trace_probe_init+0x2ec/0x380 [ 1708.198763][T26931] __kmalloc_node_track_caller+0x9e/0x230 [ 1708.204559][T26931] kstrdup+0x37/0x70 [ 1708.208518][T26931] trace_probe_init+0x2ec/0x380 [ 1708.213439][T26931] create_local_trace_uprobe+0x17f/0x6e0 [ 1708.219146][T26931] ? bpf_get_uprobe_info+0x520/0x520 [ 1708.224577][T26931] ? _copy_from_user+0x10b/0x170 [ 1708.229583][T26931] perf_uprobe_init+0xef/0x190 [ 1708.234409][T26931] perf_uprobe_event_init+0xe2/0x170 [ 1708.239758][T26931] perf_try_init_event+0x12b/0x3d0 [ 1708.244929][T26931] perf_event_alloc+0xf5c/0x21b0 [ 1708.249918][T26931] ? perf_event_alloc+0xbe2/0x21b0 [ 1708.255117][T26931] ? find_lively_task_by_vpid+0x19/0x290 [ 1708.260818][T26931] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 1708.266501][T26931] ? __fget_files+0x43d/0x4b0 [ 1708.271250][T26931] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1708.276981][T26931] ? lockdep_hardirqs_on+0x94/0x140 [ 1708.282239][T26931] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1708.287925][T26931] do_syscall_64+0x4c/0xa0 [ 1708.292384][T26931] ? clear_bhb_loop+0x60/0xb0 [ 1708.297105][T26931] ? clear_bhb_loop+0x60/0xb0 [ 1708.301836][T26931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.307774][T26931] RIP: 0033:0x7ff92e99bf79 [ 1708.312232][T26931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.331875][T26931] RSP: 002b:00007ff92cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1708.340351][T26931] RAX: ffffffffffffffda RBX: 00007ff92ec15fa0 RCX: 00007ff92e99bf79 [ 1708.348362][T26931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 1708.356366][T26931] RBP: 00007ff92cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.364394][T26931] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1708.372409][T26931] R13: 00007ff92ec16038 R14: 00007ff92ec15fa0 R15: 00007fff80625f88 [ 1708.380491][T26931] [ 1708.400811][T26931] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1710.789775][T26939] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7186'. [ 1710.800078][T26949] netlink: 'syz.2.7189': attribute type 10 has an invalid length. [ 1710.807949][T26949] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1712.657817][T26978] device syzkaller0 entered promiscuous mode [ 1712.672785][T26985] netlink: 'syz.3.7199': attribute type 3 has an invalid length. [ 1712.703347][T26983] netlink: 'syz.1.7197': attribute type 3 has an invalid length. [ 1712.720449][T26985] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7199'. [ 1712.735993][T26983] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7197'. [ 1712.773586][T26987] IPv6: Can't replace route, no match found [ 1712.943899][T26990] netlink: 'syz.2.7201': attribute type 1 has an invalid length. [ 1712.979400][T26991] netlink: 'syz.3.7202': attribute type 1 has an invalid length. [ 1712.987622][T26990] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.7201'. [ 1713.010484][T26991] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7202'. [ 1716.193451][T27053] delete_channel: no stack [ 1718.195818][T27028] IPv6: Can't replace route, no match found [ 1718.204927][T27058] netlink: 'syz.2.7227': attribute type 10 has an invalid length. [ 1718.243620][T27058] team0: Device vxcan1 is of different type [ 1719.316913][T27100] netlink: 111 bytes leftover after parsing attributes in process `syz.2.7240'. [ 1719.378463][T27102] IPv6: Can't replace route, no match found [ 1719.407956][T27104] netlink: 'syz.2.7240': attribute type 4 has an invalid length. [ 1719.430136][T27104] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7240'. [ 1719.461743][T27100] netlink: 'syz.2.7240': attribute type 21 has an invalid length. [ 1719.470100][T27100] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7240'. [ 1719.499904][T27109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7242'. [ 1719.520744][T27100] netlink: 'syz.2.7240': attribute type 4 has an invalid length. [ 1719.567388][T27100] netlink: 'syz.2.7240': attribute type 3 has an invalid length. [ 1719.580777][T27100] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7240'. [ 1719.747661][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.857793][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.867504][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.877071][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.886810][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.896472][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.906295][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.915862][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.925696][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1719.935471][T27113] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1721.122347][T27131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7250'. [ 1721.135562][T27131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7250'. [ 1721.145859][T27131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7250'. [ 1721.254119][T27133] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7251'. [ 1721.482004][T27144] netlink: 'syz.1.7255': attribute type 11 has an invalid length. [ 1721.505651][T27144] netlink: 146564 bytes leftover after parsing attributes in process `syz.1.7255'. [ 1722.593730][T27171] netlink: 'syz.0.7266': attribute type 10 has an invalid length. [ 1725.737509][T27193] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 1725.747113][T27189] netlink: 'syz.0.7271': attribute type 11 has an invalid length. [ 1725.760066][T27189] __nla_validate_parse: 1 callbacks suppressed [ 1725.760083][T27189] netlink: 146564 bytes leftover after parsing attributes in process `syz.0.7271'. [ 1725.760443][T27193] syzkaller0: owner set to 0 [ 1725.853368][T27197] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 1727.919389][T27227] netlink: 'syz.1.7281': attribute type 3 has an invalid length. [ 1727.964179][T27227] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7281'. [ 1730.287080][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.293501][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.569735][T27212] device syzkaller0 entered promiscuous mode [ 1730.851208][T27243] netlink: 'syz.3.7286': attribute type 11 has an invalid length. [ 1730.903495][T27243] netlink: 146564 bytes leftover after parsing attributes in process `syz.3.7286'. [ 1740.966797][T27295] netlink: 'syz.1.7301': attribute type 10 has an invalid length. [ 1741.278365][T27306] FAULT_INJECTION: forcing a failure. [ 1741.278365][T27306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.350407][T27306] CPU: 1 PID: 27306 Comm: syz.0.7305 Not tainted syzkaller #0 [ 1741.357977][T27306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1741.368082][T27306] Call Trace: [ 1741.371421][T27306] [ 1741.374385][T27306] dump_stack_lvl+0x188/0x24e [ 1741.379138][T27306] ? show_regs_print_info+0x12/0x12 [ 1741.384405][T27306] ? load_image+0x400/0x400 [ 1741.388958][T27306] ? __lock_acquire+0x7d10/0x7d10 [ 1741.394033][T27306] ? __fget_files+0x28/0x4b0 [ 1741.398683][T27306] should_fail_ex+0x399/0x4d0 [ 1741.403424][T27306] _copy_from_user+0x2c/0x170 [ 1741.408161][T27306] generic_map_update_batch+0x4f3/0x810 [ 1741.413800][T27306] ? rcu_read_unlock+0xa0/0xa0 [ 1741.418635][T27306] ? __fdget+0x17c/0x200 [ 1741.422932][T27306] ? rcu_read_unlock+0xa0/0xa0 [ 1741.427759][T27306] bpf_map_do_batch+0x466/0x600 [ 1741.432666][T27306] __sys_bpf+0x6f7/0x780 [ 1741.436957][T27306] ? bpf_link_show_fdinfo+0x380/0x380 [ 1741.442417][T27306] ? lock_chain_count+0x20/0x20 [ 1741.447341][T27306] __x64_sys_bpf+0x78/0x90 [ 1741.451810][T27306] do_syscall_64+0x4c/0xa0 [ 1741.456271][T27306] ? clear_bhb_loop+0x60/0xb0 [ 1741.460997][T27306] ? clear_bhb_loop+0x60/0xb0 [ 1741.465706][T27306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1741.471639][T27306] RIP: 0033:0x7fe32559bf79 [ 1741.476085][T27306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.495730][T27306] RSP: 002b:00007fe32654a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1741.504181][T27306] RAX: ffffffffffffffda RBX: 00007fe325815fa0 RCX: 00007fe32559bf79 [ 1741.512180][T27306] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 1741.520175][T27306] RBP: 00007fe32654a090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.528176][T27306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.536179][T27306] R13: 00007fe325816038 R14: 00007fe325815fa0 R15: 00007ffdc3ed66a8 [ 1741.544196][T27306] [ 1743.023746][T27324] device syzkaller0 entered promiscuous mode [ 1743.206595][T27330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.218621][T27330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.633405][T27334] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1747.309735][T27353] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7320'. [ 1747.319541][T27359] netlink: 'syz.1.7322': attribute type 4 has an invalid length. [ 1747.327475][T27359] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7322'. [ 1747.722523][T27371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7324'. [ 1747.857215][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7324'. [ 1747.995863][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7324'. [ 1749.226891][T27401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7335'. [ 1749.708127][T27405] netlink: 'syz.1.7336': attribute type 39 has an invalid length. [ 1749.816096][T27406] netlink: 'syz.1.7336': attribute type 2 has an invalid length. [ 1751.092458][T27432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.101586][T27432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.503848][T27440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7349'. [ 1754.538919][T27518] netlink: 'syz.4.7378': attribute type 39 has an invalid length. [ 1754.555579][T27518] device veth0_macvtap left promiscuous mode [ 1755.066897][T27529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7382'. [ 1755.615498][T27542] net_ratelimit: 3256 callbacks suppressed [ 1755.615515][T27542] wlan1: mtu greater than device maximum [ 1755.678692][T27547] netlink: 'syz.3.7390': attribute type 17 has an invalid length. [ 1755.686782][T27547] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7390'. [ 1755.858357][T27549] netlink: 'syz.4.7393': attribute type 12 has an invalid length. [ 1756.126476][T27556] netlink: 'syz.3.7396': attribute type 8 has an invalid length. [ 1756.299315][T27565] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.7398'. [ 1756.956058][T27583] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1757.083274][T27589] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1757.104964][T27589] syzkaller1: linktype set to 780 [ 1757.593543][T27606] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.7411'. [ 1757.960199][T12982] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.877149][T27639] FAULT_INJECTION: forcing a failure. [ 1763.877149][T27639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.901676][T27639] CPU: 1 PID: 27639 Comm: syz.0.7423 Not tainted syzkaller #0 [ 1763.909255][T27639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1763.919383][T27639] Call Trace: [ 1763.922721][T27639] [ 1763.925720][T27639] dump_stack_lvl+0x188/0x24e [ 1763.930481][T27639] ? show_regs_print_info+0x12/0x12 [ 1763.935749][T27639] ? load_image+0x400/0x400 [ 1763.940326][T27639] ? __lock_acquire+0x7d10/0x7d10 [ 1763.945488][T27639] ? snprintf+0xe5/0x140 [ 1763.949799][T27639] should_fail_ex+0x399/0x4d0 [ 1763.954594][T27639] _copy_to_user+0x2c/0x130 [ 1763.959163][T27639] simple_read_from_buffer+0xe3/0x150 [ 1763.964601][T27639] proc_fail_nth_read+0x1a6/0x220 [ 1763.969670][T27639] ? proc_fault_inject_write+0x310/0x310 [ 1763.975344][T27639] ? fsnotify_perm+0x248/0x550 [ 1763.980150][T27639] ? proc_fault_inject_write+0x310/0x310 [ 1763.985821][T27639] vfs_read+0x2de/0xa00 [ 1763.990030][T27639] ? kernel_read+0x1e0/0x1e0 [ 1763.994663][T27639] ? __fget_files+0x28/0x4b0 [ 1763.999299][T27639] ? __fget_files+0x28/0x4b0 [ 1764.003943][T27639] ? __fget_files+0x43d/0x4b0 [ 1764.008691][T27639] ? __fdget_pos+0x2ae/0x360 [ 1764.013317][T27639] ? ksys_read+0x71/0x250 [ 1764.017711][T27639] ksys_read+0x14c/0x250 [ 1764.022004][T27639] ? vfs_write+0xa30/0xa30 [ 1764.026460][T27639] ? lockdep_hardirqs_on+0x94/0x140 [ 1764.031721][T27639] do_syscall_64+0x4c/0xa0 [ 1764.036171][T27639] ? clear_bhb_loop+0x60/0xb0 [ 1764.040889][T27639] ? clear_bhb_loop+0x60/0xb0 [ 1764.045609][T27639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1764.051536][T27639] RIP: 0033:0x7fe32555c84e [ 1764.055981][T27639] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1764.075624][T27639] RSP: 