last executing test programs: 16.544820448s ago: executing program 4 (id=18559): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) write$cgroup_int(r2, &(0x7f0000000580)=0x1ff, 0x12) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="ea0f100000000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) 16.17054088s ago: executing program 2 (id=18564): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc) 16.113758744s ago: executing program 4 (id=18565): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 16.048030027s ago: executing program 2 (id=18568): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000080)) (fail_nth: 2) 16.037903248s ago: executing program 4 (id=18569): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socketpair(0x1, 0x808, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x1000000000, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850008008200000018190000e3f25657168bd62c36481278cb25978f3a0b4655e05ccdb27a6d548dcd7679cf063b4af6710f4ca8db3cdd6edb155cfc0022f2cc2a5f5fb4b3789f91c50f0248a7873a607de2d86329a8f5da4e52e0f21a784a425ce3fad08f4fae399c44b0c7d73b539f8912f14cc5427b4ba844e708ddbfecd9d7a21e063ed5cea27c385125b253f3061b1cff69b7330a4c86505c78e04ae5ceae614259b2eba2f70eab26f962652db24a94", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000000), 0xfdef) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 15.702969157s ago: executing program 4 (id=18570): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000080)) 15.605044773s ago: executing program 4 (id=18571): r0 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20008808) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x8004745a, &(0x7f0000000180)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x22, 0x2000, r2, @value=r4}, 0x20) 15.304003841s ago: executing program 2 (id=18573): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.302911241s ago: executing program 4 (id=18575): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1002f, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x17c}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 12.118657698s ago: executing program 2 (id=18579): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 12.023929354s ago: executing program 2 (id=18582): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x41, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0xc052, 0x200000000000c8, 0x2, 0x9, 0xfffffffffffffff8, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb79078d1175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 8.932749735s ago: executing program 2 (id=18584): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) write$cgroup_int(r2, &(0x7f0000000580)=0x1ff, 0x12) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="ea0f100000000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) 8.105318794s ago: executing program 0 (id=18592): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40ea}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) write$cgroup_subtree(r2, 0x0, 0xfdef) mkdir(0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.980813351s ago: executing program 0 (id=18593): sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff0f000020000080) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="14000000000000000200"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000002006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504000a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) recvmsg(r2, 0x0, 0x1) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x22848, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0x40000000000001, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 7.14403219s ago: executing program 3 (id=18597): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/18], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x4040000) 7.099597973s ago: executing program 0 (id=18598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0x2, 0x7ff}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/249, 0x40, 0xf9, 0x1}, 0x28) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x5, 0x7, 0xffffac4b, 0x0, r0, 0x101, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 7.053452716s ago: executing program 3 (id=18599): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f0000000580)=0x1ff, 0x12) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="ea0f100000000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) 6.855519248s ago: executing program 3 (id=18600): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x5, 0xe, &(0x7f0000000ec0)=@raw=[@call={0x85, 0x0, 0x0, 0x99}, @jmp={0x5, 0x1, 0x1, 0x0, 0x0, 0x50, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x4, 0x7, 0xe, 0x3, 0x3}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @tail_call], &(0x7f0000000880)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x5, 0x40, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xf8704acb68e24279}, {0x1, 0x1, 0x7, 0x2}, {0x0, 0x5, 0x2, 0x4}, {0x0, 0x2, 0x1, 0x3}, {0x2, 0x5, 0xc, 0x9}, {0x5, 0x3, 0x1, 0xb}, {0x5, 0x3, 0x3, 0xa}], 0x10, 0x63e7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001100)={r0, r1}) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="180007310b000000000000000000000085b040000000000000e900000000080000000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90424fc60100c0340", 0x18}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001140), 0x8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001180)={'batadv_slave_1\x00', 0x20}) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/104, 0x68}, {&(0x7f0000000500)=""/217, 0xd9}], 0x5, &(0x7f0000000600)=""/148, 0x94}, 0x2) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000700)=@un=@abs, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/29, 0x1d}, {&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/9, 0x9}, {&(0x7f0000000980)=""/253, 0xfd}, {&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/187, 0xbb}, {&(0x7f0000000c40)=""/218, 0xda}], 0x8, &(0x7f0000000dc0)=""/241, 0xf1}, 0x142) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x51}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) 6.820618629s ago: executing program 1 (id=18601): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc) 6.777240062s ago: executing program 3 (id=18602): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40ea}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) write$cgroup_subtree(r2, 0x0, 0xfdef) mkdir(0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.380132405s ago: executing program 1 (id=18603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0x2, 0x7ff}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/249, 0x40, 0xf9, 0x1}, 0x28) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x5, 0x7, 0xffffac4b, 0x0, r0, 0x101, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 6.180307347s ago: executing program 0 (id=18604): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0x11, 0x20000000000000a, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x128}, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) 3.665626615s ago: executing program 0 (id=18605): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c6"], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="8ff4157f6bae06e67a53aa2011c971dba279208cf1807d2abd58dd22fd676a9ae3c3dc70d26cb28b99a823d1eea4b9275b1e7bfa6cfb2df809c3aa87b9363bcad8d5e71a6cb2eb22814cd0479191ffe5d8c8a863472be51c99c3c0a779c526368a4c8ed2460df54f0115d0de823c1a0c3bd0f076cc79e9d2678bfe6cee55d8165f89df096fd67f05f41219049860e266d2411bfbeec84a62477a6f29da71ab75ce75cde06b32e281eef8a57261f20069c5718b2d162604bc2a2c5418b7dc5b522319fe687e6ed4043cc4e0ba38483b3b39b2a19cce2199b68c8add53b068afafad40d47bcaf5eeb6359ccc010310d4ebfc1047e85dc47cc3a60824ac8ce9705712bfc68fd5514a6fb3b5815bb2f720566a46a99b79cd456b1f038fcd5e5374e15de59e5d49c2a41d79e3d2262061ecc84e83291792364d5a22647bc3eb64a834313cd23a3cddd7abefd6df77d0e13e3949113f1380ef599e4eed0c91ece1ecf284904b6a3032cdfccb811cacfc278581951ba18742006459982763dbe45e7ee8656589d7039bbbf8ce8d98c3eef5df0bcdb8d63c02db26195bbeb68f5f6bac83f657690d8e094ddd5b4a43e42dc8c01eb5b0b732d5f09e861fc7ebc7c1de3be40648610c9896ff57748dcc5da569ca4ff0c8bb88baee2aae54c352e3b6eb79f529b2acd09b8d6dc07a74a074d71db1cc53676a20eefc0b54cc98fbc86983f803c6f91503910627b8ed2554629ab83b29e454087e7ae51cbfbebf0a42c203f8edcf9f00e90ab85261335a0f38e95f06dc40316bddefd9aab7984960a0912fd5426a7b66926a0064c7afc2f27e17ecfd98a3c63e94ee551267cbc9297d6ee87dcd2d5f90aac187d6d3f2f90d1e5b5dbd8e6ba41c3debad5c8a54a9a3191367c26945728c73f3f58cfe02bbf8527f9e86d906e060f5d23093c4bc791451f929c0b8e0b4d343eeeefda7662b0647215e50854b9ebbb1397426e7a11cf1bca953fe4b6a4483fe3fcb3f9f9cefa56d04dcea77b5f7bf2d86816866e272fabbb27d7f29d8d0d22b5e3af31fc06ec8eb4498514b3745ad9a98e5f0b43ae99d7be5839380412047d653d07dfa4d710b5cba69edbd7552272c2996c352e4413e0c3ef60b5e42e3bc86ed4fea59849f7a438bfd3f31a0703cce0aa46fdeec11aec0a1980fb31c14ad36d3dd8fe054644a63b0661bd252b163c356e6c40bcfd46e7f6888431057695514e639c5c51d4d24db748f3ee713d7fa097706f2f5d681c76c71cf3f1a740a0265ff90cad66e27cfc37bff3010ec6f891eaa414fae627d7fe3b628d3b816d91a9cd3aadc829b9bf0e533376309c920c85332478c4c9572bdf2290d50d5159609ebe30670f168bec8eee42fd494660ccbc6fea324d7c700cb89cc83c450dd3ecec2c8427a37f47b35e8b092884de2af0cd50685534ede76fd2757f01b48a3a1533ca4e6c24cfe7dceca44a6a14830f9521cc6f2579dc13839cc3af64ef405d65fbfc229ed37dfb19ee3760846fc27fe6b767417fd3e1cd782302e04f369e34c40d75c7764e9528d8585dd5265621b87359b32de325b784f2cb3e7a969e1cb68b5f5ca7e9eb13024360938a3b1286460e8d0fa02f88484278fe6de6c7d0d8713c105c2c9682650e6bab0cc78ac7f4ce0e7f13eaa48631fcec861f351429b8c5201f31f0f08fe7055fc96d0b3c0767e546d09f2e512a84bc4185ecdb00491685aca89da091a7f46a2901850e69cbb7a32d3f4994091c59a0cd7dc56a7981a06f37fbfbb8aa12793bf524a28525ccb303d34a1f35c0736b009cd2f12704a6902b5f2fac3042db97ae4be1e85a87666e65e528cb1cacd6468f03a771e43f20c8db4f792e70591f38d66a63da8256d03ebc504e5402b90d0a9d96d5061f5321fccfa29cab16836bdace5c3c6c8804f2bae91e6d8bc4d2c9fd3f0086b0870d3a783625d886bb0d87fcc83abe71dd466df33f294df8b8dd083f26f3074004302f40c20e7d51fe45b7c23fe6a1ae41e9e1d7ec3e2cba932a85437fea65b49db2cc894f916bbcfce8a9cc7693279c70e23954cf01658dae31ad8d2dfd5641e14c318e0d4685342b8aa2ff5709f8dee0c9818686364428fcdfff1000e0f02e88f0110c57c97d2856416", 0x5e7}], 0x1}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 3.58145556s ago: executing program 1 (id=18606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0x2, 0x7ff}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/249, 0x40, 0xf9, 0x1}, 0x28) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x5, 0x7, 0xffffac4b, 0x0, r0, 0x101, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 3.57992866s ago: executing program 3 (id=18615): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40ea}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) write$cgroup_subtree(r2, 0x0, 0xfdef) mkdir(0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 523.003539ms ago: executing program 0 (id=18607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0x2, 0x7ff}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x0, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/249, 0x40, 0xf9, 0x1}, 0x28) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x5, 0x7, 0xffffac4b, 0x0, r0, 0x101, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 447.631294ms ago: executing program 3 (id=18608): sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff0f000020000080) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="14000000000000000200"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000002006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504000a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) recvmsg(r2, 0x0, 0x1) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x22848, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfff}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0x40000000000001, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 419.398036ms ago: executing program 1 (id=18609): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/18], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x4040000) 198.003908ms ago: executing program 1 (id=18610): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f0000000580)=0x1ff, 0x12) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="ea0f100000000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) 180.724539ms ago: executing program 32 (id=18575): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1002f, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x17c}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=18612): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r2}, 0xc) kernel console output (not intermixed with test programs): 2b:00007f0553040fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2480.985252][T20626] RAX: ffffffffffffffda RBX: 00007f05530416c0 RCX: 00007f0554da658e [ 2480.993215][T20626] RDX: 000000000000000f RSI: 00007f05530410a0 RDI: 0000000000000004 [ 2481.001180][T20626] RBP: 00007f0553041090 R08: 0000000000000000 R09: 0000000000000000 [ 2481.009150][T20626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2481.017144][T20626] R13: 00007f0555061038 R14: 00007f0555060fa0 R15: 00007ffe076eeb98 [ 2481.025232][T20626] [ 2481.173562][T20642] FAULT_INJECTION: forcing a failure. [ 2481.173562][T20642] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.253496][T20642] CPU: 1 PID: 20642 Comm: syz.1.17956 Not tainted syzkaller #0 [ 2481.261104][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2481.271279][T20642] Call Trace: [ 2481.274663][T20642] [ 2481.277708][T20642] dump_stack_lvl+0x188/0x250 [ 2481.282413][T20642] ? show_regs_print_info+0x20/0x20 [ 2481.287809][T20642] ? load_image+0x400/0x400 [ 2481.292360][T20642] ? __might_sleep+0xf0/0xf0 [ 2481.297067][T20642] ? __lock_acquire+0x7d10/0x7d10 [ 2481.302130][T20642] ? mark_lock+0x94/0x320 [ 2481.306494][T20642] should_fail+0x38c/0x4c0 [ 2481.310956][T20642] should_failslab+0x5/0x20 [ 2481.315567][T20642] slab_pre_alloc_hook+0x51/0xc0 [ 2481.320528][T20642] __kmalloc+0x6b/0x330 [ 2481.324704][T20642] ? tomoyo_realpath_from_path+0x118/0x610 [ 2481.330546][T20642] tomoyo_realpath_from_path+0x118/0x610 [ 2481.336219][T20642] tomoyo_path_number_perm+0x242/0x660 [ 2481.341696][T20642] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2481.347254][T20642] security_file_ioctl+0x6c/0xa0 [ 2481.352430][T20642] __se_sys_ioctl+0x48/0x170 [ 2481.357106][T20642] do_syscall_64+0x4c/0xa0 [ 2481.361516][T20642] ? clear_bhb_loop+0x30/0x80 [ 2481.366184][T20642] ? clear_bhb_loop+0x30/0x80 [ 2481.370858][T20642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2481.376827][T20642] RIP: 0033:0x7f80277ffcb9 [ 2481.381247][T20642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2481.400846][T20642] RSP: 002b:00007f8025a5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2481.409262][T20642] RAX: ffffffffffffffda RBX: 00007f8027a7afa0 RCX: 00007f80277ffcb9 [ 2481.417259][T20642] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 0000000000000008 [ 2481.425518][T20642] RBP: 00007f8025a5b090 R08: 0000000000000000 R09: 0000000000000000 [ 2481.433510][T20642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2481.441647][T20642] R13: 00007f8027a7b038 R14: 00007f8027a7afa0 R15: 00007ffcce587688 [ 2481.449642][T20642] [ 2481.606103][T20649] netlink: 'syz.2.17959': attribute type 39 has an invalid length. [ 2481.788613][T20642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2481.975045][T20661] netlink: 'syz.3.17963': attribute type 39 has an invalid length. [ 2482.063015][T20668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17966'. [ 2482.072202][T20668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17966'. [ 2482.128270][T20673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17966'. [ 2482.270258][T20668] FAULT_INJECTION: forcing a failure. [ 2482.270258][T20668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2482.299123][T20655] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.17961'. [ 2482.312903][T20668] CPU: 1 PID: 20668 Comm: syz.2.17966 Not tainted syzkaller #0 [ 2482.320577][T20668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2482.330639][T20668] Call Trace: [ 2482.333920][T20668] [ 2482.336855][T20668] dump_stack_lvl+0x188/0x250 [ 2482.341587][T20668] ? show_regs_print_info+0x20/0x20 [ 2482.346802][T20668] ? load_image+0x400/0x400 [ 2482.351325][T20668] ? __kasan_slab_alloc+0xb3/0xd0 [ 2482.356357][T20668] ? slab_post_alloc_hook+0x4c/0x380 [ 2482.361647][T20668] ? kmem_cache_alloc_node+0x12d/0x2d0 [ 2482.367199][T20668] ? __alloc_skb+0xf4/0x750 [ 2482.371708][T20668] ? netlink_recvmsg+0x672/0xe20 [ 2482.376645][T20668] ? ____sys_recvmsg+0x2cd/0x5e0 [ 2482.381594][T20668] ? ___sys_recvmsg+0x21a/0x5c0 [ 2482.386447][T20668] ? __x64_sys_recvmsg+0x1f9/0x2c0 [ 2482.391568][T20668] should_fail+0x38c/0x4c0 [ 2482.395993][T20668] prepare_alloc_pages+0x1e4/0x5f0 [ 2482.401117][T20668] __alloc_pages+0x11b/0x480 [ 2482.405717][T20668] ? zone_statistics+0x170/0x170 [ 2482.410674][T20668] kmalloc_large_node+0x7d/0x190 [ 2482.415630][T20668] __kmalloc_node_track_caller+0x22e/0x3a0 [ 2482.421429][T20668] ? netlink_dump+0x19f/0xcf0 [ 2482.426093][T20668] ? kmem_cache_alloc_node+0x162/0x2d0 [ 2482.431532][T20668] ? __alloc_skb+0xf4/0x750 [ 2482.436114][T20668] ? netlink_dump+0x19f/0xcf0 [ 2482.440773][T20668] __alloc_skb+0x22c/0x750 [ 2482.445174][T20668] netlink_dump+0x19f/0xcf0 [ 2482.449665][T20668] ? __skb_try_recv_datagram+0x3d6/0x4d0 [ 2482.455283][T20668] ? __check_object_size+0x91/0x410 [ 2482.460462][T20668] ? simple_copy_to_iter+0x2e/0x60 [ 2482.465644][T20668] ? netlink_lookup+0x1d0/0x1d0 [ 2482.470581][T20668] ? refcount_dec_and_test+0x4f/0x70 [ 2482.475855][T20668] netlink_recvmsg+0x672/0xe20 [ 2482.480708][T20668] ? netlink_sendmsg+0xbe0/0xbe0 [ 2482.485628][T20668] ? aa_sk_perm+0x7dc/0x910 [ 2482.490155][T20668] ? aa_af_perm+0x340/0x340 [ 2482.494646][T20668] ? perf_trace_lock+0xe4/0x390 [ 2482.499493][T20668] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2482.504763][T20668] ? security_socket_recvmsg+0x85/0xb0 [ 2482.510208][T20668] ? netlink_sendmsg+0xbe0/0xbe0 [ 2482.515126][T20668] ____sys_recvmsg+0x2cd/0x5e0 [ 2482.519911][T20668] ? __sys_recvmsg_sock+0x40/0x40 [ 2482.524936][T20668] ? import_iovec+0x6f/0xa0 [ 2482.529437][T20668] ___sys_recvmsg+0x21a/0x5c0 [ 2482.534105][T20668] ? __sys_recvmsg+0x280/0x280 [ 2482.538858][T20668] ? trace_event_raw_event_lock+0x270/0x270 [ 2482.544794][T20668] __x64_sys_recvmsg+0x1f9/0x2c0 [ 2482.549737][T20668] ? ___sys_recvmsg+0x5c0/0x5c0 [ 2482.554570][T20668] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2482.560546][T20668] ? lockdep_hardirqs_on+0x94/0x140 [ 2482.565933][T20668] do_syscall_64+0x4c/0xa0 [ 2482.570449][T20668] ? clear_bhb_loop+0x30/0x80 [ 2482.575133][T20668] ? clear_bhb_loop+0x30/0x80 [ 2482.579803][T20668] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2482.585683][T20668] RIP: 0033:0x7ff24ab31cb9 [ 2482.590091][T20668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2482.609857][T20668] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2482.618266][T20668] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2482.626223][T20668] RDX: 0000000000010182 RSI: 00002000000005c0 RDI: 0000000000000003 [ 2482.634272][T20668] RBP: 00007ff248d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 2482.642276][T20668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2482.650350][T20668] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2482.658336][T20668] [ 2482.722865][T20668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17966'. [ 2483.097961][T20696] netlink: 'syz.4.17976': attribute type 39 has an invalid length. [ 2483.454910][T20712] netlink: 'syz.1.17982': attribute type 39 has an invalid length. [ 2483.694999][T20722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2483.779769][T20714] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.17981'. [ 2484.197029][T20745] mac80211_hwsim hwsim867 »»»»»»: renamed from wlan0 [ 2484.240656][T20752] netlink: 'syz.0.17996': attribute type 1 has an invalid length. [ 2484.269850][T20754] FAULT_INJECTION: forcing a failure. [ 2484.269850][T20754] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.358628][T20754] CPU: 1 PID: 20754 Comm: syz.4.17997 Not tainted syzkaller #0 [ 2484.366213][T20754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2484.376281][T20754] Call Trace: [ 2484.379565][T20754] [ 2484.382492][T20754] dump_stack_lvl+0x188/0x250 [ 2484.387174][T20754] ? show_regs_print_info+0x20/0x20 [ 2484.392380][T20754] ? load_image+0x400/0x400 [ 2484.396886][T20754] ? __might_sleep+0xf0/0xf0 [ 2484.401480][T20754] ? __lock_acquire+0x7d10/0x7d10 [ 2484.406509][T20754] ? netlink_insert+0xe95/0x11f0 [ 2484.411459][T20754] should_fail+0x38c/0x4c0 [ 2484.415973][T20754] should_failslab+0x5/0x20 [ 2484.420573][T20754] slab_pre_alloc_hook+0x51/0xc0 [ 2484.425530][T20754] kmem_cache_alloc_node+0x47/0x2d0 [ 2484.430736][T20754] ? __alloc_skb+0xf4/0x750 [ 2484.435254][T20754] __alloc_skb+0xf4/0x750 [ 2484.439587][T20754] netlink_sendmsg+0x654/0xbe0 [ 2484.444350][T20754] ? netlink_getsockopt+0x570/0x570 [ 2484.449538][T20754] ? aa_sock_msg_perm+0x94/0x150 [ 2484.454475][T20754] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2484.459752][T20754] ? security_socket_sendmsg+0x7c/0xa0 [ 2484.465204][T20754] ? netlink_getsockopt+0x570/0x570 [ 2484.470405][T20754] ____sys_sendmsg+0x5b7/0x8f0 [ 2484.475178][T20754] ? __sys_sendmsg_sock+0x30/0x30 [ 2484.480202][T20754] ? import_iovec+0x6f/0xa0 [ 2484.484707][T20754] ___sys_sendmsg+0x236/0x2e0 [ 2484.489383][T20754] ? __sys_sendmsg+0x2a0/0x2a0 [ 2484.494174][T20754] __se_sys_sendmsg+0x1af/0x290 [ 2484.499068][T20754] ? __x64_sys_sendmsg+0x80/0x80 [ 2484.504040][T20754] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2484.510022][T20754] do_syscall_64+0x4c/0xa0 [ 2484.514434][T20754] ? clear_bhb_loop+0x30/0x80 [ 2484.519102][T20754] ? clear_bhb_loop+0x30/0x80 [ 2484.523772][T20754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2484.529657][T20754] RIP: 0033:0x7f0554de5cb9 [ 2484.534093][T20754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2484.554102][T20754] RSP: 002b:00007f0553041028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2484.562605][T20754] RAX: ffffffffffffffda RBX: 00007f0555060fa0 RCX: 00007f0554de5cb9 [ 2484.570577][T20754] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 2484.578543][T20754] RBP: 00007f0553041090 R08: 0000000000000000 R09: 0000000000000000 [ 2484.586509][T20754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2484.594559][T20754] R13: 00007f0555061038 R14: 00007f0555060fa0 R15: 00007ffe076eeb98 [ 2484.602546][T20754] [ 2485.058161][T20776] netlink: 'syz.1.18005': attribute type 3 has an invalid length. [ 2485.076594][T20776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18005'. [ 2485.118993][T20773] netlink: 'syz.1.18005': attribute type 2 has an invalid length. [ 2485.135204][T20782] FAULT_INJECTION: forcing a failure. [ 2485.135204][T20782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2485.148486][T20773] netlink: 'syz.1.18005': attribute type 1 has an invalid length. [ 2485.149791][T20783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18008'. [ 2485.162052][T20773] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.18005'. [ 2485.204941][T20782] CPU: 0 PID: 20782 Comm: syz.2.18009 Not tainted syzkaller #0 [ 2485.212536][T20782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2485.222602][T20782] Call Trace: [ 2485.225886][T20782] [ 2485.228816][T20782] dump_stack_lvl+0x188/0x250 [ 2485.233510][T20782] ? show_regs_print_info+0x20/0x20 [ 2485.238729][T20782] ? load_image+0x400/0x400 [ 2485.243247][T20782] ? __lock_acquire+0x7d10/0x7d10 [ 2485.248368][T20782] ? vfs_write+0x8b2/0xd60 [ 2485.252790][T20782] should_fail+0x38c/0x4c0 [ 2485.257218][T20782] _copy_from_user+0x2e/0x170 [ 2485.261909][T20782] __sys_bpf+0x26d/0x6f0 [ 2485.266244][T20782] ? bpf_link_show_fdinfo+0x380/0x380 [ 2485.271632][T20782] ? vtime_user_exit+0x2c8/0x3e0 [ 2485.276580][T20782] __x64_sys_bpf+0x78/0x90 [ 2485.281001][T20782] do_syscall_64+0x4c/0xa0 [ 2485.285407][T20782] ? clear_bhb_loop+0x30/0x80 [ 2485.290349][T20782] ? clear_bhb_loop+0x30/0x80 [ 2485.295020][T20782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2485.301007][T20782] RIP: 0033:0x7ff24ab31cb9 [ 2485.305561][T20782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2485.325261][T20782] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2485.333765][T20782] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2485.341821][T20782] RDX: 