last executing test programs: 3.174459175s ago: executing program 1 (id=2745): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0201000902000000e4a17c45c8d260c9", 0x10}], 0x1, 0x0, 0x0, 0x3}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000025008188e6b62aa73772cc9f1ba1f8482e0000005e14060288a8ffff0e0003001000000002800000128c", 0x2e}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x80000002, 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f0000000000)={r8}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0700000004000000000900000100000028000000", @ANYRES32, @ANYRES64=r5, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="000000000000000000000000000000000000008e0000000000000000"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000001800000085000000b500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x2}, 0x18a21, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xb, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f00000005c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)=""/196, 0xf1, 0xc4, 0x0, 0x2, 0x10000, @value=r10}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x18, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) 2.175506397s ago: executing program 1 (id=2751): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf", 0x31}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058", 0xb6}, {&(0x7f0000000440)="de19f496ca4908ffcc0049bc7dae9c6a39a13cb6", 0x14}], 0x3, 0x0, 0x0, 0x6c000000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003a00)={&(0x7f0000000e40)="11c1041966b85397a75c4cae84086b77d165ab3c43c4f79896d70cbe2f8ae5617331f63b47dcaeff1c52cfad9a129627bb9d43ac2891943753e8e9753352be86bcb2878e7aee568f9530b1ba50d5d4246d779225e02f8264ab28f8b7d01d2902983cc177d7080c28f88e0f01ab6d7975ff15df0c39890ee802d4495f5c74723a0696a00ef73d2adef29e44d14b9a03053a6a3358008193e7b38158b4eaf7e5ca9a678ceb3be68d192195e57afdbc97c6a8b01ba30193de0e4ff54da2f7b7f31af159ba41393813337bd370e08cf41a39891448572d0c530c1779a64c5a083cc5687e96b2e82a9d4bbb8880f8ffadbf10ca0d6a6f4f2f6e", &(0x7f0000001980)=""/4096, &(0x7f0000002980)="90df54d2f1ff2d1db4fc7370b249c756f7c00067d48c9ce2d455cfc71bdff161bc3798a159c9d3897754ab0c2c069ba29044a16e2f5a614f1d75e09c4555a8057cabf3d6bbf891090fe3666148bf", &(0x7f0000002a00)="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", 0x3, r1}, 0x38) r5 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000e00)={&(0x7f0000000580)=@isdn={0x22, 0x4, 0x1, 0x8, 0x2}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)="f9c3c69d459108425dc0516a9f354822491c8e89418b414213a496ee372ba6a39e85d2cf731ca4659b6585bf484e973008ebc761da14c1d1eedcfdc8b54effcb961b867dbb483637bf8d6bf4e432125f028ef7866097d1f8765b08476acf5d1ca2fa039c01a4570582c2f2053f33b9bec7fbbb05f0f4c5d1345cd17a9aaa1c8cd519db918c037b528f12fa7c8a2d2c449cca1532f4cb1b5e83a58229733567954736d8e503cc1e4e9f08d46e534710eb7ef4279c81beaa3c1d95ea51226cdc9186681e7ee9b9d13d79ffacbdd106022300411ccac91d4045a8aaa37cfe6d87", 0xdf}, {&(0x7f0000000800)="7fa23a5a2fcaef685d5deebe62d49a076661c655e857d1c3a2c7a061bc6f2f9bd5cc296aaa8b98fa595c13081b4db99beb4f9066aef3299a3b8f4d32df2c5015f67edbcfe3fa875093db21756651f0f07b2384130158d26298de50215c6c5cd9544c7315da715b2cb5617989f982e737ff33eb", 0x73}, {0x0}, {&(0x7f00000008c0)="06be7c76af9d58df176a88479d719ec135ba3fedf94bf9a18db63cb3d11ffa256525a2d98c6cca431928cedfc281f945792feb3061ca8f72fcf380f74ef562d9120e502b0a41c56f2b6d44b80d5ec05073dbb18121f1f5a57a548aecbd8eff68b78b3004b7b3d5c09f53cb8c56ea4076a6f62b0b6611140a9c9ac8595c4a0f3a0a91adae33aa04f2", 0x88}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x320}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x9, '\x00', r7, r8, 0x4, 0x1, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) syz_clone(0x2043d00, &(0x7f0000000580), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9bfab027211cd97b2dfac4047df21b190e7471f244d8ea301b9500feecd077ea8d4e2ee03ac95eb3b04a90c3dbca111ac6c2cba878c8010afc7564bfede4b54be65cdaf78ba723a8e536f5c2dbbe5a8f96bf183e7e2637b84d785c978d") r9 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 2.026443445s ago: executing program 0 (id=2754): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.807864987s ago: executing program 0 (id=2756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 1.648597355s ago: executing program 1 (id=2758): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000076009544c350dd951bbf8f7f27c8270f", 0x14}], 0x1}, 0x0) (fail_nth: 4) 1.615742786s ago: executing program 0 (id=2759): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180", 0x1c}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffff0001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f0000000240)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019a103000200060027c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.229110576s ago: executing program 1 (id=2760): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.227150337s ago: executing program 2 (id=2761): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000000005000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000073055f10caeeeadec966376d58b54e6a6e8e500291ed700c0b350038faf31c9b03f5bc593465576df17103b2f10a6f8829395e8d7f53d7f2d6ae1eded6a903dbda0aa295295a9508a39ceb59757712c80d8cc4675d324f910afeb0c6b4385a5dee966f84fe7a2eadacd044c1bf28fbdcb11f1138", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800f4fbf81971059cab0000386993e89500020000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009527b83bb7e22f667ad2c78fc758fc7869f32a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000010000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x4, 0xc07, 0xfffd, 0x0, 0x1, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xf0}, 0x100c, 0x0, 0x3, 0x9, 0x0, 0x8000004}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000400"/28], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r2}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000009000000008400000002000000fe804100000000009200000000000000f1699ff4428f3fddb8a0c89403f7b0d87177f15d938ef9e216f5e938dc19f4dfef43054527f19ed1ecb594fc9bafc6ca2d35ca780363a0f850e747986d66d19e78fa751943e0e0473f8538d2bd6b4cb72f322206179dcfe56005f8ae9a78c703cb7099cded7628154362f3dc226a1bbc7909091a652fd3a65a2ccd6f1b1abf6092b21c4aed0960435beb9caafefb380b8606a0253895b76ceccc084df21ed567d50a6a55425121f5dc"], 0x20}, 0x0) 1.193515379s ago: executing program 0 (id=2763): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002980)={r0, &(0x7f0000000740)="f213e10a3ce27898f9dc0d1bea4d45a04f23f91c230b964ae7aa96105410016a69dfed5009fa16bcf7f554443f8a1f932f45efafbe5301c9597e094c54eae3ba5584c241e085e307559fa52b931fc9d4757c01fbf9c598212d934c788da8207c901ecd38ae00925fe8574858545cbdac29e4ff48c607a0c5aaf5bc8c5fdc7878c362613e69d5794f982666ad88544dfcb621570e13fd9abf8b164ab83ea4227992fe88bd344e541670ec6e3fe6bf8f7e8245bc860384f850175d033540217683dd11", &(0x7f0000001980)=""/4096}, 0x20) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000900)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032f"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 1.003811848s ago: executing program 0 (id=2765): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 919.865523ms ago: executing program 2 (id=2766): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext, 0x0, 0x20000000000000c8, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x8}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, &(0x7f0000000000), 0x8) 790.67339ms ago: executing program 2 (id=2768): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@const={0x2, 0x0, 0x0, 0xa, 0x5}, @enum={0x7, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x80000001}, {0x9, 0xffff8000}]}]}, {0x0, [0x30, 0x2e, 0x61, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/141, 0x4a, 0x8d, 0x1, 0x5}, 0x28) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000800), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x8, 0x3106f930, 0x35, 0x12080, r0, 0x0, '\x00', r1, r2, 0x5, 0x4, 0x1, 0x7, @void, @value, @value=r3}, 0x50) r4 = socket$kcm(0x10, 0x5, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000001000000850000005300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$sock(r5, &(0x7f00000005c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000240)="44ee5ed78fe1ef6cb49c58", 0xb}, {0x0}], 0x3}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x20000000}, 0x40808) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 789.748399ms ago: executing program 0 (id=2769): r0 = syz_clone(0x22820000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000400)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x27) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a342dc2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe}) r4 = socket$kcm(0x2, 0x5, 0x84) close(r4) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000001c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1, &(0x7f0000000180)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) 585.56384ms ago: executing program 2 (id=2770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="000000feffffffffffffee94fbdfbaa508a6f34415cf378b4a595251be8e0add3846007fdc2378ea0ac2467d1c16b2ce47fac81c74b9f7c15a7126a9ebd1a25c0025c2209c5961522673d109973fb6d90d3ec20cf2e766f035f58c789cdc26b52b6d5885434a09a6494dbba5796f349d39f7bb003cc4dd0e3b9e6497eac8ac070b850a29bebcd7b2bac8125f5507c51856002024224496d53b55a22813af5820f0183de25e8795895c9fcfa281b429a0862e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x14905, 0x5, 0x7, 0x3, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000340)={'ip_vti0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x8, 0x0, 0xfffffffc, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d2d, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff, 0x8000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000e6ffff030000b7080000000000007b8af8ff00d40000bfa200000000000007020011c451a300f8ffffffb703000008000000b7040000eb0000008500000003839685a236f4ea4a1d306392d51059c6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x10001, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x0, 0x80000, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9e}, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="190000001820000000000000", @ANYRES32=r11, @ANYBLOB="7f5a5edee45af14717cfa045ff8b04039632c88f3f6af228a965d3ebf61fa6b6589f5f191d8780c76c1d515ac86450d922b2148a11cb3321368c8ab433c8bd7cfca788c1cd6af3d558af723ae517d3600eb1f0465dea867dd05d16f568ca250ff88e081285b7d509f47eba479085a728aa96cc84d223ab1e9a489963394539689044e9a4b8ad907b2af941f19f4400f92bbe243253ce772745c1dbe27730cd044feedd65a81e209128270fbf30ec5246daa1698753cb69a86a6a531f5ac747a03082a666df64dec3b423ae5f0976c651e48d612c4e9ca0986bb9f765273e", @ANYRES64=r3], 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r12) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0) close(r13) 525.993133ms ago: executing program 3 (id=2771): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0xe0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) 465.353466ms ago: executing program 3 (id=2772): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180", 0x1c}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffff0001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f0000000240)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019a103000200060027c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 399.55813ms ago: executing program 3 (id=2773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x29, 0x0}, 0x10) 372.577481ms ago: executing program 2 (id=2774): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002980)={r0, &(0x7f0000000740)="f213e10a3ce27898f9dc0d1bea4d45a04f23f91c230b964ae7aa96105410016a69dfed5009fa16bcf7f554443f8a1f932f45efafbe5301c9597e094c54eae3ba5584c241e085e307559fa52b931fc9d4757c01fbf9c598212d934c788da8207c901ecd38ae00925fe8574858545cbdac29e4ff48c607a0c5aaf5bc8c5fdc7878c362613e69d5794f982666ad88544dfcb621570e13fd9abf8b164ab83ea4227992fe88bd344e541670ec6e3fe6bf8f7e8245bc860384f850175d033540217683dd11", &(0x7f0000001980)=""/4096}, 0x20) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000900)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032f"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 273.941116ms ago: executing program 3 (id=2775): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="b900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="8a89dd1710175f89cd0152cdcc7d8fbc6dd55b932511adb85841e1c28759a6cb7c701d931185a264b2f9458bcc6a9e8514f2844ef7e306d499688952e7151ded8a02bf32241d8fe5d4096a82acd7ddc3e4c812c795ed8026d9cd48fe997cfd288c0d5ffd6bf6228c6d77f90c87fb1071edaf773785e47c9a95dc34269e4a3c32bc8e729b97b72140d0673d5505312e60db1f03773653f1cf515556528c1fcd52fa1c09e5970bd02ceee3ed3e01856ef31168ea5ad5fe17", @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e687", 0x2}], 0x1, 0x0, 0x0, 0x44190}, 0x2004c001) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1000009, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7fffffffffffffff, 0x9}, 0x0, 0x36, 0x9a, 0x7, 0xa, 0x8, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x110, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x0, 0x18, 0x0, 0x0) (async) close(r5) (async) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8004000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e00000010008188040f80ec59acbc0413a1", 0x12}], 0x1}, 0x84) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) (async) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000eeff850000070000009500000000000000000000e80000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x88, 0x56, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x145a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x5d1, 0x2}, 0x4507, 0x32, 0xfffffbfd, 0x2, 0x7, 0x3, 0xfffa, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff00c}, {0x6, 0xff, 0x9, 0x1}]}) 271.565276ms ago: executing program 1 (id=2776): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffff0001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f0000000240)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019a103000200060027c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 147.647392ms ago: executing program 3 (id=2777): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 146.649943ms ago: executing program 2 (id=2778): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4c0000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2000000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60640c034002a10800feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 132.291983ms ago: executing program 1 (id=2779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x55}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xff, 0x0, 0x7, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$TUNSETIFF(r4, 0xb701, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x40881) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000, 0x9}, 0x14208, 0x1, 0x0, 0x0, 0x5, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa1777cb3aa4b79ac}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES8=r2], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x6}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r9, r7, 0x4, r7}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=2780): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf", 0x31}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058", 0xb6}, {&(0x7f0000000440)="de19f496ca4908ffcc0049bc7dae9c6a39a13cb6", 0x14}], 0x3, 0x0, 0x0, 0x6c000000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003a00)={&(0x7f0000000e40)="11c1041966b85397a75c4cae84086b77d165ab3c43c4f79896d70cbe2f8ae5617331f63b47dcaeff1c52cfad9a129627bb9d43ac2891943753e8e9753352be86bcb2878e7aee568f9530b1ba50d5d4246d779225e02f8264ab28f8b7d01d2902983cc177d7080c28f88e0f01ab6d7975ff15df0c39890ee802d4495f5c74723a0696a00ef73d2adef29e44d14b9a03053a6a3358008193e7b38158b4eaf7e5ca9a678ceb3be68d192195e57afdbc97c6a8b01ba30193de0e4ff54da2f7b7f31af159ba41393813337bd370e08cf41a39891448572d0c530c1779a64c5a083cc5687e96b2e82a9d4bbb8880f8ffadbf10ca0d6a6f4f2f6e", &(0x7f0000001980)=""/4096, &(0x7f0000002980)="90df54d2f1ff2d1db4fc7370b249c756f7c00067d48c9ce2d455cfc71bdff161bc3798a159c9d3897754ab0c2c069ba29044a16e2f5a614f1d75e09c4555a8057cabf3d6bbf891090fe3666148bf", &(0x7f0000002a00)="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", 0x3, r1}, 0x38) r5 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000e00)={&(0x7f0000000580)=@isdn={0x22, 0x4, 0x1, 0x8, 0x2}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)="f9c3c69d459108425dc0516a9f354822491c8e89418b414213a496ee372ba6a39e85d2cf731ca4659b6585bf484e973008ebc761da14c1d1eedcfdc8b54effcb961b867dbb483637bf8d6bf4e432125f028ef7866097d1f8765b08476acf5d1ca2fa039c01a4570582c2f2053f33b9bec7fbbb05f0f4c5d1345cd17a9aaa1c8cd519db918c037b528f12fa7c8a2d2c449cca1532f4cb1b5e83a58229733567954736d8e503cc1e4e9f08d46e534710eb7ef4279c81beaa3c1d95ea51226cdc9186681e7ee9b9d13d79ffacbdd106022300411ccac91d4045a8aaa37cfe6d87", 0xdf}, {&(0x7f0000000800)="7fa23a5a2fcaef685d5deebe62d49a076661c655e857d1c3a2c7a061bc6f2f9bd5cc296aaa8b98fa595c13081b4db99beb4f9066aef3299a3b8f4d32df2c5015f67edbcfe3fa875093db21756651f0f07b2384130158d26298de50215c6c5cd9544c7315da715b2cb5617989f982e737ff33eb", 0x73}, {0x0}, {&(0x7f00000008c0)="06be7c76af9d58df176a88479d719ec135ba3fedf94bf9a18db63cb3d11ffa256525a2d98c6cca431928cedfc281f945792feb3061ca8f72fcf380f74ef562d9120e502b0a41c56f2b6d44b80d5ec05073dbb18121f1f5a57a548aecbd8eff68b78b3004b7b3d5c09f53cb8c56ea4076a6f62b0b6611140a9c9ac8595c4a0f3a0a91adae33aa04f2", 