002b:00007fe326549fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1764.084079][T27639] RAX: ffffffffffffffda RBX: 00007fe32654a6c0 RCX: 00007fe32555c84e [ 1764.092083][T27639] RDX: 000000000000000f RSI: 00007fe32654a0a0 RDI: 0000000000000006 [ 1764.100115][T27639] RBP: 00007fe32654a090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.108116][T27639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.116122][T27639] R13: 00007fe325816038 R14: 00007fe325815fa0 R15: 00007ffdc3ed66a8 [ 1764.124148][T27639] [ 1764.679725][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7433'. [ 1765.277521][T27667] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1765.677776][T27672] netlink: 'syz.0.7434': attribute type 11 has an invalid length. [ 1765.800726][T27672] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1765.993124][T27666] delete_channel: no stack [ 1766.706394][T27680] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.7438'. [ 1767.330157][T27691] netlink: 'syz.4.7441': attribute type 13 has an invalid length. [ 1767.338382][T27691] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.7441'. [ 1767.511272][T27699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7445'. [ 1771.996225][T27699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7445'. [ 1772.271407][T27733] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7453'. [ 1773.937050][T27763] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.7464'. [ 1774.439418][T27777] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7468'. [ 1774.465839][T27777] netlink: zone id is out of range [ 1774.480326][T27777] netlink: zone id is out of range [ 1774.485749][T27777] netlink: get zone limit has 8 unknown bytes [ 1774.493997][T27778] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7468'. [ 1776.198185][T27792] FAULT_INJECTION: forcing a failure. [ 1776.198185][T27792] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.230220][T27792] CPU: 1 PID: 27792 Comm: syz.0.7474 Not tainted syzkaller #0 [ 1776.237785][T27792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1776.247999][T27792] Call Trace: [ 1776.251334][T27792] [ 1776.254332][T27792] dump_stack_lvl+0x188/0x24e [ 1776.259117][T27792] ? show_regs_print_info+0x12/0x12 [ 1776.264407][T27792] ? load_image+0x400/0x400 [ 1776.268990][T27792] ? __might_sleep+0xd0/0xd0 [ 1776.273658][T27792] ? __lock_acquire+0x7d10/0x7d10 [ 1776.278757][T27792] ? snprintf+0xe5/0x140 [ 1776.283090][T27792] should_fail_ex+0x399/0x4d0 [ 1776.287863][T27792] should_failslab+0x5/0x20 [ 1776.292441][T27792] slab_pre_alloc_hook+0x59/0x310 [ 1776.297527][T27792] ? traceprobe_set_print_fmt+0x58/0xb0 [ 1776.303127][T27792] __kmem_cache_alloc_node+0x4f/0x260 [ 1776.308554][T27792] ? traceprobe_set_print_fmt+0x58/0xb0 [ 1776.314147][T27792] __kmalloc+0xa0/0x240 [ 1776.318369][T27792] traceprobe_set_print_fmt+0x58/0xb0 [ 1776.323795][T27792] create_local_trace_uprobe+0x564/0x6e0 [ 1776.329490][T27792] ? bpf_get_uprobe_info+0x520/0x520 [ 1776.334831][T27792] ? _copy_from_user+0x10b/0x170 [ 1776.339827][T27792] perf_uprobe_init+0xef/0x190 [ 1776.344644][T27792] perf_uprobe_event_init+0xe2/0x170 [ 1776.350010][T27792] perf_try_init_event+0x12b/0x3d0 [ 1776.355182][T27792] perf_event_alloc+0xf5c/0x21b0 [ 1776.360178][T27792] ? perf_event_alloc+0xbe2/0x21b0 [ 1776.365403][T27792] ? find_lively_task_by_vpid+0x19/0x290 [ 1776.371185][T27792] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 1776.376871][T27792] ? __fget_files+0x43d/0x4b0 [ 1776.381628][T27792] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1776.387356][T27792] ? lockdep_hardirqs_on+0x94/0x140 [ 1776.392597][T27792] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1776.398288][T27792] do_syscall_64+0x4c/0xa0 [ 1776.402764][T27792] ? clear_bhb_loop+0x60/0xb0 [ 1776.407494][T27792] ? clear_bhb_loop+0x60/0xb0 [ 1776.412227][T27792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1776.418186][T27792] RIP: 0033:0x7fe32559bf79 [ 1776.422650][T27792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.442316][T27792] RSP: 002b:00007fe32654a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1776.450777][T27792] RAX: ffffffffffffffda RBX: 00007fe325815fa0 RCX: 00007fe32559bf79 [ 1776.458784][T27792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 1776.466806][T27792] RBP: 00007fe32654a090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.474811][T27792] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1776.482818][T27792] R13: 00007fe325816038 R14: 00007fe325815fa0 R15: 00007ffdc3ed66a8 [ 1776.490948][T27792] [ 1776.726401][T27803] netlink: 'syz.0.7478': attribute type 1 has an invalid length. [ 1776.742344][T27803] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.7478'. [ 1777.204615][T27807] netlink: 'syz.0.7479': attribute type 10 has an invalid length. [ 1777.239698][T27807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7479'. [ 1777.283587][T27807] bridge0: port 3(veth0_vlan) entered blocking state [ 1777.368696][T27807] bridge0: port 3(veth0_vlan) entered disabled state [ 1777.544943][T27807] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1778.345824][T27819] netlink: 'syz.1.7483': attribute type 11 has an invalid length. [ 1778.384441][T27819] netlink: 163736 bytes leftover after parsing attributes in process `syz.1.7483'. [ 1778.594565][T27828] netlink: 'syz.1.7487': attribute type 10 has an invalid length. [ 1778.727675][T27826] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.7486'. [ 1785.381349][T27893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7504'. [ 1785.761033][T27903] netlink: 'syz.3.7507': attribute type 1 has an invalid length. [ 1785.804941][T27903] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7507'. [ 1788.423132][T27945] delete_channel: no stack [ 1791.254939][T27957] À: port 1(vlan0) entered blocking state [ 1791.261480][T27957] À: port 1(vlan0) entered disabled state [ 1791.268424][T27957] device vlan0 entered promiscuous mode [ 1791.320487][T27958] À: port 1(vlan0) entered blocking state [ 1791.326383][T27958] À: port 1(vlan0) entered forwarding state [ 1791.553038][T27976] netlink: 'syz.3.7533': attribute type 10 has an invalid length. [ 1791.580258][T27976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7533'. [ 1791.611229][T27976] batman_adv: batadv0: Adding interface: geneve0 [ 1791.617706][T27976] batman_adv: batadv0: The MTU of interface geneve0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.696313][T27976] batman_adv: batadv0: Interface activated: geneve0 [ 1791.723838][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.730268][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.867466][T27980] delete_channel: no stack [ 1792.221096][T27996] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7539'. [ 1792.259576][T27998] netlink: 'syz.0.7540': attribute type 1 has an invalid length. [ 1792.310161][T27998] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.7540'. [ 1792.611256][T28003] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1796.657460][T28036] netlink: 'syz.0.7553': attribute type 10 has an invalid length. [ 1796.919496][T28046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7557'. [ 1797.227106][T28061] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7564'. [ 1797.367126][T28061] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1798.277482][T28081] netlink: 191600 bytes leftover after parsing attributes in process `syz.2.7569'. [ 1799.438461][T28105] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.7579'. [ 1799.455703][T28105] netlink: 'syz.1.7579': attribute type 10 has an invalid length. [ 1799.468677][T28105] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7579'. [ 1800.188595][T28123] device wlan0 entered promiscuous mode [ 1800.511773][T28128] netlink: 'syz.1.7589': attribute type 3 has an invalid length. [ 1800.531665][T28128] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7589'. [ 1802.093843][T28155] netlink: 'syz.1.7601': attribute type 29 has an invalid length. [ 1802.117920][T28155] netlink: 'syz.1.7601': attribute type 29 has an invalid length. [ 1802.201269][T28159] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.7603'. [ 1802.383149][T28166] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7606'. [ 1802.581466][T28170] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7607'. [ 1802.647799][T28170] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1802.670764][T28170] CPU: 0 PID: 28170 Comm: syz.3.7607 Not tainted syzkaller #0 [ 1802.678307][T28170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1802.688423][T28170] Call Trace: [ 1802.691746][T28170] [ 1802.694724][T28170] dump_stack_lvl+0x188/0x24e [ 1802.699467][T28170] ? show_regs_print_info+0x12/0x12 [ 1802.704726][T28170] ? load_image+0x400/0x400 [ 1802.709300][T28170] sysfs_warn_dup+0x8a/0xa0 [ 1802.713856][T28170] sysfs_do_create_link_sd+0xc0/0x110 [ 1802.719305][T28170] device_add+0x7ed/0xfb0 [ 1802.723700][T28170] wiphy_register+0x1d9f/0x2ac0 [ 1802.728641][T28170] ? cfg80211_event_work+0x40/0x40 [ 1802.733811][T28170] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1802.740029][T28170] ieee80211_register_hw+0x2d00/0x39f0 [ 1802.745545][T28170] ? lockdep_hardirqs_on+0x94/0x140 [ 1802.750806][T28170] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1802.756414][T28170] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1802.762022][T28170] ? ieee80211_tasklet_handler+0x20/0x20 [ 1802.767718][T28170] ? memset+0x1e/0x40 [ 1802.771745][T28170] ? __hrtimer_init+0x186/0x270 [ 1802.776650][T28170] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1802.782448][T28170] hwsim_new_radio_nl+0xafa/0xce0 [ 1802.787537][T28170] genl_family_rcv_msg_doit+0x22a/0x330 [ 1802.793137][T28170] ? rcu_is_watching+0x11/0xa0 [ 1802.797961][T28170] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1802.803936][T28170] ? lockdep_hardirqs_on+0x94/0x140 [ 1802.809197][T28170] ? genl_rcv_msg+0x5dc/0x790 [ 1802.813938][T28170] genl_rcv_msg+0x604/0x790 [ 1802.818507][T28170] ? genl_bind+0x360/0x360 [ 1802.822985][T28170] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1802.829394][T28170] netlink_rcv_skb+0x1fb/0x450 [ 1802.834214][T28170] ? genl_bind+0x360/0x360 [ 1802.838702][T28170] ? netlink_ack+0x1170/0x1170 [ 1802.843547][T28170] ? down_read+0x1a8/0x2d0 [ 1802.848030][T28170] genl_rcv+0x24/0x40 [ 1802.852077][T28170] netlink_unicast+0x74d/0x8d0 [ 1802.856908][T28170] netlink_sendmsg+0x8ad/0xbd0 [ 1802.861735][T28170] ? lockdep_hardirqs_on+0x94/0x140 [ 1802.866976][T28170] ? netlink_getsockopt+0x550/0x550 [ 1802.872236][T28170] ? netlink_getsockopt+0x550/0x550 [ 1802.877503][T28170] ? netlink_getsockopt+0x550/0x550 [ 1802.882758][T28170] ____sys_sendmsg+0x5be/0x970 [ 1802.887594][T28170] ? __sys_sendmsg_sock+0x30/0x30 [ 1802.892684][T28170] ? __import_iovec+0x315/0x500 [ 1802.897602][T28170] ? import_iovec+0x6f/0xa0 [ 1802.902156][T28170] ___sys_sendmsg+0x2a2/0x360 [ 1802.906925][T28170] ? __sys_sendmsg+0x290/0x290 [ 1802.911775][T28170] ? rcu_is_watching+0x11/0xa0 [ 1802.916621][T28170] __se_sys_sendmsg+0x1bb/0x2a0 [ 1802.921529][T28170] ? __x64_sys_sendmsg+0x80/0x80 [ 1802.926538][T28170] ? lockdep_hardirqs_on+0x94/0x140 [ 1802.931785][T28170] do_syscall_64+0x4c/0xa0 [ 1802.936257][T28170] ? clear_bhb_loop+0x60/0xb0 [ 1802.940980][T28170] ? clear_bhb_loop+0x60/0xb0 [ 1802.945711][T28170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1802.951652][T28170] RIP: 0033:0x7f690599bf79 [ 1802.956113][T28170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.975860][T28170] RSP: 002b:00007f69067ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1802.984330][T28170] RAX: ffffffffffffffda RBX: 00007f6905c15fa0 RCX: 00007f690599bf79 [ 1802.992365][T28170] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1803.000390][T28170] RBP: 00007f6905a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1803.008409][T28170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1803.016426][T28170] R13: 00007f6905c16038 R14: 00007f6905c15fa0 R15: 00007ffc34da8908 [ 1803.024445][T28170] [ 1805.376569][T28205] can: request_module (can-proto-0) failed. [ 1806.373646][T28225] netlink: 191600 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1808.806968][T28231] netlink: 160 bytes leftover after parsing attributes in process `syz.0.7628'. [ 1809.073000][T28244] FAULT_INJECTION: forcing a failure. [ 1809.073000][T28244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1809.134038][T28244] CPU: 1 PID: 28244 Comm: syz.2.7634 Not tainted syzkaller #0 [ 1809.141582][T28244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1809.151690][T28244] Call