last executing test programs: 9.355275469s ago: executing program 0 (id=4969): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 9.250625582s ago: executing program 0 (id=4970): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.573319579s ago: executing program 0 (id=4972): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r0 = gettid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000f422000002000000"], 0x10}, 0x0) perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_devices(r4, &(0x7f0000000200)={'b', ' *:* ', 'rw\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 7.103477972s ago: executing program 0 (id=4976): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d00483800080000000000000017d34460bc0600cf0a0000a701251e6182949a3607000a84c9f4d4938037e70e4509c51c268811000000000000000000009e070000000000005999", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000ac0)=""/4040, 0xfc8}, {&(0x7f0000002b40)=""/4128, 0x1020}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000140)=""/88, 0x58}], 0x4}, 0x20) 6.968162216s ago: executing program 0 (id=4978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 6.897812307s ago: executing program 0 (id=4980): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xff, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000002300000095000000000000003ed65db91192bc54df9d938755a33c0f30abd97a87d1e61b8e77aa60e109dddf0d7ae6e4025f721d1b71897e0f47d506573aa7c38ba623a2bbf92865c8bf71f75ee3c8dc33b787a47d897205df658ac837e54d7f70a51c58c394748784fab4103433e598b3ac8e0603164ee4aa5de9ba3aed9f65ddb7a396f6ce9bb46cea65e474a679faf7d9a8a21503cc5bebf02b17f7bebba0872cd428137ca43d051f661932e57e659dfeb80000fc7ab5f981c422f18166e6280497ffbd1ec4e90ca5a8aa82970fcf778dc8c7ab4e855ac39cac20c96f85538d515e2e8d7b8fad8657983f8b47da5cf2fbfc224fc29642c3b5e06afec39df773973b30942b034f438c5365508c25387980ac41fd8804abd5e01951897bdad915d69cf08eb8e72a4b6e18cbba812d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.723896186s ago: executing program 1 (id=4991): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="143e12e0efca305509bdf60de402000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000004000000040000000740000000000000", @ANYRES32, @ANYBLOB="0000000000000000f6ffffff000000000000f2cd", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) 3.655837768s ago: executing program 2 (id=4992): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="143e12e0efca305509bdf60de402000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) 3.653540618s ago: executing program 3 (id=4993): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4095, 0xa83}, {&(0x7f0000000400)=""/199, 0xdd}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x62}, {&(0x7f0000000ac0)=""/246, 0x140}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/155}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000200"/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.265508379s ago: executing program 3 (id=4994): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, 0x0, 0x0, 0x1a0f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3ea73aa96bd68254}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0xe) 3.251682639s ago: executing program 1 (id=4995): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[], 0x98}, 0x0) 3.170431321s ago: executing program 1 (id=4996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.031767625s ago: executing program 1 (id=4997): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a18100", 0x14}], 0x1}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0x4044454) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1b00000041de7d5400000000004fd4b6b074330858e14784178e84dfd621afa209e59bbe3de9607c1c336bc65d43179bb1daf0a80cafde3738f81d1fdeae116c63454e3eb7788fe5e79ffa5aff1acd83720c2d67a62350081d8dcb21e2a552bacc23871eefaf67bd1996b7a23dc276abb007001d0f7b325d0ea18cd2e08aa20ae3ea813066ee6b9b84a047d23d2d1879f6f1ae532cf2105f63a85df776f722d4114ccdbeadc558ead949f9c20d636d2683dea45b8c30ff647eee6cc8a119cce05871fc2bbc049dded7", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="030000000500"/27], 0x50) r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) recvmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/23, 0x17}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/76, 0x4c}, {0x0}, {&(0x7f0000001980)=""/80, 0x50}], 0x5, &(0x7f0000001a80)=""/226, 0xe2}, 0x4160) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x21, 0x2, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 3.031546925s ago: executing program 2 (id=4998): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[], 0x50) 3.011355646s ago: executing program 2 (id=4999): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r0 = gettid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000f422000002000000"], 0x10}, 0x0) perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) write$cgroup_devices(r4, &(0x7f0000000200)={'b', ' *:* ', 'rw\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.024535271s ago: executing program 1 (id=5000): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a18100", 0x14}], 0x1}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0x4044454) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1b00000041de7d5400000000004fd4b6b074330858e14784178e84dfd621afa209e59bbe3de9607c1c336bc65d43179bb1daf0a80cafde3738f81d1fdeae116c63454e3eb7788fe5e79ffa5aff1acd83720c2d67a62350081d8dcb21e2a552bacc23871eefaf67bd1996b7a23dc276abb007001d0f7b325d0ea18cd2e08aa20ae3ea813066ee6b9b84a047d23d2d1879f6f1ae532cf2105f63a85df776f722d4114ccdbeadc558ead949f9c20d636d2683dea45b8c30ff647eee6cc8a119cce05871fc2bbc049dded7", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="030000000500"/27], 0x50) r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) recvmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/23, 0x17}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/76, 0x4c}, {0x0}, {&(0x7f0000001980)=""/80, 0x50}], 0x5, &(0x7f0000001a80)=""/226, 0xe2}, 0x4160) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x21, 0x2, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 1.021532491s ago: executing program 2 (id=5001): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xff, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000002300000095000000000000003ed65db91192bc54df9d938755a33c0f30abd97a87d1e61b8e77aa60e109dddf0d7ae6e4025f721d1b71897e0f47d506573aa7c38ba623a2bbf92865c8bf71f75ee3c8dc33b787a47d897205df658ac837e54d7f70a51c58c394748784fab4103433e598b3ac8e0603164ee4aa5de9ba3aed9f65ddb7a396f6ce9bb46cea65e474a679faf7d9a8a21503cc5bebf02b17f7bebba0872cd428137ca43d051f661932e57e659dfeb80000fc7ab5f981c422f18166e6280497ffbd1ec4e90ca5a8aa82970fcf778dc8c7ab4e855ac39cac20c96f85538d515e2e8d7b8fad8657983f8b47da5cf2fbfc224fc29642c3b5e06afec39df773973b30942b034f438c5365508c25387980ac41fd8804abd5e01951897bdad915d69cf08eb8e72a4b6e18cbba812d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) 842.393116ms ago: executing program 2 (id=5002): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4095, 0xa83}, {&(0x7f0000000400)=""/199, 0xdd}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x62}, {&(0x7f0000000ac0)=""/246, 0x140}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/155}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000200"/28], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 842.286947ms ago: executing program 3 (id=5003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0], 0x98}, 0x0) 786.024548ms ago: executing program 3 (id=5004): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="143e12e0efca305509bdf60de402000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000004000000040000000740000000000000", @ANYRES32, @ANYBLOB="0000000000000000f6ffffff000000000000f2cd", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) 183.957985ms ago: executing program 3 (id=5005): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x4008804) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000300), 0x0}, 0x20) write$cgroup_int(r2, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c1}], 0x2}, 0x8400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) 182.275705ms ago: executing program 1 (id=5012): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a18100", 0x14}], 0x1}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0x4044454) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1b00000041de7d5400000000004fd4b6b074330858e14784178e84dfd621afa209e59bbe3de9607c1c336bc65d43179bb1daf0a80cafde3738f81d1fdeae116c63454e3eb7788fe5e79ffa5aff1acd83720c2d67a62350081d8dcb21e2a552bacc23871eefaf67bd1996b7a23dc276abb007001d0f7b325d0ea18cd2e08aa20ae3ea813066ee6b9b84a047d23d2d1879f6f1ae532cf2105f63a85df776f722d4114ccdbeadc558ead949f9c20d636d2683dea45b8c30ff647eee6cc8a119cce05871fc2bbc049dded7", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="030000000500"/27], 0x50) r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) recvmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000580)=@caif=@rfm, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/23, 0x17}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000800)=""/76, 0x4c}, {0x0}, {&(0x7f0000001980)=""/80, 0x50}], 0x5, &(0x7f0000001a80)=""/226, 0xe2}, 0x4160) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x21, 0x2, 0x2) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014f00000001208000a0043000000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 