0000000000000094 RSI: 0000200000001540 RDI: 0000000000000005 [ 2485.349795][T20782] RBP: 00007ff248d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.357762][T20782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.365814][T20782] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2485.373792][T20782] [ 2485.442602][T20779] validate_nla: 1 callbacks suppressed [ 2485.442622][T20779] netlink: 'syz.3.18008': attribute type 2 has an invalid length. [ 2485.463051][T20779] netlink: 'syz.3.18008': attribute type 1 has an invalid length. [ 2485.658673][T20806] __nla_validate_parse: 1 callbacks suppressed [ 2485.658699][T20806] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18018'. [ 2485.850552][T20814] netlink: 'syz.1.18021': attribute type 3 has an invalid length. [ 2485.873008][T20814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18021'. [ 2485.887386][T20814] netlink: 'syz.1.18021': attribute type 2 has an invalid length. [ 2485.904330][T20814] netlink: 'syz.1.18021': attribute type 1 has an invalid length. [ 2485.912174][T20814] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.18021'. [ 2485.998987][T20823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18025'. [ 2486.018306][T20823] netlink: 'syz.2.18025': attribute type 2 has an invalid length. [ 2486.027797][T20823] netlink: 'syz.2.18025': attribute type 1 has an invalid length. [ 2486.082599][T20826] FAULT_INJECTION: forcing a failure. [ 2486.082599][T20826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2486.144398][T20826] CPU: 0 PID: 20826 Comm: syz.1.18026 Not tainted syzkaller #0 [ 2486.152205][T20826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2486.162274][T20826] Call Trace: [ 2486.165684][T20826] [ 2486.168633][T20826] dump_stack_lvl+0x188/0x250 [ 2486.173429][T20826] ? show_regs_print_info+0x20/0x20 [ 2486.178650][T20826] ? load_image+0x400/0x400 [ 2486.183185][T20826] ? __lock_acquire+0x7d10/0x7d10 [ 2486.188229][T20826] should_fail+0x38c/0x4c0 [ 2486.192701][T20826] _copy_from_iter+0x22e/0x1170 [ 2486.197571][T20826] ? __lock_acquire+0x7d10/0x7d10 [ 2486.202619][T20826] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 2486.208012][T20826] ? __virt_addr_valid+0x3c6/0x470 [ 2486.213133][T20826] ? __phys_addr_symbol+0x2b/0x70 [ 2486.218323][T20826] ? __check_object_size+0x30c/0x410 [ 2486.223632][T20826] netlink_sendmsg+0x758/0xbe0 [ 2486.228419][T20826] ? netlink_getsockopt+0x570/0x570 [ 2486.233624][T20826] ? aa_sock_msg_perm+0x94/0x150 [ 2486.238648][T20826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2486.243932][T20826] ? security_socket_sendmsg+0x7c/0xa0 [ 2486.249401][T20826] ? netlink_getsockopt+0x570/0x570 [ 2486.254612][T20826] ____sys_sendmsg+0x5b7/0x8f0 [ 2486.259393][T20826] ? __sys_sendmsg_sock+0x30/0x30 [ 2486.264432][T20826] ? import_iovec+0x6f/0xa0 [ 2486.269024][T20826] ___sys_sendmsg+0x236/0x2e0 [ 2486.273727][T20826] ? __sys_sendmsg+0x2a0/0x2a0 [ 2486.278619][T20826] ? trace_event_raw_event_lock+0x270/0x270 [ 2486.284530][T20826] ? vfs_write+0x8b2/0xd60 [ 2486.288979][T20826] __se_sys_sendmsg+0x1af/0x290 [ 2486.293844][T20826] ? __x64_sys_sendmsg+0x80/0x80 [ 2486.298790][T20826] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2486.304795][T20826] ? lockdep_hardirqs_on+0x94/0x140 [ 2486.310007][T20826] do_syscall_64+0x4c/0xa0 [ 2486.314425][T20826] ? clear_bhb_loop+0x30/0x80 [ 2486.319109][T20826] ? clear_bhb_loop+0x30/0x80 [ 2486.323806][T20826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2486.329710][T20826] RIP: 0033:0x7f80277ffcb9 [ 2486.334136][T20826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2486.353838][T20826] RSP: 002b:00007f8025a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2486.362263][T20826] RAX: ffffffffffffffda RBX: 00007f8027a7b090 RCX: 00007f80277ffcb9 [ 2486.370231][T20826] RDX: 0000000000000020 RSI: 0000200000000600 RDI: 000000000000000a [ 2486.378192][T20826] RBP: 00007f8025a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 2486.386144][T20826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2486.394097][T20826] R13: 00007f8027a7b128 R14: 00007f8027a7b090 R15: 00007ffcce587688 [ 2486.402065][T20826] [ 2486.619506][T20831] netlink: 'syz.0.18027': attribute type 3 has an invalid length. [ 2486.641625][T20831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18027'. [ 2486.702413][T20829] netlink: 'syz.0.18027': attribute type 2 has an invalid length. [ 2486.731428][T20837] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2486.738127][T20837] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2486.759355][T20829] netlink: 'syz.0.18027': attribute type 1 has an invalid length. [ 2486.781250][T20829] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.18027'. [ 2487.122094][T20853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18037'. [ 2487.156260][T20853] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.18037'. [ 2487.253933][T20862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18039'. [ 2487.266217][T20860] FAULT_INJECTION: forcing a failure. [ 2487.266217][T20860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2487.273372][T20863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18039'. [ 2487.352847][T20860] CPU: 0 PID: 20860 Comm: syz.4.18040 Not tainted syzkaller #0 [ 2487.360564][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2487.370617][T20860] Call Trace: [ 2487.373904][T20860] [ 2487.376839][T20860] dump_stack_lvl+0x188/0x250 [ 2487.381528][T20860] ? show_regs_print_info+0x20/0x20 [ 2487.386737][T20860] ? load_image+0x400/0x400 [ 2487.391253][T20860] ? __lock_acquire+0x7d10/0x7d10 [ 2487.396298][T20860] should_fail+0x38c/0x4c0 [ 2487.400729][T20860] _copy_from_user+0x2e/0x170 [ 2487.405411][T20860] bpf_test_init+0x136/0x1b0 [ 2487.410014][T20860] bpf_prog_test_run_skb+0x181/0x1180 [ 2487.415485][T20860] ? __fget_files+0x40f/0x480 [ 2487.420268][T20860] ? cpu_online+0x60/0x60 [ 2487.424611][T20860] bpf_prog_test_run+0x31e/0x390 [ 2487.429564][T20860] __sys_bpf+0x5a5/0x6f0 [ 2487.433914][T20860] ? bpf_link_show_fdinfo+0x380/0x380 [ 2487.439307][T20860] ? vtime_user_exit+0x2c8/0x3e0 [ 2487.444263][T20860] __x64_sys_bpf+0x78/0x90 [ 2487.448778][T20860] do_syscall_64+0x4c/0xa0 [ 2487.453196][T20860] ? clear_bhb_loop+0x30/0x80 [ 2487.457875][T20860] ? clear_bhb_loop+0x30/0x80 [ 2487.462572][T20860] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2487.468489][T20860] RIP: 0033:0x7f0554de5cb9 [ 2487.472912][T20860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2487.492532][T20860] RSP: 002b:00007f0553041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2487.501048][T20860] RAX: ffffffffffffffda RBX: 00007f0555060fa0 RCX: 00007f0554de5cb9 [ 2487.509039][T20860] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2487.517114][T20860] RBP: 00007f0553041090 R08: 0000000000000000 R09: 0000000000000000 [ 2487.525098][T20860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2487.533107][T20860] R13: 00007f0555061038 R14: 00007f0555060fa0 R15: 00007ffe076eeb98 [ 2487.541242][T20860] [ 2488.050899][T20875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2488.058300][T20875] IPv6: NLM_F_CREATE should be set when creating new route [ 2488.065788][T20875] IPv6: NLM_F_CREATE should be set when creating new route [ 2488.073182][T20875] IPv6: NLM_F_CREATE should be set when creating new route [ 2488.333998][T20896] mac80211_hwsim hwsim780 »»»»»»: renamed from wlan0 [ 2491.150687][T20905] validate_nla: 12 callbacks suppressed [ 2491.150703][T20905] netlink: 'syz.3.18054': attribute type 40 has an invalid length. [ 2491.206449][T20905] bridge0: port 2(bridge_slave_1) entered disabled state [ 2491.323534][T20914] tap0: tun_chr_ioctl cmd 1074025673 [ 2491.423372][T20918] __nla_validate_parse: 5 callbacks suppressed [ 2491.423390][T20918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18060'. [ 2491.549938][T20922] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.18062'. [ 2491.561049][T20927] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.18062'. [ 2491.605372][T20929] netlink: 'syz.1.18065': attribute type 3 has an invalid length. [ 2491.614581][T20929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18065'. [ 2491.630414][T20929] netlink: 'syz.1.18065': attribute type 2 has an invalid length. [ 2491.639767][T20929] netlink: 'syz.1.18065': attribute type 1 has an invalid length. [ 2491.649539][T20929] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.18065'. [ 2492.114397][T20941] mac80211_hwsim hwsim736 »»»»»»: renamed from wlan0 [ 2494.836215][T20954] netlink: 'syz.3.18074': attribute type 8 has an invalid length. [ 2494.846041][T20954] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18074'. [ 2495.049475][T20959] netlink: 'syz.3.18076': attribute type 39 has an invalid length. [ 2495.198845][T20976] netlink: 'syz.0.18079': attribute type 3 has an invalid length. [ 2495.207797][T20976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18079'. [ 2495.225591][T20976] netlink: 'syz.0.18079': attribute type 2 has an invalid length. [ 2495.240274][T20976] netlink: 'syz.0.18079': attribute type 1 has an invalid length. [ 2495.254302][T20976] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.18079'. [ 2495.356742][T20989] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.18085'. [ 2498.395852][T20997] nla_validate_range_unsigned: 55 callbacks suppressed [ 2498.395906][T20997] netlink: 'syz.2.18087': attribute type 11 has an invalid length. [ 2498.432615][T21007] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18091'. [ 2498.463066][T20997] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18087'. [ 2498.471293][T21007] openvswitch: netlink: Flow key attribute not present in set flow. [ 2498.493818][T21011] netlink: 'syz.0.18092': attribute type 6 has an invalid length. [ 2498.548645][T20997] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2498.743555][T21021] netlink: 'syz.1.18095': attribute type 3 has an invalid length. [ 2498.765826][T21017] netlink: 'syz.3.18093': attribute type 39 has an invalid length. [ 2498.792891][T21021] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18095'. [ 2498.836374][T21019] netlink: 'syz.1.18095': attribute type 2 has an invalid length. [ 2498.880229][T21019] netlink: 'syz.1.18095': attribute type 1 has an invalid length. [ 2498.891327][T21019] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.18095'. [ 2499.022441][T21026] tap0: tun_chr_ioctl cmd 1074025673 [ 2499.062428][T21028] €Â0: renamed from pim6reg1 [ 2499.889102][T21042] FAULT_INJECTION: forcing a failure. [ 2499.889102][T21042] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.917837][T21042] CPU: 0 PID: 21042 Comm: syz.1.18102 Not tainted syzkaller #0 [ 2499.925548][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2499.935656][T21042] Call Trace: [ 2499.938949][T21042] [ 2499.941886][T21042] dump_stack_lvl+0x188/0x250 [ 2499.946575][T21042] ? show_regs_print_info+0x20/0x20 [ 2499.951781][T21042] ? load_image+0x400/0x400 [ 2499.956380][T21042] ? __might_sleep+0xf0/0xf0 [ 2499.961061][T21042] ? __lock_acquire+0x7d10/0x7d10 [ 2499.966099][T21042] should_fail+0x38c/0x4c0 [ 2499.970533][T21042] should_failslab+0x5/0x20 [ 2499.975058][T21042] slab_pre_alloc_hook+0x51/0xc0 [ 2499.980104][T21042] kmem_cache_alloc_node+0x47/0x2d0 [ 2499.985579][T21042] ? __alloc_skb+0xf4/0x750 [ 2499.990098][T21042] __alloc_skb+0xf4/0x750 [ 2499.994624][T21042] alloc_skb_with_frags+0xa7/0x730 [ 2499.999751][T21042] ? trace_event_raw_event_lock+0x270/0x270 [ 2500.005659][T21042] sock_alloc_send_pskb+0x87f/0x9a0 [ 2500.010895][T21042] ? sock_kzfree_s+0x50/0x50 [ 2500.015483][T21042] ? do_raw_spin_lock+0x128/0x2f0 [ 2500.020603][T21042] ? __rwlock_init+0x140/0x140 [ 2500.025390][T21042] ? do_raw_spin_unlock+0x11d/0x230 [ 2500.030690][T21042] unix_dgram_sendmsg+0x5fc/0x18a0 [ 2500.035911][T21042] ? aa_sk_perm+0x7dc/0x910 [ 2500.040461][T21042] ? unix_dgram_poll+0x680/0x680 [ 2500.045401][T21042] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2500.051909][T21042] ? aa_sock_msg_perm+0x94/0x150 [ 2500.056842][T21042] ? unix_seqpacket_sendmsg+0x108/0x1d0 [ 2500.062377][T21042] ? unix_dgram_peer_wake_me+0x430/0x430 [ 2500.067997][T21042] ____sys_sendmsg+0x5b7/0x8f0 [ 2500.072761][T21042] ? __sys_sendmsg_sock+0x30/0x30 [ 2500.077777][T21042] ? import_iovec+0x6f/0xa0 [ 2500.082271][T21042] ___sys_sendmsg+0x236/0x2e0 [ 2500.086940][T21042] ? __sys_sendmsg+0x2a0/0x2a0 [ 2500.091701][T21042] ? trace_event_raw_event_lock+0x270/0x270 [ 2500.097582][T21042] ? vfs_write+0x8b2/0xd60 [ 2500.102001][T21042] __se_sys_sendmsg+0x1af/0x290 [ 2500.106838][T21042] ? __x64_sys_sendmsg+0x80/0x80 [ 2500.111764][T21042] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2500.117739][T21042] ? lockdep_hardirqs_on+0x94/0x140 [ 2500.123185][T21042] do_syscall_64+0x4c/0xa0 [ 2500.127585][T21042] ? clear_bhb_loop+0x30/0x80 [ 2500.132241][T21042] ? clear_bhb_loop+0x30/0x80 [ 2500.136901][T21042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2500.142777][T21042] RIP: 0033:0x7f80277ffcb9 [ 2500.147274][T21042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2500.166868][T21042] RSP: 002b:00007f8025a5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2500.175442][T21042] RAX: ffffffffffffffda RBX: 00007f8027a7afa0 RCX: 00007f80277ffcb9 [ 2500.183398][T21042] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000005 [ 2500.191443][T21042] RBP: 00007f8025a5b090 R08: 0000000000000000 R09: 0000000000000000 [ 2500.199403][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2500.207370][T21042] R13: 00007f8027a7b038 R14: 00007f8027a7afa0 R15: 00007ffcce587688 [ 2500.215518][T21042] [ 2502.010031][T21059] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18106'. [ 2502.037884][T21059] openvswitch: netlink: Flow key attribute not present in set flow. [ 2502.188789][T21070] netlink: 'syz.0.18110': attribute type 39 has an invalid length. [ 2502.318726][T21080] netlink: 'syz.3.18114': attribute type 10 has an invalid length. [ 2502.559328][T21083] device syzkaller0 entered promiscuous mode [ 2502.725619][T21083] netlink: 'syz.3.18115': attribute type 2 has an invalid length. [ 2502.749274][T21083] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.18115'. [ 2502.769191][T21084] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.18116'. [ 2503.657809][T21115] tap0: tun_chr_ioctl cmd 1074025673 [ 2503.674394][T21113] €Â0: renamed from pim6reg1 [ 2503.696744][T21120] netlink: 'syz.2.18127': attribute type 10 has an invalid length. [ 2503.714236][T21120] bond0: (slave bond_slave_0): Releasing backup interface [ 2503.813798][T21132] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18131'. [ 2503.845474][T21132] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2503.895876][T21128] netlink: 'syz.0.18129': attribute type 39 has an invalid length. [ 2503.956515][T21134] device syzkaller0 entered promiscuous mode [ 2504.082882][T21146] netlink: 'syz.1.18134': attribute type 11 has an invalid length. [ 2504.091604][T21146] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18134'. [ 2504.327346][T21146] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2504.336363][T21146] CPU: 1 PID: 21146 Comm: syz.1.18134 Not tainted syzkaller #0 [ 2504.343941][T21146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2504.354002][T21146] Call Trace: [ 2504.357292][T21146] [ 2504.360227][T21146] dump_stack_lvl+0x188/0x250 [ 2504.364916][T21146] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2504.371087][T21146] ? show_regs_print_info+0x20/0x20 [ 2504.376325][T21146] ? load_image+0x400/0x400 [ 2504.380865][T21146] sysfs_warn_dup+0x8a/0xa0 [ 2504.385394][T21146] sysfs_do_create_link_sd+0xc0/0x110 [ 2504.390778][T21146] device_add+0x7ed/0xfb0 [ 2504.395138][T21146] wiphy_register+0x1e81/0x2c30 [ 2504.400031][T21146] ? cfg80211_event_work+0x40/0x40 [ 2504.405151][T21146] ? minstrel_ht_alloc+0x808/0x980 [ 2504.410289][T21146] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2504.416555][T21146] ieee80211_register_hw+0x2aa1/0x3af0 [ 2504.422066][T21146] ? ieee80211_tasklet_handler+0x20/0x20 [ 2504.427724][T21146] ? lockdep_hardirqs_on+0x94/0x140 [ 2504.432942][T21146] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2504.439304][T21146] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2504.445068][T21146] hwsim_new_radio_nl+0xa6f/0xc40 [ 2504.450154][T21146] genl_rcv_msg+0xcea/0xf90 [ 2504.454666][T21146] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2504.460840][T21146] ? genl_bind+0x380/0x380 [ 2504.465312][T21146] ? verify_lock_unused+0x140/0x140 [ 2504.470532][T21146] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 2504.477163][T21146] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2504.483706][T21146] netlink_rcv_skb+0x1f5/0x440 [ 2504.488488][T21146] ? genl_bind+0x380/0x380 [ 2504.492931][T21146] ? netlink_ack+0xb50/0xb50 [ 2504.497537][T21146] ? __lock_acquire+0x7d10/0x7d10 [ 2504.502601][T21146] ? down_read+0x1aa/0x2e0 [ 2504.507040][T21146] genl_rcv+0x24/0x40 [ 2504.511027][T21146] netlink_unicast+0x774/0x920 [ 2504.515815][T21146] netlink_sendmsg+0x8ba/0xbe0 [ 2504.520685][T21146] ? netlink_getsockopt+0x570/0x570 [ 2504.525898][T21146] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2504.531200][T21146] ? security_socket_sendmsg+0x7c/0xa0 [ 2504.536669][T21146] ? netlink_getsockopt+0x570/0x570 [ 2504.541963][T21146] ____sys_sendmsg+0x5b7/0x8f0 [ 2504.546755][T21146] ? __sys_sendmsg_sock+0x30/0x30 [ 2504.551804][T21146] ? import_iovec+0x6f/0xa0 [ 2504.556332][T21146] ___sys_sendmsg+0x236/0x2e0 [ 2504.561049][T21146] ? __sys_sendmsg+0x2a0/0x2a0 [ 2504.565838][T21146] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2504.572031][T21146] __se_sys_sendmsg+0x1af/0x290 [ 2504.576911][T21146] ? __x64_sys_sendmsg+0x80/0x80 [ 2504.581960][T21146] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2504.587963][T21146] ? lockdep_hardirqs_on+0x94/0x140 [ 2504.593186][T21146] do_syscall_64+0x4c/0xa0 [ 2504.597615][T21146] ? clear_bhb_loop+0x30/0x80 [ 2504.602308][T21146] ? clear_bhb_loop+0x30/0x80 [ 2504.607000][T21146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2504.612905][T21146] RIP: 0033:0x7f80277ffcb9 [ 2504.617341][T21146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2504.636957][T21146] RSP: 002b:00007f8025a5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2504.645388][T21146] RAX: ffffffffffffffda RBX: 00007f8027a7afa0 RCX: 00007f80277ffcb9 [ 2504.653376][T21146] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2504.661367][T21146] RBP: 00007f802786dbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2504.669364][T21146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2504.677349][T21146] R13: 00007f8027a7b038 R14: 00007f8027a7afa0 R15: 00007ffcce587688 [ 2504.685442][T21146] [ 2504.760463][T21139] netlink: 'syz.4.18132': attribute type 2 has an invalid length. [ 2504.774362][T21139] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.18132'. [ 2505.288923][T21179] FAULT_INJECTION: forcing a failure. [ 2505.288923][T21179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2505.325009][T21179] CPU: 0 PID: 21179 Comm: syz.3.18145 Not tainted syzkaller #0 [ 2505.332616][T21179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2505.342691][T21179] Call Trace: [ 2505.345981][T21179] [ 2505.348926][T21179] dump_stack_lvl+0x188/0x250 [ 2505.353644][T21179] ? show_regs_print_info+0x20/0x20 [ 2505.358867][T21179] ? load_image+0x400/0x400 [ 2505.363419][T21179] ? __lock_acquire+0x7d10/0x7d10 [ 2505.365374][T21172] netlink: 'syz.0.18141': attribute type 13 has an invalid length. [ 2505.368490][T21179] should_fail+0x38c/0x4c0 [ 2505.368540][T21179] _copy_to_user+0x2e/0x130 [ 2505.385354][T21179] simple_read_from_buffer+0xe3/0x150 [ 2505.390767][T21179] proc_fail_nth_read+0x1a6/0x220 [ 2505.395821][T21179] ? proc_fault_inject_write+0x310/0x310 [ 2505.401497][T21179] ? fsnotify_perm+0x254/0x560 [ 2505.406286][T21179] ? proc_fault_inject_write+0x310/0x310 [ 2505.411964][T21179] vfs_read+0x301/0xd60 [ 2505.416169][T21179] ? kernel_read+0x1e0/0x1e0 [ 2505.420810][T21179] ? __fget_files+0x40f/0x480 [ 2505.425539][T21179] ? mutex_lock_nested+0x17/0x20 [ 2505.430499][T21179] ? __fdget_pos+0x2bf/0x370 [ 2505.435115][T21179] ? ksys_read+0x71/0x260 [ 2505.439565][T21179] ksys_read+0x152/0x260 [ 2505.443835][T21179] ? vfs_write+0xd60/0xd60 [ 2505.448369][T21179] ? lockdep_hardirqs_on+0x94/0x140 [ 2505.449271][T21172] device macvtap0 entered promiscuous mode [ 2505.453593][T21179] do_syscall_64+0x4c/0xa0 [ 2505.453621][T21179] ? clear_bhb_loop+0x30/0x80 [ 2505.453639][T21179] ? clear_bhb_loop+0x30/0x80 [ 2505.453662][T21179] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2505.453680][T21179] RIP: 0033:0x7fd7dd78f58e [ 2505.453706][T21179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2505.453724][T21179] RSP: 002b:00007fd7dba29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2505.453750][T21179] RAX: ffffffffffffffda RBX: 00007fd7dba2a6c0 RCX: 00007fd7dd78f58e [ 2505.453764][T21179] RDX: 000000000000000f RSI: 00007fd7dba2a0a0 RDI: 0000000000000005 [ 2505.453780][T21179] RBP: 00007fd7dba2a090 R08: 0000000000000000 R09: 0000000000000000 [ 2505.453793][T21179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2505.453808][T21179] R13: 00007fd7dda4a038 R14: 00007fd7dda49fa0 R15: 00007ffc6bceb388 [ 2505.453865][T21179] [ 2505.463280][ T2377] Bluetooth: hci1: command 0x0406 tx timeout [ 2505.562130][T21172] macvtap0: refused to change device tx_queue_len [ 2505.634645][T21186] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18147'. [ 2505.660885][T21186] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2505.672611][T21186] CPU: 0 PID: 21186 Comm: syz.2.18147 Not tainted syzkaller #0 [ 2505.680206][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2505.690373][T21186] Call Trace: [ 2505.693663][T21186] [ 2505.696607][T21186] dump_stack_lvl+0x188/0x250 [ 2505.701299][T21186] ? show_regs_print_info+0x20/0x20 [ 2505.706502][T21186] ? load_image+0x400/0x400 [ 2505.711034][T21186] sysfs_warn_dup+0x8a/0xa0 [ 2505.715558][T21186] sysfs_do_create_link_sd+0xc0/0x110 [ 2505.720958][T21186] device_add+0x7ed/0xfb0 [ 2505.725412][T21186] wiphy_register+0x1e81/0x2c30 [ 2505.730312][T21186] ? cfg80211_event_work+0x40/0x40 [ 2505.735443][T21186] ? minstrel_ht_alloc+0x808/0x980 [ 2505.740574][T21186] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2505.746655][T21186] ieee80211_register_hw+0x2aa1/0x3af0 [ 2505.752128][T21186] ? lockdep_hardirqs_on+0x94/0x140 [ 2505.757357][T21186] ? ieee80211_tasklet_handler+0x20/0x20 [ 2505.763009][T21186] ? rcu_is_watching+0x11/0xa0 [ 2505.767883][T21186] ? memset+0x1e/0x40 [ 2505.771960][T21186] ? hrtimer_init+0x10c/0x220 [ 2505.776650][T21186] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2505.782379][T21186] hwsim_new_radio_nl+0xa6f/0xc40 [ 2505.787421][T21186] genl_rcv_msg+0xcea/0xf90 [ 2505.791956][T21186] ? genl_bind+0x380/0x380 [ 2505.796399][T21186] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2505.801616][T21186] ? verify_lock_unused+0x140/0x140 [ 2505.806833][T21186] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2505.812373][T21186] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2505.819043][T21186] ? perf_trace_lock+0xe4/0x390 [ 2505.823899][T21186] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2505.830454][T21186] netlink_rcv_skb+0x1f5/0x440 [ 2505.835233][T21186] ? genl_bind+0x380/0x380 [ 2505.839717][T21186] ? netlink_ack+0xb50/0xb50 [ 2505.844787][T21186] ? __lock_acquire+0x7d10/0x7d10 [ 2505.849819][T21186] ? down_read+0x1aa/0x2e0 [ 2505.854331][T21186] genl_rcv+0x24/0x40 [ 2505.858315][T21186] netlink_unicast+0x774/0x920 [ 2505.863073][T21186] netlink_sendmsg+0x8ba/0xbe0 [ 2505.867831][T21186] ? netlink_getsockopt+0x570/0x570 [ 2505.873015][T21186] ? aa_sock_msg_perm+0x94/0x150 [ 2505.878027][T21186] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2505.883295][T21186] ? security_socket_sendmsg+0x7c/0xa0 [ 2505.888890][T21186] ? netlink_getsockopt+0x570/0x570 [ 2505.894092][T21186] ____sys_sendmsg+0x5b7/0x8f0 [ 2505.898855][T21186] ? __sys_sendmsg_sock+0x30/0x30 [ 2505.903879][T21186] ? import_iovec+0x6f/0xa0 [ 2505.908376][T21186] ___sys_sendmsg+0x236/0x2e0 [ 2505.913049][T21186] ? __sys_sendmsg+0x2a0/0x2a0 [ 2505.917811][T21186] ? trace_event_raw_event_lock+0x270/0x270 [ 2505.923726][T21186] __se_sys_sendmsg+0x1af/0x290 [ 2505.928564][T21186] ? __x64_sys_sendmsg+0x80/0x80 [ 2505.933486][T21186] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2505.939460][T21186] ? lockdep_hardirqs_on+0x94/0x140 [ 