Trace: [ 1809.155017][T28244] [ 1809.157992][T28244] dump_stack_lvl+0x188/0x24e [ 1809.162746][T28244] ? show_regs_print_info+0x12/0x12 [ 1809.163729][T28248] netlink: 'syz.3.7636': attribute type 21 has an invalid length. [ 1809.168002][T28244] ? load_image+0x400/0x400 [ 1809.168033][T28244] ? __lock_acquire+0x7d10/0x7d10 [ 1809.185470][T28244] should_fail_ex+0x399/0x4d0 [ 1809.190226][T28244] _copy_from_user+0x2c/0x170 [ 1809.194978][T28244] generic_map_update_batch+0x4a1/0x810 [ 1809.200597][T28244] ? rcu_read_unlock+0xa0/0xa0 [ 1809.205424][T28244] ? __fdget+0x17c/0x200 [ 1809.209730][T28244] ? rcu_read_unlock+0xa0/0xa0 [ 1809.214548][T28244] bpf_map_do_batch+0x466/0x600 [ 1809.219465][T28244] __sys_bpf+0x6f7/0x780 [ 1809.220879][T28248] netlink: 'syz.3.7636': attribute type 1 has an invalid length. [ 1809.223754][T28244] ? bpf_link_show_fdinfo+0x380/0x380 [ 1809.236906][T28244] ? lock_chain_count+0x20/0x20 [ 1809.241818][T28244] __x64_sys_bpf+0x78/0x90 [ 1809.246299][T28244] do_syscall_64+0x4c/0xa0 [ 1809.250766][T28244] ? clear_bhb_loop+0x60/0xb0 [ 1809.255474][T28244] ? clear_bhb_loop+0x60/0xb0 [ 1809.260181][T28244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1809.266103][T28244] RIP: 0033:0x7f73d839bf79 [ 1809.270548][T28244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1809.290200][T28244] RSP: 002b:00007f73d91d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1809.298643][T28244] RAX: ffffffffffffffda RBX: 00007f73d8615fa0 RCX: 00007f73d839bf79 [ 1809.306658][T28244] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 1809.314657][T28244] RBP: 00007f73d91d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.322656][T28244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1809.330657][T28244] R13: 00007f73d8616038 R14: 00007f73d8615fa0 R15: 00007fff8f3b6568 [ 1809.338670][T28244] [ 1809.378052][T28248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7636'. [ 1811.450867][T28275] netlink: 191600 bytes leftover after parsing attributes in process `syz.0.7642'. [ 1814.268493][T28285] ref_ctr_offset mismatch. inode: 0x2b0 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1814.611794][T28301] netlink: 'syz.4.7653': attribute type 3 has an invalid length. [ 1814.619842][T28301] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7653'. [ 1816.261255][T28326] netlink: 'syz.0.7663': attribute type 2 has an invalid length. [ 1816.276080][T28326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7663'. [ 1816.308335][T28327] FAULT_INJECTION: forcing a failure. [ 1816.308335][T28327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.338783][T28327] CPU: 0 PID: 28327 Comm: syz.2.7662 Not tainted syzkaller #0 [ 1816.346374][T28327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1816.356485][T28327] Call Trace: [ 1816.359798][T28327] [ 1816.362750][T28327] dump_stack_lvl+0x188/0x24e [ 1816.367485][T28327] ? show_regs_print_info+0x12/0x12 [ 1816.372725][T28327] ? load_image+0x400/0x400 [ 1816.377265][T28327] ? __lock_acquire+0x7d10/0x7d10 [ 1816.382328][T28327] ? snprintf+0xe5/0x140 [ 1816.386696][T28327] should_fail_ex+0x399/0x4d0 [ 1816.391425][T28327] _copy_to_user+0x2c/0x130 [ 1816.395971][T28327] simple_read_from_buffer+0xe3/0x150 [ 1816.401401][T28327] proc_fail_nth_read+0x1a6/0x220 [ 1816.406478][T28327] ? proc_fault_inject_write+0x310/0x310 [ 1816.412148][T28327] ? fsnotify_perm+0x248/0x550 [ 1816.416956][T28327] ? proc_fault_inject_write+0x310/0x310 [ 1816.422629][T28327] vfs_read+0x2de/0xa00 [ 1816.426845][T28327] ? kernel_read+0x1e0/0x1e0 [ 1816.431478][T28327] ? __fget_files+0x28/0x4b0 [ 1816.436109][T28327] ? __fget_files+0x28/0x4b0 [ 1816.440858][T28327] ? __fget_files+0x43d/0x4b0 [ 1816.445594][T28327] ? __fdget_pos+0x2ae/0x360 [ 1816.450225][T28327] ? ksys_read+0x71/0x250 [ 1816.454596][T28327] ksys_read+0x14c/0x250 [ 1816.458883][T28327] ? vfs_write+0xa30/0xa30 [ 1816.463352][T28327] ? lockdep_hardirqs_on+0x94/0x140 [ 1816.468586][T28327] do_syscall_64+0x4c/0xa0 [ 1816.473039][T28327] ? clear_bhb_loop+0x60/0xb0 [ 1816.477750][T28327] ? clear_bhb_loop+0x60/0xb0 [ 1816.482465][T28327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.488392][T28327] RIP: 0033:0x7f73d835c84e [ 1816.492841][T28327] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1816.512483][T28327] RSP: 002b:00007f73d91d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1816.520934][T28327] RAX: ffffffffffffffda RBX: 00007f73d91d36c0 RCX: 00007f73d835c84e [ 1816.528939][T28327] RDX: 000000000000000f RSI: 00007f73d91d30a0 RDI: 0000000000000006 [ 1816.536946][T28327] RBP: 00007f73d91d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.544952][T28327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.552959][T28327] R13: 00007f73d8616038 R14: 00007f73d8615fa0 R15: 00007fff8f3b6568 [ 1816.560995][T28327] [ 1818.387662][T28370] netlink: 'syz.0.7681': attribute type 21 has an invalid length. [ 1818.436563][T28370] netlink: 'syz.0.7681': attribute type 6 has an invalid length. [ 1818.461201][T28366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7679'. [ 1818.470399][T28370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7681'. [ 1818.505622][T28366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7679'. [ 1818.549093][T28375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7679'. [ 1818.651119][T28366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7679'. [ 1825.944210][T28455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7706'. [ 1826.460839][T28470] netlink: 'syz.0.7709': attribute type 49 has an invalid length. [ 1826.566804][T28470] netlink: 'syz.0.7709': attribute type 49 has an invalid length. [ 1829.584562][T28512] netlink: 'syz.3.7725': attribute type 10 has an invalid length. [ 1831.553515][T28526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7730'. [ 1834.229555][T28566] netlink: 'syz.1.7744': attribute type 29 has an invalid length. [ 1835.752738][T28566] netlink: 'syz.1.7744': attribute type 29 has an invalid length. [ 1836.305392][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7755'. [ 1838.395794][T28627] netlink: 'syz.4.7767': attribute type 21 has an invalid length. [ 1838.437989][T28627] netlink: 'syz.4.7767': attribute type 1 has an invalid length. [ 1838.514922][T28627] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.7767'. [ 1840.493091][T28666] FAULT_INJECTION: forcing a failure. [ 1840.493091][T28666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1840.580167][T28666] CPU: 1 PID: 28666 Comm: syz.0.7781 Not tainted syzkaller #0 [ 1840.587746][T28666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1840.597864][T28666] Call Trace: [ 1840.601215][T28666] [ 1840.604221][T28666] dump_stack_lvl+0x188/0x24e [ 1840.608989][T28666] ? show_regs_print_info+0x12/0x12 [ 1840.614306][T28666] ? load_image+0x400/0x400 [ 1840.618895][T28666] ? __lock_acquire+0x7d10/0x7d10 [ 1840.624005][T28666] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1840.629728][T28666] should_fail_ex+0x399/0x4d0 [ 1840.634518][T28666] prepare_alloc_pages+0x1e2/0x5f0 [ 1840.639739][T28666] __alloc_pages+0x130/0x4f0 [ 1840.644445][T28666] ? zone_statistics+0x170/0x170 [ 1840.649504][T28666] ? _find_next_bit+0x87/0x130 [ 1840.654357][T28666] probe_event_enable+0x583/0xc40 [ 1840.659489][T28666] ? _find_next_bit+0x11e/0x130 [ 1840.664417][T28666] ? __uprobe_trace_func+0x400/0x400 [ 1840.669924][T28666] perf_trace_event_init+0x420/0x940 [ 1840.675311][T28666] perf_uprobe_init+0x12a/0x190 [ 1840.680243][T28666] perf_uprobe_event_init+0xe2/0x170 [ 1840.685594][T28666] perf_try_init_event+0x12b/0x3d0 [ 1840.690777][T28666] perf_event_alloc+0xf5c/0x21b0 [ 1840.695768][T28666] ? perf_event_alloc+0xbe2/0x21b0 [ 1840.700979][T28666] ? find_lively_task_by_vpid+0x19/0x290 [ 1840.706688][T28666] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 1840.712376][T28666] ? __fget_files+0x43d/0x4b0 [ 1840.717120][T28666] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1840.722852][T28666] ? lockdep_hardirqs_on+0x94/0x140 [ 1840.728092][T28666] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1840.733813][T28666] do_syscall_64+0x4c/0xa0 [ 1840.738283][T28666] ? clear_bhb_loop+0x60/0xb0 [ 1840.743000][T28666] ? clear_bhb_loop+0x60/0xb0 [ 1840.747722][T28666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1840.753652][T28666] RIP: 0033:0x7fe32559bf79 [ 1840.758110][T28666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1840.777758][T28666] RSP: 002b:00007fe32654a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1840.786237][T28666] RAX: ffffffffffffffda RBX: 00007fe325815fa0 RCX: 00007fe32559bf79 [ 1840.794245][T28666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 1840.802254][T28666] RBP: 00007fe32654a090 R08: 0000000000000000 R09: 0000000000000000 [ 1840.810257][T28666] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 1840.818261][T28666] R13: 00007fe325816038 R14: 00007fe325815fa0 R15: 00007ffdc3ed66a8 [ 1840.826302][T28666] [ 1841.040237][T28671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1841.048465][T28671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1842.506033][T28702] netlink: 'syz.3.7794': attribute type 10 has an invalid length. [ 1842.901070][T28702] device syz_tun entered promiscuous mode [ 1842.974263][T28702] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1844.082852][T28738] netlink: 'syz.4.7805': attribute type 3 has an invalid length. [ 1844.170265][T28738] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7805'. [ 1845.929360][T28765] netlink: 'syz.2.7816': attribute type 1 has an invalid length. [ 1845.950638][T28765] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1846.441763][T28780] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7821'. [ 1848.153029][T28803] Ÿë: port 1(gretap0) entered blocking state [ 1848.167131][T28803] Ÿë: port 1(gretap0) entered disabled state [ 1848.195388][T28803] device gretap0 entered promiscuous mode [ 1848.283939][T28810] Ÿë: port 2(veth0_to_team) entered blocking state [ 1848.308588][T28810] Ÿë: port 2(veth0_to_team) entered disabled state [ 1848.404737][T28810] device veth0_to_team entered promiscuous mode [ 1852.678044][T28827] netlink: 'syz.0.7837': attribute type 21 has an invalid length. [ 1852.692281][T28827] netlink: 'syz.0.7837': attribute type 1 has an invalid length. [ 1852.700358][T28827] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.7837'. [ 1853.164148][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.170631][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.848889][T28916] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7865'. [ 1858.450583][T28897] netlink: 'syz.3.7859': attribute type 21 has an invalid length. [ 1858.458758][T28897] netlink: 'syz.3.7859': attribute type 1 has an invalid length. [ 1858.467499][T28897] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.7859'. [ 1858.484634][T28916] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1858.497036][T28916] CPU: 1 PID: 28916 Comm: syz.4.7865 Not tainted syzkaller #0 [ 1858.504597][T28916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1858.514704][T28916] Call Trace: [ 1858.518018][T28916] [ 1858.520986][T28916] dump_stack_lvl+0x188/0x24e [ 1858.525723][T28916] ? show_regs_print_info+0x12/0x12 [ 1858.530963][T28916] ? load_image+0x400/0x400 [ 1858.535511][T28916] sysfs_warn_dup+0x8a/0xa0 [ 1858.540052][T28916] sysfs_do_create_link_sd+0xc0/0x110 [ 1858.545465][T28916] device_add+0x7ed/0xfb0 [ 1858.549868][T28916] wiphy_register+0x1d9f/0x2ac0 [ 1858.554769][T28916] ? cfg80211_event_work+0x40/0x40 [ 1858.559915][T28916] ? minstrel_ht_alloc+0x894/0xa20 [ 1858.565081][T28916] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1858.571266][T28916] ieee80211_register_hw+0x2d00/0x39f0 [ 1858.576779][T28916] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1858.582354][T28916] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1858.587931][T28916] ? ieee80211_tasklet_handler+0x20/0x20 [ 1858.593616][T28916] ? memset+0x1e/0x40 [ 1858.597622][T28916] ? __hrtimer_init+0x186/0x270 [ 1858.602505][T28916] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1858.608276][T28916] hwsim_new_radio_nl+0xafa/0xce0 [ 1858.613341][T28916] genl_family_rcv_msg_doit+0x22a/0x330 [ 1858.618912][T28916] ? end_current_label_crit_section+0x170/0x170 [ 1858.625188][T28916] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1858.631131][T28916] ? bpf_lsm_capable+0x5/0x10 [ 1858.635852][T28916] ? security_capable+0x85/0xb0 [ 1858.640740][T28916] genl_rcv_msg+0x604/0x790 [ 1858.645288][T28916] ? genl_bind+0x360/0x360 [ 1858.649736][T28916] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1858.656126][T28916] netlink_rcv_skb+0x1fb/0x450 [ 1858.660926][T28916] ? genl_bind+0x360/0x360 [ 1858.665412][T28916] ? netlink_ack+0x1170/0x1170 [ 1858.670257][T28916] ? down_read+0x1a8/0x2d0 [ 1858.674728][T28916] genl_rcv+0x24/0x40 [ 1858.678756][T28916] netlink_unicast+0x74d/0x8d0 [ 1858.683563][T28916] netlink_sendmsg+0x8ad/0xbd0 [ 1858.688372][T28916] ? netlink_getsockopt+0x550/0x550 [ 1858.693997][T28916] ? aa_sock_msg_perm+0x94/0x150 [ 1858.698991][T28916] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1858.704323][T28916] ? security_socket_sendmsg+0x7c/0xa0 [ 1858.709845][T28916] ? netlink_getsockopt+0x550/0x550 [ 1858.715077][T28916] ____sys_sendmsg+0x5be/0x970 [ 1858.719986][T28916] ? __sys_sendmsg_sock+0x30/0x30 [ 1858.725043][T28916] ? __import_iovec+0x315/0x500 [ 1858.729934][T28916] ? import_iovec+0x6f/0xa0 [ 1858.734527][T28916] ___sys_sendmsg+0x2a2/0x360 [ 1858.739249][T28916] ? try_to_wake_up+0x6ae/0x1080 [ 1858.744221][T28916] ? __sys_sendmsg+0x290/0x290 [ 1858.749072][T28916] __se_sys_sendmsg+0x1bb/0x2a0 [ 1858.753956][T28916] ? __x64_sys_sendmsg+0x80/0x80 [ 1858.758934][T28916] ? lockdep_hardirqs_on+0x94/0x140 [ 1858.764163][T28916] do_syscall_64+0x4c/0xa0 [ 1858.768614][T28916] ? clear_bhb_loop+0x60/0xb0 [ 1858.773315][T28916] ? clear_bhb_loop+0x60/0xb0 [ 1858.778014][T28916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1858.783948][T28916] RIP: 0033:0x7fecc159bf79 [ 1858.788388][T28916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.808024][T28916] RSP: 002b:00007fecc24c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1858.816477][T28916] RAX: ffffffffffffffda RBX: 00007fecc1816180 RCX: 00007fecc159bf79 [ 1858.824510][T28916] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1858.832504][T28916] RBP: 00007fecc16327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1858.840493][T28916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1858.848483][T28916] R13: 00007fecc1816218 R14: 00007fecc1816180 R15: 00007ffd53d029a8 [ 1858.856497][T28916] [ 1860.387429][T28962] Ÿë: port 1(gretap0) entered blocking state [ 1860.402015][T28962] Ÿë: port 1(gretap0) entered disabled state [ 1860.418825][T28962] device gretap0 entered promiscuous mode [ 1864.505906][T29012] netlink: 'syz.1.7900': attribute type 29 has an invalid length. [ 1864.935017][T28957] Ÿë: port 2(veth0_to_team) entered blocking state [ 1864.941935][T28957] Ÿë: port 2(veth0_to_team) entered disabled state [ 1864.949435][T28957] device veth0_to_team entered promiscuous mode [ 1865.019555][T29020] netlink: 'syz.3.7903': attribute type 3 has an invalid length. [ 1865.033625][T29020] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7903'. [ 1865.125544][T29012] netlink: 'syz.1.7900': attribute type 29 has an invalid length. [ 1866.079452][T29039] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7911'. [ 1866.161948][T29039] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1866.184486][T29039] CPU: 1 PID: 29039 Comm: syz.3.7911 Not tainted syzkaller #0 [ 1866.192034][T29039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1866.202135][T29039] Call Trace: [ 1866.205456][T29039] [ 1866.208427][T29039] dump_stack_lvl+0x188/0x24e [ 1866.213167][T29039] ? show_regs_print_info+0x12/0x12 [ 1866.218427][T29039] ? load_image+0x400/0x400 [ 1866.222994][T29039] sysfs_warn_dup+0x8a/0xa0 [ 1866.227681][T29039] sysfs_do_create_link_sd+0xc0/0x110 [ 1866.233101][T29039] device_add+0x7ed/0xfb0 [ 1866.237500][T29039] wiphy_register+0x1d9f/0x2ac0 [ 1866.242421][T29039] ? cfg80211_event_work+0x40/0x40 [ 1866.247587][T29039] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1866.253816][T29039] ieee80211_register_hw+0x2d00/0x39f0 [ 1866.259332][T29039] ? lockdep_hardirqs_on+0x94/0x140 [ 1866.264582][T29039] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1866.270188][T29039] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1866.275787][T29039] ? ieee80211_tasklet_handler+0x20/0x20 [ 1866.281485][T29039] ? memset+0x1e/0x40 [ 1866.285517][T29039] ? __hrtimer_init+0x186/0x270 [ 1866.290432][T29039] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1866.296226][T29039] hwsim_new_radio_nl+0xafa/0xce0 [ 1866.301329][T29039] genl_family_rcv_msg_doit+0x22a/0x330 [ 1866.306912][T29039] ? end_current_label_crit_section+0x170/0x170 [ 1866.313194][T29039] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1866.319137][T29039] ? bpf_lsm_capable+0x5/0x10 [ 1866.323855][T29039] ? security_capable+0x85/0xb0 [ 1866.328737][T29039] genl_rcv_msg+0x604/0x790 [ 1866.333285][T29039] ? genl_bind+0x360/0x360 [ 1866.337754][T29039] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1866.344135][T29039] ? netlink_rcv_skb+0x198/0x450 [ 1866.349116][T29039] netlink_rcv_skb+0x1fb/0x450 [ 1866.353920][T29039] ? genl_bind+0x360/0x360 [ 1866.358382][T29039] ? netlink_ack+0x1170/0x1170 [ 1866.363194][T29039] ? down_read+0x1a8/0x2d0 [ 1866.367649][T29039] genl_rcv+0x24/0x40 [ 1866.371671][T29039] netlink_unicast+0x74d/0x8d0 [ 1866.376515][T29039] netlink_sendmsg+0x8ad/0xbd0 [ 1866.381331][T29039] ? netlink_getsockopt+0x550/0x550 [ 1866.386576][T29039] ? aa_sock_msg_perm+0x94/0x150 [ 1866.391543][T29039] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1866.396902][T29039] ? security_socket_sendmsg+0x7c/0xa0 [ 1866.402412][T29039] ? netlink_getsockopt+0x550/0x550 [ 1866.407649][T29039] ____sys_sendmsg+0x5be/0x970 [ 1866.412457][T29039] ? __sys_sendmsg_sock+0x30/0x30 [ 1866.417518][T29039] ? __import_iovec+0x315/0x500 [ 1866.422407][T29039] ? import_iovec+0x6f/0xa0 [ 1866.426948][T29039] ___sys_sendmsg+0x2a2/0x360 [ 1866.431667][T29039] ? __sys_sendmsg+0x290/0x290 [ 1866.436510][T29039] ? trace_call_bpf+0xbf/0x6b0 [ 1866.441327][T29039] __se_sys_sendmsg+0x1bb/0x2a0 [ 1866.446209][T29039] ? __x64_sys_sendmsg+0x80/0x80 [ 1866.451194][T29039] ? lockdep_hardirqs_on+0x94/0x140 [ 1866.456429][T29039] do_syscall_64+0x4c/0xa0 [ 1866.460880][T29039] ? clear_bhb_loop+0x60/0xb0 [ 1866.465588][T29039] ? clear_bhb_loop+0x60/0xb0 [ 1866.470308][T29039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1866.476235][T29039] RIP: 0033:0x7f690599bf79 [ 1866.480680][T29039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.500342][T29039] RSP: 002b:00007f69067ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1866.508785][T29039] RAX: ffffffffffffffda RBX: 00007f6905c15fa0 RCX: 00007f690599bf79 [ 1866.516784][T29039] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1866.524786][T29039] RBP: 00007f6905a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1866.532787][T29039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1866.540787][T29039] R13: 00007f6905c16038 R14: 00007f6905c15fa0 R15: 00007ffc34da8908 [ 1866.548805][T29039] [ 1866.762826][T29047] netlink: 'syz.4.7914': attribute type 3 has an invalid length. [ 1866.780364][T29047] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1867.129802][T29060] netlink: 'syz.2.7918': attribute type 21 has an invalid length. [ 1867.267250][T29056] device syzkaller0 entered promiscuous mode [ 1872.438333][T29095] netlink: 'syz.0.7928': attribute type 3 has an invalid length. [ 1872.504532][T29095] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7928'. [ 1878.764132][T29139] device syzkaller0 entered promiscuous mode [ 1878.806436][T29151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.813849][T29151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.195091][T29189] netlink: 'syz.2.7958': attribute type 3 has an invalid length. [ 1881.203631][T29189] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7958'. [ 1887.938596][T29247] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1887.949342][T29247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1887.970394][T29247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7980'. [ 1893.118656][T29281] device syzkaller0 entered promiscuous mode [ 1893.150543][T29303] netlink: 'syz.2.7998': attribute type 10 has an invalid length. [ 1893.167348][T29303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7998'. [ 1893.201937][T29303] device ipvlan1 entered promiscuous mode [ 1893.215304][T29303] bridge0: port 3(ipvlan1) entered blocking state [ 1893.227179][T29303] bridge0: port 3(ipvlan1) entered disabled state [ 1893.236626][T29303] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1893.258803][T29306] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7998'. [ 1897.037294][T29309] netlink: 'syz.4.7999': attribute type 10 has an invalid length. [ 1897.045432][T29311] netlink: 'syz.1.8000': attribute type 39 has an invalid length. [ 1897.072669][T29311] device veth0_macvtap left promiscuous mode [ 1897.695818][T29348] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.8013'. [ 1897.718217][T29348] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1901.941766][T29345] netlink: 'syz.2.8013': attribute type 2 has an invalid length. [ 1901.949570][T29345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8013'. [ 1902.495655][T29390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8031'. [ 1903.617264][T29411] netlink: 'syz.0.8049': attribute type 3 has an invalid length. [ 1903.640747][T29411] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8049'. [ 1906.177799][T29459] netlink: 'syz.4.8055': attribute type 20 has an invalid length. [ 1906.448814][T29467] netlink: 'syz.2.8059': attribute type 1 has an invalid length. [ 1906.478810][T29469] netlink: 'syz.3.8058': attribute type 21 has an invalid length. [ 1906.483453][T29467] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1906.499779][T29469] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8058'. [ 1906.537615][T29469] netlink: 'syz.3.8058': attribute type 4 has an invalid length. [ 1909.017826][T29493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1909.047776][T29493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1909.083637][T29493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1909.098655][T29493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1911.550733][T29543] netlink: 'syz.0.8085': attribute type 3 has an invalid length. [ 1911.558586][T29543] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8085'. [ 1911.747427][T29547] netlink: 'syz.3.8087': attribute type 3 has an invalid length. [ 1911.790506][T29547] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8087'. [ 1912.106393][T29555] netlink: 'syz.0.8089': attribute type 1 has an invalid length. [ 1912.120198][T29555] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.8089'. [ 1912.471155][T29570] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.8094'. [ 1912.497187][T29570] netlink: zone id is out of range [ 1912.563030][T29570] netlink: zone id is out of range [ 1912.601468][T29570] netlink: get zone limit has 8 unknown bytes [ 1914.604726][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.611154][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.387931][T29644] netlink: 'syz.3.8120': attribute type 10 has an invalid length. [ 1916.411341][T29644] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8120'. [ 1916.567812][T29653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8123'. [ 1916.609259][T29654] IPv6: pim6reg1: Disabled Multicast RS [ 1916.825365][T29658] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1918.095371][T29679] netlink: 'syz.1.8136': attribute type 2 has an invalid length. [ 1918.140458][T29679] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8136'. [ 1919.479762][T29711] netlink: 'syz.3.8149': attribute type 10 has an invalid length. [ 1919.530168][T29711] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 1919.989357][T29720] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8152'. [ 1920.106911][T29720] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1920.160170][T29720] CPU: 1 PID: 29720 Comm: syz.4.8152 Not tainted syzkaller #0 [ 1920.167764][T29720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1920.177936][T29720] Call Trace: [ 1920.181302][T29720] [ 1920.184324][T29720] dump_stack_lvl+0x188/0x24e [ 1920.189137][T29720] ? show_regs_print_info+0x12/0x12 [ 1920.194453][T29720] ? load_image+0x400/0x400 [ 1920.199134][T29720] sysfs_warn_dup+0x8a/0xa0 [ 1920.203748][T29720] sysfs_do_create_link_sd+0xc0/0x110 [ 1920.209252][T29720] device_add+0x7ed/0xfb0 [ 1920.213744][T29720] wiphy_register+0x1d9f/0x2ac0 [ 1920.218800][T29720] ? cfg80211_event_work+0x40/0x40 [ 1920.224014][T29720] ? minstrel_ht_alloc+0x894/0xa20 [ 1920.229283][T29720] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1920.235477][T29720] ieee80211_register_hw+0x2d00/0x39f0 [ 