160.781565ms ago: executing program 2 (id=5006): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000004000000040000000740000000000000", @ANYRES32, @ANYBLOB="0000000000000000f6ffffff000000000000f2cd", @ANYRES32=0x0, @ANYRES32], 0x50) 0s ago: executing program 3 (id=5007): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x14dd8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x2}, 0x116f8, 0x4, 0x98, 0x0, 0x2, 0xfffff270, 0xa, 0x0, 0x0, 0x0, 0x40000020}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) close(0x3) socket$kcm(0x10, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x2b, &(0x7f0000002640), 0x42) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='^`\x00') kernel console output (not intermixed with test programs): 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.371464][T20249] RSP: 002b:00007f8623684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.379891][T20249] RAX: ffffffffffffffda RBX: 00007f8622a16090 RCX: 00007f862279cdd9 [ 1259.387962][T20249] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1259.395946][T20249] RBP: 00007f8622832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1259.403929][T20249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.411911][T20249] R13: 00007f8622a16128 R14: 00007f8622a16090 R15: 00007fffdc7a6668 [ 1259.419913][T20249] [ 1259.499090][T20246] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4666'. [ 1259.516721][T20246] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1259.591628][T20246] CPU: 1 PID: 20246 Comm: syz.1.4666 Not tainted syzkaller #0 [ 1259.599191][T20246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.609357][T20246] Call Trace: [ 1259.612642][T20246] [ 1259.615582][T20246] dump_stack_lvl+0x18c/0x250 [ 1259.620294][T20246] ? show_regs_print_info+0x20/0x20 [ 1259.625527][T20246] ? load_image+0x420/0x420 [ 1259.630072][T20246] sysfs_warn_dup+0x8e/0xa0 [ 1259.634604][T20246] sysfs_do_create_link_sd+0xc0/0x110 [ 1259.639990][T20246] device_add_class_symlinks+0x1cf/0x240 [ 1259.646156][T20246] device_add+0x507/0xc20 [ 1259.650519][T20246] wiphy_register+0x1dad/0x2ae0 [ 1259.655479][T20246] ? cfg80211_event_work+0x40/0x40 [ 1259.660593][T20246] ? minstrel_ht_alloc+0x88a/0x990 [ 1259.665723][T20246] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1259.671794][T20246] ieee80211_register_hw+0x3464/0x4250 [ 1259.677268][T20246] ? ieee80211_tasklet_handler+0x20/0x20 [ 1259.682901][T20246] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1259.688805][T20246] ? __debug_object_init+0xec/0x450 [ 1259.694007][T20246] ? __asan_memset+0x22/0x40 [ 1259.698682][T20246] ? __hrtimer_init+0x186/0x270 [ 1259.703536][T20246] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1259.709268][T20246] ? mac80211_hwsim_free+0x220/0x220 [ 1259.714552][T20246] ? rcu_is_watching+0x15/0xb0 [ 1259.719319][T20246] ? kstrndup+0xbd/0x140 [ 1259.723564][T20246] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1259.728689][T20246] ? __nla_validate+0x50/0x50 [ 1259.733371][T20246] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1259.739706][T20246] ? __nla_parse+0x40/0x50 [ 1259.744123][T20246] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1259.750449][T20246] genl_family_rcv_msg_doit+0x211/0x310 [ 1259.755990][T20246] ? end_current_label_crit_section+0x170/0x170 [ 1259.762235][T20246] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1259.768134][T20246] ? bpf_lsm_capable+0x9/0x10 [ 1259.772810][T20246] ? security_capable+0x89/0xb0 [ 1259.777670][T20246] genl_rcv_msg+0x619/0x7a0 [ 1259.782181][T20246] ? genl_bind+0x360/0x360 [ 1259.786595][T20246] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1259.792925][T20246] ? lockdep_hardirqs_on+0x98/0x150 [ 1259.798151][T20246] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1259.804680][T20246] netlink_rcv_skb+0x241/0x4d0 [ 1259.809592][T20246] ? genl_bind+0x360/0x360 [ 1259.814008][T20246] ? netlink_ack+0x1180/0x1180 [ 1259.818781][T20246] ? __lock_acquire+0x7d40/0x7d40 [ 1259.823813][T20246] ? down_read+0x1ac/0x2e0 [ 1259.828231][T20246] genl_rcv+0x28/0x40 [ 1259.832208][T20246] netlink_unicast+0x751/0x8d0 [ 1259.837011][T20246] netlink_sendmsg+0x8d0/0xbf0 [ 1259.841785][T20246] ? netlink_getsockopt+0x590/0x590 [ 1259.846988][T20246] ? aa_sock_msg_perm+0x94/0x150 [ 1259.851934][T20246] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1259.857237][T20246] ? security_socket_sendmsg+0x80/0xa0 [ 1259.862708][T20246] ? netlink_getsockopt+0x590/0x590 [ 1259.867925][T20246] ____sys_sendmsg+0x5ba/0x960 [ 1259.872725][T20246] ? __asan_memset+0x22/0x40 [ 1259.877330][T20246] ? __sys_sendmsg_sock+0x30/0x30 [ 