0x88}], 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x320}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x9, '\x00', r7, r8, 0x4, 0x1, 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) syz_clone(0x2043d00, &(0x7f0000000580), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="9bfab027211cd97b2dfac4047df21b190e7471f244d8ea301b9500feecd077ea8d4e2ee03ac95eb3b04a90c3dbca111ac6c2cba878c8010afc7564bfede4b54be65cdaf78ba723a8e536f5c2dbbe5a8f96bf183e7e2637b84d785c978d") r9 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 5.992791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.999998][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.192459][T13082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.251359][T13318] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2492'. [ 507.424818][T13318] netlink: 'syz.1.2492': attribute type 10 has an invalid length. [ 507.435975][T13318] team0: Device hsr_slave_0 failed to register rx_handler [ 507.513768][T13082] veth0_vlan: entered promiscuous mode [ 507.654752][T13082] veth1_vlan: entered promiscuous mode [ 507.867231][T13082] veth0_macvtap: entered promiscuous mode [ 507.905958][T13082] veth1_macvtap: entered promiscuous mode [ 507.938342][T13326] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2495'. [ 507.982071][T13326] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 508.001311][T13326] team0: Device hsr_slave_0 failed to register rx_handler [ 508.096210][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.141007][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.178686][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.230688][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.287058][T13082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.384433][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.430674][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.470833][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.513379][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.546402][T13082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.616402][T13082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.680929][T13082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.700779][T13082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.722233][T13082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.754437][T13330] netlink: 'syz.1.2494': attribute type 10 has an invalid length. [ 508.771023][T13330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2494'. [ 508.822296][T13330] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 508.862152][T13339] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 508.872451][T13339] team0: Device hsr_slave_0 failed to register rx_handler [ 509.394884][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.470684][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.658126][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.679244][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.833087][T13352] netlink: 'syz.3.2498': attribute type 10 has an invalid length. [ 509.864473][T13352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2498'. [ 509.921219][T13352] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 510.921709][T13371] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2503'. [ 510.971838][T13376] netlink: 'syz.2.2503': attribute type 10 has an invalid length. [ 511.147238][T13376] team0: Device hsr_slave_0 failed to register rx_handler [ 512.294894][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.305690][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.314109][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.341993][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.360510][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 512.369940][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.532471][T13400] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2508'. [ 512.563929][T13400] netlink: 'syz.2.2508': attribute type 10 has an invalid length. [ 512.591915][T13400] team0: Device hsr_slave_0 failed to register rx_handler [ 512.735045][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.893963][T13408] netlink: 197828 bytes leftover after parsing attributes in process `syz.3.2507'. [ 512.929339][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.119144][T13417] bridge_slave_1: left allmulticast mode [ 513.127272][T13417] bridge_slave_1: left promiscuous mode [ 513.135420][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.160490][T13417] bridge_slave_0: left allmulticast mode [ 513.166868][T13417] bridge_slave_0: left promiscuous mode [ 513.176079][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.377483][T13408] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 513.385879][T13408] CPU: 0 PID: 13408 Comm: syz.3.2507 Not tainted syzkaller #0 [ 513.393375][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 513.403541][T13408] Call Trace: [ 513.406831][T13408] [ 513.409767][T13408] dump_stack_lvl+0x18c/0x250 [ 513.414484][T13408] ? show_regs_print_info+0x20/0x20 [ 513.419715][T13408] ? load_image+0x420/0x420 [ 513.424246][T13408] sysfs_warn_dup+0x8e/0xa0 [ 513.428762][T13408] sysfs_do_create_link_sd+0xc0/0x110 [ 513.434143][T13408] device_add_class_symlinks+0x1cf/0x240 [ 513.439791][T13408] device_add+0x507/0xc20 [ 513.444191][T13408] wiphy_register+0x1dad/0x2ae0 [ 513.449066][T13408] ? cfg80211_event_work+0x40/0x40 [ 513.454310][T13408] ? minstrel_ht_alloc+0x88a/0x990 [ 513.459436][T13408] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 513.465536][T13408] ieee80211_register_hw+0x3464/0x4250 [ 513.471031][T13408] ? ieee80211_tasklet_handler+0x20/0x20 [ 513.476670][T13408] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 513.482765][T13408] ? __debug_object_init+0xec/0x450 [ 513.488171][T13408] ? __asan_memset+0x22/0x40 [ 513.492786][T13408] ? __hrtimer_init+0x186/0x270 [ 513.497646][T13408] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 513.503482][T13408] ? mac80211_hwsim_free+0x220/0x220 [ 513.508910][T13408] ? rcu_is_watching+0x15/0xb0 [ 513.514063][T13408] ? kstrndup+0xbd/0x140 [ 513.518350][T13408] hwsim_new_radio_nl+0xdc9/0x1a90 [ 513.523501][T13408] ? __nla_validate+0x50/0x50 [ 513.528209][T13408] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 513.534555][T13408] ? __nla_parse+0x40/0x50 [ 513.538975][T13408] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 513.545318][T13408] genl_family_rcv_msg_doit+0x211/0x310 [ 513.550889][T13408] ? end_current_label_crit_section+0x170/0x170 [ 513.557192][T13408] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 513.563296][T13408] ? bpf_lsm_capable+0x9/0x10 [ 513.568067][T13408] ? security_capable+0x89/0xb0 [ 513.572932][T13408] genl_rcv_msg+0x619/0x7a0 [ 513.577442][T13408] ? genl_bind+0x360/0x360 [ 513.581854][T13408] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 513.588207][T13408] ? ref_tracker_free+0x690/0x840 [ 513.593275][T13408] netlink_rcv_skb+0x241/0x4d0 [ 513.598064][T13408] ? genl_bind+0x360/0x360 [ 513.602496][T13408] ? netlink_ack+0x1180/0x1180 [ 513.607277][T13408] ? __lock_acquire+0x7d40/0x7d40 [ 513.612579][T13408] ? down_read+0x1ac/0x2e0 [ 513.616997][T13408] genl_rcv+0x28/0x40 [ 513.620979][T13408] netlink_unicast+0x751/0x8d0 [ 513.625762][T13408] netlink_sendmsg+0x8d0/0xbf0 [ 513.630716][T13408] ? netlink_getsockopt+0x590/0x590 [ 513.635933][T13408] ? aa_sock_msg_perm+0x94/0x150 [ 513.640885][T13408] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 513.646169][T13408] ? security_socket_sendmsg+0x80/0xa0 [ 513.651627][T13408] ? netlink_getsockopt+0x590/0x590 [ 513.656830][T13408] ____sys_sendmsg+0x5ba/0x960 [ 513.661616][T13408] ? __asan_memset+0x22/0x40 [ 513.666237][T13408] ? __sys_sendmsg_sock+0x30/0x30 [ 513.671262][T13408] ? __import_iovec+0x5f2/0x850 [ 513.676120][T13408] ? import_iovec+0x73/0xa0 [ 513.680631][T13408] ___sys_sendmsg+0x2a6/0x360 [ 513.685336][T13408] ? __sys_sendmsg+0x2a0/0x2a0 [ 513.690195][T13408] __se_sys_sendmsg+0x1c2/0x2b0 [ 513.695054][T13408] ? __x64_sys_sendmsg+0x80/0x80 [ 513.700002][T13408] ? lockdep_hardirqs_on+0x98/0x150 [ 513.705213][T13408] do_syscall_64+0x55/0xa0 [ 513.709635][T13408] ? clear_bhb_loop+0x40/0x90 [ 513.714318][T13408] ? clear_bhb_loop+0x40/0x90 [ 513.718999][T13408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.724894][T13408] RIP: 0033:0x7fc1a119c819 [ 513.729363][T13408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.749055][T13408] RSP: 002b:00007fc1a204d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.757556][T13408] RAX: ffffffffffffffda RBX: 00007fc1a1416090 RCX: 00007fc1a119c819 [ 513.765564][T13408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 513.773552][T13408] RBP: 00007fc1a1232c91 R08: 0000000000000000 R09: 0000000000000000 [ 513.781555][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.789529][T13408] R13: 00007fc1a1416128 R14: 00007fc1a1416090 R15: 00007fff1c917678 [ 513.797551][T13408] [ 513.847092][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.865330][T13418] Ÿë: port 1(ip6gretap0) entered blocking state [ 513.872682][T13418] Ÿë: port 1(ip6gretap0) entered disabled state [ 513.879255][T13418] ip6gretap0: entered allmulticast mode [ 513.887851][T13418] ip6gretap0: entered promiscuous mode [ 513.979522][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.010092][T13425] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2513'. [ 514.115873][T13424] netlink: 'syz.3.2514': attribute type 10 has an invalid length. [ 514.165582][T13424] team0: Port device macvlan0 added [ 514.172500][T13425] netlink: 'syz.0.2513': attribute type 10 has an invalid length. [ 514.201486][T13425] team0: Device hsr_slave_0 failed to register rx_handler [ 514.337238][T13431] netlink: 'syz.2.2516': attribute type 10 has an invalid length. [ 514.360127][T13431] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2516'. [ 514.408942][T13433] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2518'. [ 514.437396][T13391] chnl_net:caif_netlink_parms(): no params data found [ 514.472053][T13433] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 514.481005][ T5773] Bluetooth: hci2: command tx timeout [ 514.491420][T13433] team0: Device hsr_slave_0 failed to register rx_handler [ 515.004535][T13391] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.020809][T13391] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.035683][T13391] bridge_slave_0: entered allmulticast mode [ 515.049309][T13456] netlink: 197828 bytes leftover after parsing attributes in process `syz.0.2522'. [ 515.049846][T13391] bridge_slave_0: entered promiscuous mode [ 515.206692][T13464] FAULT_INJECTION: forcing a failure. [ 515.206692][T13464] name failslab, interval 1, probability 0, space 0, times 0 [ 515.237354][T13464] CPU: 0 PID: 13464 Comm: syz.2.2523 Not tainted syzkaller #0 [ 515.244979][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.255331][T13464] Call Trace: [ 515.258831][T13464] [ 515.261902][T13464] dump_stack_lvl+0x18c/0x250 [ 515.266626][T13464] ? show_regs_print_info+0x20/0x20 [ 515.271957][T13464] ? load_image+0x420/0x420 [ 515.276547][T13464] ? __lock_acquire+0x7d40/0x7d40 [ 515.281821][T13464] ? lock_chain_count+0x20/0x20 [ 515.286824][T13464] should_fail_ex+0x39d/0x4d0 [ 515.291549][T13464] should_failslab+0x9/0x20 [ 515.296121][T13464] slab_pre_alloc_hook+0x59/0x310 [ 515.301593][T13464] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 515.307922][T13464] ? bpf_test_init+0x9f/0x140 [ 515.312625][T13464] ? bpf_test_init+0x9f/0x140 [ 515.317302][T13464] __kmem_cache_alloc_node+0x53/0x250 [ 515.322767][T13464] ? bpf_test_init+0x9f/0x140 [ 515.327786][T13464] __kmalloc+0xa4/0x230 [ 515.331946][T13464] bpf_test_init+0x9f/0x140 [ 515.336451][T13464] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 515.341833][T13464] ? dev_put+0x80/0x80 [ 515.345930][T13464] ? dev_put+0x80/0x80 [ 515.350042][T13464] bpf_prog_test_run+0x321/0x390 [ 515.355131][T13464] __sys_bpf+0x49d/0x890 [ 515.359545][T13464] ? bpf_link_show_fdinfo+0x390/0x390 [ 515.365062][T13464] ? lock_chain_count+0x20/0x20 [ 515.370023][T13464] __x64_sys_bpf+0x7c/0x90 [ 515.374440][T13464] do_syscall_64+0x55/0xa0 [ 515.378853][T13464] ? clear_bhb_loop+0x40/0x90 [ 515.383620][T13464] ? clear_bhb_loop+0x40/0x90 [ 515.388314][T13464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.394209][T13464] RIP: 0033:0x7fef09f9c819 [ 515.398619][T13464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.418343][T13464] RSP: 002b:00007fef0ad9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.426903][T13464] RAX: ffffffffffffffda RBX: 00007fef0a215fa0 RCX: 00007fef09f9c819 [ 515.434970][T13464] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 515.442965][T13464] RBP: 00007fef0ad9c090 R08: 0000000000000000 R09: 0000000000000000 [ 515.450965][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.459021][T13464] R13: 00007fef0a216038 R14: 00007fef0a215fa0 R15: 00007fff12546688 [ 515.467106][T13464] [ 515.483354][T13391] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.515524][T13391] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.523469][T13391] bridge_slave_1: entered allmulticast mode [ 515.531421][T13391] bridge_slave_1: entered promiscuous mode [ 515.550418][T13456] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 515.647614][T13391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.666516][T13391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.968561][T13475] netlink: 'syz.3.2526': attribute type 10 has an invalid length. [ 516.023950][T13391] team0: Port device team_slave_0 added [ 516.033641][T13478] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2527'. [ 516.075841][T13480] netlink: 'syz.0.2527': attribute type 10 has an invalid length. [ 516.088359][T13480] team0: Device hsr_slave_0 failed to register rx_handler [ 516.175164][T13391] team0: Port device team_slave_1 added [ 516.322283][T13482] netlink: 'syz.2.2528': attribute type 10 has an invalid length. [ 516.335821][T13482] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2528'. [ 516.346512][T13391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.361925][T13391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.399206][T13391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.413615][T13391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.423693][T13391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.450871][T13391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.560761][ T5773] Bluetooth: hci2: command tx timeout [ 516.578661][T13391] hsr_slave_0: entered promiscuous mode [ 516.585487][T13391] hsr_slave_1: entered promiscuous mode [ 516.593036][T13391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.601952][T13391] Cannot create hsr debugfs directory [ 517.508857][ T12] hsr_slave_0: left promiscuous mode [ 517.534408][ T12] hsr_slave_1: left promiscuous mode [ 517.558107][ T12] veth1_vlan: left promiscuous mode [ 517.568650][ T12] veth0_vlan: left promiscuous mode [ 517.670014][T13529] netlink: 197828 bytes leftover after parsing attributes in process `syz.2.2535'. [ 517.900557][ T12] team0 (unregistering): Port device macvlan0 removed [ 518.189030][ T12] team0 (unregistering): Port device team_slave_1 removed [ 518.236037][ T12] team0 (unregistering): Port device team_slave_0 removed [ 518.629307][T13518] netlink: 'syz.3.2536': attribute type 10 has an invalid length. [ 518.637864][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2536'. [ 518.651293][ T5773] Bluetooth: hci2: command tx timeout [ 518.653093][T13518] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 518.668689][T13518] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.697911][T13518] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 518.709239][T13529] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 518.730203][T13529] CPU: 0 PID: 13529 Comm: syz.2.2535 Not tainted syzkaller #0 [ 518.737722][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 518.747810][T13529] Call Trace: [ 518.751096][T13529] [ 518.754029][T13529] dump_stack_lvl+0x18c/0x250 [ 518.758725][T13529] ? show_regs_print_info+0x20/0x20 [ 518.763978][T13529] ? load_image+0x420/0x420 [ 518.768525][T13529] sysfs_warn_dup+0x8e/0xa0 [ 518.773052][T13529] sysfs_do_create_link_sd+0xc0/0x110 [ 518.778424][T13529] device_add_class_symlinks+0x1cf/0x240 [ 518.784063][T13529] device_add+0x507/0xc20 [ 518.788399][T13529] wiphy_register+0x1dad/0x2ae0 [ 518.793326][T13529] ? cfg80211_event_work+0x40/0x40 [ 518.798447][T13529] ? minstrel_ht_alloc+0x88a/0x990 [ 518.803570][T13529] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 518.809641][T13529] ieee80211_register_hw+0x3464/0x4250 [ 518.815114][T13529] ? ieee80211_tasklet_handler+0x20/0x20 [ 518.820743][T13529] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 518.826653][T13529] ? __debug_object_init+0xec/0x450 [ 518.831861][T13529] ? __asan_memset+0x22/0x40 [ 518.836457][T13529] ? __hrtimer_init+0x186/0x270 [ 518.841315][T13529] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 518.847062][T13529] ? mac80211_hwsim_free+0x220/0x220 [ 518.852341][T13529] ? rcu_is_watching+0x15/0xb0 [ 518.857105][T13529] ? kstrndup+0xbd/0x140 [ 518.861362][T13529] hwsim_new_radio_nl+0xdc9/0x1a90 [ 518.866568][T13529] ? __nla_validate+0x50/0x50 [ 518.871256][T13529] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 518.877596][T13529] ? __nla_parse+0x40/0x50 [ 