1920.241103][T29720] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1920.246871][T29720] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1920.252561][T29720] ? ieee80211_tasklet_handler+0x20/0x20 [ 1920.258347][T29720] ? memset+0x1e/0x40 [ 1920.262432][T29720] ? __hrtimer_init+0x186/0x270 [ 1920.267407][T29720] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1920.273351][T29720] hwsim_new_radio_nl+0xafa/0xce0 [ 1920.278538][T29720] genl_family_rcv_msg_doit+0x22a/0x330 [ 1920.284173][T29720] ? end_current_label_crit_section+0x170/0x170 [ 1920.290536][T29720] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1920.296586][T29720] ? bpf_lsm_capable+0x5/0x10 [ 1920.301369][T29720] ? security_capable+0x85/0xb0 [ 1920.306363][T29720] genl_rcv_msg+0x604/0x790 [ 1920.311128][T29720] ? genl_bind+0x360/0x360 [ 1920.315643][T29720] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1920.322163][T29720] netlink_rcv_skb+0x1fb/0x450 [ 1920.327047][T29720] ? genl_bind+0x360/0x360 [ 1920.331598][T29720] ? netlink_ack+0x1170/0x1170 [ 1920.336549][T29720] ? down_read+0x1a8/0x2d0 [ 1920.341090][T29720] genl_rcv+0x24/0x40 [ 1920.345177][T29720] netlink_unicast+0x74d/0x8d0 [ 1920.350101][T29720] netlink_sendmsg+0x8ad/0xbd0 [ 1920.355019][T29720] ? netlink_getsockopt+0x550/0x550 [ 1920.360344][T29720] ? aa_sock_msg_perm+0x94/0x150 [ 1920.365404][T29720] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1920.370787][T29720] ? security_socket_sendmsg+0x7c/0xa0 [ 1920.376399][T29720] ? netlink_getsockopt+0x550/0x550 [ 1920.381706][T29720] ____sys_sendmsg+0x5be/0x970 [ 1920.386661][T29720] ? __sys_sendmsg_sock+0x30/0x30 [ 1920.391785][T29720] ? __import_iovec+0x315/0x500 [ 1920.396784][T29720] ? import_iovec+0x6f/0xa0 [ 1920.401418][T29720] ___sys_sendmsg+0x2a2/0x360 [ 1920.406204][T29720] ? try_to_wake_up+0x6ae/0x1080 [ 1920.411269][T29720] ? __sys_sendmsg+0x290/0x290 [ 1920.416290][T29720] ? __lock_acquire+0x7d10/0x7d10 [ 1920.421440][T29720] ? rcu_read_lock_sched_held+0x86/0x110 [ 1920.427335][T29720] __se_sys_sendmsg+0x1bb/0x2a0 [ 1920.432318][T29720] ? __x64_sys_sendmsg+0x80/0x80 [ 1920.437440][T29720] ? lockdep_hardirqs_on+0x94/0x140 [ 1920.442775][T29720] do_syscall_64+0x4c/0xa0 [ 1920.447289][T29720] ? clear_bhb_loop+0x60/0xb0 [ 1920.452067][T29720] ? clear_bhb_loop+0x60/0xb0 [ 1920.456855][T29720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1920.462837][T29720] RIP: 0033:0x7fecc159bf79 [ 1920.467355][T29720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1920.487067][T29720] RSP: 002b:00007fecc2505028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1920.495740][T29720] RAX: ffffffffffffffda RBX: 00007fecc1815fa0 RCX: 00007fecc159bf79 [ 1920.503799][T29720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1920.511860][T29720] RBP: 00007fecc16327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1920.519952][T29720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1920.528014][T29720] R13: 00007fecc1816038 R14: 00007fecc1815fa0 R15: 00007ffd53d029a8 [ 1920.536164][T29720] [ 1921.000529][T29722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8150'. [ 1923.372266][T29773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8170'. [ 1924.310141][T29785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8173'. [ 1924.319220][T29785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8173'. [ 1924.350642][T29785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8173'. [ 1924.407677][T29790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8173'. [ 1926.287309][T29821] netlink: 'syz.1.8187': attribute type 1 has an invalid length. [ 1926.336852][T29821] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1927.272385][T29842] netlink: 'syz.4.8194': attribute type 10 has an invalid length. [ 1927.323213][T29842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8194'. [ 1927.817039][T29855] netlink: 'syz.4.8199': attribute type 29 has an invalid length. [ 1927.846035][T29852] netlink: 'syz.1.8198': attribute type 3 has an invalid length. [ 1927.858640][T29855] netlink: 'syz.4.8199': attribute type 29 has an invalid length. [ 1927.900781][T29852] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8198'. [ 1928.672181][T29884] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8210'. [ 1928.717408][T29884] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1928.730156][T29884] CPU: 1 PID: 29884 Comm: syz.4.8210 Not tainted syzkaller #0 [ 1928.737712][T29884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1928.747823][T29884] Call Trace: [ 1928.751154][T29884] [ 1928.754232][T29884] dump_stack_lvl+0x188/0x24e [ 1928.758984][T29884] ? show_regs_print_info+0x12/0x12 [ 1928.764260][T29884] ? load_image+0x400/0x400 [ 1928.768833][T29884] ? sysfs_warn_dup+0x61/0xa0 [ 1928.773583][T29884] sysfs_warn_dup+0x8a/0xa0 [ 1928.778148][T29884] sysfs_do_create_link_sd+0xc0/0x110 [ 1928.783592][T29884] device_add+0x7ed/0xfb0 [ 1928.788011][T29884] wiphy_register+0x1d9f/0x2ac0 [ 1928.792956][T29884] ? cfg80211_event_work+0x40/0x40 [ 1928.798137][T29884] ? minstrel_ht_alloc+0x8a5/0xa20 [ 1928.803334][T29884] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1928.809458][T29884] ieee80211_register_hw+0x2d00/0x39f0 [ 1928.815030][T29884] ? lockdep_hardirqs_on+0x94/0x140 [ 1928.820294][T29884] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1928.825908][T29884] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1928.831525][T29884] ? ieee80211_tasklet_handler+0x20/0x20 [ 1928.837250][T29884] ? memset+0x1e/0x40 [ 1928.841282][T29884] ? __hrtimer_init+0x186/0x270 [ 1928.846192][T29884] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1928.851994][T29884] hwsim_new_radio_nl+0xafa/0xce0 [ 1928.857098][T29884] genl_family_rcv_msg_doit+0x22a/0x330 [ 1928.862700][T29884] ? end_current_label_crit_section+0x170/0x170 [ 1928.869088][T29884] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1928.875058][T29884] ? bpf_lsm_capable+0x5/0x10 [ 1928.879791][T29884] ? security_capable+0x85/0xb0 [ 1928.884711][T29884] genl_rcv_msg+0x604/0x790 [ 1928.889296][T29884] ? genl_bind+0x360/0x360 [ 1928.893778][T29884] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1928.900232][T29884] netlink_rcv_skb+0x1fb/0x450 [ 1928.905063][T29884] ? genl_bind+0x360/0x360 [ 1928.909542][T29884] ? netlink_ack+0x1170/0x1170 [ 1928.914404][T29884] ? down_read+0x1a8/0x2d0 [ 1928.918905][T29884] genl_rcv+0x24/0x40 [ 1928.922976][T29884] netlink_unicast+0x74d/0x8d0 [ 1928.927827][T29884] netlink_sendmsg+0x8ad/0xbd0 [ 1928.932659][T29884] ? netlink_getsockopt+0x550/0x550 [ 1928.937924][T29884] ? aa_sock_msg_perm+0x94/0x150 [ 1928.942914][T29884] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1928.948272][T29884] ? security_socket_sendmsg+0x7c/0xa0 [ 1928.953806][T29884] ? netlink_getsockopt+0x550/0x550 [ 1928.959067][T29884] ____sys_sendmsg+0x5be/0x970 [ 1928.963906][T29884] ? __sys_sendmsg_sock+0x30/0x30 [ 1928.968996][T29884] ? __import_iovec+0x315/0x500 [ 1928.973912][T29884] ? import_iovec+0x6f/0xa0 [ 1928.978467][T29884] ___sys_sendmsg+0x2a2/0x360 [ 1928.983212][T29884] ? __sys_sendmsg+0x290/0x290 [ 1928.988071][T29884] ? ktime_get_real_ts64+0x440/0x440 [ 1928.993448][T29884] __se_sys_sendmsg+0x1bb/0x2a0 [ 1928.998361][T29884] ? __x64_sys_sendmsg+0x80/0x80 [ 1929.003372][T29884] ? lockdep_hardirqs_on+0x94/0x140 [ 1929.008621][T29884] do_syscall_64+0x4c/0xa0 [ 1929.013093][T29884] ? clear_bhb_loop+0x60/0xb0 [ 1929.017811][T29884] ? clear_bhb_loop+0x60/0xb0 [ 1929.022564][T29884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1929.028505][T29884] RIP: 0033:0x7fecc159bf79 [ 1929.032962][T29884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.052611][T29884] RSP: 002b:00007fecc2505028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1929.061076][T29884] RAX: ffffffffffffffda RBX: 00007fecc1815fa0 RCX: 00007fecc159bf79 [ 1929.069091][T29884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1929.077109][T29884] RBP: 00007fecc16327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1929.085120][T29884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1929.093133][T29884] R13: 00007fecc1816038 R14: 00007fecc1815fa0 R15: 00007ffd53d029a8 [ 1929.101162][T29884] [ 1935.209354][T29969] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8239'. [ 1935.249089][T29969] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1935.453455][T29974] tun0: tun_chr_ioctl cmd 1074025673 [ 1935.458925][T29974] tun0: tun_chr_ioctl cmd 1074025673 [ 1935.486195][T29974] tun0: tun_chr_ioctl cmd 1074025673 [ 1935.502668][T29972] tun0: tun_chr_ioctl cmd 1074025680 [ 1935.515681][T29974] tun0: tun_chr_ioctl cmd 1074025673 [ 1935.540207][T29974] tun0: tun_chr_ioctl cmd 1074025673 [ 1935.591523][T29974] tun0: tun_chr_ioctl cmd 1074025673 [ 1935.596991][T29974] tun0: tun_chr_ioctl cmd 1074025673 [ 1935.662219][T29984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1935.710128][T29984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1935.731931][T29985] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8244'. [ 1937.258698][T30014] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.8253'. [ 1937.589521][T30024] netlink: 'syz.3.8258': attribute type 3 has an invalid length. [ 1937.617538][T30026] netlink: 'syz.2.8259': attribute type 10 has an invalid length. [ 1937.680313][T30024] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8258'. [ 1937.710543][T30026] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1938.524611][T30044] netlink: 'syz.1.8265': attribute type 10 has an invalid length. [ 1938.812649][T30044] team0: Port device wlan1 added [ 1941.623762][T30123] device syzkaller0 entered promiscuous mode [ 1948.838138][T30185] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1948.867199][T30196] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1948.904613][T30196] device syzkaller0 entered promiscuous mode [ 1952.689100][T30236] netlink: 'syz.3.8328': attribute type 10 has an invalid length. [ 1952.734145][T30236] team0: Port device wlan1 added [ 1952.939328][T30248] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1954.956886][T30279] netlink: 'syz.2.8345': attribute type 10 has an invalid length. [ 1956.140511][T30279] team0: Port device wlan1 added [ 1956.161387][T30292] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8349'. [ 1956.772752][T30306] device wg2 entered promiscuous mode [ 1957.789850][T30329] netlink: 'syz.3.8362': attribute type 10 has an invalid length. [ 1957.829630][T30327] netlink: 'syz.4.8361': attribute type 10 has an invalid length. [ 1957.854661][T30327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8361'. [ 1957.912538][T30327] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1957.948941][T30327] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1958.048397][T30327] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1958.112615][T30336] netlink: 'syz.2.8365': attribute type 39 has an invalid length. [ 1958.169260][T30336] device veth0_macvtap left promiscuous mode [ 1958.507535][T30332] device syzkaller0 entered promiscuous mode [ 1959.594144][T30354] delete_channel: no stack [ 1964.541577][T30355] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8372'. [ 1965.913114][T30412] device sit0 entered promiscuous mode [ 1969.759473][T30432] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8398'. [ 1969.773936][T30439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8400'. [ 1970.231507][T30458] netlink: 'syz.2.8408': attribute type 1 has an invalid length. [ 1970.264429][T30458] netlink: 'syz.2.8408': attribute type 3 has an invalid length. [ 1970.321570][T30458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8408'. [ 1976.051242][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.057607][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.256494][T30546] delete_channel: no stack [ 1979.024342][T30556] netlink: 'syz.0.8438': attribute type 7 has an invalid length. [ 1979.347245][T30573] netlink: 'syz.4.8444': attribute type 10 has an invalid length. [ 1979.356598][T30573] device syz_tun entered promiscuous mode [ 1980.983608][T30594] device syzkaller0 entered promiscuous mode [ 1981.011626][T27817] syzkaller0: tun_net_xmit 48 [ 1981.018499][T30601] syzkaller0: tun_net_xmit 1280 [ 1981.040290][T30601] syzkaller0: create flow: hash 4010430411 index 1 [ 1981.996991][T30617] netlink: 'syz.1.8458': attribute type 1 has an invalid length. [ 1982.012322][T30617] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.8458'. [ 1984.930112][ C0] syzkaller0: delete flow: hash 4010430411 index 1 [ 1985.010134][ C0] syzkaller0: tun_net_xmit 48 [ 1989.223605][T30674] device syzkaller0 entered promiscuous mode [ 