2505.944734][T21186] do_syscall_64+0x4c/0xa0 [ 2505.949140][T21186] ? clear_bhb_loop+0x30/0x80 [ 2505.953803][T21186] ? clear_bhb_loop+0x30/0x80 [ 2505.958469][T21186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2505.964364][T21186] RIP: 0033:0x7ff24ab31cb9 [ 2505.968794][T21186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2505.988400][T21186] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2505.996818][T21186] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2506.004786][T21186] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2506.012740][T21186] RBP: 00007ff24ab9fbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2506.020951][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2506.028913][T21186] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2506.036889][T21186] [ 2506.068728][T21180] €Â0: renamed from pim6reg1 [ 2506.175150][T21198] netlink: 'syz.4.18153': attribute type 11 has an invalid length. [ 2506.191327][T21188] netlink: 'syz.3.18148': attribute type 39 has an invalid length. [ 2506.203198][T21198] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.18153'. [ 2506.408436][T21201] device syzkaller0 entered promiscuous mode [ 2506.466647][T21198] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2506.787728][T21201] netlink: 'syz.2.18152': attribute type 2 has an invalid length. [ 2506.803074][T21201] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18152'. [ 2508.397265][T21216] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2508.403720][T21216] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2508.414665][T21208] netlink: 'syz.4.18154': attribute type 29 has an invalid length. [ 2508.435761][T21208] netlink: 'syz.4.18154': attribute type 29 has an invalid length. [ 2508.490753][T21208] netlink: 'syz.4.18154': attribute type 29 has an invalid length. [ 2508.734580][T21225] netlink: 'syz.1.18160': attribute type 13 has an invalid length. [ 2508.752967][T21225] device macvtap0 entered promiscuous mode [ 2508.807525][T21225] macvtap0: refused to change device tx_queue_len [ 2508.861869][T21245] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18163'. [ 2508.953071][T21245] openvswitch: netlink: Flow key attribute not present in set flow. [ 2509.293382][T21257] netlink: 'syz.1.18167': attribute type 39 has an invalid length. [ 2512.034141][T21264] netlink: 'syz.3.18168': attribute type 11 has an invalid length. [ 2512.050861][T21264] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.18168'. [ 2512.107982][T21264] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2512.286863][T21276] €Â0: renamed from pim6reg1 [ 2512.560996][T21289] FAULT_INJECTION: forcing a failure. [ 2512.560996][T21289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2512.621727][T21289] CPU: 0 PID: 21289 Comm: syz.0.18176 Not tainted syzkaller #0 [ 2512.629470][T21289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2512.639546][T21289] Call Trace: [ 2512.642838][T21289] [ 2512.645787][T21289] dump_stack_lvl+0x188/0x250 [ 2512.650592][T21289] ? show_regs_print_info+0x20/0x20 [ 2512.656024][T21289] ? load_image+0x400/0x400 [ 2512.660532][T21289] ? __lock_acquire+0x7d10/0x7d10 [ 2512.665643][T21289] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2512.671497][T21289] should_fail+0x38c/0x4c0 [ 2512.675938][T21289] _copy_from_user+0x2e/0x170 [ 2512.680612][T21289] __copy_msghdr_from_user+0xc9/0x630 [ 2512.685989][T21289] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2512.691808][T21289] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2512.697142][T21289] ___sys_sendmsg+0x19a/0x2e0 [ 2512.701960][T21289] ? __sys_sendmsg+0x2a0/0x2a0 [ 2512.706854][T21289] __se_sys_sendmsg+0x1af/0x290 [ 2512.711706][T21289] ? __x64_sys_sendmsg+0x80/0x80 [ 2512.716674][T21289] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2512.722728][T21289] ? lockdep_hardirqs_on+0x94/0x140 [ 2512.727962][T21289] do_syscall_64+0x4c/0xa0 [ 2512.732384][T21289] ? clear_bhb_loop+0x30/0x80 [ 2512.737061][T21289] ? clear_bhb_loop+0x30/0x80 [ 2512.741775][T21289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2512.747865][T21289] RIP: 0033:0x7fd4c99f9cb9 [ 2512.752290][T21289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2512.771914][T21289] RSP: 002b:00007fd4c7c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.780339][T21289] RAX: ffffffffffffffda RBX: 00007fd4c9c74fa0 RCX: 00007fd4c99f9cb9 [ 2512.788304][T21289] RDX: 0000000000040880 RSI: 0000200000007940 RDI: 0000000000000004 [ 2512.796268][T21289] RBP: 00007fd4c7c55090 R08: 0000000000000000 R09: 0000000000000000 [ 2512.804242][T21289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2512.812209][T21289] R13: 00007fd4c9c75038 R14: 00007fd4c9c74fa0 R15: 00007ffc019f2438 [ 2512.820193][T21289] [ 2514.015033][T21293] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18177'. [ 2514.034211][T21295] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.18179'. [ 2514.038170][T21293] openvswitch: netlink: Flow key attribute not present in set flow. [ 2514.107897][T21295] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2514.129407][T21295] CPU: 1 PID: 21295 Comm: syz.3.18179 Not tainted syzkaller #0 [ 2514.136990][T21295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2514.147143][T21295] Call Trace: [ 2514.150417][T21295] [ 2514.153379][T21295] dump_stack_lvl+0x188/0x250 [ 2514.158097][T21295] ? show_regs_print_info+0x20/0x20 [ 2514.163303][T21295] ? load_image+0x400/0x400 [ 2514.167814][T21295] sysfs_warn_dup+0x8a/0xa0 [ 2514.172319][T21295] sysfs_do_create_link_sd+0xc0/0x110 [ 2514.177715][T21295] device_add+0x7ed/0xfb0 [ 2514.182043][T21295] wiphy_register+0x1e81/0x2c30 [ 2514.187011][T21295] ? cfg80211_event_work+0x40/0x40 [ 2514.192142][T21295] ? minstrel_ht_alloc+0x808/0x980 [ 2514.197252][T21295] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2514.203328][T21295] ieee80211_register_hw+0x2aa1/0x3af0 [ 2514.208881][T21295] ? lockdep_hardirqs_on+0x94/0x140 [ 2514.214081][T21295] ? ieee80211_tasklet_handler+0x20/0x20 [ 2514.219719][T21295] ? rcu_is_watching+0x11/0xa0 [ 2514.224482][T21295] ? memset+0x1e/0x40 [ 2514.228461][T21295] ? hrtimer_init+0x10c/0x220 [ 2514.233236][T21295] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2514.239080][T21295] hwsim_new_radio_nl+0xa6f/0xc40 [ 2514.244282][T21295] genl_rcv_msg+0xcea/0xf90 [ 2514.248812][T21295] ? genl_bind+0x380/0x380 [ 2514.253244][T21295] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2514.258454][T21295] ? verify_lock_unused+0x140/0x140 [ 2514.263671][T21295] ? dev_queue_xmit+0x20/0x20 [ 2514.268347][T21295] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2514.274851][T21295] netlink_rcv_skb+0x1f5/0x440 [ 2514.279606][T21295] ? genl_bind+0x380/0x380 [ 2514.284009][T21295] ? netlink_ack+0xb50/0xb50 [ 2514.288601][T21295] ? __lock_acquire+0x7d10/0x7d10 [ 2514.293624][T21295] ? down_read+0x1aa/0x2e0 [ 2514.298040][T21295] genl_rcv+0x24/0x40 [ 2514.302015][T21295] netlink_unicast+0x774/0x920 [ 2514.306778][T21295] netlink_sendmsg+0x8ba/0xbe0 [ 2514.311534][T21295] ? netlink_getsockopt+0x570/0x570 [ 2514.316718][T21295] ? aa_sock_msg_perm+0x94/0x150 [ 2514.321649][T21295] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2514.326921][T21295] ? security_socket_sendmsg+0x7c/0xa0 [ 2514.332372][T21295] ? netlink_getsockopt+0x570/0x570 [ 2514.337788][T21295] ____sys_sendmsg+0x5b7/0x8f0 [ 2514.342592][T21295] ? __sys_sendmsg_sock+0x30/0x30 [ 2514.347615][T21295] ? import_iovec+0x6f/0xa0 [ 2514.352118][T21295] ___sys_sendmsg+0x236/0x2e0 [ 2514.356788][T21295] ? __sys_sendmsg+0x2a0/0x2a0 [ 2514.361550][T21295] ? trace_event_raw_event_lock+0x270/0x270 [ 2514.367453][T21295] __se_sys_sendmsg+0x1af/0x290 [ 2514.372301][T21295] ? __x64_sys_sendmsg+0x80/0x80 [ 2514.377227][T21295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2514.383210][T21295] ? lockdep_hardirqs_on+0x94/0x140 [ 2514.388403][T21295] do_syscall_64+0x4c/0xa0 [ 2514.392808][T21295] ? clear_bhb_loop+0x30/0x80 [ 2514.397470][T21295] ? clear_bhb_loop+0x30/0x80 [ 2514.402139][T21295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2514.408019][T21295] RIP: 0033:0x7fd7dd7cecb9 [ 2514.412426][T21295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2514.432112][T21295] RSP: 002b:00007fd7dba2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2514.440532][T21295] RAX: ffffffffffffffda RBX: 00007fd7dda49fa0 RCX: 00007fd7dd7cecb9 [ 2514.448501][T21295] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2514.456472][T21295] RBP: 00007fd7dd83cbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2514.464439][T21295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2514.472417][T21295] R13: 00007fd7dda4a038 R14: 00007fd7dda49fa0 R15: 00007ffc6bceb388 [ 2514.480403][T21295] [ 2514.533067][T21299] netlink: 'syz.4.18182': attribute type 39 has an invalid length. [ 2515.248615][T21314] chnl_net:caif_netlink_parms(): no params data found [ 2515.338013][T21314] bridge0: port 1(bridge_slave_0) entered blocking state [ 2515.352252][T21314] bridge0: port 1(bridge_slave_0) entered disabled state [ 2515.361115][T21314] device bridge_slave_0 entered promiscuous mode [ 2515.377672][T21314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2515.392616][T21314] bridge0: port 2(bridge_slave_1) entered disabled state [ 2515.404257][T21314] device bridge_slave_1 entered promiscuous mode [ 2515.443141][T21314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2515.472119][T21314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2515.557174][T21314] team0: Port device team_slave_0 added [ 2515.591177][T21314] team0: Port device team_slave_1 added [ 2515.682454][T21314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2515.705360][T21314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2515.783356][T21314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2515.815022][T21314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2515.822015][T21314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2515.905127][T21314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2517.182990][ T2377] Bluetooth: hci5: command 0x0409 tx timeout [ 2517.720779][T21314] device hsr_slave_0 entered promiscuous mode [ 2517.795262][T21314] device hsr_slave_1 entered promiscuous mode [ 2517.840063][T21314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2517.863505][T21314] Cannot create hsr debugfs directory [ 2518.119753][T21336] FAULT_INJECTION: forcing a failure. [ 2518.119753][T21336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2518.170493][T21336] CPU: 1 PID: 21336 Comm: syz.0.18191 Not tainted syzkaller #0 [ 2518.178089][T21336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2518.188281][T21336] Call Trace: [ 2518.191578][T21336] [ 2518.194522][T21336] dump_stack_lvl+0x188/0x250 [ 2518.199227][T21336] ? show_regs_print_info+0x20/0x20 [ 2518.204449][T21336] ? load_image+0x400/0x400 [ 2518.208978][T21336] ? __kasan_kmalloc+0xcc/0xf0 [ 2518.213769][T21336] ? __lock_acquire+0x7d10/0x7d10 [ 2518.218804][T21336] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2518.225066][T21336] should_fail+0x38c/0x4c0 [ 2518.229521][T21336] _copy_from_iter+0x22e/0x1170 [ 2518.234491][T21336] ? __lock_acquire+0x7d10/0x7d10 [ 2518.239638][T21336] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 2518.245054][T21336] ? __virt_addr_valid+0x3c6/0x470 [ 2518.250373][T21336] ? __phys_addr_symbol+0x2b/0x70 [ 2518.255418][T21336] ? __check_object_size+0x30c/0x410 [ 2518.260757][T21336] kernfs_fop_write_iter+0x1a4/0x4c0 [ 2518.266071][T21336] ? iov_iter_init+0xb4/0x170 [ 2518.270772][T21336] vfs_write+0x745/0xd60 [ 2518.275034][T21336] ? file_end_write+0x250/0x250 [ 2518.279917][T21336] ? __fget_files+0x40f/0x480 [ 2518.284725][T21336] ? mutex_lock_nested+0x17/0x20 [ 2518.289686][T21336] ? __fdget_pos+0x2bf/0x370 [ 2518.294377][T21336] ? ksys_write+0x71/0x260 [ 2518.298846][T21336] ksys_write+0x152/0x260 [ 2518.303276][T21336] ? __ia32_sys_read+0x80/0x80 [ 2518.308068][T21336] ? lockdep_hardirqs_on+0x94/0x140 [ 2518.313384][T21336] do_syscall_64+0x4c/0xa0 [ 2518.317809][T21336] ? clear_bhb_loop+0x30/0x80 [ 2518.322491][T21336] ? clear_bhb_loop+0x30/0x80 [ 2518.327182][T21336] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2518.333096][T21336] RIP: 0033:0x7fd4c99f9cb9 [ 2518.337544][T21336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2518.357344][T21336] RSP: 002b:00007fd4c7c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2518.365798][T21336] RAX: ffffffffffffffda RBX: 00007fd4c9c74fa0 RCX: 00007fd4c99f9cb9 [ 2518.373802][T21336] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000008 [ 2518.381792][T21336] RBP: 00007fd4c7c55090 R08: 0000000000000000 R09: 0000000000000000 [ 2518.389781][T21336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2518.397771][T21336] R13: 00007fd4c9c75038 R14: 00007fd4c9c74fa0 R15: 00007ffc019f2438 [ 2518.405789][T21336] [ 2518.473511][T21340] device syzkaller0 entered promiscuous mode [ 2518.498194][T21340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18195'. [ 2519.263366][T18145] Bluetooth: hci5: command 0x041b tx timeout [ 2521.052635][T21314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2521.126299][T21348] netlink: 'syz.0.18197': attribute type 11 has an invalid length. [ 2521.137793][T21348] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.18197'. [ 2521.182589][T21340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18195'. [ 2521.266561][T21314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2521.305952][T21348] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2521.319333][T21348] CPU: 0 PID: 21348 Comm: syz.0.18197 Not tainted syzkaller #0 [ 2521.326916][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2521.337004][T21348] Call Trace: [ 2521.340468][T21348] [ 2521.342907][T29364] Bluetooth: hci5: command 0x040f tx timeout [ 2521.343400][T21348] dump_stack_lvl+0x188/0x250 [ 2521.354143][T21348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2521.360320][T21348] ? show_regs_print_info+0x20/0x20 [ 2521.365534][T21348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2521.371719][T21348] sysfs_warn_dup+0x8a/0xa0 [ 2521.376239][T21348] sysfs_do_create_link_sd+0xc0/0x110 [ 2521.381627][T21348] device_add+0x7ed/0xfb0 [ 2521.385981][T21348] wiphy_register+0x1e81/0x2c30 [ 2521.390864][T21348] ? cfg80211_event_work+0x40/0x40 [ 2521.396075][T21348] ? minstrel_ht_alloc+0x808/0x980 [ 2521.401285][T21348] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2521.407366][T21348] ieee80211_register_hw+0x2aa1/0x3af0 [ 2521.412856][T21348] ? ieee80211_tasklet_handler+0x20/0x20 [ 2521.418511][T21348] ? rcu_is_watching+0x11/0xa0 [ 2521.423288][T21348] ? memset+0x1e/0x40 [ 2521.427277][T21348] ? hrtimer_init+0x10c/0x220 [ 2521.431971][T21348] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2521.437735][T21348] hwsim_new_radio_nl+0xa6f/0xc40 [ 2521.442790][T21348] genl_rcv_msg+0xcea/0xf90 [ 2521.447335][T21348] ? genl_bind+0x380/0x380 [ 2521.451766][T21348] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2521.456974][T21348] ? verify_lock_unused+0x140/0x140 [ 2521.462215][T21348] ? dev_queue_xmit+0x20/0x20 [ 2521.466904][T21348] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2521.473434][T21348] netlink_rcv_skb+0x1f5/0x440 [ 2521.478215][T21348] ? genl_bind+0x380/0x380 [ 2521.482740][T21348] ? netlink_ack+0xb50/0xb50 [ 2521.487346][T21348] ? __lock_acquire+0x7d10/0x7d10 [ 2521.492390][T21348] ? down_read+0x1aa/0x2e0 [ 2521.496824][T21348] genl_rcv+0x24/0x40 [ 2521.500807][T21348] netlink_unicast+0x774/0x920 [ 2521.505588][T21348] netlink_sendmsg+0x8ba/0xbe0 [ 2521.510375][T21348] ? netlink_getsockopt+0x570/0x570 [ 2521.515684][T21348] ? aa_sock_msg_perm+0x94/0x150 [ 2521.520644][T21348] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2521.526044][T21348] ? security_socket_sendmsg+0x7c/0xa0 [ 2521.531554][T21348] ? netlink_getsockopt+0x570/0x570 [ 2521.536781][T21348] ____sys_sendmsg+0x5b7/0x8f0 [ 2521.541571][T21348] ? __sys_sendmsg_sock+0x30/0x30 [ 2521.546612][T21348] ? import_iovec+0x6f/0xa0 [ 2521.551385][T21348] ___sys_sendmsg+0x236/0x2e0 [ 2521.556075][T21348] ? __sys_sendmsg+0x2a0/0x2a0 [ 2521.560857][T21348] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2521.566868][T21348] __se_sys_sendmsg+0x1af/0x290 [ 2521.571726][T21348] ? __x64_sys_sendmsg+0x80/0x80 [ 2521.576674][T21348] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2521.582580][T21348] do_syscall_64+0x4c/0xa0 [ 2521.587003][T21348] ? clear_bhb_loop+0x30/0x80 [ 2521.591701][T21348] ? clear_bhb_loop+0x30/0x80 [ 2521.596415][T21348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2521.602535][T21348] RIP: 0033:0x7fd4c99f9cb9 [ 2521.607152][T21348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2521.626957][T21348] RSP: 002b:00007fd4c7c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2521.635362][T21348] RAX: ffffffffffffffda RBX: 00007fd4c9c74fa0 RCX: 00007fd4c99f9cb9 [ 2521.643406][T21348] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2521.651362][T21348] RBP: 00007fd4c9a67bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2521.659320][T21348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2521.667300][T21348] R13: 00007fd4c9c75038 R14: 00007fd4c9c74fa0 R15: 00007ffc019f2438 [ 2521.675271][T21348] [ 2521.802305][T21314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2521.882946][T21314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2521.941147][T21360] netlink: 'syz.2.18208': attribute type 11 has an invalid length. [ 2521.973060][T21360] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18208'. [ 2522.055341][T21314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2522.103150][T21314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2522.219756][T21314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2522.240333][T21314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2522.365526][T21389] netlink: 2 bytes leftover after parsing attributes in process `syz.0.18210'. [ 2522.394140][T21392] netlink: 'syz.3.18211': attribute type 11 has an invalid length. [ 2522.402160][T21392] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.18211'. [ 2522.506931][T21392] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2522.550210][T21392] CPU: 1 PID: 21392 Comm: syz.3.18211 Not tainted syzkaller #0 [ 2522.557860][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2522.567994][T21392] Call Trace: [ 2522.571263][T21392] [ 2522.574185][T21392] dump_stack_lvl+0x188/0x250 [ 2522.578943][T21392] ? show_regs_print_info+0x20/0x20 [ 2522.584136][T21392] ? load_image+0x400/0x400 [ 2522.588665][T21392] sysfs_warn_dup+0x8a/0xa0 [ 2522.593360][T21392] sysfs_do_create_link_sd+0xc0/0x110 [ 2522.598747][T21392] device_add+0x7ed/0xfb0 [ 2522.603104][T21392] wiphy_register+0x1e81/0x2c30 [ 2522.608046][T21392] ? cfg80211_event_work+0x40/0x40 [ 2522.613278][T21392] ? minstrel_ht_alloc+0x819/0x980 [ 2522.618619][T21392] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2522.624720][T21392] ieee80211_register_hw+0x2aa1/0x3af0 [ 2522.630221][T21392] ? ieee80211_tasklet_handler+0x20/0x20 [ 2522.635868][T21392] ? lockdep_hardirqs_on+0x94/0x140 [ 2522.641091][T21392] ? rcu_is_watching+0x11/0xa0 [ 2522.645959][T21392] ? memset+0x1e/0x40 [ 2522.649980][T21392] ? hrtimer_init+0x10c/0x220 [ 2522.654693][T21392] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2522.660458][T21392] hwsim_new_radio_nl+0xa6f/0xc40 [ 2522.665610][T21392] genl_rcv_msg+0xcea/0xf90 [ 2522.670146][T21392] ? genl_bind+0x380/0x380 [ 2522.674580][T21392] ? mark_lock+0x94/0x320 [ 2522.678954][T21392] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2522.685068][T21392] ? lock_chain_count+0x20/0x20 [ 2522.689927][T21392] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2522.696075][T21392] ? lockdep_hardirqs_on+0x94/0x140 [ 2522.701276][T21392] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2522.707783][T21392] netlink_rcv_skb+0x1f5/0x440 [ 2522.712755][T21392] ? genl_bind+0x380/0x380 [ 2522.717181][T21392] ? netlink_ack+0xb50/0xb50 [ 2522.721762][T21392] ? __lock_acquire+0x7d10/0x7d10 [ 2522.726795][T21392] ? down_read+0x1aa/0x2e0 [ 2522.731201][T21392] genl_rcv+0x24/0x40 [ 2522.735175][T21392] netlink_unicast+0x774/0x920 [ 2522.739940][T21392] netlink_sendmsg+0x8ba/0xbe0 [ 2522.744700][T21392] ? netlink_getsockopt+0x570/0x570 [ 2522.749893][T21392] ? aa_sock_msg_perm+0x94/0x150 [ 2522.754816][T21392] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2522.760085][T21392] ? security_socket_sendmsg+0x7c/0xa0 [ 2522.765527][T21392] ? netlink_getsockopt+0x570/0x570 [ 2522.770721][T21392] ____sys_sendmsg+0x5b7/0x8f0 [ 2522.775485][T21392] ? __sys_sendmsg_sock+0x30/0x30 [ 2522.780504][T21392] ? import_iovec+0x6f/0xa0 [ 2522.784999][T21392] ___sys_sendmsg+0x236/0x2e0 [ 2522.789668][T21392] ? __sys_sendmsg+0x2a0/0x2a0 [ 2522.794440][T21392] __se_sys_sendmsg+0x1af/0x290 [ 2522.799278][T21392] ? __x64_sys_sendmsg+0x80/0x80 [ 2522.804197][T21392] ? lockdep_hardirqs_on+0x94/0x140 [ 2522.809482][T21392] do_syscall_64+0x4c/0xa0 [ 2522.813886][T21392] ? clear_bhb_loop+0x30/0x80 [ 2522.818548][T21392] ? clear_bhb_loop+0x30/0x80 [ 2522.823210][T21392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2522.829174][T21392] RIP: 0033:0x7fd7dd7cecb9 [ 2522.833586][T21392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2522.853265][T21392] RSP: 002b:00007fd7dba2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2522.861671][T21392] RAX: ffffffffffffffda RBX: 00007fd7dda49fa0 RCX: 00007fd7dd7cecb9 [ 2522.869632][T21392] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2522.877681][T21392] RBP: 00007fd7dd83cbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2522.885831][T21392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2522.893814][T21392] R13: 00007fd7dda4a038 R14: 00007fd7dda49fa0 R15: 00007ffc6bceb388 [ 2522.901907][T21392] [ 2522.951617][T21314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2523.035819][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2523.048723][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2523.076990][T21314] 8021q: adding VLAN 0 to HW filter on device team0 [ 2523.115353][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2523.213582][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2523.287301][T12026] bridge0: port 1(bridge_slave_0) entered blocking state [ 2523.294871][T12026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2523.319686][T21400] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.18213'. [ 2523.337066][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2523.386571][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2523.417326][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2523.423306][ T7774] Bluetooth: hci5: command 0x0419 tx timeout [ 2523.446303][T12026] bridge0: port 2(bridge_slave_1) entered blocking state [ 2523.453508][T12026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2523.480109][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2523.516995][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2523.532031][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2523.551776][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2523.560963][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2523.578822][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2523.599367][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2523.619641][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2523.635736][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2523.649137][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2523.660336][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2523.678933][T21314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2523.888662][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2523.903629][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2523.916991][T21314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2524.243566][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2524.253617][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2524.281201][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2524.296935][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2524.321872][T21314] device veth0_vlan entered promiscuous mode [ 2524.332531][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2524.345286][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2524.365575][T21314] device veth1_vlan entered promiscuous mode [ 2524.373552][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2524.413961][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2524.433614][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2524.444762][T21314] device