518.882013][T13529] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 518.888346][T13529] genl_family_rcv_msg_doit+0x211/0x310 [ 518.893914][T13529] ? end_current_label_crit_section+0x170/0x170 [ 518.900162][T13529] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 518.906081][T13529] ? bpf_lsm_capable+0x9/0x10 [ 518.910829][T13529] ? security_capable+0x89/0xb0 [ 518.915690][T13529] genl_rcv_msg+0x619/0x7a0 [ 518.920196][T13529] ? genl_bind+0x360/0x360 [ 518.924610][T13529] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 518.930941][T13529] ? perf_trace_lock+0xfc/0x3b0 [ 518.935794][T13529] netlink_rcv_skb+0x241/0x4d0 [ 518.940573][T13529] ? genl_bind+0x360/0x360 [ 518.945168][T13529] ? netlink_ack+0x1180/0x1180 [ 518.949955][T13529] ? __lock_acquire+0x7d40/0x7d40 [ 518.954990][T13529] ? down_read+0x1ac/0x2e0 [ 518.959415][T13529] genl_rcv+0x28/0x40 [ 518.963788][T13529] netlink_unicast+0x751/0x8d0 [ 518.968600][T13529] netlink_sendmsg+0x8d0/0xbf0 [ 518.973404][T13529] ? netlink_getsockopt+0x590/0x590 [ 518.978626][T13529] ? aa_sock_msg_perm+0x94/0x150 [ 518.983590][T13529] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 518.988913][T13529] ? security_socket_sendmsg+0x80/0xa0 [ 518.994467][T13529] ? netlink_getsockopt+0x590/0x590 [ 518.999699][T13529] ____sys_sendmsg+0x5ba/0x960 [ 519.004572][T13529] ? __asan_memset+0x22/0x40 [ 519.009175][T13529] ? __sys_sendmsg_sock+0x30/0x30 [ 519.014248][T13529] ? __import_iovec+0x5f2/0x850 [ 519.019311][T13529] ? import_iovec+0x73/0xa0 [ 519.023937][T13529] ___sys_sendmsg+0x2a6/0x360 [ 519.028810][T13529] ? __sys_sendmsg+0x2a0/0x2a0 [ 519.033621][T13529] __se_sys_sendmsg+0x1c2/0x2b0 [ 519.038499][T13529] ? __x64_sys_sendmsg+0x80/0x80 [ 519.043478][T13529] ? lockdep_hardirqs_on+0x98/0x150 [ 519.048700][T13529] do_syscall_64+0x55/0xa0 [ 519.053147][T13529] ? clear_bhb_loop+0x40/0x90 [ 519.057837][T13529] ? clear_bhb_loop+0x40/0x90 [ 519.062653][T13529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.068653][T13529] RIP: 0033:0x7fef09f9c819 [ 519.073168][T13529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.092879][T13529] RSP: 002b:00007fef0ad7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.101296][T13529] RAX: ffffffffffffffda RBX: 00007fef0a216090 RCX: 00007fef09f9c819 [ 519.109359][T13529] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 519.117338][T13529] RBP: 00007fef0a032c91 R08: 0000000000000000 R09: 0000000000000000 [ 519.125691][T13529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.133757][T13529] R13: 00007fef0a216128 R14: 00007fef0a216090 R15: 00007fff12546688 [ 519.141762][T13529] [ 519.290298][T13534] netlink: 'syz.3.2537': attribute type 10 has an invalid length. [ 519.311194][T13536] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2538'. [ 519.342992][T13536] netlink: 'syz.0.2538': attribute type 10 has an invalid length. [ 519.378948][T13536] team0: Device hsr_slave_0 failed to register rx_handler [ 519.645418][T13543] netlink: 'syz.3.2540': attribute type 10 has an invalid length. [ 519.669691][T13543] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2540'. [ 519.693575][T13543] bond0: entered promiscuous mode [ 519.698756][T13543] bond_slave_0: entered promiscuous mode [ 519.705390][T13543] bond_slave_1: entered promiscuous mode [ 519.768481][T13391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 519.788516][T13391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 519.818997][T13391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 519.839368][T13391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.154850][T13391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.238551][T13391] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.276580][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.283913][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.349698][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.357040][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.730966][ T5773] Bluetooth: hci2: command tx timeout [ 520.928111][T13391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.047669][T13586] netlink: 'syz.0.2547': attribute type 10 has an invalid length. [ 521.187943][T13586] team0: Port device macvlan0 added [ 521.235125][T13591] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 521.271070][T13391] veth0_vlan: entered promiscuous mode [ 521.295096][T13391] veth1_vlan: entered promiscuous mode [ 521.394992][T13596] netlink: 'syz.3.2548': attribute type 10 has an invalid length. [ 521.411715][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2548'. [ 521.433653][T13596] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 521.512854][T13391] veth0_macvtap: entered promiscuous mode [ 521.545148][T13391] veth1_macvtap: entered promiscuous mode [ 521.561225][T13601] netlink: 'syz.2.2551': attribute type 10 has an invalid length. [ 521.570453][T13601] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2551'. [ 521.602435][T13599] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2550'. [ 521.624460][T13599] netlink: 'syz.0.2550': attribute type 10 has an invalid length. [ 521.633974][T13599] team0: Device hsr_slave_0 failed to register rx_handler [ 521.676849][T13391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.694637][T13391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.708502][T13391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.719682][T13391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.730266][T13391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.741676][T13391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.754863][T13391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.793531][T13391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.830800][T13391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.852739][T13391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.870804][T13391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.881143][T13391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.892019][T13391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.904340][T13391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.954700][T13391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.966389][T13391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.975964][T13391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.985394][T13391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.258676][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.279276][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.336674][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.350441][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.578527][T13623] netlink: 'syz.1.2501': attribute type 10 has an invalid length. [ 522.677076][T13623] team0: Port device macvlan0 added [ 522.766007][T13625] netlink: 'syz.2.2558': attribute type 10 has an invalid length. [ 523.042722][T13631] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2560'. [ 523.332880][T13632] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2561'. [ 523.401617][T13632] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 523.841465][T13648] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2567'. [ 523.933402][T13648] team0: Device hsr_slave_0 failed to register rx_handler [ 523.944334][T13649] netlink: zone id is out of range [ 523.949511][T13649] netlink: set zone limit has 8 unknown bytes [ 524.034023][T13651] raw_sendmsg: syz.0.2568 forgot to set AF_INET. Fix it! [ 524.477592][T13670] validate_nla: 5 callbacks suppressed [ 524.477612][T13670] netlink: 'syz.2.2574': attribute type 10 has an invalid length. [ 524.530706][T13670] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2574'. [ 524.573889][T13675] ±ÿ: renamed from lo (while UP) [ 524.724780][T13677] netlink: 'syz.0.2577': attribute type 3 has an invalid length. [ 524.741007][T13677] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2577'. [ 524.889685][T13684] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2579'. [ 524.905993][T13684] netlink: 'syz.0.2579': attribute type 10 has an invalid length. [ 524.915290][T13684] team0: Device hsr_slave_0 failed to register rx_handler [ 525.077550][T13682] netlink: 'syz.2.2578': attribute type 10 has an invalid length. [ 525.111094][T13682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2578'. [ 525.126527][T13691] FAULT_INJECTION: forcing a failure. [ 525.126527][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 525.166477][T13682] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 525.176076][T13691] CPU: 0 PID: 13691 Comm: syz.1.2581 Not tainted syzkaller #0 [ 525.190713][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.201062][T13691] Call Trace: [ 525.204367][T13691] [ 525.207317][T13691] dump_stack_lvl+0x18c/0x250 [ 525.212050][T13691] ? show_regs_print_info+0x20/0x20 [ 525.217383][T13691] ? load_image+0x420/0x420 [ 525.221917][T13691] ? __might_sleep+0xe0/0xe0 [ 525.226558][T13691] ? __lock_acquire+0x7d40/0x7d40 [ 525.231616][T13691] should_fail_ex+0x39d/0x4d0 [ 525.236351][T13691] should_failslab+0x9/0x20 [ 525.240895][T13691] slab_pre_alloc_hook+0x59/0x310 [ 525.245956][T13691] ? tomoyo_encode+0x28b/0x540 [ 525.250925][T13691] ? tomoyo_encode+0x28b/0x540 [ 525.255892][T13691] __kmem_cache_alloc_node+0x53/0x250 [ 525.261333][T13691] ? tomoyo_encode+0x28b/0x540 [ 525.266301][T13691] __kmalloc+0xa4/0x230 [ 525.270525][T13691] tomoyo_encode+0x28b/0x540 [ 525.275156][T13691] tomoyo_realpath_from_path+0x592/0x5d0 [ 525.280836][T13691] tomoyo_path_number_perm+0x248/0x620 [ 525.286420][T13691] ? tomoyo_path_number_perm+0x217/0x620 [ 525.292097][T13691] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 525.297687][T13691] ? trace_call_bpf+0xc3/0x6c0 [ 525.302501][T13691] ? trace_call_bpf+0xc3/0x6c0 [ 525.307381][T13691] ? trace_call_bpf+0x5e9/0x6c0 [ 525.312360][T13691] ? __fget_files+0x28/0x4b0 [ 525.316959][T13691] ? __fget_files+0x28/0x4b0 [ 525.321560][T13691] security_file_ioctl+0x70/0xa0 [ 525.326587][T13691] __se_sys_ioctl+0x48/0x170 [ 525.331238][T13691] do_syscall_64+0x55/0xa0 [ 525.335652][T13691] ? clear_bhb_loop+0x40/0x90 [ 525.340325][T13691] ? clear_bhb_loop+0x40/0x90 [ 525.344999][T13691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.350892][T13691] RIP: 0033:0x7f369759c819 [ 525.355820][T13691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.375724][T13691] RSP: 002b:00007f36983f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.384234][T13691] RAX: ffffffffffffffda RBX: 00007f3697815fa0 RCX: 00007f369759c819 [ 525.392250][T13691] RDX: 0000200000000080 RSI: 00000000000089a3 RDI: 0000000000000004 [ 525.400563][T13691] RBP: 00007f36983f6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.408546][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.416551][T13691] R13: 00007f3697816038 R14: 00007f3697815fa0 R15: 00007ffeb4cdb028 [ 525.424651][T13691] [ 525.490035][T13691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.663470][T13699] FAULT_INJECTION: forcing a failure. [ 525.663470][T13699] name failslab, interval 1, probability 0, space 0, times 0 [ 525.689832][T13699] CPU: 1 PID: 13699 Comm: syz.0.2583 Not tainted syzkaller #0 [ 525.697363][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 525.707616][T13699] Call Trace: [ 525.711016][T13699] [ 525.713973][T13699] dump_stack_lvl+0x18c/0x250 [ 525.718696][T13699] ? show_regs_print_info+0x20/0x20 [ 525.723941][T13699] ? load_image+0x420/0x420 [ 525.728494][T13699] ? __lock_acquire+0x7d40/0x7d40 [ 525.733590][T13699] should_fail_ex+0x39d/0x4d0 [ 525.738363][T13699] should_failslab+0x9/0x20 [ 525.742897][T13699] slab_pre_alloc_hook+0x59/0x310 [ 525.747960][T13699] ? bpf_test_init+0x9f/0x140 [ 525.752761][T13699] ? bpf_test_init+0x9f/0x140 [ 525.757482][T13699] __kmem_cache_alloc_node+0x53/0x250 [ 525.762974][T13699] ? bpf_test_init+0x9f/0x140 [ 525.767794][T13699] __kmalloc+0xa4/0x230 [ 525.771986][T13699] bpf_test_init+0x9f/0x140 [ 525.776516][T13699] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 525.781928][T13699] ? dev_put+0x80/0x80 [ 525.786038][T13699] ? dev_put+0x80/0x80 [ 525.790134][T13699] bpf_prog_test_run+0x321/0x390 [ 525.795102][T13699] __sys_bpf+0x49d/0x890 [ 525.799393][T13699] ? bpf_link_show_fdinfo+0x390/0x390 [ 525.804800][T13699] ? lock_chain_count+0x20/0x20 [ 525.809769][T13699] __x64_sys_bpf+0x7c/0x90 [ 525.814470][T13699] do_syscall_64+0x55/0xa0 [ 525.818907][T13699] ? clear_bhb_loop+0x40/0x90 [ 525.823607][T13699] ? clear_bhb_loop+0x40/0x90 [ 525.828320][T13699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.834324][T13699] RIP: 0033:0x7f7b8ad9c819 [ 525.838762][T13699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.858406][T13699] RSP: 002b:00007f7b8bd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.867314][T13699] RAX: ffffffffffffffda RBX: 00007f7b8b015fa0 RCX: 00007f7b8ad9c819 [ 525.875313][T13699] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 525.883307][T13699] RBP: 00007f7b8bd06090 R08: 0000000000000000 R09: 0000000000000000 [ 525.891512][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.899597][T13699] R13: 00007f7b8b016038 R14: 00007f7b8b015fa0 R15: 00007ffdaa506e28 [ 525.907610][T13699] [ 526.065626][T13700] netlink: 197828 bytes leftover after parsing attributes in process `syz.1.2584'. [ 526.268596][T13714] syzkaller0: entered promiscuous mode [ 526.280642][T13714] syzkaller0: entered allmulticast mode [ 526.469146][T13718] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2589'. [ 526.484023][T13718] netlink: 'syz.0.2589': attribute type 10 has an invalid length. [ 526.494232][T13718] team0: Device hsr_slave_0 failed to register rx_handler [ 526.761924][T13726] netlink: 197828 bytes leftover after parsing attributes in process `syz.1.2598'. [ 526.783314][T13726] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 526.800849][T13726] CPU: 1 PID: 13726 Comm: syz.1.2598 Not tainted syzkaller #0 [ 526.808388][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 526.818732][T13726] Call Trace: [ 526.822018][T13726] [ 526.824950][T13726] dump_stack_lvl+0x18c/0x250 [ 526.829638][T13726] ? show_regs_print_info+0x20/0x20 [ 526.834955][T13726] ? load_image+0x420/0x420 [ 526.839473][T13726] sysfs_warn_dup+0x8e/0xa0 [ 526.843975][T13726] sysfs_do_create_link_sd+0xc0/0x110 [ 526.849435][T13726] device_add_class_symlinks+0x1cf/0x240 [ 526.855077][T13726] device_add+0x507/0xc20 [ 526.859416][T13726] wiphy_register+0x1dad/0x2ae0 [ 526.864388][T13726] ? cfg80211_event_work+0x40/0x40 [ 526.869499][T13726] ? minstrel_ht_alloc+0x88a/0x990 [ 526.875242][T13726] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 526.881328][T13726] ieee80211_register_hw+0x3464/0x4250 [ 526.886809][T13726] ? ieee80211_tasklet_handler+0x20/0x20 [ 526.892446][T13726] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 526.898340][T13726] ? __debug_object_init+0xec/0x450 [ 526.903543][T13726] ? __asan_memset+0x22/0x40 [ 526.908137][T13726] ? __hrtimer_init+0x186/0x270 [ 526.912990][T13726] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 526.918738][T13726] ? mac80211_hwsim_free+0x220/0x220 [ 526.924041][T13726] ? rcu_is_watching+0x15/0xb0 [ 526.928831][T13726] ? kstrndup+0xbd/0x140 [ 526.933194][T13726] hwsim_new_radio_nl+0xdc9/0x1a90 [ 526.938319][T13726] ? __nla_validate+0x50/0x50 [ 526.943007][T13726] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 526.949345][T13726] ? __nla_parse+0x40/0x50 [ 526.953785][T13726] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 526.960206][T13726] genl_family_rcv_msg_doit+0x211/0x310 [ 526.965861][T13726] ? end_current_label_crit_section+0x170/0x170 [ 526.972125][T13726] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 526.978047][T13726] ? bpf_lsm_capable+0x9/0x10 [ 526.982733][T13726] ? security_capable+0x89/0xb0 [ 526.987591][T13726] genl_rcv_msg+0x619/0x7a0 [ 526.992100][T13726] ? genl_bind+0x360/0x360 [ 526.996602][T13726] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 527.002940][T13726] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 527.009791][T13726] ? ref_tracker_free+0x690/0x840 [ 527.014831][T13726] netlink_rcv_skb+0x241/0x4d0 [ 527.019602][T13726] ? genl_bind+0x360/0x360 [ 527.024018][T13726] ? netlink_ack+0x1180/0x1180 [ 527.028982][T13726] ? __lock_acquire+0x7d40/0x7d40 [ 527.034026][T13726] ? down_read+0x1ac/0x2e0 [ 527.038449][T13726] genl_rcv+0x28/0x40 [ 527.042706][T13726] netlink_unicast+0x751/0x8d0 [ 527.047569][T13726] netlink_sendmsg+0x8d0/0xbf0 [ 527.052374][T13726] ? netlink_getsockopt+0x590/0x590 [ 527.057584][T13726] ? aa_sock_msg_perm+0x94/0x150 [ 527.062526][T13726] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 527.067839][T13726] ? security_socket_sendmsg+0x80/0xa0 [ 527.073317][T13726] ? netlink_getsockopt+0x590/0x590 [ 527.078523][T13726] ____sys_sendmsg+0x5ba/0x960 [ 527.083431][T13726] ? __asan_memset+0x22/0x40 [ 527.088021][T13726] ? __sys_sendmsg_sock+0x30/0x30 [ 527.093052][T13726] ? __import_iovec+0x5f2/0x850 [ 527.097903][T13726] ? import_iovec+0x73/0xa0 [ 527.102494][T13726] ___sys_sendmsg+0x2a6/0x360 [ 527.107184][T13726] ? __sys_sendmsg+0x2a0/0x2a0 [ 527.112008][T13726] __se_sys_sendmsg+0x1c2/0x2b0 [ 527.116860][T13726] ? __x64_sys_sendmsg+0x80/0x80 [ 527.121986][T13726] ? lockdep_hardirqs_on+0x98/0x150 [ 527.127531][T13726] do_syscall_64+0x55/0xa0 [ 527.131968][T13726] ? clear_bhb_loop+0x40/0x90 [ 527.136649][T13726] ? clear_bhb_loop+0x40/0x90 [ 527.141328][T13726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.147304][T13726] RIP: 