1993.210776][T30707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8489'. [ 1998.939237][T30815] netlink: 'syz.2.8527': attribute type 3 has an invalid length. [ 1998.968966][T30815] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8527'. [ 1999.843740][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8531'. [ 2001.456602][T30860] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8542'. [ 2001.493192][T30861] netlink: 'syz.0.8543': attribute type 9 has an invalid length. [ 2001.510468][T30861] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8543'. [ 2004.193804][T30859] netlink: 'syz.0.8543': attribute type 13 has an invalid length. [ 2004.202255][T30859] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8543'. [ 2004.213289][T30859] syz_tun: refused to change device tx_queue_len [ 2004.219644][T30859] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2004.235769][T30862] netlink: 'syz.0.8543': attribute type 10 has an invalid length. [ 2004.263682][T30862] team0: Device hsr_slave_0 failed to register rx_handler [ 2004.324999][T30860] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2008.719470][T30948] netlink: 'syz.3.8573': attribute type 1 has an invalid length. [ 2008.728067][T30948] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.8573'. [ 2009.248692][T30964] netlink: 'syz.2.8580': attribute type 29 has an invalid length. [ 2010.408981][T30964] netlink: 'syz.2.8580': attribute type 29 has an invalid length. [ 2011.139262][T30984] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8587'. [ 2016.326441][T30981] netlink: 'syz.2.8586': attribute type 6 has an invalid length. [ 2016.334689][T30981] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8586'. [ 2016.345332][T30984] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2016.360431][T30984] CPU: 0 PID: 30984 Comm: syz.3.8587 Not tainted syzkaller #0 [ 2016.367977][T30984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2016.378096][T30984] Call Trace: [ 2016.381421][T30984] [ 2016.384394][T30984] dump_stack_lvl+0x188/0x24e [ 2016.389139][T30984] ? show_regs_print_info+0x12/0x12 [ 2016.394407][T30984] ? load_image+0x400/0x400 [ 2016.399027][T30984] sysfs_warn_dup+0x8a/0xa0 [ 2016.403602][T30984] sysfs_do_create_link_sd+0xc0/0x110 [ 2016.409045][T30984] device_add+0x7ed/0xfb0 [ 2016.413428][T30984] wiphy_register+0x1d9f/0x2ac0 [ 2016.418360][T30984] ? cfg80211_event_work+0x40/0x40 [ 2016.423529][T30984] ? minstrel_ht_alloc+0x894/0xa20 [ 2016.428697][T30984] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2016.434802][T30984] ieee80211_register_hw+0x2d00/0x39f0 [ 2016.440308][T30984] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2016.445894][T30984] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2016.451511][T30984] ? ieee80211_tasklet_handler+0x20/0x20 [ 2016.457208][T30984] ? memset+0x1e/0x40 [ 2016.461225][T30984] ? __hrtimer_init+0x186/0x270 [ 2016.466111][T30984] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2016.471882][T30984] hwsim_new_radio_nl+0xafa/0xce0 [ 2016.476958][T30984] genl_family_rcv_msg_doit+0x22a/0x330 [ 2016.482534][T30984] ? rcu_is_watching+0x11/0xa0 [ 2016.487419][T30984] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2016.493349][T30984] ? lockdep_hardirqs_on+0x94/0x140 [ 2016.498582][T30984] ? genl_rcv_msg+0x5dc/0x790 [ 2016.503296][T30984] genl_rcv_msg+0x604/0x790 [ 2016.507840][T30984] ? genl_bind+0x360/0x360 [ 2016.512294][T30984] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2016.518671][T30984] netlink_rcv_skb+0x1fb/0x450 [ 2016.523477][T30984] ? genl_bind+0x360/0x360 [ 2016.527942][T30984] ? netlink_ack+0x1170/0x1170 [ 2016.532747][T30984] ? down_read+0x1a8/0x2d0 [ 2016.537204][T30984] genl_rcv+0x24/0x40 [ 2016.541225][T30984] netlink_unicast+0x74d/0x8d0 [ 2016.546032][T30984] netlink_sendmsg+0x8ad/0xbd0 [ 2016.550842][T30984] ? netlink_getsockopt+0x550/0x550 [ 2016.556081][T30984] ? aa_sock_msg_perm+0x94/0x150 [ 2016.561047][T30984] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2016.566391][T30984] ? security_socket_sendmsg+0x7c/0xa0 [ 2016.571887][T30984] ? netlink_getsockopt+0x550/0x550 [ 2016.577140][T30984] ____sys_sendmsg+0x5be/0x970 [ 2016.581951][T30984] ? __sys_sendmsg_sock+0x30/0x30 [ 2016.587031][T30984] ? __import_iovec+0x315/0x500 [ 2016.591916][T30984] ? import_iovec+0x6f/0xa0 [ 2016.596460][T30984] ___sys_sendmsg+0x2a2/0x360 [ 2016.601181][T30984] ? __sys_sendmsg+0x290/0x290 [ 2016.605997][T30984] ? __fget_files+0x28/0x4b0 [ 2016.610667][T30984] __se_sys_sendmsg+0x1bb/0x2a0 [ 2016.615563][T30984] ? __x64_sys_sendmsg+0x80/0x80 [ 2016.620555][T30984] ? lockdep_hardirqs_on+0x94/0x140 [ 2016.625786][T30984] do_syscall_64+0x4c/0xa0 [ 2016.630237][T30984] ? clear_bhb_loop+0x60/0xb0 [ 2016.634970][T30984] ? clear_bhb_loop+0x60/0xb0 [ 2016.639704][T30984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2016.645638][T30984] RIP: 0033:0x7f690599bf79 [ 2016.650089][T30984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2016.669737][T30984] RSP: 002b:00007f69067ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2016.678193][T30984] RAX: ffffffffffffffda RBX: 00007f6905c15fa0 RCX: 00007f690599bf79 [ 2016.686229][T30984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2016.694232][T30984] RBP: 00007f6905a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2016.702229][T30984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2016.710245][T30984] R13: 00007f6905c16038 R14: 00007f6905c15fa0 R15: 00007ffc34da8908 [ 2016.718268][T30984] [ 2016.952831][T31011] device pim6reg1 entered promiscuous mode [ 2018.388768][T31045] netlink: 'syz.0.8610': attribute type 11 has an invalid length. [ 2018.411688][T31045] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8610'. [ 2018.466538][T31044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2020.674433][T31033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2020.681768][T31033] IPv6: NLM_F_CREATE should be set when creating new route [ 2020.689096][T31033] IPv6: NLM_F_CREATE should be set when creating new route [ 2020.696407][T31033] IPv6: NLM_F_CREATE should be set when creating new route [ 2020.706250][T31039] netlink: 'syz.2.8608': attribute type 10 has an invalid length. [ 2020.739504][T31039] team0: Port device netdevsim0 added [ 2024.271584][T31093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2024.279024][T31093] IPv6: NLM_F_CREATE should be set when creating new route [ 2024.286662][T31093] IPv6: NLM_F_CREATE should be set when creating new route [ 2024.294141][T31093] IPv6: NLM_F_CREATE should be set when creating new route [ 2026.311759][T31145] device syzkaller0 entered promiscuous mode [ 2026.339204][T31144] netlink: 'syz.1.8644': attribute type 1 has an invalid length. [ 2029.230005][T31171] netlink: 'syz.4.8653': attribute type 33 has an invalid length. [ 2029.237920][T31171] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8653'. [ 2029.728653][T31204] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.8661'. [ 2033.998716][T31234] device syzkaller0 entered promiscuous mode [ 2037.383700][T31232] delete_channel: no stack [ 2037.483363][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.489730][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2041.367936][T31307] netlink: 'syz.0.8691': attribute type 39 has an invalid length. [ 2041.378079][T31307] device veth0_macvtap left promiscuous mode [ 2041.772282][T31339] syzkaller: port 1(erspan0) entered blocking state [ 2041.789453][T31339] syzkaller: port 1(erspan0) entered disabled state [ 2041.842002][T31339] device erspan0 entered promiscuous mode [ 2041.882881][T31347] device hsr0 entered promiscuous mode [ 2042.489111][T31360] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8710'. [ 2043.016212][T31367] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8710'. [ 2045.251628][T31386] netlink: 'syz.3.8715': attribute type 13 has an invalid length. [ 2047.102574][T31447] FAULT_INJECTION: forcing a failure. [ 2047.102574][T31447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2047.144463][T31447] CPU: 0 PID: 31447 Comm: syz.4.8739 Not tainted syzkaller #0 [ 2047.152054][T31447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2047.162180][T31447] Call Trace: [ 2047.165519][T31447] [ 2047.168525][T31447] dump_stack_lvl+0x188/0x24e [ 2047.173300][T31447] ? show_regs_print_info+0x12/0x12 [ 2047.178613][T31447] ? load_image+0x400/0x400 [ 2047.183238][T31447] ? __lock_acquire+0x7d10/0x7d10 [ 2047.188381][T31447] ? snprintf+0xe5/0x140 [ 2047.192728][T31447] should_fail_ex+0x399/0x4d0 [ 2047.197517][T31447] _copy_to_user+0x2c/0x130 [ 2047.202136][T31447] simple_read_from_buffer+0xe3/0x150 [ 2047.207607][T31447] proc_fail_nth_read+0x1a6/0x220 [ 2047.212726][T31447] ? proc_fault_inject_write+0x310/0x310 [ 2047.218444][T31447] ? fsnotify_perm+0x248/0x550 [ 2047.223282][T31447] ? proc_fault_inject_write+0x310/0x310 [ 2047.228990][T31447] vfs_read+0x2de/0xa00 [ 2047.233253][T31447] ? kernel_read+0x1e0/0x1e0 [ 2047.237930][T31447] ? __fget_files+0x28/0x4b0 [ 2047.242590][T31447] ? __fget_files+0x28/0x4b0 [ 2047.247264][T31447] ? __fget_files+0x43d/0x4b0 [ 2047.252054][T31447] ? __fdget_pos+0x2ae/0x360 [ 2047.256715][T31447] ? ksys_read+0x71/0x250 [ 2047.261137][T31447] ksys_read+0x14c/0x250 [ 2047.265473][T31447] ? vfs_write+0xa30/0xa30 [ 2047.269987][T31447] ? lockdep_hardirqs_on+0x94/0x140 [ 2047.275269][T31447] do_syscall_64+0x4c/0xa0 [ 2047.279750][T31447] ? clear_bhb_loop+0x60/0xb0 [ 2047.284499][T31447] ? clear_bhb_loop+0x60/0xb0 [ 2047.289249][T31447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2047.295211][T31447] RIP: 0033:0x7fecc155c84e [ 2047.299698][T31447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2047.319465][T31447] RSP: 002b:00007fecc2504fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2047.327961][T31447] RAX: ffffffffffffffda RBX: 00007fecc25056c0 RCX: 00007fecc155c84e [ 2047.336002][T31447] RDX: 000000000000000f RSI: 00007fecc25050a0 RDI: 0000000000000006 [ 2047.344036][T31447] RBP: 00007fecc2505090 R08: 0000000000000000 R09: 0000000000000000 [ 2047.352074][T31447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2047.360103][T31447] R13: 00007fecc1816038 R14: 00007fecc1815fa0 R15: 00007ffd53d029a8 [ 2047.368192][T31447] [ 2051.576371][T31458] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 2051.594409][T31484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8752'. [ 2051.603669][T31483] netlink: 'syz.3.8751': attribute type 10 has an invalid length. [ 2051.631534][T31483] bond0: (slave syz_tun): Releasing backup interface [ 2052.013308][T31501] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8760'. [ 2052.072703][T31504] netlink: 'syz.4.8759': attribute type 21 has an invalid length. [ 2052.141053][T31504] netlink: 'syz.4.8759': attribute type 3 has an invalid length. [ 2052.169507][T31504] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8759'. [ 2053.759977][T31525] delete_channel: no stack [ 2054.126995][T31532] netlink: 'syz.4.8768': attribute type 1 has an invalid length. [ 2054.163924][T31532] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8768'. [ 2054.505855][T31524] delete_channel: no stack [ 2054.825326][T31547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8773'. [ 2056.790779][T31589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8786'. [ 2056.808115][T31591] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8787'. [ 2057.487636][T31610] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.8794'. [ 2059.271697][T31634] netlink: 'syz.0.8805': attribute type 16 has an invalid length. [ 2059.285394][T31634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8805'. [ 2061.623833][T31630] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8803'. [ 2061.638594][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8809'. [ 2061.670286][T31660] netlink: 'syz.3.8811': attribute type 10 has an invalid length. [ 2061.678290][T31660] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 2063.069516][T31686] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2063.090854][T31686] device syzkaller0 entered promiscuous mode [ 2063.401028][T31679] device syzkaller0 entered promiscuous mode [ 2065.940904][T31710] FAULT_INJECTION: forcing a failure. [ 2065.940904][T31710] name failslab, interval 1, probability 0, space 0, times 0 [ 2065.964662][T31710] CPU: 1 PID: 31710 Comm: syz.1.8827 Not tainted syzkaller #0 [ 2065.972301][T31710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2065.982412][T31710] Call Trace: [ 2065.985739][T31710] [ 2065.988719][T31710] dump_stack_lvl+0x188/0x24e [ 2065.993468][T31710] ? show_regs_print_info+0x12/0x12 [ 2065.998725][T31710] ? load_image+0x400/0x400 [ 2066.003291][T31710] ? __might_sleep+0xd0/0xd0 [ 2066.007924][T31710] ? __lock_acquire+0x7d10/0x7d10 [ 2066.013009][T31710] should_fail_ex+0x399/0x4d0 [ 2066.017772][T31710] should_failslab+0x5/0x20 [ 2066.022356][T31710] slab_pre_alloc_hook+0x59/0x310 [ 2066.027433][T31710] ? kernfs_fop_write_iter+0x155/0x520 [ 2066.032934][T31710] __kmem_cache_alloc_node+0x4f/0x260 [ 2066.038337][T31710] ? kernfs_fop_write_iter+0x155/0x520 [ 2066.043831][T31710] __kmalloc+0xa0/0x240 [ 2066.048023][T31710] kernfs_fop_write_iter+0x155/0x520 [ 2066.053344][T31710] vfs_write+0x4b1/0xa30 [ 2066.057627][T31710] ? file_end_write+0x250/0x250 [ 2066.062521][T31710] ? __fget_files+0x43d/0x4b0 [ 2066.067234][T31710] ? __fdget_pos+0x2ae/0x360 [ 2066.071849][T31710] ? ksys_write+0x71/0x250 [ 2066.076318][T31710] ksys_write+0x14c/0x250 [ 2066.080688][T31710] ? __ia32_sys_read+0x80/0x80 [ 2066.085497][T31710] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2066.091416][T31710] do_syscall_64+0x4c/0xa0 [ 2066.095865][T31710] ? clear_bhb_loop+0x60/0xb0 [ 2066.100572][T31710] ? clear_bhb_loop+0x60/0xb0 [ 2066.105287][T31710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2066.111206][T31710] RIP: 0033:0x7ff92e99bf79 [ 2066.115643][T31710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2066.135291][T31710] RSP: 002b:00007ff92cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2066.143740][T31710] RAX: ffffffffffffffda RBX: 00007ff92ec15fa0 RCX: 00007ff92e99bf79 [ 2066.151744][T31710] RDX: 000000000000000e RSI: 00002000000000c0 RDI: 000000000000000b [ 2066.159758][T31710] RBP: 00007ff92cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.167757][T31710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.175756][T31710] R13: 00007ff92ec16038 R14: 00007ff92ec15fa0 R15: 00007fff80625f88 [ 2066.183777][T31710] [ 2069.119593][T31747] netlink: 'syz.0.8839': attribute type 3 has an invalid length. [ 2069.137505][T31747] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8839'. [ 2070.197075][T31728] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8833'. [ 2070.210302][T31746] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.8839'. [ 2070.815237][T31767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8846'. [ 2071.455698][T31778] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8850'. [ 2071.553004][T31778] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 2072.359580][T31801] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8855'. [ 2072.382986][T31803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8856'. [ 2072.423327][T31803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8856'. [ 2072.468679][T31805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8856'. [ 2072.483111][T31809] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8858'. [ 2072.577085][T31810] netlink: 'syz.3.8858': attribute type 21 has an invalid length. [ 2072.857768][T31819] FAULT_INJECTION: forcing a failure. [ 2072.857768][T31819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2072.921047][T31819] CPU: 0 PID: 31819 Comm: syz.4.8861 Not tainted syzkaller #0 [ 2072.928677][T31819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2072.938776][T31819] Call Trace: [ 2072.942087][T31819] [ 2072.945081][T31819] dump_stack_lvl+0x188/0x24e [ 2072.949818][T31819] ? show_regs_print_info+0x12/0x12 [ 2072.955111][T31819] ? load_image+0x400/0x400 [ 2072.959665][T31819] ? __lock_acquire+0x7d10/0x7d10 [ 2072.964742][T31819] ? __fget_files+0x28/0x4b0 [ 2072.969410][T31819] should_fail_ex+0x399/0x4d0 [ 2072.974156][T31819] _copy_from_user+0x2c/0x170 [ 2072.978953][T31819] generic_map_update_batch+0x4a1/0x810 [ 2072.984593][T31819] ? rcu_read_unlock+0xa0/0xa0 [ 2072.989431][T31819] ? __fdget+0x17c/0x200 [ 2072.993728][T31819] ? rcu_read_unlock+0xa0/0xa0 [ 2072.998519][T31819] bpf_map_do_batch+0x466/0x600 [ 2073.003405][T31819] __sys_bpf+0x6f7/0x780 [ 2073.007710][T31819] ? bpf_link_show_fdinfo+0x380/0x380 [ 2073.013141][T31819] ? lock_chain_count+0x20/0x20 [ 2073.018037][T31819] __x64_sys_bpf+0x78/0x90 [ 2073.022498][T31819] do_syscall_64+0x4c/0xa0 [ 2073.026939][T31819] ? clear_bhb_loop+0x60/0xb0 [ 2073.031652][T31819] ? clear_bhb_loop+0x60/0xb0 [ 2073.036407][T31819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2073.042329][T31819] RIP: 0033:0x7fecc159bf79 [ 2073.046780][T31819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2073.066427][T31819] RSP: 002b:00007fecc2505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2073.074881][T31819] RAX: ffffffffffffffda RBX: 00007fecc1815fa0 RCX: 00007fecc159bf79 [ 2073.082879][T31819] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 2073.090870][T31819] RBP: 00007fecc2505090 R08: 0000000000000000 R09: 0000000000000000 [ 2073.098967][T31819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2073.106969][T31819] R13: 00007fecc1816038 R14: 00007fecc1815fa0 R15: 00007ffd53d029a8 [ 2073.115074][T31819] [ 2073.272937][T31825] netlink: 'syz.0.8863': attribute type 2 has an invalid length. [ 2073.331400][T31826] netlink: 'syz.0.8863': attribute type 2 has an invalid length. [ 2074.289792][T31860] __nla_validate_parse: 5 callbacks suppressed [ 2074.320123][T31860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8874'. [ 2077.898562][T31882] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8881'. [ 2078.285776][T31903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8887'. [ 2081.568279][T31980] FAULT_INJECTION: forcing a failure. [ 2081.568279][T31980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2081.582025][T31980] CPU: 1 PID: 31980 Comm: syz.2.8913 Not tainted syzkaller #0 [ 2081.589551][T31980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2081.599646][T31980] Call Trace: [ 2081.602934][T31980] [ 2081.605871][T31980] dump_stack_lvl+0x188/0x24e [ 2081.610585][T31980] ? show_regs_print_info+0x12/0x12 [ 2081.615824][T31980] ? load_image+0x400/0x400 [ 2081.620361][T31980] ? __lock_acquire+0x7d10/0x7d10 [ 2081.625401][T31980] should_fail_ex+0x399/0x4d0 [ 2081.630096][T31980] _copy_from_user+0x2c/0x170 [ 2081.634786][T31980] ___sys_recvmsg+0x172/0x590 [ 2081.639490][T31980] ? __sys_recvmsg+0x290/0x290 [ 2081.644290][T31980] ? common_file_perm+0x171/0x1c0 [ 2081.649372][T31980] ? __fget_files+0x43d/0x4b0 [ 2081.654116][T31980] __x64_sys_recvmsg+0x205/0x2e0 [ 2081.659097][T31980] ? ___sys_recvmsg+0x590/0x590 [ 2081.663973][T31980] ? lockdep_hardirqs_on+0x94/0x140 [ 2081.669186][T31980] do_syscall_64+0x4c/0xa0 [ 2081.673620][T31980] ? clear_bhb_loop+0x60/0xb0 [ 2081.678309][T31980] ? clear_bhb_loop+0x60/0xb0 [ 2081.682999][T31980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2081.688899][T31980] RIP: 0033:0x7f73d839bf79 [ 2081.693366][T31980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2081.713010][T31980] RSP: 002b:00007f73d91d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2081.721440][T31980] RAX: ffffffffffffffda RBX: 00007f73d8615fa0 RCX: 00007f73d839bf79 [ 2081.729422][T31980] RDX: 0000000000002082 RSI: 0000200000000300 RDI: 0000000000000003 [ 2081.737402][T31980] RBP: 00007f73d91d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2081.745431][T31980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2081.753457][T31980] R13: 00007f73d8616038 R14: 00007f73d8615fa0 R15: 00007fff8f3b6568 [ 2081.761487][T31980] [ 2083.567768][T31950] device syzkaller0 entered promiscuous mode [ 2087.166184][T32045] tun0: tun_chr_ioctl cmd 1074025675 [ 2087.171821][T32045] tun0: persist enabled [ 2087.623117][T32070] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.8943'. [ 2088.885907][T32087] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8950'. [ 2088.989968][T32089] device syzkaller0 entered promiscuous mode [ 2093.812660][T32156] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2093.847661][T32156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2094.945575][T32177] netlink: 'syz.0.8979': attribute type 1 has an invalid length. [ 2094.953597][T32177] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.8979'. [ 2095.237965][T32184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2095.848822][T32195] netlink: 'syz.4.8986': attribute type 10 has an invalid length. [ 2097.186619][T32226] netlink: 'syz.2.8995': attribute type 3 has an invalid length. [ 2097.225045][T32226] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8995'. [ 2098.939676][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.946103][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.877905][T32271] FAULT_INJECTION: forcing a failure. [ 2099.877905][T32271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2100.032919][T32271] CPU: 1 PID: 32271 Comm: syz.2.9011 Not tainted syzkaller #0 [ 2100.040466][T32271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2100.050563][T32271] Call Trace: [ 2100.053864][T32271] [ 2100.056815][T32271] dump_stack_lvl+0x188/0x24e [ 2100.061551][T32271] ? show_regs_print_info+0x12/0x12 [ 2100.066785][T32271] ? load_image+0x400/0x400 [ 2100.071317][T32271] ? __lock_acquire+0x7d10/0x7d10 [ 2100.076372][T32271] ? __fget_files+0x28/0x4b0 [ 2100.081002][T32271] should_fail_ex+0x399/0x4d0 [ 2100.085716][T32271] _copy_from_user+0x2c/0x170 [ 2100.090461][T32271] generic_map_update_batch+0x4f3/0x810 [ 2100.096046][T32271] ? rcu_read_unlock+0xa0/0xa0 [ 2100.100842][T32271] ? __fdget+0x17c/0x200 [ 2100.105220][T32271] ? rcu_read_unlock+0xa0/0xa0 [ 2100.110020][T32271] bpf_map_do_batch+0x466/0x600 [ 2100.114918][T32271] __sys_bpf+0x6f7/0x780 [ 2100.119204][T32271] ? bpf_link_show_fdinfo+0x380/0x380 [ 2100.124631][T32271] ? lock_chain_count+0x20/0x20 [ 2100.129532][T32271] __x64_sys_bpf+0x78/0x90 [ 2100.133994][T32271] do_syscall_64+0x4c/0xa0 [ 2100.138444][T32271] ? clear_bhb_loop+0x60/0xb0 [ 2100.143144][T32271] ? clear_bhb_loop+0x60/0xb0 [ 2100.147850][T32271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2100.153772][T32271] RIP: 0033:0x7f73d839bf79 [ 2100.158211][T32271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2100.177845][T32271] RSP: 002b:00007f73d91b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2100.186295][T32271] RAX: ffffffffffffffda RBX: 00007f73d8616090 RCX: 00007f73d839bf79 [ 2100.194288][T32271] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 2100.202290][T32271] RBP: 00007f73d91b2090 R08: 0000000000000000 R09: 0000000000000000 [ 2100.210289][T32271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2100.218370][T32271] R13: 00007f73d8616128 R14: 00007f73d8616090 R15: 00007fff8f3b6568 [ 2100.226375][T32271] [ 2101.013508][T32281] netlink: 'syz.0.9013': attribute type 1 has an invalid length. [ 2101.056269][T32281] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.9013'. [ 2101.103109][ T4355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.331589][T22549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2101.345198][T22549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2101.353902][T22549] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2101.362294][T22549] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2101.371113][T22549] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2101.378428][T22549] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2101.411426][ T4355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.761587][ T4355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.942345][ T4355] team0: Port device netdevsim0 removed [ 2101.968798][ T4355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.150498][T32328] sctp: [Deprecated]: syz.3.9029 (pid 32328) Use of int in maxseg socket option. [ 2103.150498][T32328] Use struct sctp_assoc_value instead [ 2103.427044][T32333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9030'. [ 2103.480012][T12982] Bluetooth: hci2: command 0x0409 tx timeout [ 2104.546749][T32326] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.9028'. [ 2104.915259][ T4355] tipc: Left network mode [ 2104.949722][T32285] chnl_net:caif_netlink_parms(): no params data found [ 2105.124270][T32365] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9038'. [ 2105.425649][T32285] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.443719][T32285] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.474544][T32285] device bridge_slave_0 entered promiscuous mode [ 2105.501717][T32285] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.509262][T32285] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.517678][T32285] device bridge_slave_1 entered promiscuous mode [ 2105.566851][T12982] Bluetooth: hci2: command 0x041b tx timeout [ 2105.833295][T32285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2105.948888][ T4355] device