veth0_macvtap entered promiscuous mode [ 2524.463945][T21314] device veth1_macvtap entered promiscuous mode [ 2524.491155][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2524.507889][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.518609][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2524.535345][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.555915][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2524.570496][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.582858][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2524.598658][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.610293][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2524.628352][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.642430][T21314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2524.661846][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2524.677236][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2524.687648][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2524.701518][T29434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2524.720048][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2524.737930][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.750050][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2524.766372][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.781753][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2524.798014][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.810780][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2524.827669][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.839527][T21314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2524.856568][T21314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2524.870931][T21314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2524.886377][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2524.905801][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2524.924484][T21314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2524.939947][T21314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2524.949739][T21314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2524.965097][T21314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2525.410100][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2525.426605][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2525.465716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2525.489742][T21417] netlink: 'syz.2.18216': attribute type 11 has an invalid length. [ 2525.508945][T21417] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18216'. [ 2525.519992][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2525.532158][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2525.546924][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2525.594797][T21431] FAULT_INJECTION: forcing a failure. [ 2525.594797][T21431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2525.622580][T21431] CPU: 0 PID: 21431 Comm: syz.1.18221 Not tainted syzkaller #0 [ 2525.630165][T21431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2525.640231][T21431] Call Trace: [ 2525.643612][T21431] [ 2525.646559][T21431] dump_stack_lvl+0x188/0x250 [ 2525.651256][T21431] ? show_regs_print_info+0x20/0x20 [ 2525.656477][T21431] ? load_image+0x400/0x400 [ 2525.661002][T21431] ? __lock_acquire+0x7d10/0x7d10 [ 2525.666133][T21431] should_fail+0x38c/0x4c0 [ 2525.670574][T21431] _copy_from_user+0x2e/0x170 [ 2525.675349][T21431] bpf_prog_test_run_flow_dissector+0x2c4/0x630 [ 2525.681623][T21431] ? __lock_acquire+0x7d10/0x7d10 [ 2525.686688][T21431] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 2525.692251][T21431] ? __fget_files+0x40f/0x480 [ 2525.696949][T21431] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 2525.702529][T21431] bpf_prog_test_run+0x31e/0x390 [ 2525.707679][T21431] __sys_bpf+0x5a5/0x6f0 [ 2525.711939][T21431] ? bpf_link_show_fdinfo+0x380/0x380 [ 2525.717339][T21431] ? vtime_user_exit+0x2c8/0x3e0 [ 2525.722282][T21431] __x64_sys_bpf+0x78/0x90 [ 2525.726704][T21431] do_syscall_64+0x4c/0xa0 [ 2525.731304][T21431] ? clear_bhb_loop+0x30/0x80 [ 2525.735990][T21431] ? clear_bhb_loop+0x30/0x80 [ 2525.740667][T21431] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2525.746548][T21431] RIP: 0033:0x7f80277ffcb9 [ 2525.751036][T21431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2525.770628][T21431] RSP: 002b:00007f8025a5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2525.779023][T21431] RAX: ffffffffffffffda RBX: 00007f8027a7afa0 RCX: 00007f80277ffcb9 [ 2525.786987][T21431] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 2525.795028][T21431] RBP: 00007f8025a5b090 R08: 0000000000000000 R09: 0000000000000000 [ 2525.803089][T21431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2525.811040][T21431] R13: 00007f8027a7b038 R14: 00007f8027a7afa0 R15: 00007ffcce587688 [ 2525.819180][T21431] [ 2526.040586][T21447] netlink: 'syz.0.18223': attribute type 11 has an invalid length. [ 2526.076390][T21449] netlink: 'syz.4.18226': attribute type 10 has an invalid length. [ 2526.111898][T21449] bond0: (slave bond_slave_0): Releasing backup interface [ 2526.112888][T21447] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.18223'. [ 2528.945322][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.951711][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.174709][T21486] sock: sock_set_timeout: `syz.2.18235' (pid 21486) tries to set negative timeout [ 2529.197822][T21483] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2529.204700][T21483] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2529.380097][T21495] netlink: 'syz.1.18242': attribute type 11 has an invalid length. [ 2529.401960][T21495] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18242'. [ 2529.463612][T21503] netlink: 'syz.3.18243': attribute type 10 has an invalid length. [ 2529.746143][T21513] netlink: 'syz.1.18247': attribute type 10 has an invalid length. [ 2529.764677][T21513] netlink: 55 bytes leftover after parsing attributes in process `syz.1.18247'. [ 2533.082301][T21534] netlink: 'syz.4.18257': attribute type 11 has an invalid length. [ 2533.093570][T21534] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.18257'. [ 2533.166145][T21534] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2537.034480][T21584] netlink: 'syz.3.18274': attribute type 11 has an invalid length. [ 2537.057920][T21582] netlink: 'syz.4.18273': attribute type 10 has an invalid length. [ 2537.075462][T21584] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.18274'. [ 2537.092969][T21582] netlink: 55 bytes leftover after parsing attributes in process `syz.4.18273'. [ 2538.224758][T21584] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2538.233446][T21584] CPU: 0 PID: 21584 Comm: syz.3.18274 Not tainted syzkaller #0 [ 2538.241038][T21584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2538.251364][T21584] Call Trace: [ 2538.254647][T21584] [ 2538.257585][T21584] dump_stack_lvl+0x188/0x250 [ 2538.262274][T21584] ? show_regs_print_info+0x20/0x20 [ 2538.267571][T21584] ? load_image+0x400/0x400 [ 2538.272296][T21584] sysfs_warn_dup+0x8a/0xa0 [ 2538.276821][T21584] sysfs_do_create_link_sd+0xc0/0x110 [ 2538.282218][T21584] device_add+0x7ed/0xfb0 [ 2538.287009][T21584] wiphy_register+0x1e81/0x2c30 [ 2538.291910][T21584] ? cfg80211_event_work+0x40/0x40 [ 2538.297060][T21584] ? minstrel_ht_alloc+0x808/0x980 [ 2538.302464][T21584] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2538.308548][T21584] ieee80211_register_hw+0x2aa1/0x3af0 [ 2538.314029][T21584] ? lockdep_hardirqs_on+0x94/0x140 [ 2538.319249][T21584] ? ieee80211_tasklet_handler+0x20/0x20 [ 2538.324980][T21584] ? rcu_is_watching+0x11/0xa0 [ 2538.329838][T21584] ? memset+0x1e/0x40 [ 2538.333822][T21584] ? hrtimer_init+0x10c/0x220 [ 2538.338503][T21584] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2538.344242][T21584] hwsim_new_radio_nl+0xa6f/0xc40 [ 2538.349288][T21584] genl_rcv_msg+0xcea/0xf90 [ 2538.353803][T21584] ? genl_bind+0x380/0x380 [ 2538.358312][T21584] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2538.363509][T21584] ? verify_lock_unused+0x140/0x140 [ 2538.368718][T21584] ? kmalloc_large_node+0xf2/0x190 [ 2538.373832][T21584] ? dev_queue_xmit+0x20/0x20 [ 2538.378506][T21584] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2538.385043][T21584] netlink_rcv_skb+0x1f5/0x440 [ 2538.389901][T21584] ? genl_bind+0x380/0x380 [ 2538.394408][T21584] ? netlink_ack+0xb50/0xb50 [ 2538.399002][T21584] ? __lock_acquire+0x7d10/0x7d10 [ 2538.404038][T21584] ? down_read+0x1aa/0x2e0 [ 2538.408455][T21584] genl_rcv+0x24/0x40 [ 2538.412438][T21584] netlink_unicast+0x774/0x920 [ 2538.417212][T21584] netlink_sendmsg+0x8ba/0xbe0 [ 2538.422000][T21584] ? netlink_getsockopt+0x570/0x570 [ 2538.427294][T21584] ? aa_sock_msg_perm+0x94/0x150 [ 2538.432233][T21584] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2538.437517][T21584] ? security_socket_sendmsg+0x7c/0xa0 [ 2538.443059][T21584] ? netlink_getsockopt+0x570/0x570 [ 2538.448251][T21584] ____sys_sendmsg+0x5b7/0x8f0 [ 2538.453024][T21584] ? __sys_sendmsg_sock+0x30/0x30 [ 2538.458064][T21584] ? import_iovec+0x6f/0xa0 [ 2538.462573][T21584] ___sys_sendmsg+0x236/0x2e0 [ 2538.467256][T21584] ? __sys_sendmsg+0x2a0/0x2a0 [ 2538.472035][T21584] ? percpu_counter_add_batch+0x13b/0x160 [ 2538.477780][T21584] __se_sys_sendmsg+0x1af/0x290 [ 2538.482639][T21584] ? __x64_sys_sendmsg+0x80/0x80 [ 2538.487573][T21584] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2538.493568][T21584] ? lockdep_hardirqs_on+0x94/0x140 [ 2538.498777][T21584] do_syscall_64+0x4c/0xa0 [ 2538.503193][T21584] ? clear_bhb_loop+0x30/0x80 [ 2538.507954][T21584] ? clear_bhb_loop+0x30/0x80 [ 2538.512659][T21584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2538.518555][T21584] RIP: 0033:0x7fd7dd7cecb9 [ 2538.522974][T21584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2538.542667][T21584] RSP: 002b:00007fd7dba2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2538.551087][T21584] RAX: ffffffffffffffda RBX: 00007fd7dda49fa0 RCX: 00007fd7dd7cecb9 [ 2538.559058][T21584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2538.567245][T21584] RBP: 00007fd7dd83cbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2538.575322][T21584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2538.583312][T21584] R13: 00007fd7dda4a038 R14: 00007fd7dda49fa0 R15: 00007ffc6bceb388 [ 2538.591325][T21584] [ 2538.674398][T21596] netlink: 'syz.1.18278': attribute type 10 has an invalid length. [ 2538.716852][T21596] bond0: (slave bond_slave_0): Releasing backup interface [ 2539.386420][T21639] netlink: 'syz.2.18292': attribute type 11 has an invalid length. [ 2539.418087][T21639] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18292'. [ 2539.515967][T21639] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2539.534229][T21639] CPU: 0 PID: 21639 Comm: syz.2.18292 Not tainted syzkaller #0 [ 2539.541816][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2539.551878][T21639] Call Trace: [ 2539.555163][T21639] [ 2539.558107][T21639] dump_stack_lvl+0x188/0x250 [ 2539.562801][T21639] ? show_regs_print_info+0x20/0x20 [ 2539.568213][T21639] ? load_image+0x400/0x400 [ 2539.572765][T21639] sysfs_warn_dup+0x8a/0xa0 [ 2539.577283][T21639] sysfs_do_create_link_sd+0xc0/0x110 [ 2539.582683][T21639] device_add+0x7ed/0xfb0 [ 2539.587041][T21639] wiphy_register+0x1e81/0x2c30 [ 2539.591927][T21639] ? cfg80211_event_work+0x40/0x40 [ 2539.597060][T21639] ? minstrel_ht_alloc+0x808/0x980 [ 2539.602182][T21639] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2539.608406][T21639] ieee80211_register_hw+0x2aa1/0x3af0 [ 2539.613883][T21639] ? lockdep_hardirqs_on+0x94/0x140 [ 2539.619109][T21639] ? ieee80211_tasklet_handler+0x20/0x20 [ 2539.624763][T21639] ? rcu_is_watching+0x11/0xa0 [ 2539.629639][T21639] ? memset+0x1e/0x40 [ 2539.633634][T21639] ? hrtimer_init+0x10c/0x220 [ 2539.638330][T21639] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2539.644084][T21639] hwsim_new_radio_nl+0xa6f/0xc40 [ 2539.649132][T21639] genl_rcv_msg+0xcea/0xf90 [ 2539.653649][T21639] ? genl_bind+0x380/0x380 [ 2539.658166][T21639] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2539.663369][T21639] ? verify_lock_unused+0x140/0x140 [ 2539.668588][T21639] ? kmalloc_large_node+0xf2/0x190 [ 2539.673706][T21639] ? dev_queue_xmit+0x20/0x20 [ 2539.678388][T21639] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2539.684922][T21639] netlink_rcv_skb+0x1f5/0x440 [ 2539.689704][T21639] ? genl_bind+0x380/0x380 [ 2539.694222][T21639] ? netlink_ack+0xb50/0xb50 [ 2539.698824][T21639] ? __lock_acquire+0x7d10/0x7d10 [ 2539.703963][T21639] ? down_read+0x1aa/0x2e0 [ 2539.708569][T21639] genl_rcv+0x24/0x40 [ 2539.712599][T21639] netlink_unicast+0x774/0x920 [ 2539.717383][T21639] netlink_sendmsg+0x8ba/0xbe0 [ 2539.722266][T21639] ? netlink_getsockopt+0x570/0x570 [ 2539.727481][T21639] ? aa_sock_msg_perm+0x94/0x150 [ 2539.732431][T21639] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2539.737726][T21639] ? security_socket_sendmsg+0x7c/0xa0 [ 2539.743196][T21639] ? netlink_getsockopt+0x570/0x570 [ 2539.748412][T21639] ____sys_sendmsg+0x5b7/0x8f0 [ 2539.753200][T21639] ? __sys_sendmsg_sock+0x30/0x30 [ 2539.758249][T21639] ? import_iovec+0x6f/0xa0 [ 2539.762778][T21639] ___sys_sendmsg+0x236/0x2e0 [ 2539.767476][T21639] ? __sys_sendmsg+0x2a0/0x2a0 [ 2539.772267][T21639] ? trace_event_raw_event_lock+0x270/0x270 [ 2539.778198][T21639] __se_sys_sendmsg+0x1af/0x290 [ 2539.783082][T21639] ? __x64_sys_sendmsg+0x80/0x80 [ 2539.788033][T21639] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2539.794035][T21639] ? lockdep_hardirqs_on+0x94/0x140 [ 2539.799256][T21639] do_syscall_64+0x4c/0xa0 [ 2539.803689][T21639] ? clear_bhb_loop+0x30/0x80 [ 2539.808464][T21639] ? clear_bhb_loop+0x30/0x80 [ 2539.813304][T21639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2539.819212][T21639] RIP: 0033:0x7ff24ab31cb9 [ 2539.823643][T21639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2539.843273][T21639] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2539.851703][T21639] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2539.859772][T21639] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2539.867754][T21639] RBP: 00007ff24ab9fbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2539.875741][T21639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2539.883724][T21639] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2539.891723][T21639] [ 2540.141320][T21646] netlink: 'syz.3.18294': attribute type 10 has an invalid length. [ 2540.166296][T21646] netlink: 55 bytes leftover after parsing attributes in process `syz.3.18294'. [ 2540.674297][T21658] netlink: 'syz.2.18296': attribute type 10 has an invalid length. [ 2540.946896][T21676] device syzkaller0 entered promiscuous mode [ 2540.979257][T21681] netlink: 'syz.3.18312': attribute type 11 has an invalid length. [ 2541.018272][T21681] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.18312'. [ 2541.104402][T21681] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2541.156677][T21681] CPU: 0 PID: 21681 Comm: syz.3.18312 Not tainted syzkaller #0 [ 2541.164266][T21681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2541.174339][T21681] Call Trace: [ 2541.177627][T21681] [ 2541.180652][T21681] dump_stack_lvl+0x188/0x250 [ 2541.185352][T21681] ? show_regs_print_info+0x20/0x20 [ 2541.190577][T21681] ? load_image+0x400/0x400 [ 2541.195114][T21681] sysfs_warn_dup+0x8a/0xa0 [ 2541.199661][T21681] sysfs_do_create_link_sd+0xc0/0x110 [ 2541.205142][T21681] device_add+0x7ed/0xfb0 [ 2541.209512][T21681] wiphy_register+0x1e81/0x2c30 [ 2541.214396][T21681] ? cfg80211_event_work+0x40/0x40 [ 2541.219549][T21681] ? minstrel_ht_alloc+0x808/0x980 [ 2541.224691][T21681] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2541.230784][T21681] ieee80211_register_hw+0x2aa1/0x3af0 [ 2541.236278][T21681] ? lockdep_hardirqs_on+0x94/0x140 [ 2541.241525][T21681] ? ieee80211_tasklet_handler+0x20/0x20 [ 2541.247276][T21681] ? rcu_is_watching+0x11/0xa0 [ 2541.252053][T21681] ? memset+0x1e/0x40 [ 2541.256038][T21681] ? hrtimer_init+0x10c/0x220 [ 2541.260739][T21681] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2541.266506][T21681] hwsim_new_radio_nl+0xa6f/0xc40 [ 2541.271573][T21681] genl_rcv_msg+0xcea/0xf90 [ 2541.276107][T21681] ? genl_bind+0x380/0x380 [ 2541.280556][T21681] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2541.285884][T21681] ? verify_lock_unused+0x140/0x140 [ 2541.291546][T21681] ? perf_trace_lock+0xe4/0x390 [ 2541.296436][T21681] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2541.302976][T21681] netlink_rcv_skb+0x1f5/0x440 [ 2541.307755][T21681] ? genl_bind+0x380/0x380 [ 2541.312193][T21681] ? netlink_ack+0xb50/0xb50 [ 2541.316792][T21681] ? __lock_acquire+0x7d10/0x7d10 [ 2541.322251][T21681] ? down_read+0x1aa/0x2e0 [ 2541.326655][T21681] genl_rcv+0x24/0x40 [ 2541.330620][T21681] netlink_unicast+0x774/0x920 [ 2541.335391][T21681] netlink_sendmsg+0x8ba/0xbe0 [ 2541.340150][T21681] ? netlink_getsockopt+0x570/0x570 [ 2541.345334][T21681] ? aa_sock_msg_perm+0x94/0x150 [ 2541.350262][T21681] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2541.355539][T21681] ? security_socket_sendmsg+0x7c/0xa0 [ 2541.361087][T21681] ? netlink_getsockopt+0x570/0x570 [ 2541.366279][T21681] ____sys_sendmsg+0x5b7/0x8f0 [ 2541.371077][T21681] ? __sys_sendmsg_sock+0x30/0x30 [ 2541.376100][T21681] ? import_iovec+0x6f/0xa0 [ 2541.380592][T21681] ___sys_sendmsg+0x236/0x2e0 [ 2541.385264][T21681] ? __sys_sendmsg+0x2a0/0x2a0 [ 2541.390047][T21681] __se_sys_sendmsg+0x1af/0x290 [ 2541.394883][T21681] ? __x64_sys_sendmsg+0x80/0x80 [ 2541.399805][T21681] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2541.405784][T21681] ? lockdep_hardirqs_on+0x94/0x140 [ 2541.411242][T21681] do_syscall_64+0x4c/0xa0 [ 2541.415650][T21681] ? clear_bhb_loop+0x30/0x80 [ 2541.420319][T21681] ? clear_bhb_loop+0x30/0x80 [ 2541.424980][T21681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2541.430881][T21681] RIP: 0033:0x7fd7dd7cecb9 [ 2541.435316][T21681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2541.455019][T21681] RSP: 002b:00007fd7dba2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2541.463424][T21681] RAX: ffffffffffffffda RBX: 00007fd7dda49fa0 RCX: 00007fd7dd7cecb9 [ 2541.471393][T21681] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2541.479372][T21681] RBP: 00007fd7dd83cbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2541.487342][T21681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2541.495303][T21681] R13: 00007fd7dda4a038 R14: 00007fd7dda49fa0 R15: 00007ffc6bceb388 [ 2541.503287][T21681] [ 2541.712675][T21699] netlink: 'syz.4.18320': attribute type 10 has an invalid length. [ 2542.161654][T21732] netlink: 'syz.3.18332': attribute type 9 has an invalid length. [ 2542.180395][T21732] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.18332'. [ 2542.253578][T21735] netlink: 180 bytes leftover after parsing attributes in process `syz.3.18332'. [ 2542.265418][T21731] netlink: 'syz.1.18329': attribute type 11 has an invalid length. [ 2542.288699][T21731] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18329'. [ 2542.305592][T21731] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2542.317324][T21731] CPU: 0 PID: 21731 Comm: syz.1.18329 Not tainted syzkaller #0 [ 2542.324896][T21731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2542.334945][T21731] Call Trace: [ 2542.338224][T21731] [ 2542.341143][T21731] dump_stack_lvl+0x188/0x250 [ 2542.345818][T21731] ? show_regs_print_info+0x20/0x20 [ 2542.351016][T21731] ? load_image+0x400/0x400 [ 2542.355533][T21731] sysfs_warn_dup+0x8a/0xa0 [ 2542.360054][T21731] sysfs_do_create_link_sd+0xc0/0x110 [ 2542.365445][T21731] device_add+0x7ed/0xfb0 [ 2542.369799][T21731] wiphy_register+0x1e81/0x2c30 [ 2542.374680][T21731] ? cfg80211_event_work+0x40/0x40 [ 2542.379812][T21731] ? minstrel_ht_alloc+0x808/0x980 [ 2542.384944][T21731] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2542.391035][T21731] ieee80211_register_hw+0x2aa1/0x3af0 [ 2542.396509][T21731] ? lockdep_hardirqs_on+0x94/0x140 [ 2542.401746][T21731] ? ieee80211_tasklet_handler+0x20/0x20 [ 2542.407401][T21731] ? rcu_is_watching+0x11/0xa0 [ 2542.412179][T21731] ? memset+0x1e/0x40 [ 2542.416169][T21731] ? hrtimer_init+0x10c/0x220 [ 2542.420845][T21731] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2542.426578][T21731] hwsim_new_radio_nl+0xa6f/0xc40 [ 2542.431613][T21731] genl_rcv_msg+0xcea/0xf90 [ 2542.436117][T21731] ? genl_bind+0x380/0x380 [ 2542.440625][T21731] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2542.445839][T21731] ? verify_lock_unused+0x140/0x140 [ 2542.451060][T21731] ? kmalloc_large_node+0xf2/0x190 [ 2542.456174][T21731] ? dev_queue_xmit+0x20/0x20 [ 2542.460861][T21731] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2542.467366][T21731] netlink_rcv_skb+0x1f5/0x440 [ 2542.472128][T21731] ? genl_bind+0x380/0x380 [ 2542.476559][T21731] ? netlink_ack+0xb50/0xb50 [ 2542.481166][T21731] ? __lock_acquire+0x7d10/0x7d10 [ 2542.486188][T21731] ? down_read+0x1aa/0x2e0 [ 2542.490608][T21731] genl_rcv+0x24/0x40 [ 2542.494583][T21731] netlink_unicast+0x774/0x920 [ 2542.499366][T21731] netlink_sendmsg+0x8ba/0xbe0 [ 2542.504136][T21731] ? netlink_getsockopt+0x570/0x570 [ 2542.509344][T21731] ? aa_sock_msg_perm+0x94/0x150 [ 2542.514302][T21731] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2542.519609][T21731] ? security_socket_sendmsg+0x7c/0xa0 [ 2542.525082][T21731] ? netlink_getsockopt+0x570/0x570 [ 2542.530381][T21731] ____sys_sendmsg+0x5b7/0x8f0 [ 2542.535170][T21731] ? __sys_sendmsg_sock+0x30/0x30 [ 2542.540210][T21731] ? import_iovec+0x6f/0xa0 [ 2542.544721][T21731] ___sys_sendmsg+0x236/0x2e0 [ 2542.549428][T21731] ? __sys_sendmsg+0x2a0/0x2a0 [ 2542.554233][T21731] __se_sys_sendmsg+0x1af/0x290 [ 2542.559095][T21731] ? __x64_sys_sendmsg+0x80/0x80 [ 2542.564026][T21731] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2542.570054][T21731] ? lockdep_hardirqs_on+0x94/0x140 [ 2542.575367][T21731] do_syscall_64+0x4c/0xa0 [ 2542.579795][T21731] ? clear_bhb_loop+0x30/0x80 [ 2542.584667][T21731] ? clear_bhb_loop+0x30/0x80 [ 2542.589400][T21731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2542.595421][T21731] RIP: 0033:0x7f80277ffcb9 [ 2542.599848][T21731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2542.619518][T21731] RSP: 002b:00007f8025a5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2542.627925][T21731] RAX: ffffffffffffffda RBX: 00007f8027a7afa0 RCX: 00007f80277ffcb9 [ 2542.635894][T21731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2542.643884][T21731] RBP: 00007f802786dbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2542.651853][T21731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2542.659818][T21731] R13: 00007f8027a7b038 R14: 00007f8027a7afa0 R15: 00007ffcce587688 [ 2542.668027][T21731] [ 2542.887016][T21754] netlink: 164 bytes leftover after parsing attributes in process `syz.3.18341'. [ 2543.385138][T21775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18348'. [ 2543.608999][T21781] netlink: 'syz.2.18351': attribute type 11 has an invalid length. [ 2543.631841][T21781] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18351'. [ 2543.673635][T21781] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2543.699945][T21781] CPU: 0 PID: 21781 Comm: syz.2.18351 Not tainted syzkaller #0 [ 2543.707542][T21781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2543.717619][T21781] Call Trace: [ 2543.720999][T21781] [ 2543.723940][T21781] dump_stack_lvl+0x188/0x250 [ 2543.729073][T21781] ? show_regs_print_info+0x20/0x20 [ 2543.734334][T21781] ? load_image+0x400/0x400 [ 2543.738857][T21781] sysfs_warn_dup+0x8a/0xa0 [ 2543.743370][T21781] sysfs_do_create_link_sd+0xc0/0x110 [ 2543.748780][T21781] device_add+0x7ed/0xfb0 [ 2543.753233][T21781] wiphy_register+0x1e81/0x2c30 [ 2543.758088][T21781] ? cfg80211_event_work+0x40/0x40 [ 2543.763186][T21781] ? minstrel_ht_alloc+0x808/0x980 [ 2543.768334][T21781] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2543.774424][T21781] ieee80211_register_hw+0x2aa1/0x3af0 [ 2543.779969][T21781] ? lockdep_hardirqs_on+0x94/0x140 [ 2543.785173][T21781] ? ieee80211_tasklet_handler+0x20/0x20 [ 2543.790809][T21781] ? rcu_is_watching+0x11/0xa0 [ 2543.795566][T21781] ? memset+0x1e/0x40 [ 2543.799539][T21781] ? hrtimer_init+0x10c/0x220 [ 2543.804211][T21781] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2543.809936][T21781] hwsim_new_radio_nl+0xa6f/0xc40 [ 2543.814972][T21781] genl_rcv_msg+0xcea/0xf90 [ 2543.819488][T21781] ? genl_bind+0x380/0x380 [ 2543.823900][T21781] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2543.829103][T21781] ? verify_lock_unused+0x140/0x140 [ 2543.834344][T21781] ? kmalloc_large_node+0xf2/0x190 [ 2543.839441][T21781] ? dev_queue_xmit+0x20/0x20 [ 2543.844100][T21781] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2543.850605][T21781] netlink_rcv_skb+0x1f5/0x440 [ 2543.855353][T21781] ? genl_bind+0x380/0x380 [ 2543.859754][T21781] ? netlink_ack+0xb50/0xb50 [ 2543.864327][T21781] ? __lock_acquire+0x7d10/0x7d10 [ 2543.869490][T21781] ? down_read+0x1aa/0x2e0 [ 2543.873911][T21781] genl_rcv+0x24/0x40 [ 2543.877916][T21781] netlink_unicast+0x774/0x920 [ 2543.882701][T21781] netlink_sendmsg+0x8ba/0xbe0 [ 2543.887474][T21781] ? netlink_getsockopt+0x570/0x570 [ 2543.892666][T21781] ? aa_sock_msg_perm+0x94/0x150 [ 2543.897626][T21781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2543.902896][T21781] ? security_socket_sendmsg+0x7c/0xa0 [ 2543.908438][T21781] ? netlink_getsockopt+0x570/0x570 [ 2543.913620][T21781] ____sys_sendmsg+0x5b7/0x8f0 [ 2543.918375][T21781] ? __sys_sendmsg_sock+0x30/0x30 [ 2543.923390][T21781] ? import_iovec+0x6f/0xa0 [ 2543.927881][T21781] ___sys_sendmsg+0x236/0x2e0 [ 2543.932548][T21781] ? __sys_sendmsg+0x2a0/0x2a0 [ 2543.937406][T21781] ? percpu_counter_add_batch+0x13b/0x160 [ 2543.943135][T21781] __se_sys_sendmsg+0x1af/0x290 [ 2543.947994][T21781] ? __x64_sys_sendmsg+0x80/0x80 [ 2543.952947][T21781] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2543.958948][T21781] ? lockdep_hardirqs_on+0x94/0x140 [ 2543.964234][T21781] do_syscall_64+0x4c/0xa0 [ 2543.968638][T21781] ? clear_bhb_loop+0x30/0x80 [ 2543.973301][T21781] ? clear_bhb_loop+0x30/0x80 [ 2543.977968][T21781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2543.983845][T21781] RIP: 0033:0x7ff24ab31cb9 [ 2543.988259][T21781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2544.007946][T21781] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2544.016353][T21781] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2544.024311][T21781] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2544.032284][T21781] RBP: 00007ff24ab9fbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2544.040337][T21781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2544.048293][T21781] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2544.056267][T21781] [ 2544.281357][T21782] chnl_net:caif_netlink_parms(): no params data found [ 2544.704708][T21782] bridge0: port 1(bridge_slave_0) entered blocking state [ 2544.772248][T21782] bridge0: port 1(bridge_slave_0) entered disabled state [ 2544.845567][T21782] device bridge_slave_0 entered promiscuous mode [ 2544.886516][T21782] bridge0: port 2(bridge_slave_1) entered blocking state [ 2544.921547][T21782] bridge0: port 2(bridge_slave_1) entered disabled state [ 2544.964350][T21782] device bridge_slave_1 entered promiscuous mode [ 2545.128659][T21782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2545.757182][ T7774] Bluetooth: hci2: command 0x0409 tx timeout [ 2547.272299][T21782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2547.314581][T21782] team0: Port device team_slave_0 added [ 2547.324599][T21782] team0: Port device team_slave_1 added [ 2547.382082][T21782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2547.470345][T21782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2547.528898][T21782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2547.835253][T18452] Bluetooth: hci2: command 0x041b tx timeout [ 2547.885901][T21823] netlink: 'syz.0.18362': attribute type 2 has an invalid length. [ 2547.905721][T21823] netlink: 'syz.0.18362': attribute type 1 has an invalid length. [ 2547.956161][T21823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2547.971303][T21782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2547.986355][T21782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2548.077998][T21782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2549.909665][T18452] Bluetooth: hci2: command 0x040f tx timeout [ 2550.591368][T21782] device hsr_slave_0 entered promiscuous mode [ 2550.616962][T21830] netlink: 'syz.4.18365': attribute type 11 has an invalid length. [ 2550.630092][T21782] device hsr_slave_1 entered promiscuous mode [ 2550.643559][T21782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2550.667573][T21782] Cannot create hsr debugfs directory [ 2550.673549][T21830] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.18365'. [ 2550.687282][T21834] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.18368'. [ 2550.724097][T21830] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2550.766231][T21830] CPU: 1 PID: 21830 Comm: syz.4.18365 Not tainted syzkaller #0 [ 2550.773818][T21830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2550.783884][T21830] Call Trace: [ 2550.787153][T21830] [ 2550.790066][T21830] dump_stack_lvl+0x188/0x250 [ 2550.794824][T21830] ? show_regs_print_info+0x20/0x20 [ 2550.800044][T21830] ? load_image+0x400/0x400 [ 2550.804545][T21830] sysfs_warn_dup+0x8a/0xa0 [ 2550.809206][T21830] sysfs_do_create_link_sd+0xc0/0x110 [ 2550.814562][T21830] device_add+0x7ed/0xfb0 [ 2550.818881][T21830] wiphy_register+0x1e81/0x2c30 [ 2550.823752][T21830] ? cfg80211_event_work+0x40/0x40 [ 2550.828879][T21830] ? minstrel_ht_alloc+0x808/0x980 [ 2550.834007][T21830] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2550.840098][T21830] ieee80211_register_hw+0x2aa1/0x3af0 [ 2550.845579][T21830] ? lockdep_hardirqs_on+0x94/0x140 [ 2550.850818][T21830] ? ieee80211_tasklet_handler+0x20/0x20 [ 2550.856479][T21830] ? rcu_is_watching+0x11/0xa0 [ 2550.861266][T21830] ? memset+0x1e/0x40 [ 2550.865267][T21830] ? hrtimer_init+0x10c/0x220 [ 2550.869963][T21830] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2550.875740][T21830] hwsim_new_radio_nl+0xa6f/0xc40 [ 2550.880807][T21830] genl_rcv_msg+0xcea/0xf90 [ 2550.885355][T21830] ? genl_bind+0x380/0x380 [ 2550.889990][T21830] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2550.895329][T21830] ? verify_lock_unused+0x140/0x140 [ 2550.900561][T21830] ? kmalloc_large_node+0xf2/0x190 [ 2550.905695][T21830] ? dev_queue_xmit+0x20/0x20 [ 2550.910587][T21830] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2550.917116][T21830] netlink_rcv_skb+0x1f5/0x440 [ 2550.921882][T21830] ? genl_bind+0x380/0x380 [ 2550.926288][T21830] ? netlink_ack+0xb50/0xb50 [ 2550.930867][T21830] ? __lock_acquire+0x7d10/0x7d10 [ 2550.935927][T21830] ? down_read+0x1aa/0x2e0 [ 2550.940335][T21830] genl_rcv+0x24/0x40 [ 2550.944305][T21830] netlink_unicast+0x774/0x920 [ 2550.949068][T21830] netlink_sendmsg+0x8ba/0xbe0 [ 2550.953823][T21830] ? netlink_getsockopt+0x570/0x570 [ 2550.959040][T21830] ? aa_sock_msg_perm+0x94/0x150 [ 2550.964051][T21830] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2550.969321][T21830] ? security_socket_sendmsg+0x7c/0xa0 [ 2550.974861][T21830] ? netlink_getsockopt+0x570/0x570 [ 2550.980063][T21830] ____sys_sendmsg+0x5b7/0x8f0 [ 2550.984853][T21830] ? __sys_sendmsg_sock+0x30/0x30 [ 2550.989886][T21830] ? import_iovec+0x6f/0xa0 [ 2550.994384][T21830] ___sys_sendmsg+0x236/0x2e0 [ 2550.999059][T21830] ? __sys_sendmsg+0x2a0/0x2a0 [ 2551.003818][T21830] ? percpu_counter_add_batch+0x13b/0x160 [ 2551.009543][T21830] __se_sys_sendmsg+0x1af/0x290 [ 2551.014383][T21830] ? __x64_sys_sendmsg+0x80/0x80 [ 2551.019332][T21830] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2551.025312][T21830] ? lockdep_hardirqs_on+0x94/0x140 [ 2551.030590][T21830] do_syscall_64+0x4c/0xa0 [ 2551.035167][T21830] ? clear_bhb_loop+0x30/0x80 [ 2551.039832][T21830] ? clear_bhb_loop+0x30/0x80 [ 2551.044531][T21830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2551.050530][T21830] RIP: 0033:0x7f7c0b3d3cb9 [ 2551.054944][T21830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2551.074770][T21830] RSP: 002b:00007f7c0962f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2551.083271][T21830] RAX: ffffffffffffffda RBX: 00007f7c0b64efa0 RCX: 00007f7c0b3d3cb9 [ 2551.091317][T21830] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2551.099273][T21830] RBP: 00007f7c0b441bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2551.107228][T21830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2551.115279][T21830] R13: 00007f7c0b64f038 R14: 00007f7c0b64efa0 R15: 00007ffd021c3308 [ 2551.123268][T21830] [ 2551.384289][T21839] delete_channel: no stack [ 2551.404903][T21782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2551.513414][T21782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2551.628352][T21782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2551.696558][T21864] FAULT_INJECTION: forcing a failure. [ 2551.696558][T21864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2551.751308][T21782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2551.778573][T21867] netlink: 'syz.1.18378': attribute type 2 has an invalid length. [ 2551.802862][T21864] CPU: 1 PID: 21864 Comm: syz.2.18377 Not tainted syzkaller #0 [ 2551.810452][T21864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2551.812909][T21867] netlink: 'syz.1.18378': attribute type 8 has an invalid length. [ 2551.820611][T21864] Call Trace: [ 2551.820651][T21864] [ 2551.820659][T21864] dump_stack_lvl+0x188/0x250 [ 2551.820687][T21864] ? show_regs_print_info+0x20/0x20 [ 2551.820706][T21864] ? load_image+0x400/0x400 [ 2551.820733][T21864] ? __lock_acquire+0x7d10/0x7d10 [ 2551.820751][T21864] ? __vmalloc_node_range+0x2dd/0x8b0 [ 2551.839889][T21867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18378'. [ 2551.844606][T21864] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2551.844638][T21864] ? bpf_prog_alloc+0x1a/0x1e0 [ 2551.844653][T21864] ? bpf_prog_load+0x7c6/0x1510 [ 2551.844674][T21864] should_fail+0x38c/0x4c0 [ 2551.844699][T21864] prepare_alloc_pages+0x1e4/0x5f0 [ 2551.844728][T21864] __alloc_pages+0x11b/0x480 [ 2551.844747][T21864] ? zone_statistics+0x170/0x170 [ 2551.844768][T21864] ? alloc_pages+0x438/0x550 [ 2551.844788][T21864] __vmalloc_node_range+0x4b2/0x8b0 [ 2551.844812][T21864] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2551.844828][T21864] __vmalloc+0x76/0x80 [ 2551.844845][T21864] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2551.844862][T21864] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 2551.844880][T21864] bpf_prog_alloc+0x1a/0x1e0 [ 2551.844898][T21864] bpf_prog_load+0x7c6/0x1510 [ 2551.844924][T21864] ? map_freeze+0x350/0x350 [ 2551.947567][T21864] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2551.953742][T21864] ? lockdep_hardirqs_on+0x94/0x140 [ 2551.958968][T21864] ? copy_user_enhanced_fast_string+0xe/0x40 [ 2551.964972][T21864] ? bpf_lsm_bpf+0x5/0x10 [ 2551.969316][T21864] ? security_bpf+0x7a/0xa0 [ 2551.973928][T21864] __sys_bpf+0x532/0x6f0 [ 2551.978204][T21864] ? bpf_link_show_fdinfo+0x380/0x380 [ 2551.983614][T21864] ? vtime_user_exit+0x2c8/0x3e0 [ 2551.988577][T21864] __x64_sys_bpf+0x78/0x90 [ 2551.991418][T21404] Bluetooth: hci2: command 0x0419 tx timeout [ 2551.993004][T21864] do_syscall_64+0x4c/0xa0 [ 2551.993024][T21864] ? clear_bhb_loop+0x30/0x80 [ 2551.993040][T21864] ? clear_bhb_loop+0x30/0x80 [ 2551.993055][T21864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2551.993071][T21864] RIP: 0033:0x7ff24ab31cb9 [ 2552.023386][T21864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2552.043916][T21864] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2552.052358][T21864] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2552.060441][T21864] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000005 [ 2552.068432][T21864] RBP: 00007ff248d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 2552.076421][T21864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2552.084410][T21864] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2552.092411][T21864] [ 2552.269867][T21782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2552.306871][T21782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2552.357616][T21782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2552.415551][T21782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2552.471541][T21877] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.18380'. [ 2552.606545][T21782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2552.669197][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2552.677795][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2552.695557][T21782] 8021q: adding VLAN 0 to HW filter on device team0 [ 2552.721875][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2552.732199][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2552.751085][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2552.758272][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2552.792562][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2552.821444][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2552.844160][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2552.879036][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 2552.886277][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2552.913274][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2552.924924][T21899] delete_channel: no stack [ 2552.933410][T21907] netlink: 'syz.4.18390': attribute type 2 has an invalid length. [ 2552.942114][T21907] netlink: 'syz.4.18390': attribute type 8 has an invalid length. [ 2552.957560][T21907] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18390'. [ 2552.973108][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2552.986349][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2553.000096][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2553.027453][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2553.049849][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2553.061760][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2553.079460][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2553.090886][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2553.119770][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2553.140671][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2553.162919][T21782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2553.614914][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2553.634169][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2553.678012][T21782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2553.709399][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2553.720398][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2553.775965][T21782] device veth0_vlan entered promiscuous mode [ 2553.790678][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2553.803232][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2553.828615][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2553.850083][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2553.861771][T21933] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.18395'. [ 2553.878968][T21782] device veth1_vlan entered promiscuous mode [ 2553.952020][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2553.966310][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2553.980369][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2553.991882][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2554.009451][T21782] device veth0_macvtap entered promiscuous mode [ 2554.032510][T21782] device veth1_macvtap entered promiscuous mode [ 2554.112502][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.160382][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.194032][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.245608][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.281503][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.332547][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.367481][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.402799][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.421310][T21949] delete_channel: no stack [ 2554.430900][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.465000][T21955] cgroup: fork rejected by pids controller in /syz4 [ 2554.471861][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.493760][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2554.530334][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.573532][T21782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2554.590512][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2554.616387][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2554.647335][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2554.676147][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2554.707130][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2554.726431][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.744678][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2554.755916][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.771572][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2554.794702][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.815548][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2554.832451][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.850621][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2554.861638][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.882258][T21782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2554.900552][T21782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2554.912355][T21782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2554.929792][T22058] netlink: 'syz.2.18402': attribute type 2 has an invalid length. [ 2554.942523][T22058] netlink: 'syz.2.18402': attribute type 8 has an invalid length. [ 2554.955616][T22058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18402'. [ 2554.971759][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2554.984604][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2555.007324][T21782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.024479][T21782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.040589][T21782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.052014][T21782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2557.163504][ T5114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.190655][ T5114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.259807][T12026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.293050][T12026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.319826][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2557.372911][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2557.447129][ T5030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2557.610303][ T5030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2557.719663][ T5030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2557.801092][ T5030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2557.949338][T22096] netlink: 'syz.1.18419': attribute type 2 has an invalid length. [ 2558.003399][T22096] netlink: 'syz.1.18419': attribute type 8 has an invalid length. [ 2558.045771][T22096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18419'. [ 2558.276914][T22110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18421'. [ 2558.344805][T22110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18421'. [ 2558.434470][T22114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18421'. [ 2558.470161][T22110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18421'. [ 2558.470594][T22117] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 2558.562078][T22121] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.18423'. [ 2558.596084][T22123] IPv6: NLM_F_CREATE should be specified when creating new route [ 2558.617731][T22123] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18424'. [ 2558.815848][T22099] chnl_net:caif_netlink_parms(): no params data found [ 2558.945128][T22135] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.18427'. [ 2558.947914][T22099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.964836][T22099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.974311][T22099] device bridge_slave_0 entered promiscuous mode [ 2558.993040][T22099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2559.000312][T22099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2559.008756][T22099] device bridge_slave_1 entered promiscuous mode [ 2559.050465][T22099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2559.121922][T22099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2559.212514][T22099] team0: Port device team_slave_0 added [ 2559.274911][T22158] netlink: 'syz.2.18434': attribute type 2 has an invalid length. [ 2559.323313][T22158] netlink: 'syz.2.18434': attribute type 8 has an invalid length. [ 2559.353309][T22158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18434'. [ 2559.409715][T22099] team0: Port device team_slave_1 added [ 2559.598532][T22099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2559.655308][T22099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2559.847703][T22099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2559.925542][T22099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2559.932521][T22099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2559.965166][T22189] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18439'. [ 2560.052916][T22099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2560.067219][T18217] Bluetooth: hci3: command 0x0409 tx timeout [ 2560.316035][T22099] device hsr_slave_0 entered promiscuous mode [ 2560.325641][T22099] device hsr_slave_1 entered promiscuous mode [ 2560.332491][T22099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2560.348110][T22099] Cannot create hsr debugfs directory [ 2560.357129][ T5030] device hsr_slave_0 left promiscuous mode [ 2560.374708][T22199] sock: sock_set_timeout: `syz.2.18443' (pid 22199) tries to set negative timeout [ 2560.385580][ T5030] device hsr_slave_1 left promiscuous mode [ 2560.393988][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2560.410636][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2560.421608][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2560.430016][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2560.438431][ T5030] device bridge_slave_1 left promiscuous mode [ 2560.448609][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2560.465045][ T5030] device bridge_slave_0 left promiscuous mode [ 2560.472451][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2560.491396][T22209] netlink: 'syz.0.18447': attribute type 3 has an invalid length. [ 2560.504945][ T5030] device veth1_macvtap left promiscuous mode [ 2560.511275][ T5030] device veth0_macvtap left promiscuous mode [ 2560.679405][ T5030] team0 (unregistering): Port device team_slave_1 removed [ 2560.692393][ T5030] team0 (unregistering): Port device team_slave_0 removed [ 2560.709193][ T5030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2560.785475][ T5030] bond0 (unregistering): Released all slaves [ 2560.841039][T22204] IPv6: Can't replace route, no match found [ 2560.853595][T22211] netlink: 'syz.0.18448': attribute type 2 has an invalid length. [ 2560.873019][T22211] netlink: 'syz.0.18448': attribute type 8 has an invalid length. [ 2561.061211][T22220] FAULT_INJECTION: forcing a failure. [ 2561.061211][T22220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2561.094012][T22220] CPU: 1 PID: 22220 Comm: syz.0.18452 Not tainted syzkaller #0 [ 2561.101603][T22220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2561.111663][T22220] Call Trace: [ 2561.114941][T22220] [ 2561.117875][T22220] dump_stack_lvl+0x188/0x250 [ 2561.122560][T22220] ? show_regs_print_info+0x20/0x20 [ 2561.127763][T22220] ? load_image+0x400/0x400 [ 2561.132267][T22220] ? __lock_acquire+0x7d10/0x7d10 [ 2561.137283][T22220] ? perf_trace_lock+0xe4/0x390 [ 2561.142277][T22220] should_fail+0x38c/0x4c0 [ 2561.146702][T22220] _copy_from_user+0x2e/0x170 [ 2561.151395][T22220] ___sys_recvmsg+0x173/0x5c0 [ 2561.156074][T22220] ? __sys_recvmsg+0x280/0x280 [ 2561.160841][T22220] ? trace_event_raw_event_lock+0x270/0x270 [ 2561.166759][T22220] __x64_sys_recvmsg+0x1f9/0x2c0 [ 2561.172049][T22220] ? ___sys_recvmsg+0x5c0/0x5c0 [ 2561.176984][T22220] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2561.182960][T22220] ? lockdep_hardirqs_on+0x94/0x140 [ 2561.188158][T22220] do_syscall_64+0x4c/0xa0 [ 2561.192553][T22220] ? clear_bhb_loop+0x30/0x80 [ 2561.197212][T22220] ? clear_bhb_loop+0x30/0x80 [ 