0033:0x7f369759c819 [ 527.151812][T13726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.171541][T13726] RSP: 002b:00007f36983d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.180305][T13726] RAX: ffffffffffffffda RBX: 00007f3697816090 RCX: 00007f369759c819 [ 527.188298][T13726] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 527.196288][T13726] RBP: 00007f3697632c91 R08: 0000000000000000 R09: 0000000000000000 [ 527.204273][T13726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.212345][T13726] R13: 00007f3697816128 R14: 00007f3697816090 R15: 00007ffeb4cdb028 [ 527.220438][T13726] [ 527.396578][T13733] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 527.404781][T13733] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2593'. [ 527.597976][T13739] FAULT_INJECTION: forcing a failure. [ 527.597976][T13739] name failslab, interval 1, probability 0, space 0, times 0 [ 527.629309][T13739] CPU: 1 PID: 13739 Comm: syz.1.2596 Not tainted syzkaller #0 [ 527.636848][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 527.647093][T13739] Call Trace: [ 527.650388][T13739] [ 527.653327][T13739] dump_stack_lvl+0x18c/0x250 [ 527.658019][T13739] ? show_regs_print_info+0x20/0x20 [ 527.663325][T13739] ? load_image+0x420/0x420 [ 527.667829][T13739] ? __might_sleep+0xe0/0xe0 [ 527.672441][T13739] ? __lock_acquire+0x7d40/0x7d40 [ 527.677504][T13739] should_fail_ex+0x39d/0x4d0 [ 527.682235][T13739] should_failslab+0x9/0x20 [ 527.686913][T13739] slab_pre_alloc_hook+0x59/0x310 [ 527.691938][T13739] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 527.697933][T13739] ? __get_vm_area_node+0x125/0x370 [ 527.703130][T13739] __kmem_cache_alloc_node+0x53/0x250 [ 527.708556][T13739] ? __get_vm_area_node+0x125/0x370 [ 527.713777][T13739] kmalloc_node_trace+0x26/0xe0 [ 527.718643][T13739] __get_vm_area_node+0x125/0x370 [ 527.723760][T13739] __vmalloc_node_range+0x36e/0x1330 [ 527.729045][T13739] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 527.734610][T13739] ? finish_task_switch+0x26a/0x8f0 [ 527.739822][T13739] ? free_vm_area+0x50/0x50 [ 527.744379][T13739] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 527.750534][T13739] ? end_current_label_crit_section+0x170/0x170 [ 527.756777][T13739] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 527.762323][T13739] __vmalloc+0x7a/0x90 [ 527.766395][T13739] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 527.772031][T13739] bpf_prog_alloc_no_stats+0x47/0x440 [ 527.777398][T13739] ? bpf_prog_alloc+0x2b/0x1a0 [ 527.782163][T13739] bpf_prog_alloc+0x3d/0x1a0 [ 527.786753][T13739] bpf_prog_load+0x6eb/0x1670 [ 527.791435][T13739] ? map_freeze+0x420/0x420 [ 527.795943][T13739] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 527.801664][T13739] ? lockdep_hardirqs_on+0x98/0x150 [ 527.806970][T13739] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 527.812710][T13739] ? rcuref_put_slowpath+0xe1/0x150 [ 527.818126][T13739] ? rep_movs_alternative+0x4a/0x90 [ 527.823333][T13739] ? bpf_lsm_bpf+0x9/0x10 [ 527.827660][T13739] ? security_bpf+0x7e/0xa0 [ 527.832177][T13739] __sys_bpf+0x5ba/0x890 [ 527.836779][T13739] ? bpf_link_show_fdinfo+0x390/0x390 [ 527.842158][T13739] ? lock_chain_count+0x20/0x20 [ 527.847087][T13739] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 527.853082][T13739] __x64_sys_bpf+0x7c/0x90 [ 527.857583][T13739] do_syscall_64+0x55/0xa0 [ 527.862006][T13739] ? clear_bhb_loop+0x40/0x90 [ 527.866679][T13739] ? clear_bhb_loop+0x40/0x90 [ 527.871354][T13739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.877242][T13739] RIP: 0033:0x7f369759c819 [ 527.881653][T13739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.901261][T13739] RSP: 002b:00007f36983f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.909675][T13739] RAX: ffffffffffffffda RBX: 00007f3697815fa0 RCX: 00007f369759c819 [ 527.917640][T13739] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 527.925631][T13739] RBP: 00007f36983f6090 R08: 0000000000000000 R09: 0000000000000000 [ 527.933773][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.941738][T13739] R13: 00007f3697816038 R14: 00007f3697815fa0 R15: 00007ffeb4cdb028 [ 527.949812][T13739] [ 528.024122][T13737] netlink: zone id is out of range [ 528.041403][T13737] netlink: set zone limit has 8 unknown bytes [ 528.048179][T13739] syz.1.2596: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 528.079148][T13739] CPU: 0 PID: 13739 Comm: syz.1.2596 Not tainted syzkaller #0 [ 528.086849][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 528.097024][T13739] Call Trace: [ 528.100324][T13739] [ 528.103278][T13739] dump_stack_lvl+0x18c/0x250 [ 528.108026][T13739] ? show_regs_print_info+0x20/0x20 [ 528.113385][T13739] ? load_image+0x420/0x420 [ 528.117921][T13739] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 528.124357][T13739] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 528.130890][T13739] warn_alloc+0x246/0x340 [ 528.135250][T13739] ? __get_vm_area_node+0x125/0x370 [ 528.140478][T13739] ? zone_watermark_ok_safe+0x230/0x230 [ 528.146326][T13739] ? rcu_is_watching+0x15/0xb0 [ 528.151131][T13739] ? __get_vm_area_node+0x356/0x370 [ 528.156448][T13739] __vmalloc_node_range+0x393/0x1330 [ 528.161780][T13739] ? finish_task_switch+0x26a/0x8f0 [ 528.167043][T13739] ? free_vm_area+0x50/0x50 [ 528.171648][T13739] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 528.177646][T13739] ? end_current_label_crit_section+0x170/0x170 [ 528.183924][T13739] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 528.189576][T13739] __vmalloc+0x7a/0x90 [ 528.193679][T13739] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 528.199244][T13739] bpf_prog_alloc_no_stats+0x47/0x440 [ 528.204648][T13739] ? bpf_prog_alloc+0x2b/0x1a0 [ 528.209453][T13739] bpf_prog_alloc+0x3d/0x1a0 [ 528.214069][T13739] bpf_prog_load+0x6eb/0x1670 [ 528.218876][T13739] ? map_freeze+0x420/0x420 [ 528.223414][T13739] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 528.229072][T13739] ? lockdep_hardirqs_on+0x98/0x150 [ 528.234307][T13739] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 528.239953][T13739] ? rcuref_put_slowpath+0xe1/0x150 [ 528.245160][T13739] ? rep_movs_alternative+0x4a/0x90 [ 528.250775][T13739] ? bpf_lsm_bpf+0x9/0x10 [ 528.255118][T13739] ? security_bpf+0x7e/0xa0 [ 528.259651][T13739] __sys_bpf+0x5ba/0x890 [ 528.263916][T13739] ? bpf_link_show_fdinfo+0x390/0x390 [ 528.269339][T13739] ? lock_chain_count+0x20/0x20 [ 528.274200][T13739] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 528.280184][T13739] __x64_sys_bpf+0x7c/0x90 [ 528.284601][T13739] do_syscall_64+0x55/0xa0 [ 528.289014][T13739] ? clear_bhb_loop+0x40/0x90 [ 528.293689][T13739] ? clear_bhb_loop+0x40/0x90 [ 528.298381][T13739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.304296][T13739] RIP: 0033:0x7f369759c819 [ 528.309065][T13739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.328788][T13739] RSP: 002b:00007f36983f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.337364][T13739] RAX: ffffffffffffffda RBX: 00007f3697815fa0 RCX: 00007f369759c819 [ 528.345511][T13739] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 528.353480][T13739] RBP: 00007f36983f6090 R08: 0000000000000000 R09: 0000000000000000 [ 528.361483][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.369991][T13739] R13: 00007f3697816038 R14: 00007f3697815fa0 R15: 00007ffeb4cdb028 [ 528.377996][T13739] [ 528.407519][T13743] netlink: 'syz.2.2597': attribute type 10 has an invalid length. [ 528.416244][T13743] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2597'. [ 528.435289][T13743] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 528.451872][T13739] Mem-Info: [ 528.452533][T13739] active_anon:5475 inactive_anon:0 isolated_anon:0 [ 528.452533][T13739] active_file:12841 inactive_file:40114 isolated_file:0 [ 528.452533][T13739] unevictable:768 dirty:253 writeback:3 [ 528.452533][T13739] slab_reclaimable:10609 slab_unreclaimable:91471 [ 528.452533][T13739] mapped:24958 shmem:1361 pagetables:554 [ 528.452533][T13739] sec_pagetables:0 bounce:0 [ 528.452533][T13739] kernel_misc_reclaimable:0 [ 528.452533][T13739] free:1344984 free_pcp:16604 free_cma:0 [ 528.452700][T13739] Node 0 active_anon:21900kB inactive_anon:0kB active_file:51364kB inactive_file:160248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99832kB dirty:1012kB writeback:12kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10148kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no [ 528.452752][T13739] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 528.453538][T13739] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.453664][T13739] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 528.453847][T13739] Node 0 DMA32 free:1476468kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21860kB inactive_anon:0kB active_file:51364kB inactive_file:159428kB unevictable:1536kB writepending:1024kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:41364kB local_pcp:20316kB free_cma:0kB [ 528.454240][T13739] lowmem_reserve[]: 0 0 0 0 0 [ 528.454556][T13739] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 528.455538][T13739] lowmem_reserve[]: 0 0 0 0 0 [ 528.456549][T13739] Node 1 Normal free:3888108kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25040kB local_pcp:11500kB free_cma:0kB [ 528.457413][T13739] lowmem_reserve[]: 0 0 0 0 0 [ 528.457642][T13739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 528.543971][T13749] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2600'. [ 528.572411][T13739] 0*512kB [ 528.719890][T13750] netlink: 'syz.3.2600': attribute type 10 has an invalid length. [ 528.726839][T13739] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 528.738826][T13750] team0: Device hsr_slave_0 failed to register rx_handler [ 528.771476][T13739] Node 0 DMA32: 1425*4kB (UME) 900*8kB (UM) 487*16kB (UM) 277*32kB (UM) 1436*64kB (UM) 808*128kB (UME) 189*256kB (UM) 72*512kB (UME) 31*1024kB (UME) 10*2048kB (UM) 272*4096kB (UM) = 1476468kB [ 528.798322][T13739] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 528.810037][T13739] Node 1 Normal: 223*4kB (U) 58*8kB (UME) 50*16kB (UME) 46*32kB (UME) 15*64kB (UE) 6*128kB (UM) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3888108kB [ 528.851143][T13739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.871374][T13739] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.896018][T13739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.906922][T13739] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.917050][T13739] 54316 total pagecache pages [ 528.922146][T13739] 0 pages in swap cache [ 528.926470][T13739] Free swap = 124996kB [ 528.931372][T13739] Total swap = 124996kB [ 528.936141][T13739] 2097051 pages RAM [ 528.948839][T13739] 0 pages HighMem/MovableOnly [ 528.964079][T13739] 416927 pages reserved [ 528.974252][T13739] 0 pages cma reserved [ 528.989770][T13754] netlink: 'syz.3.2602': attribute type 10 has an invalid length. [ 529.109734][T13761] netlink: 'syz.1.2605': attribute type 10 has an invalid length. [ 529.271632][T13766] FAULT_INJECTION: forcing a failure. [ 529.271632][T13766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.393711][T13766] CPU: 0 PID: 13766 Comm: syz.0.2604 Not tainted syzkaller #0 [ 529.401245][T13766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.411420][T13766] Call Trace: [ 529.414718][T13766] [ 529.417646][T13766] dump_stack_lvl+0x18c/0x250 [ 529.422490][T13766] ? show_regs_print_info+0x20/0x20 [ 529.427905][T13766] ? load_image+0x420/0x420 [ 529.432492][T13766] ? __lock_acquire+0x7d40/0x7d40 [ 529.437527][T13766] ? snprintf+0xe9/0x140 [ 529.441873][T13766] should_fail_ex+0x39d/0x4d0 [ 529.446646][T13766] _copy_to_user+0x2f/0xa0 [ 529.451099][T13766] simple_read_from_buffer+0xe7/0x150 [ 529.456633][T13766] proc_fail_nth_read+0x1e8/0x260 [ 529.461721][T13766] ? proc_fault_inject_write+0x360/0x360 [ 529.467701][T13766] ? fsnotify_perm+0x271/0x5e0 [ 529.472708][T13766] ? proc_fault_inject_write+0x360/0x360 [ 529.478390][T13766] vfs_read+0x28b/0x970 [ 529.482596][T13766] ? kernel_read+0x1e0/0x1e0 [ 529.487221][T13766] ? __fget_files+0x28/0x4b0 [ 529.491845][T13766] ? __fget_files+0x28/0x4b0 [ 529.496468][T13766] ? __fget_files+0x43d/0x4b0 [ 529.501448][T13766] ? __fdget_pos+0x2a3/0x330 [ 529.506074][T13766] ? ksys_read+0x75/0x260 [ 529.510534][T13766] ksys_read+0x150/0x260 [ 529.514819][T13766] ? vfs_write+0x990/0x990 [ 529.519285][T13766] ? lockdep_hardirqs_on+0x98/0x150 [ 529.524708][T13766] do_syscall_64+0x55/0xa0 [ 529.529125][T13766] ? clear_bhb_loop+0x40/0x90 [ 529.533802][T13766] ? clear_bhb_loop+0x40/0x90 [ 529.538526][T13766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.544829][T13766] RIP: 0033:0x7f7b8ad5d04e [ 529.549436][T13766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.569182][T13766] RSP: 002b:00007f7b8bce4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.577732][T13766] RAX: ffffffffffffffda RBX: 00007f7b8bce56c0 RCX: 00007f7b8ad5d04e [ 529.585900][T13766] RDX: 000000000000000f RSI: 00007f7b8bce50a0 RDI: 000000000000000a [ 529.593976][T13766] RBP: 00007f7b8bce5090 R08: 0000000000000000 R09: 0000000000000000 [ 529.601964][T13766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.609935][T13766] R13: 00007f7b8b016128 R14: 00007f7b8b016090 R15: 00007ffdaa506e28 [ 529.617921][T13766] [ 529.694458][T13767] __nla_validate_parse: 1 callbacks suppressed [ 529.694478][T13767] netlink: 197828 bytes leftover after parsing attributes in process `syz.2.2606'. [ 530.090122][T13761] team0: Port device macvlan0 removed [ 530.127067][T13762] netlink: 'syz.1.2605': attribute type 4 has an invalid length. [ 530.145263][T13767] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 530.155711][T13767] CPU: 0 PID: 13767 Comm: syz.2.2606 Not tainted syzkaller #0 [ 530.163218][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.173327][T13767] Call Trace: [ 530.176647][T13767] [ 530.179599][T13767] dump_stack_lvl+0x18c/0x250 [ 530.184323][T13767] ? show_regs_print_info+0x20/0x20 [ 530.189565][T13767] ? load_image+0x420/0x420 [ 530.194112][T13767] sysfs_warn_dup+0x8e/0xa0 [ 530.198644][T13767] sysfs_do_create_link_sd+0xc0/0x110 [ 530.204055][T13767] device_add_class_symlinks+0x1cf/0x240 [ 530.209929][T13767] device_add+0x507/0xc20 [ 530.214455][T13767] wiphy_register+0x1dad/0x2ae0 [ 530.219336][T13767] ? cfg80211_event_work+0x40/0x40 [ 530.224448][T13767] ? minstrel_ht_alloc+0x88a/0x990 [ 530.229562][T13767] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 530.235635][T13767] ieee80211_register_hw+0x3464/0x4250 [ 530.241214][T13767] ? ieee80211_tasklet_handler+0x20/0x20 [ 530.246883][T13767] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 530.252801][T13767] ? __debug_object_init+0xec/0x450 [ 530.258043][T13767] ? __asan_memset+0x22/0x40 [ 530.262845][T13767] ? __hrtimer_init+0x186/0x270 [ 530.267732][T13767] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 530.273462][T13767] ? mac80211_hwsim_free+0x220/0x220 [ 530.278848][T13767] ? rcu_is_watching+0x15/0xb0 [ 530.283617][T13767] ? kstrndup+0xbd/0x140 [ 530.287916][T13767] hwsim_new_radio_nl+0xdc9/0x1a90 [ 530.293037][T13767] ? __nla_validate+0x50/0x50 [ 530.297723][T13767] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 530.304059][T13767] ? __nla_parse+0x40/0x50 [ 530.308488][T13767] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 530.314820][T13767] genl_family_rcv_msg_doit+0x211/0x310 [ 530.320373][T13767] ? end_current_label_crit_section+0x170/0x170 [ 530.326655][T13767] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 530.332561][T13767] ? bpf_lsm_capable+0x9/0x10 [ 530.337254][T13767] ? security_capable+0x89/0xb0 [ 530.342128][T13767] genl_rcv_msg+0x619/0x7a0 [ 530.346634][T13767] ? genl_bind+0x360/0x360 [ 530.351044][T13767] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 530.357364][T13767] ? perf_trace_lock+0xfc/0x3b0 [ 530.362214][T13767] netlink_rcv_skb+0x241/0x4d0 [ 530.366975][T13767] ? genl_bind+0x360/0x360 [ 530.371425][T13767] ? netlink_ack+0x1180/0x1180 [ 530.376249][T13767] ? __lock_acquire+0x7d40/0x7d40 [ 530.381293][T13767] ? down_read+0x1ac/0x2e0 [ 530.385713][T13767] genl_rcv+0x28/0x40 [ 530.389695][T13767] netlink_unicast+0x751/0x8d0 [ 530.394474][T13767] netlink_sendmsg+0x8d0/0xbf0 [ 530.399310][T13767] ? netlink_getsockopt+0x590/0x590 [ 530.404596][T13767] ? aa_sock_msg_perm+0x94/0x150 [ 530.409548][T13767] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 530.414839][T13767] ? security_socket_sendmsg+0x80/0xa0 [ 530.420296][T13767] ? netlink_getsockopt+0x590/0x590 [ 530.425515][T13767] ____sys_sendmsg+0x5ba/0x960 [ 530.430281][T13767] ? __asan_memset+0x22/0x40 [ 530.434953][T13767] ? __sys_sendmsg_sock+0x30/0x30 [ 530.439973][T13767] ? __import_iovec+0x5f2/0x850 [ 530.444840][T13767] ? import_iovec+0x73/0xa0 [ 530.449358][T13767] ___sys_sendmsg+0x2a6/0x360 [ 530.454052][T13767] ? __sys_sendmsg+0x2a0/0x2a0 [ 530.458855][T13767] __se_sys_sendmsg+0x1c2/0x2b0 [ 530.463737][T13767] ? __x64_sys_sendmsg+0x80/0x80 [ 530.468696][T13767] ? lockdep_hardirqs_on+0x98/0x150 [ 530.473902][T13767] do_syscall_64+0x55/0xa0 [ 530.478326][T13767] ? clear_bhb_loop+0x40/0x90 [ 530.483034][T13767] ? clear_bhb_loop+0x40/0x90 [ 530.487720][T13767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.493707][T13767] RIP: 0033:0x7fef09f9c819 [ 530.498128][T13767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.517849][T13767] RSP: 