erspan0 left promiscuous mode [ 2105.976813][ T4355] syzkaller: port 1(erspan0) entered disabled state [ 2106.092841][T32285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2106.246701][ T4355] device gretap0 left promiscuous mode [ 2106.261614][ T4355] Ÿë: port 1(gretap0) entered disabled state [ 2106.305652][T32285] team0: Port device team_slave_0 added [ 2106.322721][T32285] team0: Port device team_slave_1 added [ 2106.397228][T32285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2106.438341][T32285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.529665][T32285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2106.635118][T32285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2106.642282][T32285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.674541][T32285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2106.870936][T32285] device hsr_slave_0 entered promiscuous mode [ 2106.910433][T32285] device hsr_slave_1 entered promiscuous mode [ 2106.933449][T32285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2106.953889][T32285] Cannot create hsr debugfs directory [ 2107.207313][ T4355] team0: Port device wlan1 removed [ 2107.594216][ T4355] device veth0_to_team left promiscuous mode [ 2107.612152][ T4355] Ÿë: port 2(veth0_to_team) entered disabled state [ 2107.631756][ T4355] device hsr_slave_0 left promiscuous mode [ 2107.638359][ T4355] device hsr_slave_1 left promiscuous mode [ 2107.640858][T12982] Bluetooth: hci2: command 0x040f tx timeout [ 2107.685612][ T4355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2107.710071][ T4355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2107.748375][ T4355] device bridge_slave_1 left promiscuous mode [ 2107.778040][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.833546][ T4355] device bridge_slave_0 left promiscuous mode [ 2107.842844][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.883690][ T4355] device veth1_macvtap left promiscuous mode [ 2108.939475][ T4355] team0 (unregistering): Port device team_slave_1 removed [ 2109.036252][ T4355] team0 (unregistering): Port device team_slave_0 removed [ 2109.720138][T12982] Bluetooth: hci2: command 0x0419 tx timeout [ 2109.731972][T32458] netlink: 'syz.4.9062': attribute type 10 has an invalid length. [ 2109.792687][T32465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9061'. [ 2110.229531][T32489] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9069'. [ 2110.341902][T32489] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2110.385223][T32489] CPU: 1 PID: 32489 Comm: syz.0.9069 Not tainted syzkaller #0 [ 2110.392820][T32489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2110.402964][T32489] Call Trace: [ 2110.406390][T32489] [ 2110.409405][T32489] dump_stack_lvl+0x188/0x24e [ 2110.414243][T32489] ? show_regs_print_info+0x12/0x12 [ 2110.419568][T32489] ? load_image+0x400/0x400 [ 2110.424297][T32489] sysfs_warn_dup+0x8a/0xa0 [ 2110.428915][T32489] sysfs_do_create_link_sd+0xc0/0x110 [ 2110.434428][T32489] device_add+0x7ed/0xfb0 [ 2110.438933][T32489] wiphy_register+0x1d9f/0x2ac0 [ 2110.443999][T32489] ? cfg80211_event_work+0x40/0x40 [ 2110.449213][T32489] ? minstrel_ht_alloc+0x894/0xa20 [ 2110.454463][T32489] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2110.460715][T32489] ieee80211_register_hw+0x2d00/0x39f0 [ 2110.466357][T32489] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2110.471998][T32489] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2110.477688][T32489] ? ieee80211_tasklet_handler+0x20/0x20 [ 2110.483537][T32489] ? memset+0x1e/0x40 [ 2110.487631][T32489] ? __hrtimer_init+0x186/0x270 [ 2110.492634][T32489] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2110.498566][T32489] hwsim_new_radio_nl+0xafa/0xce0 [ 2110.503802][T32489] genl_family_rcv_msg_doit+0x22a/0x330 [ 2110.509483][T32489] ? end_current_label_crit_section+0x170/0x170 [ 2110.515842][T32489] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2110.521895][T32489] ? bpf_lsm_capable+0x5/0x10 [ 2110.526669][T32489] ? security_capable+0x85/0xb0 [ 2110.531653][T32489] genl_rcv_msg+0x604/0x790 [ 2110.536370][T32489] ? genl_bind+0x360/0x360 [ 2110.540886][T32489] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2110.547413][T32489] netlink_rcv_skb+0x1fb/0x450 [ 2110.552295][T32489] ? genl_bind+0x360/0x360 [ 2110.556840][T32489] ? netlink_ack+0x1170/0x1170 [ 2110.561762][T32489] ? down_read+0x1a8/0x2d0 [ 2110.566308][T32489] genl_rcv+0x24/0x40 [ 2110.570394][T32489] netlink_unicast+0x74d/0x8d0 [ 2110.575349][T32489] netlink_sendmsg+0x8ad/0xbd0 [ 2110.580270][T32489] ? netlink_getsockopt+0x550/0x550 [ 2110.585599][T32489] ? aa_sock_msg_perm+0x94/0x150 [ 2110.590649][T32489] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2110.596027][T32489] ? security_socket_sendmsg+0x7c/0xa0 [ 2110.601648][T32489] ? netlink_getsockopt+0x550/0x550 [ 2110.606945][T32489] ____sys_sendmsg+0x5be/0x970 [ 2110.611813][T32489] ? __sys_sendmsg_sock+0x30/0x30 [ 2110.616879][T32489] ? __import_iovec+0x315/0x500 [ 2110.621804][T32489] ? import_iovec+0x6f/0xa0 [ 2110.626383][T32489] ___sys_sendmsg+0x2a2/0x360 [ 2110.631177][T32489] ? try_to_wake_up+0x6ae/0x1080 [ 2110.636365][T32489] ? __sys_sendmsg+0x290/0x290 [ 2110.641396][T32489] ? __lock_acquire+0x7d10/0x7d10 [ 2110.646515][T32489] ? rcu_read_lock_sched_held+0x86/0x110 [ 2110.652427][T32489] __se_sys_sendmsg+0x1bb/0x2a0 [ 2110.657428][T32489] ? __x64_sys_sendmsg+0x80/0x80 [ 2110.662575][T32489] ? lockdep_hardirqs_on+0x94/0x140 [ 2110.667898][T32489] do_syscall_64+0x4c/0xa0 [ 2110.672413][T32489] ? clear_bhb_loop+0x60/0xb0 [ 2110.677189][T32489] ? clear_bhb_loop+0x60/0xb0 [ 2110.681976][T32489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2110.687967][T32489] RIP: 0033:0x7fe32559bf79 [ 2110.692497][T32489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2110.712223][T32489] RSP: 002b:00007fe32654a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2110.720763][T32489] RAX: ffffffffffffffda RBX: 00007fe325815fa0 RCX: 00007fe32559bf79 [ 2110.728827][T32489] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2110.736892][T32489] RBP: 00007fe3256327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2110.744937][T32489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2110.752962][T32489] R13: 00007fe325816038 R14: 00007fe325815fa0 R15: 00007ffdc3ed66a8 [ 2110.761054][T32489] [ 2111.076711][T32495] netlink: 'syz.2.9072': attribute type 39 has an invalid length. [ 2111.964492][T32285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2112.005424][T32285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2112.054684][T32285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2112.088122][T32285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2112.113855][T32520] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9078'. [ 2112.438836][T32520] team0: Port device team_slave_0 removed [ 2112.462052][T32520] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2112.963659][T32557] netlink: 'syz.2.9083': attribute type 3 has an invalid length. [ 2112.974598][T32285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.010360][T32557] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9083'. [ 2113.056689][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2113.073987][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2113.121786][T32285] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.178295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2113.202597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2113.249057][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.256274][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2113.327804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2113.345461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2113.381887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2113.403456][T32563] netlink: 'syz.2.9086': attribute type 29 has an invalid length. [ 2113.420379][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.427624][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2113.441438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2113.456737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2113.501991][T32563] netlink: 'syz.2.9086': attribute type 29 has an invalid length. [ 2113.540312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2113.575779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2113.615133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2113.668962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2113.721411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2113.765586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2113.789558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2113.823807][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2113.842256][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2113.893897][T32285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2114.691392][T32577] device syzkaller0 entered promiscuous mode [ 2118.100099][T32608] netlink: 'syz.2.9097': attribute type 21 has an invalid length. [ 2118.108141][T32608] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9097'. [ 2119.541233][T32632] sctp: [Deprecated]: syz.3.9104 (pid 32632) Use of int in maxseg socket option. [ 2119.541233][T32632] Use struct sctp_assoc_value instead [ 2121.967369][T32285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2121.997075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2122.035296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2122.073759][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2122.086724][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2122.181048][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2122.211522][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2122.250017][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2122.298916][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2122.351315][T32285] device veth0_vlan entered promiscuous mode [ 2122.450552][T32285] device veth1_vlan entered promiscuous mode [ 2122.538951][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2122.589442][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2122.660855][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2122.737210][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2122.874401][T32285] device veth0_macvtap entered promiscuous mode [ 2122.886421][T32285] device veth1_macvtap entered promiscuous mode [ 2123.021996][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2123.040698][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2123.088318][T32285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.160384][T32285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.219903][T32285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.269415][T32285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.329992][T32285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.381692][T32285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.432808][T32285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.503245][T32285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.544018][T32285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.657292][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2123.686484][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2123.758601][T32285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.787156][T32285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.869076][T32285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.931635][T32285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.040120][T32285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.136617][T32285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.253148][T32285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2124.346581][T32285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.384308][T32285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.425158][T32285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.468752][T32285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.606415][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2124.625741][T22080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2125.654844][T22079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2125.709914][T22079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.735434][T22079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2126.064371][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2126.096780][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2126.360432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.