2561.201872][T22220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2561.207764][T22220] RIP: 0033:0x7fd4c99f9cb9 [ 2561.212165][T22220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2561.231765][T22220] RSP: 002b:00007fd4c7c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2561.240175][T22220] RAX: ffffffffffffffda RBX: 00007fd4c9c74fa0 RCX: 00007fd4c99f9cb9 [ 2561.248229][T22220] RDX: 0000000000002000 RSI: 0000200000000100 RDI: 0000000000000004 [ 2561.256269][T22220] RBP: 00007fd4c7c55090 R08: 0000000000000000 R09: 0000000000000000 [ 2561.264224][T22220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2561.272224][T22220] R13: 00007fd4c9c75038 R14: 00007fd4c9c74fa0 R15: 00007ffc019f2438 [ 2561.280284][T22220] [ 2561.740782][T22242] netlink: 'syz.1.18459': attribute type 3 has an invalid length. [ 2561.911989][T22245] FAULT_INJECTION: forcing a failure. [ 2561.911989][T22245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2561.973632][T22245] CPU: 0 PID: 22245 Comm: syz.3.18460 Not tainted syzkaller #0 [ 2561.981211][T22245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2561.991274][T22245] Call Trace: [ 2561.994560][T22245] [ 2561.997496][T22245] dump_stack_lvl+0x188/0x250 [ 2562.002180][T22245] ? show_regs_print_info+0x20/0x20 [ 2562.007525][T22245] ? load_image+0x400/0x400 [ 2562.012041][T22245] ? __lock_acquire+0x7d10/0x7d10 [ 2562.017158][T22245] should_fail+0x38c/0x4c0 [ 2562.021575][T22245] _copy_from_user+0x2e/0x170 [ 2562.026236][T22245] __copy_msghdr_from_user+0xc9/0x630 [ 2562.031597][T22245] ? verify_lock_unused+0x140/0x140 [ 2562.036780][T22245] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2562.042057][T22245] ___sys_sendmsg+0x19a/0x2e0 [ 2562.046726][T22245] ? __sys_sendmsg+0x2a0/0x2a0 [ 2562.051531][T22245] ? vfs_write+0x8b2/0xd60 [ 2562.055963][T22245] __se_sys_sendmsg+0x1af/0x290 [ 2562.060814][T22245] ? __x64_sys_sendmsg+0x80/0x80 [ 2562.065740][T22245] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2562.071714][T22245] ? lockdep_hardirqs_on+0x94/0x140 [ 2562.076903][T22245] do_syscall_64+0x4c/0xa0 [ 2562.081306][T22245] ? clear_bhb_loop+0x30/0x80 [ 2562.085971][T22245] ? clear_bhb_loop+0x30/0x80 [ 2562.090632][T22245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2562.096509][T22245] RIP: 0033:0x7f8cde315cb9 [ 2562.100931][T22245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2562.120531][T22245] RSP: 002b:00007f8cdc571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2562.128932][T22245] RAX: ffffffffffffffda RBX: 00007f8cde590fa0 RCX: 00007f8cde315cb9 [ 2562.136962][T22245] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000007 [ 2562.144931][T22245] RBP: 00007f8cdc571090 R08: 0000000000000000 R09: 0000000000000000 [ 2562.152900][T22245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2562.160856][T22245] R13: 00007f8cde591038 R14: 00007f8cde590fa0 R15: 00007fffaa49e438 [ 2562.168829][T22245] [ 2562.175350][ T2377] Bluetooth: hci3: command 0x041b tx timeout [ 2562.217664][T22099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2562.274286][T22099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2562.303528][T22250] netlink: 'syz.2.18462': attribute type 2 has an invalid length. [ 2562.311390][T22250] netlink: 'syz.2.18462': attribute type 8 has an invalid length. [ 2562.340820][T22099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2562.360673][T22099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2562.696708][T22099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2562.744588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2562.752491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2562.843845][T22099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2562.872167][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2562.911668][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2562.963208][T22077] bridge0: port 1(bridge_slave_0) entered blocking state [ 2562.970305][T22077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2563.020785][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2563.056845][T22313] netlink: 'syz.1.18479': attribute type 2 has an invalid length. [ 2563.076376][T22313] netlink: 'syz.1.18479': attribute type 8 has an invalid length. [ 2563.099305][T22313] __nla_validate_parse: 4 callbacks suppressed [ 2563.099323][T22313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18479'. [ 2563.257001][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2563.285477][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2563.349204][T20419] bridge0: port 2(bridge_slave_1) entered blocking state [ 2563.356385][T20419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2563.498818][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2563.550950][T22326] netlink: 'syz.1.18482': attribute type 11 has an invalid length. [ 2563.583328][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2563.623452][T22326] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18482'. [ 2563.665549][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2563.757220][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2563.790703][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2563.829823][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2563.859694][T20419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2563.915471][T22326] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2563.942937][T22326] CPU: 1 PID: 22326 Comm: syz.1.18482 Not tainted syzkaller #0 [ 2563.950570][T22326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2563.960634][T22326] Call Trace: [ 2563.963946][T22326] [ 2563.966896][T22326] dump_stack_lvl+0x188/0x250 [ 2563.971593][T22326] ? show_regs_print_info+0x20/0x20 [ 2563.976987][T22326] ? load_image+0x400/0x400 [ 2563.981525][T22326] sysfs_warn_dup+0x8a/0xa0 [ 2563.986236][T22326] sysfs_do_create_link_sd+0xc0/0x110 [ 2563.991633][T22326] device_add+0x7ed/0xfb0 [ 2563.996194][T22326] wiphy_register+0x1e81/0x2c30 [ 2564.001298][T22326] ? cfg80211_event_work+0x40/0x40 [ 2564.006435][T22326] ? minstrel_ht_alloc+0x808/0x980 [ 2564.011580][T22326] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2564.017673][T22326] ieee80211_register_hw+0x2aa1/0x3af0 [ 2564.023246][T22326] ? lockdep_hardirqs_on+0x94/0x140 [ 2564.028853][T22326] ? ieee80211_tasklet_handler+0x20/0x20 [ 2564.034625][T22326] ? rcu_is_watching+0x11/0xa0 [ 2564.039589][T22326] ? memset+0x1e/0x40 [ 2564.043698][T22326] ? hrtimer_init+0x10c/0x220 [ 2564.048403][T22326] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2564.054164][T22326] hwsim_new_radio_nl+0xa6f/0xc40 [ 2564.059222][T22326] genl_rcv_msg+0xcea/0xf90 [ 2564.063736][T22326] ? lock_chain_count+0x20/0x20 [ 2564.068615][T22326] ? genl_bind+0x380/0x380 [ 2564.073057][T22326] ? verify_lock_unused+0x140/0x140 [ 2564.078459][T22326] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 2564.085096][T22326] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2564.091724][T22326] netlink_rcv_skb+0x1f5/0x440 [ 2564.096506][T22326] ? genl_bind+0x380/0x380 [ 2564.100936][T22326] ? netlink_ack+0xb50/0xb50 [ 2564.105536][T22326] ? __lock_acquire+0x7d10/0x7d10 [ 2564.110667][T22326] ? down_read+0x1aa/0x2e0 [ 2564.115106][T22326] genl_rcv+0x24/0x40 [ 2564.119101][T22326] netlink_unicast+0x774/0x920 [ 2564.123886][T22326] netlink_sendmsg+0x8ba/0xbe0 [ 2564.128665][T22326] ? netlink_getsockopt+0x570/0x570 [ 2564.133874][T22326] ? aa_sock_msg_perm+0x94/0x150 [ 2564.138825][T22326] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2564.144126][T22326] ? security_socket_sendmsg+0x7c/0xa0 [ 2564.149598][T22326] ? netlink_getsockopt+0x570/0x570 [ 2564.154807][T22326] ____sys_sendmsg+0x5b7/0x8f0 [ 2564.159594][T22326] ? __sys_sendmsg_sock+0x30/0x30 [ 2564.164642][T22326] ? import_iovec+0x6f/0xa0 [ 2564.169162][T22326] ___sys_sendmsg+0x236/0x2e0 [ 2564.173865][T22326] ? __sys_sendmsg+0x2a0/0x2a0 [ 2564.178675][T22326] __se_sys_sendmsg+0x1af/0x290 [ 2564.183531][T22326] ? __x64_sys_sendmsg+0x80/0x80 [ 2564.188483][T22326] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2564.194601][T22326] ? lockdep_hardirqs_on+0x94/0x140 [ 2564.199918][T22326] do_syscall_64+0x4c/0xa0 [ 2564.204351][T22326] ? clear_bhb_loop+0x30/0x80 [ 2564.209041][T22326] ? clear_bhb_loop+0x30/0x80 [ 2564.213860][T22326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2564.219775][T22326] RIP: 0033:0x7f80277ffcb9 [ 2564.222831][ T2377] Bluetooth: hci3: command 0x040f tx timeout [ 2564.224200][T22326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2564.224216][T22326] RSP: 002b:00007f8025a5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2564.224237][T22326] RAX: ffffffffffffffda RBX: 00007f8027a7afa0 RCX: 00007f80277ffcb9 [ 2564.266169][T22326] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2564.274226][T22326] RBP: 00007f802786dbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2564.282324][T22326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2564.290469][T22326] R13: 00007f8027a7b038 R14: 00007f8027a7afa0 R15: 00007ffcce587688 [ 2564.298454][T22326] [ 2564.378756][T22339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18485'. [ 2564.659353][T22339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18485'. [ 2564.701192][T22341] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18485'. [ 2564.720118][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2564.739761][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2564.767281][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2564.797613][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2564.824670][T22099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2565.144644][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2565.233023][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2565.265978][T22099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2565.490042][T22381] cgroup: fork rejected by pids controller in /syz1 [ 2565.784469][T22504] netlink: 'syz.2.18499': attribute type 11 has an invalid length. [ 2565.860771][T22504] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18499'. [ 2565.893482][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2565.935514][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2565.996646][T22504] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2566.046371][T22504] CPU: 0 PID: 22504 Comm: syz.2.18499 Not tainted syzkaller #0 [ 2566.053977][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2566.064048][T22504] Call Trace: [ 2566.067335][T22504] [ 2566.070270][T22504] dump_stack_lvl+0x188/0x250 [ 2566.074964][T22504] ? show_regs_print_info+0x20/0x20 [ 2566.080186][T22504] ? load_image+0x400/0x400 [ 2566.084739][T22504] sysfs_warn_dup+0x8a/0xa0 [ 2566.089274][T22504] sysfs_do_create_link_sd+0xc0/0x110 [ 2566.094678][T22504] device_add+0x7ed/0xfb0 [ 2566.099047][T22504] wiphy_register+0x1e81/0x2c30 [ 2566.104024][T22504] ? cfg80211_event_work+0x40/0x40 [ 2566.109161][T22504] ? minstrel_ht_alloc+0x808/0x980 [ 2566.114479][T22504] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2566.120583][T22504] ieee80211_register_hw+0x2aa1/0x3af0 [ 2566.126059][T22504] ? lockdep_hardirqs_on+0x94/0x140 [ 2566.131298][T22504] ? ieee80211_tasklet_handler+0x20/0x20 [ 2566.136958][T22504] ? rcu_is_watching+0x11/0xa0 [ 2566.141746][T22504] ? memset+0x1e/0x40 [ 2566.145936][T22504] ? hrtimer_init+0x10c/0x220 [ 2566.150635][T22504] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2566.156436][T22504] hwsim_new_radio_nl+0xa6f/0xc40 [ 2566.161597][T22504] genl_rcv_msg+0xcea/0xf90 [ 2566.166138][T22504] ? genl_bind+0x380/0x380 [ 2566.170580][T22504] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2566.175798][T22504] ? verify_lock_unused+0x140/0x140 [ 2566.181038][T22504] ? kmalloc_large_node+0xf2/0x190 [ 2566.186166][T22504] ? dev_queue_xmit+0x20/0x20 [ 2566.190867][T22504] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2566.197590][T22504] netlink_rcv_skb+0x1f5/0x440 [ 2566.202370][T22504] ? genl_bind+0x380/0x380 [ 2566.206892][T22504] ? netlink_ack+0xb50/0xb50 [ 2566.211505][T22504] ? __lock_acquire+0x7d10/0x7d10 [ 2566.216678][T22504] ? down_read+0x1aa/0x2e0 [ 2566.221123][T22504] genl_rcv+0x24/0x40 [ 2566.225212][T22504] netlink_unicast+0x774/0x920 [ 2566.230022][T22504] netlink_sendmsg+0x8ba/0xbe0 [ 2566.234902][T22504] ? netlink_getsockopt+0x570/0x570 [ 2566.240261][T22504] ? aa_sock_msg_perm+0x94/0x150 [ 2566.245330][T22504] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2566.250905][T22504] ? security_socket_sendmsg+0x7c/0xa0 [ 2566.256387][T22504] ? netlink_getsockopt+0x570/0x570 [ 2566.261599][T22504] ____sys_sendmsg+0x5b7/0x8f0 [ 2566.266396][T22504] ? __sys_sendmsg_sock+0x30/0x30 [ 2566.271450][T22504] ? import_iovec+0x6f/0xa0 [ 2566.275969][T22504] ___sys_sendmsg+0x236/0x2e0 [ 2566.280686][T22504] ? __sys_sendmsg+0x2a0/0x2a0 [ 2566.285483][T22504] ? percpu_counter_add_batch+0x13b/0x160 [ 2566.291342][T22504] __se_sys_sendmsg+0x1af/0x290 [ 2566.296220][T22504] ? __x64_sys_sendmsg+0x80/0x80 [ 2566.301176][T22504] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2566.307288][T22504] ? lockdep_hardirqs_on+0x94/0x140 [ 2566.312525][T22504] do_syscall_64+0x4c/0xa0 [ 2566.316961][T22504] ? clear_bhb_loop+0x30/0x80 [ 2566.321663][T22504] ? clear_bhb_loop+0x30/0x80 [ 2566.326361][T22504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2566.332555][T22504] RIP: 0033:0x7ff24ab31cb9 [ 2566.337190][T22504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2566.357085][T22504] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2566.365526][T22504] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2566.373514][T22504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2566.381498][T22504] RBP: 00007ff24ab9fbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2566.389482][T22504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2566.397465][T22504] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2566.405469][T22504] [ 2566.428018][T18217] Bluetooth: hci3: command 0x0419 tx timeout [ 2566.441366][T22518] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2566.605678][T22099] device veth0_vlan entered promiscuous mode [ 2566.632952][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2566.641453][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2566.675945][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2566.684272][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2566.696983][T22099] device veth1_vlan entered promiscuous mode [ 2566.738809][T22099] device veth0_macvtap entered promiscuous mode [ 2566.771137][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2566.787541][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2566.807037][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2566.823659][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2566.840445][T22531] netlink: 'syz.3.18505': attribute type 1 has an invalid length. [ 2566.852143][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2566.862480][T22531] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.18505'. [ 2566.882433][T22099] device veth1_macvtap entered promiscuous mode [ 2566.944818][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2566.986186][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.012743][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2567.040360][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.060112][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2567.081467][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.099094][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2567.124497][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.142575][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2567.153145][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.178051][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2567.202104][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.226830][T22099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2567.273908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2567.293429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2567.351275][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2567.379230][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.398844][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2567.415095][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.429339][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2567.441318][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.454189][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2567.467529][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.479690][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2567.492397][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.505157][T22099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2567.518203][T22099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2567.531650][T22099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2567.553601][T22563] netlink: 'syz.2.18512': attribute type 1 has an invalid length. [ 2567.577843][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2567.594881][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2567.615800][T22099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2567.632604][T22099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2567.641816][T22099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2567.655083][T22099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2567.678893][T22572] netlink: 'syz.2.18515': attribute type 13 has an invalid length. [ 2567.706742][T22572] netlink: 'syz.2.18515': attribute type 10 has an invalid length. [ 2567.870675][T22077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2567.902093][T22077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2567.940989][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2567.969362][T20419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2567.986000][T20419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2567.997157][T22559] chnl_net:caif_netlink_parms(): no params data found [ 2568.023098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2568.166633][T22559] bridge0: port 1(bridge_slave_0) entered blocking state [ 2568.182116][T22559] bridge0: port 1(bridge_slave_0) entered disabled state [ 2568.190884][T22559] device bridge_slave_0 entered promiscuous mode [ 2568.207940][T22559] bridge0: port 2(bridge_slave_1) entered blocking state [ 2568.220800][T22559] bridge0: port 2(bridge_slave_1) entered disabled state [ 2568.232549][T22559] device bridge_slave_1 entered promiscuous mode [ 2568.270740][T22559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2568.291225][T22559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2568.338896][T22559] team0: Port device team_slave_0 added [ 2568.357823][T22559] team0: Port device team_slave_1 added [ 2568.395884][T22559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2568.412148][T22559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2568.445271][T22559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2568.465079][T22559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2568.472302][T22559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2568.506751][T22559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2569.345565][T12132] Bluetooth: hci4: command 0x0409 tx timeout [ 2570.755150][T22559] device hsr_slave_0 entered promiscuous mode [ 2570.799190][T22559] device hsr_slave_1 entered promiscuous mode [ 2570.816535][T22559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2570.836763][T22559] Cannot create hsr debugfs directory [ 2570.903304][T22593] netlink: 'syz.2.18520': attribute type 11 has an invalid length. [ 2570.934164][T22587] netlink: 'syz.0.18518': attribute type 3 has an invalid length. [ 2570.937699][T22592] IPv6: NLM_F_CREATE should be specified when creating new route [ 2570.948439][T22587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18518'. [ 2570.960457][T22593] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18520'. [ 2570.963485][T22592] netlink: 1 bytes leftover after parsing attributes in process `syz.3.18523'. [ 2571.001634][T22593] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2571.020460][T22593] CPU: 1 PID: 22593 Comm: syz.2.18520 Not tainted syzkaller #0 [ 2571.028143][T22593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2571.038209][T22593] Call Trace: [ 2571.041506][T22593] [ 2571.044440][T22593] dump_stack_lvl+0x188/0x250 [ 2571.049129][T22593] ? show_regs_print_info+0x20/0x20 [ 2571.054338][T22593] ? load_image+0x400/0x400 [ 2571.058862][T22593] sysfs_warn_dup+0x8a/0xa0 [ 2571.063371][T22593] sysfs_do_create_link_sd+0xc0/0x110 [ 2571.068744][T22593] device_add+0x7ed/0xfb0 [ 2571.073084][T22593] wiphy_register+0x1e81/0x2c30 [ 2571.077956][T22593] ? cfg80211_event_work+0x40/0x40 [ 2571.083158][T22593] ? minstrel_ht_alloc+0x808/0x980 [ 2571.088277][T22593] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2571.094349][T22593] ieee80211_register_hw+0x2aa1/0x3af0 [ 2571.099828][T22593] ? lockdep_hardirqs_on+0x94/0x140 [ 2571.105044][T22593] ? ieee80211_tasklet_handler+0x20/0x20 [ 2571.110705][T22593] ? rcu_is_watching+0x11/0xa0 [ 2571.115473][T22593] ? memset+0x1e/0x40 [ 2571.119452][T22593] ? hrtimer_init+0x10c/0x220 [ 2571.124127][T22593] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2571.129860][T22593] hwsim_new_radio_nl+0xa6f/0xc40 [ 2571.134899][T22593] genl_rcv_msg+0xcea/0xf90 [ 2571.139413][T22593] ? genl_bind+0x380/0x380 [ 2571.143840][T22593] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2571.149032][T22593] ? verify_lock_unused+0x140/0x140 [ 2571.154237][T22593] ? kmalloc_large_node+0xf2/0x190 [ 2571.159347][T22593] ? dev_queue_xmit+0x20/0x20 [ 2571.164108][T22593] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2571.170716][T22593] netlink_rcv_skb+0x1f5/0x440 [ 2571.175563][T22593] ? genl_bind+0x380/0x380 [ 2571.179972][T22593] ? netlink_ack+0xb50/0xb50 [ 2571.184559][T22593] ? __lock_acquire+0x7d10/0x7d10 [ 2571.189679][T22593] ? down_read+0x1aa/0x2e0 [ 2571.194093][T22593] genl_rcv+0x24/0x40 [ 2571.198069][T22593] netlink_unicast+0x774/0x920 [ 2571.202831][T22593] netlink_sendmsg+0x8ba/0xbe0 [ 2571.207775][T22593] ? netlink_getsockopt+0x570/0x570 [ 2571.213056][T22593] ? aa_sock_msg_perm+0x94/0x150 [ 2571.217988][T22593] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2571.223265][T22593] ? security_socket_sendmsg+0x7c/0xa0 [ 2571.228731][T22593] ? netlink_getsockopt+0x570/0x570 [ 2571.233924][T22593] ____sys_sendmsg+0x5b7/0x8f0 [ 2571.238691][T22593] ? __sys_sendmsg_sock+0x30/0x30 [ 2571.243714][T22593] ? import_iovec+0x6f/0xa0 [ 2571.248216][T22593] ___sys_sendmsg+0x236/0x2e0 [ 2571.252977][T22593] ? __sys_sendmsg+0x2a0/0x2a0 [ 2571.257744][T22593] ? percpu_counter_add_batch+0x13b/0x160 [ 2571.263489][T22593] __se_sys_sendmsg+0x1af/0x290 [ 2571.268338][T22593] ? __x64_sys_sendmsg+0x80/0x80 [ 2571.273270][T22593] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2571.279320][T22593] ? lockdep_hardirqs_on+0x94/0x140 [ 2571.284518][T22593] do_syscall_64+0x4c/0xa0 [ 2571.289036][T22593] ? clear_bhb_loop+0x30/0x80 [ 2571.293717][T22593] ? clear_bhb_loop+0x30/0x80 [ 2571.298408][T22593] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2571.304332][T22593] RIP: 0033:0x7ff24ab31cb9 [ 2571.308756][T22593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2571.328448][T22593] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2571.336957][T22593] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2571.344926][T22593] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2571.352901][T22593] RBP: 00007ff24ab9fbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2571.360866][T22593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2571.368829][T22593] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2571.376953][T22593] [ 2571.423921][ T4324] Bluetooth: hci4: command 0x041b tx timeout [ 2571.467061][T22587] netlink: 'syz.0.18518': attribute type 2 has an invalid length. [ 2571.483930][T22587] netlink: 'syz.0.18518': attribute type 1 has an invalid length. [ 2571.524357][T22587] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.18518'. [ 2571.768095][T22559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2571.911342][T22607] netlink: 'syz.3.18528': attribute type 2 has an invalid length. [ 2571.976856][T22607] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.18528'. [ 2571.989614][T22559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2572.911683][T22559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2573.044457][T22621] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18533'. [ 