002b:00007fef0ad7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.526293][T13767] RAX: ffffffffffffffda RBX: 00007fef0a216090 RCX: 00007fef09f9c819 [ 530.534355][T13767] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 530.542425][T13767] RBP: 00007fef0a032c91 R08: 0000000000000000 R09: 0000000000000000 [ 530.550406][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.558387][T13767] R13: 00007fef0a216128 R14: 00007fef0a216090 R15: 00007fff12546688 [ 530.566384][T13767] [ 530.590735][T13782] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2610'. [ 530.599959][T13783] netlink: 'syz.0.2610': attribute type 10 has an invalid length. [ 530.610157][T13783] team0: Device hsr_slave_0 failed to register rx_handler [ 531.483760][T13810] netlink: 197828 bytes leftover after parsing attributes in process `syz.2.2620'. [ 531.580018][T13810] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 531.613601][T13810] CPU: 0 PID: 13810 Comm: syz.2.2620 Not tainted syzkaller #0 [ 531.621315][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.631399][T13810] Call Trace: [ 531.634683][T13810] [ 531.637620][T13810] dump_stack_lvl+0x18c/0x250 [ 531.642311][T13810] ? show_regs_print_info+0x20/0x20 [ 531.647524][T13810] ? load_image+0x420/0x420 [ 531.652040][T13810] sysfs_warn_dup+0x8e/0xa0 [ 531.656541][T13810] sysfs_do_create_link_sd+0xc0/0x110 [ 531.661910][T13810] device_add_class_symlinks+0x1cf/0x240 [ 531.667555][T13810] device_add+0x507/0xc20 [ 531.671890][T13810] wiphy_register+0x1dad/0x2ae0 [ 531.676755][T13810] ? cfg80211_event_work+0x40/0x40 [ 531.682068][T13810] ? minstrel_ht_alloc+0x88a/0x990 [ 531.687195][T13810] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 531.693267][T13810] ieee80211_register_hw+0x3464/0x4250 [ 531.698750][T13810] ? ieee80211_tasklet_handler+0x20/0x20 [ 531.704379][T13810] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 531.710383][T13810] ? __debug_object_init+0xec/0x450 [ 531.715600][T13810] ? __asan_memset+0x22/0x40 [ 531.720202][T13810] ? __hrtimer_init+0x186/0x270 [ 531.725093][T13810] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 531.730847][T13810] ? mac80211_hwsim_free+0x220/0x220 [ 531.736150][T13810] ? rcu_is_watching+0x15/0xb0 [ 531.740931][T13810] ? kstrndup+0xbd/0x140 [ 531.745185][T13810] hwsim_new_radio_nl+0xdc9/0x1a90 [ 531.750331][T13810] ? __nla_validate+0x50/0x50 [ 531.755023][T13810] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 531.761360][T13810] ? __nla_parse+0x40/0x50 [ 531.765772][T13810] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 531.772217][T13810] genl_family_rcv_msg_doit+0x211/0x310 [ 531.777765][T13810] ? end_current_label_crit_section+0x170/0x170 [ 531.784010][T13810] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 531.789911][T13810] ? bpf_lsm_capable+0x9/0x10 [ 531.794677][T13810] ? security_capable+0x89/0xb0 [ 531.799547][T13810] genl_rcv_msg+0x619/0x7a0 [ 531.804139][T13810] ? genl_bind+0x360/0x360 [ 531.808548][T13810] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 531.814895][T13810] ? perf_trace_lock+0xfc/0x3b0 [ 531.819778][T13810] netlink_rcv_skb+0x241/0x4d0 [ 531.824566][T13810] ? genl_bind+0x360/0x360 [ 531.828988][T13810] ? netlink_ack+0x1180/0x1180 [ 531.833771][T13810] ? __lock_acquire+0x7d40/0x7d40 [ 531.838820][T13810] ? down_read+0x1ac/0x2e0 [ 531.843267][T13810] genl_rcv+0x28/0x40 [ 531.847534][T13810] netlink_unicast+0x751/0x8d0 [ 531.852335][T13810] netlink_sendmsg+0x8d0/0xbf0 [ 531.857129][T13810] ? netlink_getsockopt+0x590/0x590 [ 531.862340][T13810] ? aa_sock_msg_perm+0x94/0x150 [ 531.867810][T13810] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 531.873098][T13810] ? security_socket_sendmsg+0x80/0xa0 [ 531.878728][T13810] ? netlink_getsockopt+0x590/0x590 [ 531.883932][T13810] ____sys_sendmsg+0x5ba/0x960 [ 531.888699][T13810] ? __asan_memset+0x22/0x40 [ 531.893286][T13810] ? __sys_sendmsg_sock+0x30/0x30 [ 531.898328][T13810] ? __import_iovec+0x5f2/0x850 [ 531.903204][T13810] ? import_iovec+0x73/0xa0 [ 531.907724][T13810] ___sys_sendmsg+0x2a6/0x360 [ 531.912417][T13810] ? __sys_sendmsg+0x2a0/0x2a0 [ 531.917224][T13810] __se_sys_sendmsg+0x1c2/0x2b0 [ 531.922073][T13810] ? __x64_sys_sendmsg+0x80/0x80 [ 531.927020][T13810] ? lockdep_hardirqs_on+0x98/0x150 [ 531.932225][T13810] do_syscall_64+0x55/0xa0 [ 531.936632][T13810] ? clear_bhb_loop+0x40/0x90 [ 531.941305][T13810] ? clear_bhb_loop+0x40/0x90 [ 531.945975][T13810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.951864][T13810] RIP: 0033:0x7fef09f9c819 [ 531.956344][T13810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.976235][T13810] RSP: 002b:00007fef0ad7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.984837][T13810] RAX: ffffffffffffffda RBX: 00007fef0a216090 RCX: 00007fef09f9c819 [ 531.992846][T13810] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 532.000822][T13810] RBP: 00007fef0a032c91 R08: 0000000000000000 R09: 0000000000000000 [ 532.008961][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.016966][T13810] R13: 00007fef0a216128 R14: 00007fef0a216090 R15: 00007fff12546688 [ 532.024951][T13810] [ 532.213684][T13817] hsr0: VLAN not yet supported [ 533.224598][T13819] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2623'. [ 533.242871][T13819] netlink: 'syz.1.2623': attribute type 10 has an invalid length. [ 533.251621][T13819] team0: Device hsr_slave_0 failed to register rx_handler [ 533.362762][T13821] netlink: 'syz.0.2622': attribute type 10 has an invalid length. [ 533.495742][T13831] FAULT_INJECTION: forcing a failure. [ 533.495742][T13831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.522418][T13831] CPU: 0 PID: 13831 Comm: syz.3.2628 Not tainted syzkaller #0 [ 533.530049][T13831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 533.540129][T13831] Call Trace: [ 533.543415][T13831] [ 533.546351][T13831] dump_stack_lvl+0x18c/0x250 [ 533.551230][T13831] ? show_regs_print_info+0x20/0x20 [ 533.556424][T13831] ? load_image+0x420/0x420 [ 533.560922][T13831] ? __lock_acquire+0x7d40/0x7d40 [ 533.565953][T13831] should_fail_ex+0x39d/0x4d0 [ 533.570637][T13831] _copy_from_user+0x2f/0xe0 [ 533.575249][T13831] __copy_msghdr+0x3bb/0x580 [ 533.579834][T13831] ___sys_sendmsg+0x214/0x360 [ 533.584505][T13831] ? __sys_sendmsg+0x2a0/0x2a0 [ 533.589278][T13831] ? trace_call_bpf+0xc3/0x6c0 [ 533.594058][T13831] __se_sys_sendmsg+0x1c2/0x2b0 [ 533.598901][T13831] ? __x64_sys_sendmsg+0x80/0x80 [ 533.603839][T13831] ? lockdep_hardirqs_on+0x98/0x150 [ 533.609057][T13831] do_syscall_64+0x55/0xa0 [ 533.613476][T13831] ? clear_bhb_loop+0x40/0x90 [ 533.618144][T13831] ? clear_bhb_loop+0x40/0x90 [ 533.622816][T13831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.628702][T13831] RIP: 0033:0x7fc1a119c819 [ 533.633109][T13831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.652709][T13831] RSP: 002b:00007fc1a206e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.661125][T13831] RAX: ffffffffffffffda RBX: 00007fc1a1415fa0 RCX: 00007fc1a119c819 [ 533.669088][T13831] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 533.677051][T13831] RBP: 00007fc1a206e090 R08: 0000000000000000 R09: 0000000000000000 [ 533.685045][T13831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.693099][T13831] R13: 00007fc1a1416038 R14: 00007fc1a1415fa0 R15: 00007fff1c917678 [ 533.701075][T13831] [ 533.754693][T13827] netlink: 'syz.2.2627': attribute type 21 has an invalid length. [ 533.777379][T13827] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.110346][T13827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.117957][T13827] IPv6: NLM_F_CREATE should be set when creating new route [ 534.126050][T13827] IPv6: NLM_F_CREATE should be set when creating new route [ 534.133733][T13827] IPv6: NLM_F_CREATE should be set when creating new route [ 534.420467][T13842] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 534.459612][T13842] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2631'. [ 534.484969][T13842] bond0: entered promiscuous mode [ 534.490727][T13842] bond_slave_0: entered promiscuous mode [ 534.496681][T13842] bond_slave_1: entered promiscuous mode [ 534.509367][T13842] bridge0: port 3(bond0) entered blocking state [ 534.517090][T13842] bridge0: port 3(bond0) entered disabled state [ 534.524360][T13842] bond0: entered allmulticast mode [ 534.529947][T13842] bond_slave_0: entered allmulticast mode [ 534.537564][T13842] bond_slave_1: entered allmulticast mode [ 534.555798][T13842] bridge0: port 3(bond0) entered blocking state [ 534.562505][T13842] bridge0: port 3(bond0) entered forwarding state [ 534.570907][T13840] netlink: 'syz.3.2630': attribute type 10 has an invalid length. [ 534.580083][T13840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2630'. [ 534.611337][T13840] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 534.704247][T13851] netlink: 197828 bytes leftover after parsing attributes in process `syz.0.2633'. [ 534.733810][T13851] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 534.755232][T13851] CPU: 1 PID: 13851 Comm: syz.0.2633 Not tainted syzkaller #0 [ 534.762846][T13851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 534.773026][T13851] Call Trace: [ 534.776326][T13851] [ 534.779278][T13851] dump_stack_lvl+0x18c/0x250 [ 534.783972][T13851] ? show_regs_print_info+0x20/0x20 [ 534.789176][T13851] ? load_image+0x420/0x420 [ 534.793694][T13851] sysfs_warn_dup+0x8e/0xa0 [ 534.798196][T13851] sysfs_do_create_link_sd+0xc0/0x110 [ 534.803619][T13851] device_add_class_symlinks+0x1cf/0x240 [ 534.809281][T13851] device_add+0x507/0xc20 [ 534.813632][T13851] wiphy_register+0x1dad/0x2ae0 [ 534.818506][T13851] ? cfg80211_event_work+0x40/0x40 [ 534.823627][T13851] ? minstrel_ht_alloc+0x88a/0x990 [ 534.828847][T13851] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 534.834930][T13851] ieee80211_register_hw+0x3464/0x4250 [ 534.840404][T13851] ? ieee80211_tasklet_handler+0x20/0x20 [ 534.846031][T13851] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 534.851926][T13851] ? __debug_object_init+0xec/0x450 [ 534.857134][T13851] ? __asan_memset+0x22/0x40 [ 534.861735][T13851] ? __hrtimer_init+0x186/0x270 [ 534.866586][T13851] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 534.872418][T13851] ? mac80211_hwsim_free+0x220/0x220 [ 534.877793][T13851] ? rcu_is_watching+0x15/0xb0 [ 534.882558][T13851] ? kstrndup+0xbd/0x140 [ 534.886879][T13851] hwsim_new_radio_nl+0xdc9/0x1a90 [ 534.892170][T13851] ? __nla_validate+0x50/0x50 [ 534.896857][T13851] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 534.903193][T13851] ? __nla_parse+0x40/0x50 [ 534.907608][T13851] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 534.913942][T13851] genl_family_rcv_msg_doit+0x211/0x310 [ 534.919483][T13851] ? end_current_label_crit_section+0x170/0x170 [ 534.925729][T13851] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 534.931631][T13851] ? bpf_lsm_capable+0x9/0x10 [ 534.936322][T13851] ? security_capable+0x89/0xb0 [ 534.941178][T13851] genl_rcv_msg+0x619/0x7a0 [ 534.945694][T13851] ? genl_bind+0x360/0x360 [ 534.950142][T13851] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 534.956564][T13851] ? perf_trace_lock+0xfc/0x3b0 [ 534.961509][T13851] netlink_rcv_skb+0x241/0x4d0 [ 534.966300][T13851] ? genl_bind+0x360/0x360 [ 534.970721][T13851] ? netlink_ack+0x1180/0x1180 [ 534.975520][T13851] ? __lock_acquire+0x7d40/0x7d40 [ 534.980552][T13851] ? down_read+0x1ac/0x2e0 [ 534.984973][T13851] genl_rcv+0x28/0x40 [ 534.988952][T13851] netlink_unicast+0x751/0x8d0 [ 534.993723][T13851] netlink_sendmsg+0x8d0/0xbf0 [ 534.998491][T13851] ? netlink_getsockopt+0x590/0x590 [ 535.003696][T13851] ? aa_sock_msg_perm+0x94/0x150 [ 535.008634][T13851] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 535.013918][T13851] ? security_socket_sendmsg+0x80/0xa0 [ 535.019371][T13851] ? netlink_getsockopt+0x590/0x590 [ 535.024572][T13851] ____sys_sendmsg+0x5ba/0x960 [ 535.029338][T13851] ? __asan_memset+0x22/0x40 [ 535.033929][T13851] ? __sys_sendmsg_sock+0x30/0x30 [ 535.038944][T13851] ? __import_iovec+0x5f2/0x850 [ 535.043799][T13851] ? import_iovec+0x73/0xa0 [ 535.048325][T13851] ___sys_sendmsg+0x2a6/0x360 [ 535.053000][T13851] ? __sys_sendmsg+0x2a0/0x2a0 [ 535.057773][T13851] ? trace_call_bpf+0xc3/0x6c0 [ 535.062578][T13851] __se_sys_sendmsg+0x1c2/0x2b0 [ 535.067431][T13851] ? __x64_sys_sendmsg+0x80/0x80 [ 535.072466][T13851] ? lockdep_hardirqs_on+0x98/0x150 [ 535.077669][T13851] do_syscall_64+0x55/0xa0 [ 535.082084][T13851] ? clear_bhb_loop+0x40/0x90 [ 535.086754][T13851] ? clear_bhb_loop+0x40/0x90 [ 535.091432][T13851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.097329][T13851] RIP: 0033:0x7f7b8ad9c819 [ 535.101740][T13851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.121618][T13851] RSP: 002b:00007f7b8bce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.130034][T13851] RAX: ffffffffffffffda RBX: 00007f7b8b016090 RCX: 00007f7b8ad9c819 [ 535.138003][T13851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 535.145976][T13851] RBP: 00007f7b8ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 535.153946][T13851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.161911][T13851] R13: 00007f7b8b016128 R14: 00007f7b8b016090 R15: 00007ffdaa506e28 [ 535.169978][T13851] [ 535.214474][T13857] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2635'. [ 535.238379][T13857] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 535.261412][T13857] team0: Device hsr_slave_0 failed to register rx_handler [ 536.176231][T13866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.176548][T13870] netlink: 'syz.0.2642': attribute type 3 has an invalid length. [ 536.290973][T13870] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2642'. [ 536.506575][T13881] netlink: 'syz.2.2644': attribute type 6 has an invalid length. [ 536.531382][T13881] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2644'. [ 536.694476][T13886] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2646'. [ 536.717623][T13892] netlink: 'syz.3.2646': attribute type 10 has an invalid length. [ 536.746892][T13892] team0: Device hsr_slave_0 failed to register rx_handler [ 536.861787][T13893] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 536.869887][T13893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2645'. [ 536.915423][T13893] ipvlan1: entered promiscuous mode [ 536.922126][T13893] ipvlan1: entered allmulticast mode [ 536.927792][T13893] veth0_vlan: entered allmulticast mode [ 536.975466][T13893] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 537.002221][T13889] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 537.030429][T13889] syzkaller0: entered promiscuous mode [ 537.058045][T13889] syzkaller0: entered allmulticast mode [ 537.176537][T13898] netlink: 197828 bytes leftover after parsing attributes in process `syz.3.2647'. [ 537.196538][T13898] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 537.206753][T13898] CPU: 0 PID: 13898 Comm: syz.3.2647 Not tainted syzkaller #0 [ 537.214266][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 537.224452][T13898] Call Trace: [ 537.227782][T13898] [ 537.230789][T13898] dump_stack_lvl+0x18c/0x250 [ 537.235523][T13898] ? show_regs_print_info+0x20/0x20 [ 537.240793][T13898] ? load_image+0x420/0x420 [ 537.245365][T13898] sysfs_warn_dup+0x8e/0xa0 [ 537.249909][T13898] sysfs_do_create_link_sd+0xc0/0x110 [ 537.255414][T13898] device_add_class_symlinks+0x1cf/0x240 [ 537.261167][T13898] device_add+0x507/0xc20 [ 537.265569][T13898] wiphy_register+0x1dad/0x2ae0 [ 537.270489][T13898] ? cfg80211_event_work+0x40/0x40 [ 537.275653][T13898] ? minstrel_ht_alloc+0x88a/0x990 [ 537.280837][T13898] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 537.286953][T13898] ieee80211_register_hw+0x3464/0x4250 [ 537.292490][T13898] ? ieee80211_tasklet_handler+0x20/0x20 [ 537.298166][T13898] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 537.304196][T13898] ? __debug_object_init+0xec/0x450 [ 537.309450][T13898] ? __asan_memset+0x22/0x40 [ 537.314089][T13898] ? __hrtimer_init+0x186/0x270 [ 537.318986][T13898] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 537.324778][T13898] ? mac80211_hwsim_free+0x220/0x220 [ 537.330104][T13898] ? rcu_is_watching+0x15/0xb0 [ 537.334915][T13898] ? kstrndup+0xbd/0x140 [ 537.339216][T13898] hwsim_new_radio_nl+0xdc9/0x1a90 [ 537.344376][T13898] ? __nla_validate+0x50/0x50 [ 537.349109][T13898] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 537.355597][T13898] ? __nla_parse+0x40/0x50 [ 537.360164][T13898] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 537.366716][T13898] genl_family_rcv_msg_doit+0x211/0x310 [ 537.372311][T13898] ? end_current_label_crit_section+0x170/0x170 [ 537.378611][T13898] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 537.384653][T13898] ? bpf_lsm_capable+0x9/0x10 [ 537.389371][T13898] ? security_capable+0x89/0xb0 [ 537.394272][T13898] genl_rcv_msg+0x619/0x7a0 [ 537.398833][T13898] ? genl_bind+0x360/0x360 [ 537.403278][T13898] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 537.409652][T13898] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 537.416297][T13898] ? perf_trace_lock+0xfc/0x3b0 [ 537.421196][T13898] netlink_rcv_skb+0x241/0x4d0 [ 537.426008][T13898] ? genl_bind+0x360/0x360 [ 537.430460][T13898] ? netlink_ack+0x1180/0x1180 [ 537.435278][T13898] ? __lock_acquire+0x7d40/0x7d40 [ 537.440350][T13898] ? down_read+0x1ac/0x2e0 [ 537.444811][T13898] genl_rcv+0x28/0x40 [ 537.448889][T13898] netlink_unicast+0x751/0x8d0 [ 537.453729][T13898] netlink_sendmsg+0x8d0/0xbf0 [ 537.458514][T13898] ? netlink_getsockopt+0x590/0x590 [ 537.463730][T13898] ? aa_sock_msg_perm+0x94/0x150 [ 537.468677][T13898] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 537.473981][T13898] ? security_socket_sendmsg+0x80/0xa0 [ 537.479439][T13898] ? netlink_getsockopt+0x590/0x590 [ 537.484801][T13898] ____sys_sendmsg+0x5ba/0x960 [ 537.489599][T13898] ? __asan_memset+0x22/0x40 [ 537.494205][T13898] ? __sys_sendmsg_sock+0x30/0x30 [ 537.499294][T13898] ? __import_iovec+0x5f2/0x850 [ 537.504209][T13898] ? import_iovec+0x73/0xa0 [ 537.508823][T13898] ___sys_sendmsg+0x2a6/0x360 [ 537.513516][T13898] ? __sys_sendmsg+0x2a0/0x2a0 [ 537.518313][T13898] ? trace_call_bpf+0xc3/0x6c0 [ 537.523198][T13898] __se_sys_sendmsg+0x1c2/0x2b0 [ 537.528051][T13898] ? __x64_sys_sendmsg+0x80/0x80 [ 537.533088][T13898] ? lockdep_hardirqs_on+0x98/0x150 [ 537.538376][T13898] do_syscall_64+0x55/0xa0 [ 537.542985][T13898] ? clear_bhb_loop+0x40/0x90 [ 537.547758][T13898] ? clear_bhb_loop+0x40/0x90 [ 537.552435][T13898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.558327][T13898] RIP: 0033:0x7fc1a119c819 [ 537.562944][T13898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.582574][T13898] RSP: 002b:00007fc1a204d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.590990][T13898] RAX: ffffffffffffffda RBX: 00007fc1a1416090 RCX: 00007fc1a119c819 [ 537.598958][T13898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 537.606941][T13898] RBP: 00007fc1a1232c91 R08: 0000000000000000 R09: 0000000000000000 [ 537.614924][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.622989][T13898] R13: 00007fc1a1416128 R14: 00007fc1a1416090 R15: 00007fff1c917678 [ 537.631071][T13898] [ 538.219375][T13924] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2656'. [ 538.230119][T13922] netlink: 'syz.1.2655': attribute type 3 has an invalid length. [ 538.237320][T13924] netlink: 'syz.2.2656': attribute type 10 has an invalid length. [ 538.245997][T13922] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2655'. [ 538.275339][T13924] team0: Device hsr_slave_0 failed to register rx_handler [ 538.548046][T13935] netlink: 'syz.3.2660': attribute type 6 has an invalid length. [ 538.568645][T13935] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2660'. [ 538.813824][T13943] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 538.852641][T13943] CPU: 1 PID: 13943 Comm: syz.1.2661 Not tainted syzkaller #0 [ 538.860164][T13943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.870233][T13943] Call Trace: [ 538.873513][T13943] [ 538.876441][T13943] dump_stack_lvl+0x18c/0x250 [ 538.881128][T13943] ? show_regs_print_info+0x20/0x20 [ 538.886329][T13943] ? load_image+0x420/0x420 [ 538.890865][T13943] sysfs_warn_dup+0x8e/0xa0 [ 538.895386][T13943] sysfs_do_create_link_sd+0xc0/0x110 [ 538.900777][T13943] device_add_class_symlinks+0x1cf/0x240 [ 538.906540][T13943] device_add+0x507/0xc20 [ 538.911091][T13943] wiphy_register+0x1dad/0x2ae0 [ 538.916165][T13943] ? cfg80211_event_work+0x40/0x40 [ 538.921281][T13943] ? minstrel_ht_alloc+0x88a/0x990 [ 538.926414][T13943] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 538.932505][T13943] ieee80211_register_hw+0x3464/0x4250 [ 538.938031][T13943] ? ieee80211_tasklet_handler+0x20/0x20 [ 538.943673][T13943] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 538.949618][T13943] ? __debug_object_init+0xec/0x450 [ 538.954834][T13943] ? __asan_memset+0x22/0x40 [ 538.959429][T13943] ? __hrtimer_init+0x186/0x270 [ 538.964295][T13943] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 538.970146][T13943] ? mac80211_hwsim_free+0x220/0x220 [ 538.975441][T13943] ? rcu_is_watching+0x15/0xb0 [ 538.980234][T13943] ? kstrndup+0xbd/0x140 [ 538.984496][T13943] hwsim_new_radio_nl+0xdc9/0x1a90 [ 538.989618][T13943] ? __nla_validate+0x50/0x50 [ 538.994322][T13943] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 539.000671][T13943] ? __nla_parse+0x40/0x50 [ 539.005099][T13943] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 539.011443][T13943] genl_family_rcv_msg_doit+0x211/0x310 [ 539.017046][T13943] ? end_current_label_crit_section+0x170/0x170 [ 539.023327][T13943] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 539.029269][T13943] ? bpf_lsm_capable+0x9/0x10 [ 539.033980][T13943] ? security_capable+0x89/0xb0 [ 539.038886][T13943] genl_rcv_msg+0x619/0x7a0 [ 539.043411][T13943] ? genl_bind+0x360/0x360 [ 539.047917][T13943] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 539.054341][T13943] ? perf_trace_lock+0xfc/0x3b0 [ 539.059226][T13943] netlink_rcv_skb+0x241/0x4d0 [ 539.064014][T13943] ? genl_bind+0x360/0x360 [ 539.068433][T13943] ? netlink_ack+0x1180/0x1180 [ 539.073234][T13943] ? __lock_acquire+0x7d40/0x7d40 [ 539.078262][T13943] ? down_read+0x1ac/0x2e0 [ 539.082679][T13943] genl_rcv+0x28/0x40 [ 539.086664][T13943] netlink_unicast+0x751/0x8d0 [ 539.091439][T13943] netlink_sendmsg+0x8d0/0xbf0 [ 539.096219][T13943] ? netlink_getsockopt+0x590/0x590 [ 539.101522][T13943] ? aa_sock_msg_perm+0x94/0x150 [ 539.106472][T13943] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 539.111846][T13943] ? security_socket_sendmsg+0x80/0xa0 [ 539.117396][T13943] ? netlink_getsockopt+0x590/0x590 [ 539.122602][T13943] ____sys_sendmsg+0x5ba/0x960 [ 539.127367][T13943] ? __asan_memset+0x22/0x40 [ 539.131968][T13943] ? __sys_sendmsg_sock+0x30/0x30 [ 539.136986][T13943] ? __import_iovec+0x5f2/0x850 [ 539.141839][T13943] ? import_iovec+0x73/0xa0 [ 539.146424][T13943] ___sys_sendmsg+0x2a6/0x360 [ 539.151103][T13943] ? __sys_sendmsg+0x2a0/0x2a0 [ 539.155915][T13943] __se_sys_sendmsg+0x1c2/0x2b0 [ 539.160767][T13943] ? __x64_sys_sendmsg+0x80/0x80 [ 539.165711][T13943] ? lockdep_hardirqs_on+0x98/0x150 [ 539.170909][T13943] do_syscall_64+0x55/0xa0 [ 539.175319][T13943] ? clear_bhb_loop+0x40/0x90 [ 539.180001][T13943] ? clear_bhb_loop+0x40/0x90 [ 539.184677][T13943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.190610][T13943] RIP: 0033:0x7f369759c819 [ 539.195513][T13943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.215152][T13943] RSP: 002b:00007f36983d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.223598][T13943] RAX: ffffffffffffffda RBX: 00007f3697816090 RCX: 00007f369759c819 [ 539.231686][T13943] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 539.240021][T13943] RBP: 00007f3697632c91 R08: 0000000000000000 R09: 0000000000000000 [ 539.248010][T13943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.256083][T13943] R13: 00007f3697816128 R14: 00007f3697816090 R15: 00007ffeb4cdb028 [ 539.264182][T13943] [ 539.511673][T13953] FAULT_INJECTION: forcing a failure. [ 539.511673][T13953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.533462][T13953] CPU: 1 PID: 13953 Comm: syz.0.2665 Not tainted syzkaller #0 [ 539.541107][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 539.551200][T13953] Call Trace: [ 539.554530][T13953] [ 539.557501][T13953] dump_stack_lvl+0x18c/0x250 [ 539.562314][T13953] ? show_regs_print_info+0x20/0x20 [ 539.567563][T13953] ? load_image+0x420/0x420 [ 539.572104][T13953] ? __lock_acquire+0x7d40/0x7d40 [ 539.577154][T13953] should_fail_ex+0x39d/0x4d0 [ 539.581844][T13953] _copy_from_user+0x2f/0xe0 [ 539.586439][T13953] __copy_msghdr+0x3bb/0x580 [ 539.591030][T13953] ___sys_sendmsg+0x214/0x360 [ 539.595721][T13953] ? get_pid_task+0x20/0x1e0 [ 539.600329][T13953] ? __sys_sendmsg+0x2a0/0x2a0 [ 539.605112][T13953] ? __lock_acquire+0x7d40/0x7d40 [ 539.610190][T13953] __se_sys_sendmsg+0x1c2/0x2b0 [ 539.615036][T13953] ? __x64_sys_sendmsg+0x80/0x80 [ 539.619978][T13953] ? lockdep_hardirqs_on+0x98/0x150 [ 539.625176][T13953] do_syscall_64+0x55/0xa0 [ 539.629587][T13953] ? clear_bhb_loop+0x40/0x90 [ 539.634259][T13953] ? clear_bhb_loop+0x40/0x90 [ 539.638931][T13953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.644821][T13953] RIP: 0033:0x7f7b8ad9c819 [ 539.649229][T13953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.668838][T13953] RSP: 002b:00007f7b8bd06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.677260][T13953] RAX: ffffffffffffffda RBX: 00007f7b8b015fa0 RCX: 00007f7b8ad9c819 [ 539.685227][T13953] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000038 [ 539.693295][T13953] RBP: 00007f7b8bd06090 R08: 0000000000000000 R09: 0000000000000000 [ 539.701258][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.709239][T13953] R13: 00007f7b8b016038 R14: 00007f7b8b015fa0 R15: 00007ffdaa506e28 [ 539.717769][T13953] [ 539.837499][T13956] __nla_validate_parse: 1 callbacks suppressed [ 539.837517][T13956] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2667'. [ 539.892504][T13959] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2668'. [ 539.913721][T13959] netlink: 'syz.1.2668': attribute type 10 has an invalid length. [ 539.931402][T13959] team0: Device hsr_slave_0 failed to register rx_handler [ 540.242507][T13969] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 540.250593][T13969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2671'. [ 540.663064][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 540.668400][T13984] netlink: 197828 bytes leftover after parsing attributes in process `syz.3.2677'. [ 540.690312][T13984] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 540.698702][T13984] CPU: 0 PID: 13984 Comm: syz.3.2677 Not tainted syzkaller #0 [ 540.706203][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 540.716279][T13984] Call Trace: [ 540.719582][T13984] [ 540.722516][T13984] dump_stack_lvl+0x18c/0x250 [ 540.727334][T13984] ? show_regs_print_info+0x20/0x20 [ 540.732614][T13984] ? load_image+0x420/0x420 [ 540.737131][T13984] sysfs_warn_dup+0x8e/0xa0 [ 540.741625][T13984] sysfs_do_create_link_sd+0xc0/0x110 [ 540.746987][T13984] device_add_class_symlinks+0x1cf/0x240 [ 540.752658][T13984] device_add+0x507/0xc20 [ 540.757014][T13984] wiphy_register+0x1dad/0x2ae0 [ 540.761884][T13984] ? cfg80211_event_work+0x40/0x40 [ 540.766982][T13984] ? minstrel_ht_alloc+0x88a/0x990 [ 540.772114][T13984] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 540.778180][T13984] ieee80211_register_hw+0x3464/0x4250 [ 540.783722][T13984] ? ieee80211_tasklet_handler+0x20/0x20 [ 540.789352][T13984] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 540.795244][T13984] ? __debug_object_init+0xec/0x450 [ 540.800464][T13984] ? __asan_memset+0x22/0x40 [ 540.805072][T13984] ? __hrtimer_init+0x186/0x270 [ 540.809955][T13984] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 540.815706][T13984] ? mac80211_hwsim_free+0x220/0x220 [ 540.820981][T13984] ? rcu_is_watching+0x15/0xb0 [ 540.825760][T13984] ? kstrndup+0xbd/0x140 [ 540.830003][T13984] hwsim_new_radio_nl+0xdc9/0x1a90 [ 540.835109][T13984] ? __nla_validate+0x50/0x50 [ 540.839784][T13984] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 540.846109][T13984] ? __nla_parse+0x40/0x50 [ 540.850621][T13984] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 540.856963][T13984] genl_family_rcv_msg_doit+0x211/0x310 [ 540.862502][T13984] ? end_current_label_crit_section+0x170/0x170 [ 540.868745][T13984] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 540.874653][T13984] ? bpf_lsm_capable+0x9/0x10 [ 540.879343][T13984] ? security_capable+0x89/0xb0 [ 540.884191][T13984] genl_rcv_msg+0x619/0x7a0 [ 540.888688][T13984] ? genl_bind+0x360/0x360 [ 540.893093][T13984] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 540.899410][T13984] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 540.906011][T13984] ? perf_trace_lock+0xfc/0x3b0 [ 540.910902][T13984] netlink_rcv_skb+0x241/0x4d0 [ 540.915700][T13984] ? genl_bind+0x360/0x360 [ 540.920116][T13984] ? netlink_ack+0x1180/0x1180 [ 540.924904][T13984] ? __lock_acquire+0x7d40/0x7d40 [ 540.929963][T13984] ? down_read+0x1ac/0x2e0 [ 540.934396][T13984] genl_rcv+0x28/0x40 [ 540.938403][T13984] netlink_unicast+0x751/0x8d0 [ 540.943179][T13984] netlink_sendmsg+0x8d0/0xbf0 [ 540.947976][T13984] ? netlink_getsockopt+0x590/0x590 [ 540.953293][T13984] ? aa_sock_msg_perm+0x94/0x150 [ 540.958254][T13984] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 540.963536][T13984] ? security_socket_sendmsg+0x80/0xa0 [ 540.969004][T13984] ? netlink_getsockopt+0x590/0x590 [ 540.974299][T13984] ____sys_sendmsg+0x5ba/0x960 [ 540.979075][T13984] ? __asan_memset+0x22/0x40 [ 540.983665][T13984] ? __sys_sendmsg_sock+0x30/0x30 [ 540.988705][T13984] ? __import_iovec+0x5f2/0x850 [ 540.993749][T13984] ? import_iovec+0x73/0xa0 [ 540.998246][T13984] ___sys_sendmsg+0x2a6/0x360 [ 541.003022][T13984] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.007832][T13984] ? trace_call_bpf+0xc3/0x6c0 [ 541.012592][T13984] ? debug_mutex_init+0x38/0x70 [ 541.017468][T13984] __se_sys_sendmsg+0x1c2/0x2b0 [ 541.022327][T13984] ? __x64_sys_sendmsg+0x80/0x80 [ 541.027265][T13984] ? lockdep_hardirqs_on+0x98/0x150 [ 541.032487][T13984] do_syscall_64+0x55/0xa0 [ 541.036907][T13984] ? clear_bhb_loop+0x40/0x90 [ 541.041579][T13984] ? clear_bhb_loop+0x40/0x90 [ 541.046251][T13984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.052278][T13984] RIP: 0033:0x7fc1a119c819 [ 541.056717][T13984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.076344][T13984] RSP: 002b:00007fc1a204d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.084854][T13984] RAX: ffffffffffffffda RBX: 00007fc1a1416090 RCX: 00007fc1a119c819 [ 541.092855][T13984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 541.100833][T13984] RBP: 00007fc1a1232c91 R08: 0000000000000000 R09: 0000000000000000 [ 541.108817][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.116784][T13984] R13: 00007fc1a1416128 R14: 00007fc1a1416090 R15: 00007fff1c917678 [ 541.124779][T13984] [ 541.270669][T13993] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2681'. [ 541.304481][T13993] netlink: 'syz.0.2681': attribute type 10 has an invalid length. [ 541.321050][T13993] team0: Device hsr_slave_0 failed to register rx_handler [ 541.359289][T13991] netlink: 'syz.2.2680': attribute type 10 has an invalid length. [ 541.369465][T13991] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2680'. [ 541.679886][T14007] FAULT_INJECTION: forcing a failure. [ 541.679886][T14007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.724981][T14007] CPU: 0 PID: 14007 Comm: syz.2.2686 Not tainted syzkaller #0 [ 541.732528][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 541.742624][T14007] Call Trace: [ 541.745968][T14007] [ 541.749014][T14007] dump_stack_lvl+0x18c/0x250 [ 541.753735][T14007] ? show_regs_print_info+0x20/0x20 [ 541.758942][T14007] ? load_image+0x420/0x420 [ 541.763533][T14007] ? __might_fault+0xaa/0x120 [ 541.768203][T14007] ? __lock_acquire+0x7d40/0x7d40 [ 541.773228][T14007] should_fail_ex+0x39d/0x4d0 [ 541.777922][T14007] _copy_from_iter+0x1d9/0x12e0 [ 541.782777][T14007] ? slab_post_alloc_hook+0x8a/0x4b0 [ 541.788161][T14007] ? __virt_addr_valid+0x18c/0x540 [ 541.793272][T14007] ? __lock_acquire+0x7d40/0x7d40 [ 541.798294][T14007] ? rcu_is_watching+0x15/0xb0 [ 541.803056][T14007] ? copyout_mc+0x70/0x70 [ 541.807383][T14007] ? __virt_addr_valid+0x18c/0x540 [ 541.812487][T14007] ? __virt_addr_valid+0x18c/0x540 [ 541.817684][T14007] ? __virt_addr_valid+0x469/0x540 [ 541.822899][T14007] ? __check_object_size+0x506/0xa20 [ 541.828179][T14007] netlink_sendmsg+0x76b/0xbf0 [ 541.833035][T14007] ? netlink_getsockopt+0x590/0x590 [ 541.838234][T14007] ? aa_sock_msg_perm+0x94/0x150 [ 541.843306][T14007] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 541.848680][T14007] ? security_socket_sendmsg+0x80/0xa0 [ 541.854129][T14007] ? netlink_getsockopt+0x590/0x590 [ 541.859422][T14007] ____sys_sendmsg+0x5ba/0x960 [ 541.864208][T14007] ? __asan_memset+0x22/0x40 [ 541.868880][T14007] ? __sys_sendmsg_sock+0x30/0x30 [ 541.874162][T14007] ? __import_iovec+0x5f2/0x850 [ 541.879014][T14007] ? import_iovec+0x73/0xa0 [ 541.883607][T14007] ___sys_sendmsg+0x2a6/0x360 [ 541.888288][T14007] ? __sys_sendmsg+0x2a0/0x2a0 [ 541.893531][T14007] ? __lock_acquire+0x7d40/0x7d40 [ 541.898655][T14007] __se_sys_sendmsg+0x1c2/0x2b0 [ 541.903594][T14007] ? __x64_sys_sendmsg+0x80/0x80 [ 541.908666][T14007] ? lockdep_hardirqs_on+0x98/0x150 [ 541.913985][T14007] do_syscall_64+0x55/0xa0 [ 541.918429][T14007] ? clear_bhb_loop+0x40/0x90 [ 541.923106][T14007] ? clear_bhb_loop+0x40/0x90 [ 541.927806][T14007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.933803][T14007] RIP: 0033:0x7fef09f9c819 [ 541.938226][T14007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.957918][T14007] RSP: 002b:00007fef0ad9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.966350][T14007] RAX: ffffffffffffffda RBX: 00007fef0a215fa0 RCX: 00007fef09f9c819 [ 541.974328][T14007] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 541.982296][T14007] RBP: 00007fef0ad9c090 R08: 0000000000000000 R09: 0000000000000000 [ 541.990258][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.998317][T14007] R13: 00007fef0a216038 R14: 00007fef0a215fa0 R15: 00007fff12546688 [ 542.006306][T14007] [ 542.275496][T14017] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2690'. [ 542.315243][T14017] netlink: 'syz.0.2690': attribute type 10 has an invalid length. [ 542.334152][T14017] team0: Device hsr_slave_0 failed to register rx_handler [ 542.572331][T14021] netlink: 'syz.1.2691': attribute type 10 has an invalid length. [ 542.632418][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2691'. [ 542.871408][T14028] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2693'. [ 542.913587][T14028] netlink: 