2573.110356][T22621] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18533'. [ 2573.150690][T22625] netlink: 'syz.4.18534': attribute type 10 has an invalid length. [ 2573.200262][T22629] netlink: 'syz.0.18535': attribute type 11 has an invalid length. [ 2573.218272][T22629] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.18535'. [ 2573.502980][ T4324] Bluetooth: hci4: command 0x040f tx timeout [ 2575.582969][ T4324] Bluetooth: hci4: command 0x0419 tx timeout [ 2575.939953][T22625] bond0: (slave bond_slave_0): Releasing backup interface [ 2575.961594][T22623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18533'. [ 2575.982175][T22629] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2576.005317][T22629] CPU: 0 PID: 22629 Comm: syz.0.18535 Not tainted syzkaller #0 [ 2576.012899][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2576.022973][T22629] Call Trace: [ 2576.026352][T22629] [ 2576.029298][T22629] dump_stack_lvl+0x188/0x250 [ 2576.033998][T22629] ? show_regs_print_info+0x20/0x20 [ 2576.039212][T22629] ? load_image+0x400/0x400 [ 2576.043738][T22629] sysfs_warn_dup+0x8a/0xa0 [ 2576.048266][T22629] sysfs_do_create_link_sd+0xc0/0x110 [ 2576.053649][T22629] device_add+0x7ed/0xfb0 [ 2576.057993][T22629] wiphy_register+0x1e81/0x2c30 [ 2576.062855][T22629] ? cfg80211_event_work+0x40/0x40 [ 2576.067973][T22629] ? minstrel_ht_alloc+0x808/0x980 [ 2576.073170][T22629] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2576.079233][T22629] ieee80211_register_hw+0x2aa1/0x3af0 [ 2576.084688][T22629] ? lockdep_hardirqs_on+0x94/0x140 [ 2576.089888][T22629] ? ieee80211_tasklet_handler+0x20/0x20 [ 2576.095513][T22629] ? rcu_is_watching+0x11/0xa0 [ 2576.100359][T22629] ? memset+0x1e/0x40 [ 2576.104335][T22629] ? hrtimer_init+0x10c/0x220 [ 2576.109010][T22629] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2576.114773][T22629] hwsim_new_radio_nl+0xa6f/0xc40 [ 2576.119819][T22629] genl_rcv_msg+0xcea/0xf90 [ 2576.124329][T22629] ? genl_bind+0x380/0x380 [ 2576.128738][T22629] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2576.133922][T22629] ? verify_lock_unused+0x140/0x140 [ 2576.139130][T22629] ? kmalloc_large_node+0xf2/0x190 [ 2576.144315][T22629] ? dev_queue_xmit+0x20/0x20 [ 2576.149153][T22629] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2576.155663][T22629] netlink_rcv_skb+0x1f5/0x440 [ 2576.160432][T22629] ? genl_bind+0x380/0x380 [ 2576.164864][T22629] ? netlink_ack+0xb50/0xb50 [ 2576.169453][T22629] ? __lock_acquire+0x7d10/0x7d10 [ 2576.174476][T22629] ? down_read+0x1aa/0x2e0 [ 2576.178929][T22629] genl_rcv+0x24/0x40 [ 2576.182924][T22629] netlink_unicast+0x774/0x920 [ 2576.187690][T22629] netlink_sendmsg+0x8ba/0xbe0 [ 2576.192468][T22629] ? netlink_getsockopt+0x570/0x570 [ 2576.197743][T22629] ? aa_sock_msg_perm+0x94/0x150 [ 2576.202683][T22629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2576.207963][T22629] ? security_socket_sendmsg+0x7c/0xa0 [ 2576.213493][T22629] ? netlink_getsockopt+0x570/0x570 [ 2576.218680][T22629] ____sys_sendmsg+0x5b7/0x8f0 [ 2576.223437][T22629] ? __sys_sendmsg_sock+0x30/0x30 [ 2576.228463][T22629] ? import_iovec+0x6f/0xa0 [ 2576.232956][T22629] ___sys_sendmsg+0x236/0x2e0 [ 2576.237635][T22629] ? __sys_sendmsg+0x2a0/0x2a0 [ 2576.242499][T22629] __se_sys_sendmsg+0x1af/0x290 [ 2576.247336][T22629] ? __x64_sys_sendmsg+0x80/0x80 [ 2576.252256][T22629] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2576.258247][T22629] ? lockdep_hardirqs_on+0x94/0x140 [ 2576.263436][T22629] do_syscall_64+0x4c/0xa0 [ 2576.267835][T22629] ? clear_bhb_loop+0x30/0x80 [ 2576.272499][T22629] ? clear_bhb_loop+0x30/0x80 [ 2576.277163][T22629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2576.283042][T22629] RIP: 0033:0x7fd4c99f9cb9 [ 2576.287444][T22629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2576.307039][T22629] RSP: 002b:00007fd4c7c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2576.315456][T22629] RAX: ffffffffffffffda RBX: 00007fd4c9c74fa0 RCX: 00007fd4c99f9cb9 [ 2576.323424][T22629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2576.331381][T22629] RBP: 00007fd4c9a67bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2576.339334][T22629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2576.347286][T22629] R13: 00007fd4c9c75038 R14: 00007fd4c9c74fa0 R15: 00007ffc019f2438 [ 2576.355254][T22629] [ 2576.439620][T22632] netlink: 'syz.3.18536': attribute type 3 has an invalid length. [ 2576.456756][T22632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18536'. [ 2576.468314][T22559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2576.494126][T22632] netlink: 'syz.3.18536': attribute type 2 has an invalid length. [ 2576.502826][T22632] netlink: 'syz.3.18536': attribute type 1 has an invalid length. [ 2576.521123][T22641] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18539'. [ 2576.530710][T22632] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.18536'. [ 2576.545793][T22643] netlink: 'syz.2.18540': attribute type 28 has an invalid length. [ 2576.644822][T22645] FAULT_INJECTION: forcing a failure. [ 2576.644822][T22645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2576.672819][T22645] CPU: 1 PID: 22645 Comm: syz.3.18541 Not tainted syzkaller #0 [ 2576.680494][T22645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2576.690662][T22645] Call Trace: [ 2576.693959][T22645] [ 2576.696910][T22645] dump_stack_lvl+0x188/0x250 [ 2576.701617][T22645] ? show_regs_print_info+0x20/0x20 [ 2576.706833][T22645] ? load_image+0x400/0x400 [ 2576.711361][T22645] ? __lock_acquire+0x7d10/0x7d10 [ 2576.716411][T22645] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2576.722247][T22645] should_fail+0x38c/0x4c0 [ 2576.726789][T22645] _copy_from_user+0x2e/0x170 [ 2576.731503][T22645] __copy_msghdr_from_user+0xc9/0x630 [ 2576.736910][T22645] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2576.742665][T22645] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 2576.748006][T22645] ___sys_sendmsg+0x19a/0x2e0 [ 2576.752724][T22645] ? __sys_sendmsg+0x2a0/0x2a0 [ 2576.757542][T22645] __se_sys_sendmsg+0x1af/0x290 [ 2576.762419][T22645] ? __x64_sys_sendmsg+0x80/0x80 [ 2576.767365][T22645] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2576.773477][T22645] ? lockdep_hardirqs_on+0x94/0x140 [ 2576.778781][T22645] do_syscall_64+0x4c/0xa0 [ 2576.783229][T22645] ? clear_bhb_loop+0x30/0x80 [ 2576.787928][T22645] ? clear_bhb_loop+0x30/0x80 [ 2576.792631][T22645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2576.798646][T22645] RIP: 0033:0x7f8cde315cb9 [ 2576.803076][T22645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2576.822694][T22645] RSP: 002b:00007f8cdc571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2576.831142][T22645] RAX: ffffffffffffffda RBX: 00007f8cde590fa0 RCX: 00007f8cde315cb9 [ 2576.839318][T22645] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 2576.847296][T22645] RBP: 00007f8cdc571090 R08: 0000000000000000 R09: 0000000000000000 [ 2576.855261][T22645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.863328][T22645] R13: 00007f8cde591038 R14: 00007f8cde590fa0 R15: 00007fffaa49e438 [ 2576.871321][T22645] [ 2576.950061][T22559] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2577.005011][T22650] netlink: 'syz.4.18542': attribute type 7 has an invalid length. [ 2577.040256][T22654] TCP: TCP_TX_DELAY enabled [ 2577.072474][T22559] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2577.088412][T22559] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2578.749453][T22559] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2578.917141][T22687] netlink: 'syz.2.18551': attribute type 11 has an invalid length. [ 2578.930697][T22687] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.18551'. [ 2578.958888][T22687] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2578.972606][T22687] CPU: 0 PID: 22687 Comm: syz.2.18551 Not tainted syzkaller #0 [ 2578.980187][T22687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2578.990232][T22687] Call Trace: [ 2578.993501][T22687] [ 2578.996426][T22687] dump_stack_lvl+0x188/0x250 [ 2579.001093][T22687] ? show_regs_print_info+0x20/0x20 [ 2579.006291][T22687] ? load_image+0x400/0x400 [ 2579.010826][T22687] sysfs_warn_dup+0x8a/0xa0 [ 2579.015345][T22687] sysfs_do_create_link_sd+0xc0/0x110 [ 2579.020744][T22687] device_add+0x7ed/0xfb0 [ 2579.025185][T22687] wiphy_register+0x1e81/0x2c30 [ 2579.030168][T22687] ? cfg80211_event_work+0x40/0x40 [ 2579.035312][T22687] ? minstrel_ht_alloc+0x808/0x980 [ 2579.040557][T22687] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2579.046890][T22687] ieee80211_register_hw+0x2aa1/0x3af0 [ 2579.052346][T22687] ? lockdep_hardirqs_on+0x94/0x140 [ 2579.057546][T22687] ? ieee80211_tasklet_handler+0x20/0x20 [ 2579.063182][T22687] ? rcu_is_watching+0x11/0xa0 [ 2579.067958][T22687] ? memset+0x1e/0x40 [ 2579.071928][T22687] ? hrtimer_init+0x10c/0x220 [ 2579.076600][T22687] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2579.082342][T22687] hwsim_new_radio_nl+0xa6f/0xc40 [ 2579.087479][T22687] genl_rcv_msg+0xcea/0xf90 [ 2579.092072][T22687] ? genl_bind+0x380/0x380 [ 2579.096498][T22687] ? rcu_preempt_deferred_qs_irqrestore+0x37a/0xc30 [ 2579.103199][T22687] ? verify_lock_unused+0x140/0x140 [ 2579.108416][T22687] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2579.113967][T22687] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2579.120567][T22687] ? perf_trace_lock+0xe4/0x390 [ 2579.125450][T22687] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2579.131972][T22687] netlink_rcv_skb+0x1f5/0x440 [ 2579.136918][T22687] ? genl_bind+0x380/0x380 [ 2579.141422][T22687] ? netlink_ack+0xb50/0xb50 [ 2579.146104][T22687] ? __lock_acquire+0x7d10/0x7d10 [ 2579.151146][T22687] ? down_read+0x1aa/0x2e0 [ 2579.155556][T22687] genl_rcv+0x24/0x40 [ 2579.159545][T22687] netlink_unicast+0x774/0x920 [ 2579.164327][T22687] netlink_sendmsg+0x8ba/0xbe0 [ 2579.169102][T22687] ? netlink_getsockopt+0x570/0x570 [ 2579.174297][T22687] ? aa_sock_msg_perm+0x94/0x150 [ 2579.179243][T22687] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2579.184529][T22687] ? security_socket_sendmsg+0x7c/0xa0 [ 2579.190112][T22687] ? netlink_getsockopt+0x570/0x570 [ 2579.195327][T22687] ____sys_sendmsg+0x5b7/0x8f0 [ 2579.200111][T22687] ? __sys_sendmsg_sock+0x30/0x30 [ 2579.205148][T22687] ? import_iovec+0x6f/0xa0 [ 2579.209691][T22687] ___sys_sendmsg+0x236/0x2e0 [ 2579.214385][T22687] ? __sys_sendmsg+0x2a0/0x2a0 [ 2579.219201][T22687] __se_sys_sendmsg+0x1af/0x290 [ 2579.224053][T22687] ? __x64_sys_sendmsg+0x80/0x80 [ 2579.228996][T22687] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2579.235158][T22687] ? lockdep_hardirqs_on+0x94/0x140 [ 2579.240369][T22687] do_syscall_64+0x4c/0xa0 [ 2579.244785][T22687] ? clear_bhb_loop+0x30/0x80 [ 2579.249476][T22687] ? clear_bhb_loop+0x30/0x80 [ 2579.254238][T22687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2579.260138][T22687] RIP: 0033:0x7ff24ab31cb9 [ 2579.264546][T22687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2579.284159][T22687] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2579.292575][T22687] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2579.300549][T22687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2579.308517][T22687] RBP: 00007ff24ab9fbf7 R08: 0000000000000000 R09: 0000000000000000 [ 2579.316573][T22687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2579.324550][T22687] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2579.332719][T22687] [ 2579.340480][T22692] netlink: 'syz.0.18552': attribute type 3 has an invalid length. [ 2579.357594][T22691] netlink: 'syz.4.18554': attribute type 9 has an invalid length. [ 2579.362920][T22692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18552'. [ 2579.372982][T22691] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.18554'. [ 2579.388171][T22559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2579.420590][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2579.421650][T22686] netlink: 'syz.0.18552': attribute type 2 has an invalid length. [ 2579.433482][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2579.449286][T22686] netlink: 'syz.0.18552': attribute type 1 has an invalid length. [ 2579.475562][T22559] 8021q: adding VLAN 0 to HW filter on device team0 [ 2579.479581][T22686] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.18552'. [ 2579.509942][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2579.520300][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2579.529103][T22696] netlink: 'syz.2.18556': attribute type 9 has an invalid length. [ 2579.540448][T22696] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.18556'. [ 2579.551723][T22077] bridge0: port 1(bridge_slave_0) entered blocking state [ 2579.558875][T22077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2579.578497][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2579.588643][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2579.597555][T22077] bridge0: port 2(bridge_slave_1) entered blocking state [ 2579.604691][T22077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2579.620313][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2579.667340][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2579.680270][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2579.690289][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2579.701025][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2579.722843][T22703] IPv6: NLM_F_CREATE should be specified when creating new route [ 2579.737037][T22703] netlink: 1 bytes leftover after parsing attributes in process `syz.4.18559'. [ 2579.752924][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2579.775711][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2579.803973][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2579.820101][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2579.844014][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2579.862912][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2579.881151][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2579.907459][T22559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2580.155124][T22734] FAULT_INJECTION: forcing a failure. [ 2580.155124][T22734] name failslab, interval 1, probability 0, space 0, times 0 [ 2580.180124][T22736] netlink: 'syz.3.18567': attribute type 11 has an invalid length. [ 2580.198420][T22736] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2580.218807][T22734] CPU: 1 PID: 22734 Comm: syz.2.18568 Not tainted syzkaller #0 [ 2580.226478][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2580.236539][T22734] Call Trace: [ 2580.239824][T22734] [ 2580.242820][T22734] dump_stack_lvl+0x188/0x250 [ 2580.247507][T22734] ? show_regs_print_info+0x20/0x20 [ 2580.252693][T22734] ? load_image+0x400/0x400 [ 2580.257211][T22734] ? __might_sleep+0xf0/0xf0 [ 2580.261786][T22734] ? __lock_acquire+0x7d10/0x7d10 [ 2580.266806][T22734] should_fail+0x38c/0x4c0 [ 2580.271223][T22734] should_failslab+0x5/0x20 [ 2580.275729][T22734] slab_pre_alloc_hook+0x51/0xc0 [ 2580.280698][T22734] __kmalloc+0x6b/0x330 [ 2580.284963][T22734] ? tomoyo_encode+0x27e/0x540 [ 2580.289748][T22734] tomoyo_encode+0x27e/0x540 [ 2580.294348][T22734] tomoyo_realpath_from_path+0x5cd/0x610 [ 2580.299990][T22734] tomoyo_path_number_perm+0x242/0x660 [ 2580.305442][T22734] ? verify_lock_unused+0x140/0x140 [ 2580.310656][T22734] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2580.316099][T22734] ? ksys_write+0x1c6/0x260 [ 2580.320626][T22734] security_file_ioctl+0x6c/0xa0 [ 2580.325555][T22734] __se_sys_ioctl+0x48/0x170 [ 2580.330131][T22734] do_syscall_64+0x4c/0xa0 [ 2580.334533][T22734] ? clear_bhb_loop+0x30/0x80 [ 2580.339221][T22734] ? clear_bhb_loop+0x30/0x80 [ 2580.343884][T22734] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2580.349764][T22734] RIP: 0033:0x7ff24ab31cb9 [ 2580.354170][T22734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2580.373766][T22734] RSP: 002b:00007ff248d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2580.382164][T22734] RAX: ffffffffffffffda RBX: 00007ff24adacfa0 RCX: 00007ff24ab31cb9 [ 2580.390123][T22734] RDX: 0000200000000080 RSI: 0000000000008993 RDI: 0000000000000004 [ 2580.398098][T22734] RBP: 00007ff248d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 2580.406068][T22734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2580.414028][T22734] R13: 00007ff24adad038 R14: 00007ff24adacfa0 R15: 00007ffc5c06d798 [ 2580.421998][T22734] [ 2580.512038][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2580.524392][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2580.553926][T22559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2580.631591][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2580.647881][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2580.712081][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2580.723743][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2580.743606][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2580.763408][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2580.784953][T22734] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2580.794329][T22559] device veth0_vlan entered promiscuous mode [ 2580.822068][T22559] device veth1_vlan entered promiscuous mode [ 2580.869495][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2580.888280][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2580.908869][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2580.922505][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2580.935637][T22559] device veth0_macvtap entered promiscuous mode [ 2580.953485][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2580.972953][T22559] device veth1_macvtap entered promiscuous mode [ 2581.054124][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2581.132805][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.162431][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2581.192836][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.230205][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2581.270334][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.310131][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2581.357721][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.397375][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2581.450961][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.491121][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2581.535136][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.576579][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2581.620506][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.664378][T22559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2581.702053][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2581.723952][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2581.758670][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2581.787731][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.822895][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2581.872802][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.882741][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2581.903823][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2581.952179][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2581.992847][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2582.024209][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2582.063527][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2582.111334][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2582.150264][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2582.192775][T22559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2582.232795][T22559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2582.292846][T22559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2582.316242][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2582.335778][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2582.385735][T22559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2582.414907][T22559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2582.450638][T22559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2582.490311][T22559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2584.201771][T22765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 2587.163797][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2587.172392][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2587.194795][T12026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2587.215583][T12026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2587.229281][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2587.254965][T21158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2587.282193][T22771] __nla_validate_parse: 4 callbacks suppressed [ 2587.282227][T22771] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18583'. [ 2587.312873][T22775] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18584'. [ 2587.339689][T22773] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 2588.335012][T22801] bond_slave_1: mtu less than device minimum [ 2588.469596][T22794] chnl_net:caif_netlink_parms(): no params data found [ 2588.751274][T22794] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.889548][T22794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2588.964108][T22794] device bridge_slave_0 entered promiscuous mode [ 2589.010672][T22794] bridge0: port 2(bridge_slave_1) entered blocking state [ 2589.037448][T22794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.064828][T22794] device bridge_slave_1 entered promiscuous mode [ 2589.154955][T22794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2589.195685][T22794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2589.231617][T22794] team0: Port device team_slave_0 added [ 2589.250361][T22794] team0: Port device team_slave_1 added [ 2589.383577][T22794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2589.422036][T22794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2589.618983][T22794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2589.714062][T22794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2589.740394][T22794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2589.800271][T22794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2590.152810][T21404] Bluetooth: hci0: command 0x0409 tx timeout [ 2590.392976][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.399384][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2592.222976][T12132] Bluetooth: hci0: command 0x041b tx timeout [ 2592.488857][T22794] device hsr_slave_0 entered promiscuous mode [ 2592.509637][T22794] device hsr_slave_1 entered promiscuous mode [ 2592.531350][T22849] netlink: 'syz.0.18605': attribute type 11 has an invalid length. [ 2592.539529][T22849] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.18605'. [ 2592.549182][T22794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2592.559591][T22794] Cannot create hsr debugfs directory [ 2592.608720][T22849] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2592.641332][T22849] CPU: 0 PID: 22849 Comm: syz.0.18605 Not tainted syzkaller #0 [ 2592.648922][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2592.658993][T22849] Call Trace: [ 2592.662276][T22849] [ 2592.665195][T22849] dump_stack_lvl+0x188/0x250 [ 2592.669868][T22849] ? show_regs_print_info+0x20/0x20 [ 2592.675057][T22849] ? load_image+0x400/0x400 [ 2592.679807][T22849] sysfs_warn_dup+0x8a/0xa0 [ 2592.684334][T22849] sysfs_do_create_link_sd+0xc0/0x110 [ 2592.689724][T22849] device_add+0x7ed/0xfb0 [ 2592.694081][T22849] wiphy_register+0x1e81/0x2c30 [ 2592.698935][T22849] ? cfg80211_event_work+0x40/0x40 [ 2592.704051][T22849] ? minstrel_ht_alloc+0x808/0x980 [ 2592.709178][T22849] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2592.715247][T22849] ieee80211_register_hw+0x2aa1/0x3af0 [ 2592.720703][T22849] ? lockdep_hardirqs_on+0x94/0x140 [ 2592.725994][T22849] ? ieee80211_tasklet_handler+0x20/0x20 [ 2592.731708][T22849] ? rcu_is_watching+0x11/0xa0 [ 2592.736461][T22849] ? memset+0x1e/0x40 [ 2592.740430][T22849] ? hrtimer_init+0x10c/0x220 [ 2592.745096][T22849] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2592.750821][T22849] hwsim_new_radio_nl+0xa6f/0xc40 [ 2592.755938][T22849] genl_rcv_msg+0xcea/0xf90 [ 2592.760451][T22849] ? genl_bind+0x380/0x380 [ 2592.764929][T22849] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2592.770125][T22849] ? verify_lock_unused+0x140/0x140 [ 2592.775411][T22849] ? kmalloc_large_node+0xf2/0x190 [ 2592.780509][T22849] ? dev_queue_xmit+0x20/0x20 [ 2592.785168][T22849] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2592.791789][T22849] netlink_rcv_skb+0x1f5/0x440 [ 2592.796541][T22849] ? genl_bind+0x380/0x380 [ 2592.800948][T22849] ? netlink_ack+0xb50/0xb50 [ 2592.805521][T22849] ? __lock_acquire+0x7d10/0x7d10 [ 2592.810534][T22849] ? down_read+0x1aa/0x2e0 [ 2592.814962][T22849] genl_rcv+0x24/0x40 [ 2592.818935][T22849] netlink_unicast+0x774/0x920 [ 2592.823709][T22849] netlink_sendmsg+0x8ba/0xbe0 [ 2592.828483][T22849] ? netlink_getsockopt+0x570/0x570 [ 2592.833673][T22849] ? aa_sock_msg_perm+0x94/0x150 [ 2592.838603][T22849] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2592.843875][T22849] ? security_socket_sendmsg+0x7c/0xa0 [ 2592.849341][T22849] ? netlink_getsockopt+0x570/0x570 [ 2592.854541][T22849] ____sys_sendmsg+0x5b7/0x8f0 [ 2592.859588][T22849] ? __sys_sendmsg_sock+0x30/0x30 [ 2592.864638][T22849] ? import_iovec+0x6f/0xa0 [ 2592.869136][T22849] ___sys_sendmsg+0x236/0x2e0 [ 2592.873862][T22849] ? __sys_sendmsg+0x2a0/0x2a0 [ 2592.878643][T22849] __se_sys_sendmsg+0x1af/0x290 [ 2592.883485][T22849] ? __x64_sys_sendmsg+0x80/0x80 [ 2592.888518][T22849] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2592.894497][T22849] ? lockdep_hardirqs_on+0x94/0x140 [ 2592.899679][T22849] do_syscall_64+0x4c/0xa0 [ 2592.904081][T22849] ? clear_bhb_loop+0x30/0x80 [ 2592.908743][T22849] ? clear_bhb_loop+0x30/0x80 [ 2592.913406][T22849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2592.919373][T22849] RIP: 0033:0x7fd4c99f9cb9 [ 2592.923776][T22849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2592.943453][T22849] RSP: 002b:00007fd4c7c55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2592.951851][T22849] RAX: ffffffffffffffda RBX: 00007fd4c9c74fa0 RCX: 00007fd4c99f9cb9 [ 2592.959960][T22849] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2592.967942][T22849] RBP: 00007fd4c9a67bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2592.975905][T22849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2592.983862][T22849] R13: 00007fd4c9c75038 R14: 00007fd4c9c74fa0 R15: 00007ffc019f2438 [ 2592.991835][T22849] [ 2593.086157][T22794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2594.313732][T18452] Bluetooth: hci0: command 0x040f tx timeout [ 2595.699170][T22794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2595.811017][T22794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2595.879617][T22862] bond_slave_1: mtu less than device minimum [ 2595.964574][T22794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2596.380498][T22794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2596.443447][T21404] Bluetooth: hci0: command 0x0419 tx timeout [ 2596.481397][T22794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2596.526215][T22794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2596.564500][T22794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2596.779936][T22794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2596.802324][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2596.810617][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2596.821219][T22876] chnl_net:caif_netlink_parms(): no params data found [ 2596.844981][T22794] 8021q: adding VLAN 0 to HW filter on device team0 [ 2596.871779][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2596.885884][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2596.897158][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2596.904261][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2596.927563][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2596.941056][T22876] bridge0: port 1(bridge_slave_0) entered blocking state [ 2596.948571][T22876] bridge0: port 1(bridge_slave_0) entered disabled state [ 2596.958872][T22876] device bridge_slave_0 entered promiscuous mode [ 2596.967378][T22876] bridge0: port 2(bridge_slave_1) entered blocking state [ 2596.974826][T22876] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.982649][T22876] device bridge_slave_1 entered promiscuous mode [ 2596.996887][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2597.011200][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2597.022244][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 2597.029879][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2597.037779][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2597.056965][T22876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2597.074702][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2597.084942][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2597.094471][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2597.103121][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2597.111786][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2597.121617][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2597.135101][T22876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2597.157248][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2597.166123][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2597.184295][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2597.197410][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2597.210267][T22876] team0: Port device team_slave_0 added [ 2597.219521][T22794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2597.231626][T22876] team0: Port device team_slave_1 added [ 2597.255395][T22876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2597.262361][T22876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2597.289650][T22876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2597.314640][T22876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2597.321612][T22876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2597.348717][T22876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2597.394868][T22876] device hsr_slave_0 entered promiscuous mode [ 2597.401704][T22876] device hsr_slave_1 entered promiscuous mode [ 2597.408608][T22876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2597.416499][T22876] Cannot create hsr debugfs directory [ 2597.447359][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2597.455154][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2597.470653][T22794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2597.540315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2597.550186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2597.588000][T22876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2597.599836][T22876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2597.608858][T22876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2597.625905][T22876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2597.640136][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2597.648635][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2597.657423][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2597.668214][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2597.680686][T22794] device veth0_vlan entered promiscuous mode [ 2597.702117][T22794] device veth1_vlan entered promiscuous mode [ 2597.745215][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2597.759499][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2597.767833][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2597.781715][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2597.794728][T22794] device veth0_macvtap entered promiscuous mode [ 2597.813085][T22794] device veth1_macvtap entered promiscuous mode [ 2597.832059][T22876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2597.854492][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.870394][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.880649][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.891346][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.901525][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.912314][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.923043][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.934787][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.945277][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.955812][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.965782][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.977116][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2597.987268][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2597.997899][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.008023][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2598.018641][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.029981][T22794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2598.041712][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2598.052617][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2598.065168][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2598.074096][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2598.086697][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2598.095533][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2598.104265][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.120083][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.130369][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.141316][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.153604][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.164545][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.175076][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.185589][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.195477][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.206001][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.215990][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.226862][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.237229][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.247796][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.258289][T22794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2598.268785][T22794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2598.280079][T22794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2598.290092][T22876] 8021q: adding VLAN 0 to HW filter on device team0 [ 2598.299679][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2598.313497][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2598.331978][T22794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.341004][T22794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.349902][T22794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.360171][T22794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.392626][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2598.402481][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2598.411349][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2598.418498][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2598.426815][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2598.435918][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2598.444508][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 2598.451572][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2598.459662][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2598.468171][T21404] Bluetooth: hci5: command 0x0409 tx timeout [ 2598.492378][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2598.505806][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2598.516340][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2598.526893][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2598.536100][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2598.560870][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2598.570669][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2598.617114][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2598.627458][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2598.639965][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2598.648820][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2598.673230][ T5030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.681783][ T5030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.694750][T22876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2598.714319][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2598.735791][T12026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.745881][T12026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.757925][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2598.836178][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2598.850270][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2598.859966][T22906] IPv6: NLM_F_CREATE should be specified when creating new route [ 2598.872462][T22906] netlink: 1 bytes leftover after parsing attributes in process `syz.2.18588'. [ 2598.887763][T22876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2599.068026][T22920] netlink: 'syz.1.18618': attribute type 11 has an invalid length. [ 2599.139321][T22920] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.18618'. [ 2599.308310][T22920] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2599.472317][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2599.522710][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2599.661534][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2599.695938][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2599.851883][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2599.923813][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2599.968122][T22876] device veth0_vlan entered promiscuous mode [ 2600.030929][T22876] device veth1_vlan entered promiscuous mode [ 2600.184849][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2600.244209][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2600.333900][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2600.426859][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2600.452083][T22876] device veth0_macvtap entered promiscuous mode [ 2600.476586][T22077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2600.497171][T22876] device veth1_macvtap entered promiscuous mode [ 2600.538244][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.543737][T22667] Bluetooth: hci5: command 0x041b tx timeout [ 2600.556367][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.579087][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.599724][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.621519][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.644417][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.664125][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.686100][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.707354][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.725200][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.743413][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.763996][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.783671][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.809741][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.831634][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.852202][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.862619][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2600.885236][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2600.907371][T22876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2600.929652][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2600.947485][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2600.969916][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2600.986262][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.006667][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.032874][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.052481][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.072956][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.092864][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.113136][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.135721][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.157028][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.172205][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.193326][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.212760][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.233096][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.255582][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.278359][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.298497][T22876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2601.319152][T22876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2601.335689][T22876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2601.358942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2601.373993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2601.395934][T22876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.413021][T22876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.425887][T22876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2601.442506][T22876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2602.172293][T12026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2602.197229][T12026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2602.205938][T22077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2602.216644][T22077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2602.226757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2602.238815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2602.631371][ T7777] Bluetooth: hci5: command 0x040f tx timeout [ 2604.702937][ T4324] Bluetooth: hci5: command 0x0419 tx timeout [ 2618.421465][T12026] device hsr_slave_0 left promiscuous mode [ 2618.428893][T12026] device hsr_slave_1 left promiscuous mode [ 2618.435483][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2618.443819][T12026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2618.451970][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2618.459871][T12026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2618.468063][T12026] device bridge_slave_1 left promiscuous mode [ 2618.474586][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 2618.483173][T12026] device bridge_slave_0 left promiscuous mode [ 2618.489353][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 2618.500167][T12026] device hsr_slave_0 left promiscuous mode [ 2618.506698][T12026] device hsr_slave_1 left promiscuous mode [ 2618.513150][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2618.520651][T12026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2618.529593][T12026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2618.537326][T12026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2618.547048][T12026] device bridge_slave_1 left promiscuous mode [ 2618.553832][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 2618.561723][T12026] device bridge_slave_0 left promiscuous mode [ 2618.568060][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 2618.581039][T12026] device veth1_macvtap left promiscuous mode [ 2618.587312][T12026] device veth0_macvtap left promiscuous mode [ 2618.594464][T12026] device veth1_macvtap left promiscuous mode [ 2618.600502][T12026] device veth0_macvtap left promiscuous mode [ 2618.606764][T12026] device veth1_vlan left promiscuous mode [ 2618.612525][T12026] device veth0_vlan left promiscuous mode [ 2618.827510][T12026] team0 (unregistering): Port device team_slave_1 removed [ 2618.840425][T12026] team0 (unregistering): Port device team_slave_0 removed [ 2618.855523][T12026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2618.926244][T12026] bond0 (unregistering): Released all slaves [ 2619.089448][T12026] team0 (unregistering): Port device team_slave_1 removed [ 2619.109591][T12026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2619.126526][T12026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2619.173277][T12026] team0 (unregistering): Port device bond0 removed [ 2619.197865][T12026] bond0 (unregistering): Released all slaves [ 2633.691716][ T5030] device hsr_slave_0 left promiscuous mode [ 2633.698260][ T5030] device hsr_slave_1 left promiscuous mode [ 2633.704789][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2633.712272][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2633.721553][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2633.729141][ T5030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2633.737171][ T5030] device bridge_slave_1 left promiscuous mode [ 2633.743566][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2633.751360][ T5030] device bridge_slave_0 left promiscuous mode [ 2633.757699][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2633.767556][ T5030] device veth1_macvtap left promiscuous mode [ 2633.967880][ T5030] team0 (unregistering): Port device team_slave_1 removed [ 2633.984582][ T5030] team0 (unregistering): Port device team_slave_0 removed [ 2633.998979][ T5030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2634.048889][ T5030] team0 (unregistering): Port device bond0 removed [ 2634.069359][ T5030] bond0 (unregistering): Released all slaves [ 2651.824733][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.831050][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2669.273002][ T7777] Bluetooth: hci2: command 0x0406 tx timeout [ 2689.742849][T12132] Bluetooth: hci4: command 0x0406 tx timeout [ 2692.867056][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2692.918668][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2692.968036][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.027808][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2694.936647][ T154] device hsr_slave_0 left promiscuous mode [ 2694.949153][ T154] device hsr_slave_1 left promiscuous mode [ 2694.956049][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2694.964228][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2694.972412][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2694.981780][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2694.989922][ T154] device bridge_slave_1 left promiscuous mode [ 2695.000380][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2695.009223][ T154] device bridge_slave_0 left promiscuous mode [ 2695.015811][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.030473][ T154] device hsr_slave_0 left promiscuous mode [ 2695.038753][ T154] device hsr_slave_1 left promiscuous mode [ 2695.048338][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2695.058264][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2695.066914][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2695.075002][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2695.087628][ T154] device bridge_slave_1 left promiscuous mode [ 2695.094208][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2695.102481][ T154] device bridge_slave_0 left promiscuous mode [ 2695.108996][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.122254][ T154] device veth1_macvtap left promiscuous mode [ 2695.129489][ T154] device veth0_macvtap left promiscuous mode [ 2695.135818][ T154] device veth1_vlan left promiscuous mode [ 2695.141611][ T154] device veth0_vlan left promiscuous mode [ 2695.149026][ T154] device veth1_macvtap left promiscuous mode [ 2695.155324][ T154] device veth0_macvtap left promiscuous mode [ 2695.161404][ T154] device veth1_vlan left promiscuous mode [ 2695.169285][ T154] device veth0_vlan left promiscuous mode [ 2695.361320][ T154] team0 (unregistering): Port device team_slave_1 removed [ 2695.376698][ T154] team0 (unregistering): Port device team_slave_0 removed [ 2695.391278][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2695.452845][ T154] bond0 (unregistering): Released all slaves [ 2695.581724][ T154] team0 (unregistering): Port device team_slave_1 removed [ 2695.598268][ T154] team0 (unregistering): Port device team_slave_0 removed [ 2695.610959][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2695.669884][ T154] bond0 (unregistering): Released all slaves [ 2710.232867][T22454] Bluetooth: hci0: command 0x0406 tx timeout [ 2713.265704][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.272044][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2720.462836][T22667] Bluetooth: hci5: command 0x0406 tx timeout [ 2774.705220][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.711558][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.146418][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.152766][ T1420] ieee802154 phy1 wpan1: encryption failed: -22