'syz.2.2693': attribute type 10 has an invalid length. [ 542.940983][T14028] team0: Device hsr_slave_0 failed to register rx_handler [ 542.989982][T14029] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 543.017535][T14029] CPU: 0 PID: 14029 Comm: syz.0.2692 Not tainted syzkaller #0 [ 543.025061][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 543.035153][T14029] Call Trace: [ 543.038462][T14029] [ 543.041420][T14029] dump_stack_lvl+0x18c/0x250 [ 543.046140][T14029] ? show_regs_print_info+0x20/0x20 [ 543.051375][T14029] ? load_image+0x420/0x420 [ 543.055935][T14029] sysfs_warn_dup+0x8e/0xa0 [ 543.060488][T14029] sysfs_do_create_link_sd+0xc0/0x110 [ 543.065899][T14029] device_add_class_symlinks+0x1cf/0x240 [ 543.071669][T14029] device_add+0x507/0xc20 [ 543.076033][T14029] wiphy_register+0x1dad/0x2ae0 [ 543.080937][T14029] ? cfg80211_event_work+0x40/0x40 [ 543.086084][T14029] ? minstrel_ht_alloc+0x88a/0x990 [ 543.091257][T14029] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 543.097474][T14029] ieee80211_register_hw+0x3464/0x4250 [ 543.103065][T14029] ? ieee80211_tasklet_handler+0x20/0x20 [ 543.108724][T14029] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 543.114659][T14029] ? __debug_object_init+0xec/0x450 [ 543.119899][T14029] ? __asan_memset+0x22/0x40 [ 543.124611][T14029] ? __hrtimer_init+0x186/0x270 [ 543.129501][T14029] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 543.135288][T14029] ? mac80211_hwsim_free+0x220/0x220 [ 543.140641][T14029] ? rcu_is_watching+0x15/0xb0 [ 543.145596][T14029] ? kstrndup+0xbd/0x140 [ 543.149868][T14029] hwsim_new_radio_nl+0xdc9/0x1a90 [ 543.155003][T14029] ? __nla_validate+0x50/0x50 [ 543.159739][T14029] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 543.166100][T14029] ? __nla_parse+0x40/0x50 [ 543.170647][T14029] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 543.177044][T14029] genl_family_rcv_msg_doit+0x211/0x310 [ 543.182635][T14029] ? end_current_label_crit_section+0x170/0x170 [ 543.188928][T14029] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 543.194882][T14029] ? bpf_lsm_capable+0x9/0x10 [ 543.199692][T14029] ? security_capable+0x89/0xb0 [ 543.204598][T14029] genl_rcv_msg+0x619/0x7a0 [ 543.209236][T14029] ? genl_bind+0x360/0x360 [ 543.213696][T14029] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 543.220250][T14029] ? perf_trace_lock+0xfc/0x3b0 [ 543.225372][T14029] netlink_rcv_skb+0x241/0x4d0 [ 543.230287][T14029] ? genl_bind+0x360/0x360 [ 543.234848][T14029] ? netlink_ack+0x1180/0x1180 [ 543.239705][T14029] ? __lock_acquire+0x7d40/0x7d40 [ 543.244879][T14029] ? down_read+0x1ac/0x2e0 [ 543.249800][T14029] genl_rcv+0x28/0x40 [ 543.253834][T14029] netlink_unicast+0x751/0x8d0 [ 543.258664][T14029] netlink_sendmsg+0x8d0/0xbf0 [ 543.263491][T14029] ? netlink_getsockopt+0x590/0x590 [ 543.268742][T14029] ? aa_sock_msg_perm+0x94/0x150 [ 543.273730][T14029] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 543.279053][T14029] ? security_socket_sendmsg+0x80/0xa0 [ 543.284549][T14029] ? netlink_getsockopt+0x590/0x590 [ 543.289797][T14029] ____sys_sendmsg+0x5ba/0x960 [ 543.294708][T14029] ? __asan_memset+0x22/0x40 [ 543.299336][T14029] ? __sys_sendmsg_sock+0x30/0x30 [ 543.304396][T14029] ? __import_iovec+0x5f2/0x850 [ 543.309462][T14029] ? import_iovec+0x73/0xa0 [ 543.314018][T14029] ___sys_sendmsg+0x2a6/0x360 [ 543.318831][T14029] ? __sys_sendmsg+0x2a0/0x2a0 [ 543.323835][T14029] ? trace_call_bpf+0xc3/0x6c0 [ 543.328753][T14029] __se_sys_sendmsg+0x1c2/0x2b0 [ 543.333644][T14029] ? __x64_sys_sendmsg+0x80/0x80 [ 543.338647][T14029] ? lockdep_hardirqs_on+0x98/0x150 [ 543.343978][T14029] do_syscall_64+0x55/0xa0 [ 543.348435][T14029] ? clear_bhb_loop+0x40/0x90 [ 543.353154][T14029] ? clear_bhb_loop+0x40/0x90 [ 543.357878][T14029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.363904][T14029] RIP: 0033:0x7f7b8ad9c819 [ 543.368459][T14029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.388189][T14029] RSP: 002b:00007f7b8bce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.396670][T14029] RAX: ffffffffffffffda RBX: 00007f7b8b016090 RCX: 00007f7b8ad9c819 [ 543.404707][T14029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 543.412720][T14029] RBP: 00007f7b8ae32c91 R08: 0000000000000000 R09: 0000000000000000 [ 543.420764][T14029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.428755][T14029] R13: 00007f7b8b016128 R14: 00007f7b8b016090 R15: 00007ffdaa506e28 [ 543.436871][T14029] [ 543.470874][T14024] netlink: 'syz.3.2688': attribute type 4 has an invalid length. [ 543.518498][T14024] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 543.646800][T14039] netlink: 'syz.2.2695': attribute type 10 has an invalid length. [ 544.197744][T14051] netlink: 'syz.2.2699': attribute type 3 has an invalid length. [ 544.828837][T14064] netlink: 'syz.3.2703': attribute type 10 has an invalid length. [ 545.022612][T14067] __nla_validate_parse: 4 callbacks suppressed [ 545.022631][T14067] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2707'. [ 545.059319][T14067] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 545.123509][T14071] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2705'. [ 545.810069][T14090] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2713'. [ 545.834554][T14090] validate_nla: 2 callbacks suppressed [ 545.834572][T14090] netlink: 'syz.2.2713': attribute type 10 has an invalid length. [ 545.856585][T14090] team0: Device hsr_slave_0 failed to register rx_handler [ 546.306809][T14115] netlink: 'syz.2.2723': attribute type 10 has an invalid length. [ 546.439445][T14115] team0: Device vxcan1 is of different type [ 546.661578][T14121] netlink: 'syz.3.2724': attribute type 10 has an invalid length. [ 546.685381][T14121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2724'. [ 546.783194][T14121] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 546.918362][T14128] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2726'. [ 546.932195][T14128] netlink: 'syz.0.2726': attribute type 10 has an invalid length. [ 546.953312][T14128] team0: Device hsr_slave_0 failed to register rx_handler [ 546.996326][T14131] FAULT_INJECTION: forcing a failure. [ 546.996326][T14131] name failslab, interval 1, probability 0, space 0, times 0 [ 547.032064][T14131] CPU: 0 PID: 14131 Comm: syz.2.2728 Not tainted syzkaller #0 [ 547.039587][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 547.049750][T14131] Call Trace: [ 547.053053][T14131] [ 547.055981][T14131] dump_stack_lvl+0x18c/0x250 [ 547.060680][T14131] ? show_regs_print_info+0x20/0x20 [ 547.065879][T14131] ? load_image+0x420/0x420 [ 547.070384][T14131] ? __might_sleep+0xe0/0xe0 [ 547.074977][T14131] ? __lock_acquire+0x7d40/0x7d40 [ 547.080001][T14131] ? __lock_acquire+0x1273/0x7d40 [ 547.085117][T14131] should_fail_ex+0x39d/0x4d0 [ 547.089822][T14131] should_failslab+0x9/0x20 [ 547.094323][T14131] slab_pre_alloc_hook+0x59/0x310 [ 547.099357][T14131] kmem_cache_alloc_node+0x60/0x320 [ 547.104551][T14131] ? __alloc_skb+0x103/0x2c0 [ 547.109167][T14131] __alloc_skb+0x103/0x2c0 [ 547.113596][T14131] alloc_skb_with_frags+0xca/0x7b0 [ 547.118720][T14131] ? trace_event_raw_event_lock+0x250/0x250 [ 547.124622][T14131] ? __lock_acquire+0x1273/0x7d40 [ 547.129647][T14131] sock_alloc_send_pskb+0x883/0x9a0 [ 547.134858][T14131] ? sock_kzfree_s+0x50/0x50 [ 547.139448][T14131] ? verify_lock_unused+0x140/0x140 [ 547.144665][T14131] ? dev_get_by_index+0x22/0x2d0 [ 547.149608][T14131] ? sock_cmsg_send+0x224/0x270 [ 547.154462][T14131] packet_sendmsg+0x316e/0x4d70 [ 547.159319][T14131] ? sugov_update_single_freq+0x1b1/0x6a0 [ 547.165039][T14131] ? __might_sleep+0xe0/0xe0 [ 547.169629][T14131] ? trace_event_raw_event_lock+0x250/0x250 [ 547.175527][T14131] ? aa_sk_perm+0x83c/0x970 [ 547.180035][T14131] ? packet_getsockopt+0xad0/0xad0 [ 547.185151][T14131] ? __might_fault+0xaa/0x120 [ 547.189826][T14131] ? aa_sock_msg_perm+0x94/0x150 [ 547.194762][T14131] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 547.200051][T14131] ? security_socket_sendmsg+0x80/0xa0 [ 547.205716][T14131] ? packet_getsockopt+0xad0/0xad0 [ 547.210842][T14131] ____sys_sendmsg+0x5ba/0x960 [ 547.215733][T14131] ? __lock_acquire+0x7d40/0x7d40 [ 547.220828][T14131] ? __sys_sendmsg_sock+0x30/0x30 [ 547.225856][T14131] ? __import_iovec+0x3fa/0x850 [ 547.230713][T14131] ? import_iovec+0x73/0xa0 [ 547.235214][T14131] ___sys_sendmsg+0x2a6/0x360 [ 547.239894][T14131] ? __sys_sendmsg+0x2a0/0x2a0 [ 547.244685][T14131] ? trace_call_bpf+0xc3/0x6c0 [ 547.249465][T14131] __se_sys_sendmsg+0x1c2/0x2b0 [ 547.254310][T14131] ? __x64_sys_sendmsg+0x80/0x80 [ 547.259350][T14131] ? lockdep_hardirqs_on+0x98/0x150 [ 547.264646][T14131] do_syscall_64+0x55/0xa0 [ 547.269089][T14131] ? clear_bhb_loop+0x40/0x90 [ 547.273763][T14131] ? clear_bhb_loop+0x40/0x90 [ 547.278434][T14131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.284441][T14131] RIP: 0033:0x7fef09f9c819 [ 547.288863][T14131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.308737][T14131] RSP: 002b:00007fef0ad9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.317269][T14131] RAX: ffffffffffffffda RBX: 00007fef0a215fa0 RCX: 00007fef09f9c819 [ 547.325246][T14131] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 547.333214][T14131] RBP: 00007fef0ad9c090 R08: 0000000000000000 R09: 0000000000000000 [ 547.341179][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.349170][T14131] R13: 00007fef0a216038 R14: 00007fef0a215fa0 R15: 00007fff12546688 [ 547.357265][T14131] [ 547.818008][T14134] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2729'. [ 547.975701][T14138] bond0: left allmulticast mode [ 547.982665][T14138] bond_slave_0: left allmulticast mode [ 547.992984][T14138] bond_slave_1: left allmulticast mode [ 548.007246][T14138] bridge0: port 3(bond0) entered disabled state [ 548.255331][T14138] bridge_slave_1: left allmulticast mode [ 548.270417][T14138] bridge_slave_1: left promiscuous mode [ 548.289799][T14138] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.436478][T14138] bridge_slave_0: left allmulticast mode [ 548.445654][T14138] bridge_slave_0: left promiscuous mode [ 548.458903][T14138] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.244384][T14166] FAULT_INJECTION: forcing a failure. [ 549.244384][T14166] name failslab, interval 1, probability 0, space 0, times 0 [ 549.280581][T14166] CPU: 0 PID: 14166 Comm: syz.0.2740 Not tainted syzkaller #0 [ 549.288196][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 549.298370][T14166] Call Trace: [ 549.301677][T14166] [ 549.304632][T14166] dump_stack_lvl+0x18c/0x250 [ 549.309352][T14166] ? show_regs_print_info+0x20/0x20 [ 549.314588][T14166] ? load_image+0x420/0x420 [ 549.319135][T14166] ? __might_sleep+0xe0/0xe0 [ 549.323755][T14166] ? __lock_acquire+0x7d40/0x7d40 [ 549.328794][T14166] ? perf_trace_lock+0xfc/0x3b0 [ 549.333654][T14166] should_fail_ex+0x39d/0x4d0 [ 549.338375][T14166] should_failslab+0x9/0x20 [ 549.342898][T14166] slab_pre_alloc_hook+0x59/0x310 [ 549.347926][T14166] ? __get_vm_area_node+0x125/0x370 [ 549.353141][T14166] __kmem_cache_alloc_node+0x53/0x250 [ 549.358525][T14166] ? __get_vm_area_node+0x125/0x370 [ 549.363742][T14166] kmalloc_node_trace+0x26/0xe0 [ 549.368689][T14166] __get_vm_area_node+0x125/0x370 [ 549.373751][T14166] __vmalloc_node_range+0x36e/0x1330 [ 549.379042][T14166] ? netlink_sendmsg+0x602/0xbf0 [ 549.384011][T14166] ? netlink_insert+0x109f/0x13a0 [ 549.389079][T14166] ? netlink_data_ready+0x10/0x10 [ 549.394146][T14166] ? free_vm_area+0x50/0x50 [ 549.398795][T14166] ? netlink_sendmsg+0x602/0xbf0 [ 549.403776][T14166] vmalloc+0x79/0x90 [ 549.407699][T14166] ? netlink_sendmsg+0x602/0xbf0 [ 549.412637][T14166] netlink_sendmsg+0x602/0xbf0 [ 549.417423][T14166] ? netlink_getsockopt+0x590/0x590 [ 549.422625][T14166] ? aa_sock_msg_perm+0x94/0x150 [ 549.427559][T14166] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 549.432849][T14166] ? security_socket_sendmsg+0x80/0xa0 [ 549.438403][T14166] sock_write_iter+0x2df/0x420 [ 549.443207][T14166] ? sock_read_iter+0x3e0/0x3e0 [ 549.448331][T14166] ? common_file_perm+0x198/0x1f0 [ 549.453414][T14166] vfs_write+0x46c/0x990 [ 549.457674][T14166] ? file_end_write+0x250/0x250 [ 549.459336][T14172] netlink: 'syz.3.2741': attribute type 10 has an invalid length. [ 549.462548][T14166] ? __fget_files+0x43d/0x4b0 [ 549.462585][T14166] ? __fdget_pos+0x1d8/0x330 [ 549.462604][T14166] ? ksys_write+0x75/0x260 [ 549.462628][T14166] ksys_write+0x150/0x260 [ 549.462652][T14166] ? __ia32_sys_read+0x90/0x90 [ 549.470749][T14172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2741'. [ 549.475111][T14166] ? lockdep_hardirqs_on+0x98/0x150 [ 549.475144][T14166] do_syscall_64+0x55/0xa0 [ 549.480287][T14172] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 549.484568][T14166] ? clear_bhb_loop+0x40/0x90 [ 549.484596][T14166] ? clear_bhb_loop+0x40/0x90 [ 549.484616][T14166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.484634][T14166] RIP: 0033:0x7f7b8ad9c819 [ 549.484652][T14166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.484667][T14166] RSP: 002b:00007f7b8bd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.484686][T14166] RAX: ffffffffffffffda RBX: 00007f7b8b015fa0 RCX: 00007f7b8ad9c819 [ 549.484698][T14166] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000004 [ 549.484709][T14166] RBP: 00007f7b8bd06090 R08: 0000000000000000 R09: 0000000000000000 [ 549.484718][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.484727][T14166] R13: 00007f7b8b016038 R14: 00007f7b8b015fa0 R15: 00007ffdaa506e28 [ 549.484754][T14166] [ 549.486350][T14166] syz.0.2740: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 549.645353][T14166] CPU: 0 PID: 14166 Comm: syz.0.2740 Not tainted syzkaller #0 [ 549.652881][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 549.662953][T14166] Call Trace: [ 549.666248][T14166] [ 549.669188][T14166] dump_stack_lvl+0x18c/0x250 [ 549.673877][T14166] ? show_regs_print_info+0x20/0x20 [ 549.679078][T14166] ? load_image+0x420/0x420 [ 549.683606][T14166] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 549.690021][T14166] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 549.696537][T14166] warn_alloc+0x246/0x340 [ 549.700895][T14166] ? __get_vm_area_node+0x125/0x370 [ 549.706141][T14166] ? zone_watermark_ok_safe+0x230/0x230 [ 549.711722][T14166] ? rcu_is_watching+0x15/0xb0 [ 549.716499][T14166] ? __get_vm_area_node+0x356/0x370 [ 549.721712][T14166] __vmalloc_node_range+0x393/0x1330 [ 549.726997][T14166] ? netlink_insert+0x109f/0x13a0 [ 549.732358][T14166] ? netlink_data_ready+0x10/0x10 [ 549.737385][T14166] ? free_vm_area+0x50/0x50 [ 549.741894][T14166] ? netlink_sendmsg+0x602/0xbf0 [ 549.746935][T14166] vmalloc+0x79/0x90 [ 549.750830][T14166] ? netlink_sendmsg+0x602/0xbf0 [ 549.755882][T14166] netlink_sendmsg+0x602/0xbf0 [ 549.760818][T14166] ? netlink_getsockopt+0x590/0x590 [ 549.766043][T14166] ? aa_sock_msg_perm+0x94/0x150 [ 549.770988][T14166] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 549.776273][T14166] ? security_socket_sendmsg+0x80/0xa0 [ 549.781727][T14166] sock_write_iter+0x2df/0x420 [ 549.786490][T14166] ? sock_read_iter+0x3e0/0x3e0 [ 549.791341][T14166] ? common_file_perm+0x198/0x1f0 [ 549.796464][T14166] vfs_write+0x46c/0x990 [ 549.800726][T14166] ? file_end_write+0x250/0x250 [ 549.805596][T14166] ? __fget_files+0x43d/0x4b0 [ 549.810365][T14166] ? __fdget_pos+0x1d8/0x330 [ 549.814954][T14166] ? ksys_write+0x75/0x260 [ 549.819372][T14166] ksys_write+0x150/0x260 [ 549.823702][T14166] ? __ia32_sys_read+0x90/0x90 [ 549.828487][T14166] ? lockdep_hardirqs_on+0x98/0x150 [ 549.833739][T14166] do_syscall_64+0x55/0xa0 [ 549.838162][T14166] ? clear_bhb_loop+0x40/0x90 [ 549.842848][T14166] ? clear_bhb_loop+0x40/0x90 [ 549.847530][T14166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.853422][T14166] RIP: 0033:0x7f7b8ad9c819 [ 549.857835][T14166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.877441][T14166] RSP: 002b:00007f7b8bd06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.885912][T14166] RAX: ffffffffffffffda RBX: 00007f7b8b015fa0 RCX: 00007f7b8ad9c819 [ 549.893903][T14166] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000004 [ 549.901881][T14166] RBP: 00007f7b8bd06090 R08: 0000000000000000 R09: 0000000000000000 [ 549.909972][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.918063][T14166] R13: 00007f7b8b016038 R14: 00007f7b8b015fa0 R15: 00007ffdaa506e28 [ 549.926102][T14166] [ 549.952097][T14166] Mem-Info: [ 549.955642][T14166] active_anon:5494 inactive_anon:0 isolated_anon:0 [ 549.955642][T14166] active_file:12888 inactive_file:40122 isolated_file:0 [ 549.955642][T14166] unevictable:768 dirty:245 writeback:0 [ 549.955642][T14166] slab_reclaimable:10556 slab_unreclaimable:92841 [ 549.955642][T14166] mapped:24994 shmem:1361 pagetables:586 [ 549.955642][T14166] sec_pagetables:0 bounce:0 [ 549.955642][T14166] kernel_misc_reclaimable:0 [ 549.955642][T14166] free:1346925 free_pcp:9266 free_cma:0 [ 550.012549][T14166] Node 0 active_anon:21976kB inactive_anon:0kB active_file:51552kB inactive_file:160280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99976kB dirty:980kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10112kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no [ 550.050360][T14166] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 550.092485][T14166] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.123792][T14166] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 550.129661][T14166] Node 0 DMA32 free:1484232kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21836kB inactive_anon:0kB active_file:51552kB inactive_file:159460kB unevictable:1536kB writepending:980kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:12680kB local_pcp:1220kB free_cma:0kB [ 550.161478][T14166] lowmem_reserve[]: 0 0 0 0 0 [ 550.166242][T14166] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 550.205583][T14166] lowmem_reserve[]: 0 0 0 0 0 [ 550.210492][T14166] Node 1 Normal free:3888108kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25040kB local_pcp:13540kB free_cma:0kB [ 550.245451][T14166] lowmem_reserve[]: 0 0 0 0 0 [ 550.250356][T14166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 550.269933][T14166] Node 0 DMA32: 1192*4kB (UME) 1337*8kB (UME) 824*16kB (UME) 528*32kB (UME) 1226*64kB (UME) 835*128kB (UME) 185*256kB (UM) 73*512kB (UME) 29*1024kB (UME) 12*2048kB (UM) 272*4096kB (UM) = 1484008kB [ 550.291499][T14166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 550.297892][T14179] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2743'. [ 550.304057][T14166] Node 1 Normal: 223*4kB (U) 58*8kB (UME) 50*16kB (UME) 46*32kB (UME) 15*64kB (UE) 6*128kB (UM) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3888108kB [ 550.338212][T14166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.348837][T14166] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 550.358603][T14166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.370047][T14166] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 550.389185][T14166] 54371 total pagecache pages [ 550.394451][T14166] 0 pages in swap cache [ 550.398713][T14166] Free swap = 124996kB [ 550.405066][T14166] Total swap = 124996kB [ 550.409285][T14166] 2097051 pages RAM [ 550.413670][T14166] 0 pages HighMem/MovableOnly [ 550.418536][T14166] 416927 pages reserved [ 550.423336][T14166] 0 pages cma reserved [ 550.532287][T14188] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2745'. [ 550.620147][T14193] netlink: 'syz.0.2753': attribute type 10 has an invalid length. [ 550.629041][T14193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2753'. [ 550.664177][T14193] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 550.860109][T14203] netlink: 197828 bytes leftover after parsing attributes in process `syz.3.2749'. [ 550.873129][T14203] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 550.883660][T14203] CPU: 1 PID: 14203 Comm: syz.3.2749 Not tainted syzkaller #0 [ 550.891175][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 550.901263][T14203] Call Trace: [ 550.904566][T14203] [ 550.907535][T14203] dump_stack_lvl+0x18c/0x250 [ 550.912226][T14203] ? show_regs_print_info+0x20/0x20 [ 550.917442][T14203] ? load_image+0x420/0x420 [ 550.921962][T14203] sysfs_warn_dup+0x8e/0xa0 [ 550.926467][T14203] sysfs_do_create_link_sd+0xc0/0x110 [ 550.931847][T14203] device_add_class_symlinks+0x1cf/0x240 [ 550.937489][T14203] device_add+0x507/0xc20 [ 550.941927][T14203] wiphy_register+0x1dad/0x2ae0 [ 550.946904][T14203] ? cfg80211_event_work+0x40/0x40 [ 550.952383][T14203] ? minstrel_ht_alloc+0x88a/0x990 [ 550.957504][T14203] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 550.963576][T14203] ieee80211_register_hw+0x3464/0x4250 [ 550.969056][T14203] ? ieee80211_tasklet_handler+0x20/0x20 [ 550.974698][T14203] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 550.980608][T14203] ? __debug_object_init+0xec/0x450 [ 550.985822][T14203] ? __asan_memset+0x22/0x40 [ 550.990413][T14203] ? __hrtimer_init+0x186/0x270 [ 550.995269][T14203] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 551.001015][T14203] ? mac80211_hwsim_free+0x220/0x220 [ 551.006307][T14203] ? rcu_is_watching+0x15/0xb0 [ 551.011085][T14203] ? kstrndup+0xbd/0x140 [ 551.015370][T14203] hwsim_new_radio_nl+0xdc9/0x1a90 [ 551.020489][T14203] ? __nla_validate+0x50/0x50 [ 551.025174][T14203] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 551.031511][T14203] ? __nla_parse+0x40/0x50 [ 551.035932][T14203] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 551.042281][T14203] genl_family_rcv_msg_doit+0x211/0x310 [ 551.047864][T14203] ? end_current_label_crit_section+0x170/0x170 [ 551.054213][T14203] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 551.060119][T14203] ? bpf_lsm_capable+0x9/0x10 [ 551.064882][T14203] ? security_capable+0x89/0xb0 [ 551.069773][T14203] genl_rcv_msg+0x619/0x7a0 [ 551.074307][T14203] ? genl_bind+0x360/0x360 [ 551.078733][T14203] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 551.085076][T14203] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 551.091808][T14203] ? perf_trace_lock+0xfc/0x3b0 [ 551.096685][T14203] netlink_rcv_skb+0x241/0x4d0 [ 551.101467][T14203] ? genl_bind+0x360/0x360 [ 551.105898][T14203] ? netlink_ack+0x1180/0x1180 [ 551.110711][T14203] ? __lock_acquire+0x7d40/0x7d40 [ 551.115806][T14203] ? down_read+0x1ac/0x2e0 [ 551.120314][T14203] genl_rcv+0x28/0x40 [ 551.124387][T14203] netlink_unicast+0x751/0x8d0 [ 551.129170][T14203] netlink_sendmsg+0x8d0/0xbf0 [ 551.133950][T14203] ? netlink_getsockopt+0x590/0x590 [ 551.139179][T14203] ? aa_sock_msg_perm+0x94/0x150 [ 551.144273][T14203] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 551.149588][T14203] ? security_socket_sendmsg+0x80/0xa0 [ 551.155156][T14203] ? netlink_getsockopt+0x590/0x590 [ 551.160360][T14203] ____sys_sendmsg+0x5ba/0x960 [ 551.165129][T14203] ? __asan_memset+0x22/0x40 [ 551.169892][T14203] ? __sys_sendmsg_sock+0x30/0x30 [ 551.175435][T14203] ? __import_iovec+0x5f2/0x850 [ 551.180294][T14203] ? import_iovec+0x73/0xa0 [ 551.184798][T14203] ___sys_sendmsg+0x2a6/0x360 [ 551.189473][T14203] ? __sys_sendmsg+0x2a0/0x2a0 [ 551.194279][T14203] __se_sys_sendmsg+0x1c2/0x2b0 [ 551.199129][T14203] ? __x64_sys_sendmsg+0x80/0x80 [ 551.204079][T14203] ? lockdep_hardirqs_on+0x98/0x150 [ 551.209385][T14203] do_syscall_64+0x55/0xa0 [ 551.213805][T14203] ? clear_bhb_loop+0x40/0x90 [ 551.218484][T14203] ? clear_bhb_loop+0x40/0x90 [ 551.223167][T14203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.229060][T14203] RIP: 0033:0x7fc1a119c819 [ 551.233473][T14203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.254144][T14203] RSP: 002b:00007fc1a204d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.262689][T14203] RAX: ffffffffffffffda RBX: 00007fc1a1416090 RCX: 00007fc1a119c819 [ 551.270679][T14203] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 551.278832][T14203] RBP: 00007fc1a1232c91 R08: 0000000000000000 R09: 0000000000000000 [ 551.286894][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.294865][T14203] R13: 00007fc1a1416128 R14: 00007fc1a1416090 R15: 00007fff1c917678 [ 551.302941][T14203] [ 551.498552][T14208] netlink: 'syz.0.2750': attribute type 10 has an invalid length. [ 551.925126][T14225] tap0: tun_chr_ioctl cmd 1074025677 [ 551.935120][T14225] tap0: linktype set to 0 [ 552.049043][T14229] FAULT_INJECTION: forcing a failure. [ 552.049043][T14229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.062549][T14229] CPU: 1 PID: 14229 Comm: syz.1.2758 Not tainted syzkaller #0 [ 552.070052][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 552.080139][T14229] Call Trace: [ 552.083418][T14229] [ 552.086343][T14229] dump_stack_lvl+0x18c/0x250 [ 552.091072][T14229] ? show_regs_print_info+0x20/0x20 [ 552.096303][T14229] ? load_image+0x420/0x420 [ 552.100834][T14229] ? __might_fault+0xaa/0x120 [ 552.105524][T14229] ? __lock_acquire+0x7d40/0x7d40 [ 552.110547][T14229] should_fail_ex+0x39d/0x4d0 [ 552.115240][T14229] _copy_from_iter+0x1d9/0x12e0 [ 552.120091][T14229] ? slab_post_alloc_hook+0x8a/0x4b0 [ 552.125412][T14229] ? __virt_addr_valid+0x18c/0x540 [ 552.130525][T14229] ? __lock_acquire+0x7d40/0x7d40 [ 552.135549][T14229] ? rcu_is_watching+0x15/0xb0 [ 552.140319][T14229] ? copyout_mc+0x70/0x70 [ 552.144647][T14229] ? __virt_addr_valid+0x18c/0x540 [ 552.149760][T14229] ? __virt_addr_valid+0x18c/0x540 [ 552.154872][T14229] ? __virt_addr_valid+0x469/0x540 [ 552.159983][T14229] ? __check_object_size+0x506/0xa20 [ 552.165270][T14229] netlink_sendmsg+0x76b/0xbf0 [ 552.170044][T14229] ? netlink_getsockopt+0x590/0x590 [ 552.175247][T14229] ? aa_sock_msg_perm+0x94/0x150 [ 552.180191][T14229] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 552.185477][T14229] ? security_socket_sendmsg+0x80/0xa0 [ 552.190926][T14229] ? netlink_getsockopt+0x590/0x590 [ 552.196124][T14229] ____sys_sendmsg+0x5ba/0x960 [ 552.200887][T14229] ? __asan_memset+0x22/0x40 [ 552.205483][T14229] ? __sys_sendmsg_sock+0x30/0x30 [ 552.210511][T14229] ? __import_iovec+0x5f2/0x850 [ 552.215451][T14229] ? import_iovec+0x73/0xa0 [ 552.219951][T14229] ___sys_sendmsg+0x2a6/0x360 [ 552.224629][T14229] ? __sys_sendmsg+0x2a0/0x2a0 [ 552.229401][T14229] ? __lock_acquire+0x7d40/0x7d40 [ 552.234439][T14229] __se_sys_sendmsg+0x1c2/0x2b0 [ 552.239458][T14229] ? __x64_sys_sendmsg+0x80/0x80 [ 552.244402][T14229] ? lockdep_hardirqs_on+0x98/0x150 [ 552.249687][T14229] do_syscall_64+0x55/0xa0 [ 552.254094][T14229] ? clear_bhb_loop+0x40/0x90 [ 552.258782][T14229] ? clear_bhb_loop+0x40/0x90 [ 552.263460][T14229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.269410][T14229] RIP: 0033:0x7f369759c819 [ 552.273823][T14229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.293616][T14229] RSP: 002b:00007f36983f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.302033][T14229] RAX: ffffffffffffffda RBX: 00007f3697815fa0 RCX: 00007f369759c819 [ 552.310188][T14229] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 552.318175][T14229] RBP: 00007f36983f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.326181][T14229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.334157][T14229] R13: 00007f3697816038 R14: 00007f3697815fa0 R15: 00007ffeb4cdb028 [ 552.342230][T14229] [ 552.520341][T14240] netlink: 'syz.0.2763': attribute type 10 has an invalid length. [ 552.666837][T14243] netlink: 'syz.1.2760': attribute type 10 has an invalid length. [ 552.708303][T14243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2760'. [ 553.385046][T14271] netlink: 'syz.2.2774': attribute type 10 has an invalid length. [ 553.554922][T14281] netlink: 'syz.1.2779': attribute type 9 has an invalid length. [ 553.569672][T14281] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2779'. [ 553.642931][ C0] [ 553.642942][ C0] ================================ [ 553.642948][ C0] WARNING: inconsistent lock state [ 553.642958][ C0] syzkaller #0 Not tainted [ 553.642966][ C0] -------------------------------- [ 553.642972][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 553.642980][ C0] syz.2.2778/14283 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 553.643000][ C0] ffff888025e8b020 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 553.643049][ C0] {INITIAL USE} state was registered at: [ 553.643059][ C0] lock_acquire+0x19e/0x420 [ 553.643079][ C0] _raw_spin_lock+0x2e/0x40 [ 553.643097][ C0] htab_lock_bucket+0x17d/0x300 [ 553.643112][ C0] htab_lru_map_update_elem+0x2c6/0x990 [ 553.643129][ C0] bpf_map_update_value+0x660/0x720 [ 553.643143][ C0] map_update_elem+0x57b/0x700 [ 553.643159][ C0] __sys_bpf+0x6b5/0x890 [ 553.643173][ C0] __x64_sys_bpf+0x7c/0x90 [ 553.643187][ C0] do_syscall_64+0x55/0xa0 [ 553.643201][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.643220][ C0] irq event stamp: 2406 [ 553.643226][ C0] hardirqs last enabled at (2405): [] seqcount_lockdep_reader_access+0x10a/0x190 [ 553.643255][ C0] hardirqs last disabled at (2406): [] exc_debug+0x73/0x140 [ 553.643274][ C0] softirqs last enabled at (2278): [] netlink_insert+0x109f/0x13a0 [ 553.643302][ C0] softirqs last disabled at (2276): [] release_sock+0x2f/0x1c0 [ 553.643325][ C0] [ 553.643325][ C0] other info that might help us debug this: [ 553.643331][ C0] Possible unsafe locking scenario: [ 553.643331][ C0] [ 553.643336][ C0] CPU0 [ 553.643339][ C0] ---- [ 553.643343][ C0] lock(&htab->lockdep_key); [ 553.643355][ C0] [ 553.643358][ C0] lock(&htab->lockdep_key); [ 553.643369][ C0] [ 553.643369][ C0] *** DEADLOCK *** [ 553.643369][ C0] [ 553.643373][ C0] no locks held by syz.2.2778/14283. [ 553.643381][ C0] [ 553.643381][ C0] stack backtrace: [ 553.643387][ C0] CPU: 0 PID: 14283 Comm: syz.2.2778 Not tainted syzkaller #0 [ 553.643404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 553.643414][ C0] Call Trace: [ 553.643421][ C0] <#DB> [ 553.643428][ C0] dump_stack_lvl+0x18c/0x250 [ 553.643456][ C0] ? show_regs_print_info+0x20/0x20 [ 553.643483][ C0] ? print_usage_bug+0x475/0x690 [ 553.643502][ C0] ? verify_lock_unused+0x18/0x140 [ 553.643523][ C0] lock_acquire+0x2c2/0x420 [ 553.643544][ C0] ? htab_lock_bucket+0x17d/0x300 [ 553.643563][ C0] ? read_lock_is_recursive+0x20/0x20 [ 553.643590][ C0] _raw_spin_lock+0x2e/0x40 [ 553.643609][ C0] ? htab_lock_bucket+0x17d/0x300 [ 553.643628][ C0] htab_lock_bucket+0x17d/0x300 [ 553.643647][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 553.643669][ C0] ? verify_lock_unused+0x18/0x140 [ 553.643688][ C0] ? jhash+0x34e/0x740 [ 553.643707][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 553.643729][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 553.643747][ C0] ? perf_callchain+0x220/0x220 [ 553.643769][ C0] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 553.643788][ C0] bpf_overflow_handler+0x1fc/0x510 [ 553.643813][ C0] ? bpf_overflow_handler+0xde/0x510 [ 553.643841][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 553.643868][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 553.643889][ C0] __perf_event_overflow+0x447/0x630 [ 553.643912][ C0] perf_swevent_event+0x319/0x570 [ 553.643933][ C0] ? perf_tp_event+0x1520/0x1520 [ 553.643958][ C0] perf_bp_event+0x319/0x430 [ 553.643981][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 553.644020][ C0] ? lock_acquire+0x2c2/0x420 [ 553.644043][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 553.644067][ C0] notifier_call_chain+0x197/0x380 [ 553.644090][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 553.644112][ C0] atomic_notifier_call_chain+0xda/0x180 [ 553.644134][ C0] notify_die+0x145/0x1a0 [ 553.644156][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 553.644181][ C0] ? rcu_is_watching+0x15/0xb0 [ 553.644204][ C0] notify_debug+0x2e/0x50 [ 553.644220][ C0] exc_debug+0xde/0x140 [ 553.644238][ C0] asm_exc_debug+0x1e/0x40 [ 553.644258][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 553.644277][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 553.644292][ C0] RSP: 0018:ffffc9000d2c7798 EFLAGS: 00050206 [ 553.644308][ C0] RAX: ffffffff8427e501 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 553.644322][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc900033ff300 [ 553.644334][ C0] RBP: ffffc9000d2c78f0 R08: ffffc90003432fdf R09: 1ffff920006865fb [ 553.644347][ C0] R10: dffffc0000000000 R11: fffff520006865fc R12: ffffc900033ff000 [ 553.644361][ C0] R13: 0000200000000040 R14: ffffc9000d2c7e38 R15: 1ffff92001a58fc7 [ 553.644378][ C0] ? _copy_from_iter+0x201/0x12e0 [ 553.644408][ C0] [ 553.644413][ C0] [ 553.644419][ C0] _copy_from_iter+0x24e/0x12e0 [ 553.644443][ C0] ? find_vmap_area+0xfc/0x110 [ 553.644464][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 553.644483][ C0] ? copyout_mc+0x70/0x70 [ 553.644504][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 553.644526][ C0] ? _raw_spin_unlock+0x28/0x40 [ 553.644543][ C0] ? find_vmap_area+0xfc/0x110 [ 553.644565][ C0] ? __check_object_size+0x506/0xa20 [ 553.644582][ C0] netlink_sendmsg+0x76b/0xbf0 [ 553.644608][ C0] ? netlink_getsockopt+0x590/0x590 [ 553.644630][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 553.644651][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 553.644672][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 553.644688][ C0] ? netlink_getsockopt+0x590/0x590 [ 553.644711][ C0] ____sys_sendmsg+0x5ba/0x960 [ 553.644732][ C0] ? __asan_memset+0x22/0x40 [ 553.644751][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 553.644765][ C0] ? __import_iovec+0x5f2/0x850 [ 553.644785][ C0] ? import_iovec+0x73/0xa0 [ 553.644803][ C0] ___sys_sendmsg+0x2a6/0x360 [ 553.644822][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 553.644874][ C0] __se_sys_sendmsg+0x1c2/0x2b0 [ 553.644892][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 553.644916][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 553.644937][ C0] do_syscall_64+0x55/0xa0 [ 553.644953][ C0] ? clear_bhb_loop+0x40/0x90 [ 553.644973][ C0] ? clear_bhb_loop+0x40/0x90 [ 553.644995][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.645013][ C0] RIP: 0033:0x7fef09f9c819 [ 553.645027][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.645042][ C0] RSP: 002b:00007fef0ad9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.645060][ C0] RAX: ffffffffffffffda RBX: 00007fef0a215fa0 RCX: 00007fef09f9c819 [ 553.645073][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 553.645084][ C0] RBP: 00007fef0a032c91 R08: 0000000000000000 R09: 0000000000000000 [ 553.645095][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.645106][ C0] R13: 00007fef0a216038 R14: 00007fef0a215fa0 R15: 00007fff12546688 [ 553.645127][ C0] [ 553.645899][T14283] netlink: 'syz.2.2778': attribute type 8 has an invalid length. [ 554.365150][T14283] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2778'. [ 563.203048][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.209381][ T1284] ieee802154 phy1 wpan1: encryption failed: -22