1259.882351][T20246] ? __import_iovec+0x5f2/0x850 [ 1259.887207][T20246] ? import_iovec+0x73/0xa0 [ 1259.891713][T20246] ___sys_sendmsg+0x2a6/0x360 [ 1259.896396][T20246] ? __sys_sendmsg+0x2a0/0x2a0 [ 1259.901210][T20246] __se_sys_sendmsg+0x1c2/0x2b0 [ 1259.906062][T20246] ? __x64_sys_sendmsg+0x80/0x80 [ 1259.911029][T20246] ? lockdep_hardirqs_on+0x98/0x150 [ 1259.916245][T20246] do_syscall_64+0x55/0xa0 [ 1259.920694][T20246] ? clear_bhb_loop+0x40/0x90 [ 1259.925385][T20246] ? clear_bhb_loop+0x40/0x90 [ 1259.930066][T20246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1259.936658][T20246] RIP: 0033:0x7fcd6239cdd9 [ 1259.941086][T20246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.960698][T20246] RSP: 002b:00007fcd632b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.969119][T20246] RAX: ffffffffffffffda RBX: 00007fcd62615fa0 RCX: 00007fcd6239cdd9 [ 1259.977198][T20246] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1259.985363][T20246] RBP: 00007fcd62432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1259.993818][T20246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.001883][T20246] R13: 00007fcd62616038 R14: 00007fcd62615fa0 R15: 00007ffdb5f475f8 [ 1260.010094][T20246] [ 1260.041625][T20261] delete_channel: no stack [ 1260.176667][T20271] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1260.991910][T20284] netlink: 'syz.0.4676': attribute type 21 has an invalid length. [ 1261.005806][T20284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1261.024355][T20290] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4677'. [ 1261.043410][T20290] bridge_slave_1: default FDB implementation only supports local addresses [ 1263.042572][T20298] netlink: 'syz.0.4682': attribute type 21 has an invalid length. [ 1263.051350][T20298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1263.275327][T20303] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4680'. [ 1263.475202][T20303] bridge_slave_1: default FDB implementation only supports local addresses [ 1263.495050][T20296] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4679'. [ 1263.616029][T20296] bridge_slave_1: default FDB implementation only supports local addresses [ 1263.978053][T20301] delete_channel: no stack [ 1264.021004][T20296] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4679'. [ 1264.067933][T20296] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1264.084139][T20296] CPU: 0 PID: 20296 Comm: syz.1.4679 Not tainted syzkaller #0 [ 1264.091696][T20296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1264.101800][T20296] Call Trace: [ 1264.105114][T20296] [ 1264.108067][T20296] dump_stack_lvl+0x18c/0x250 [ 1264.112790][T20296] ? show_regs_print_info+0x20/0x20 [ 1264.118115][T20296] ? load_image+0x420/0x420 [ 1264.122687][T20296] sysfs_warn_dup+0x8e/0xa0 [ 1264.127210][T20296] sysfs_do_create_link_sd+0xc0/0x110 [ 1264.132596][T20296] device_add_class_symlinks+0x1cf/0x240 [ 1264.138248][T20296] device_add+0x507/0xc20 [ 1264.142629][T20296] wiphy_register+0x1dad/0x2ae0 [ 1264.147584][T20296] ? cfg80211_event_work+0x40/0x40 [ 1264.152736][T20296] ? minstrel_ht_alloc+0x88a/0x990 [ 1264.157911][T20296] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1264.164045][T20296] ieee80211_register_hw+0x3464/0x4250 [ 1264.169567][T20296] ? ieee80211_tasklet_handler+0x20/0x20 [ 1264.175267][T20296] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1264.181212][T20296] ? __debug_object_init+0xec/0x450 [ 1264.186453][T20296] ? __asan_memset+0x22/0x40 [ 1264.191063][T20296] ? __hrtimer_init+0x186/0x270 [ 1264.195936][T20296] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1264.201794][T20296] ? mac80211_hwsim_free+0x220/0x220 [ 1264.207089][T20296] ? rcu_is_watching+0x15/0xb0 [ 1264.211870][T20296] ? kstrndup+0xbd/0x140 [ 1264.216152][T20296] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1264.221282][T20296] ? __nla_validate+0x50/0x50 [ 1264.225987][T20296] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1264.232340][T20296] ? __nla_parse+0x40/0x50 [ 1264.236786][T20296] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1264.243140][T20296] genl_family_rcv_msg_doit+0x211/0x310 [ 1264.248713][T20296] ? end_current_label_crit_section+0x170/0x170 [ 1264.254979][T20296] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1264.260897][T20296] ? bpf_lsm_capable+0x9/0x10 [ 1264.265588][T20296] ? security_capable+0x89/0xb0 [ 1264.270475][T20296] genl_rcv_msg+0x619/0x7a0 [ 1264.275003][T20296] ? genl_bind+0x360/0x360 [ 1264.279430][T20296] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1264.285769][T20296] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1264.292391][T20296] ? ref_tracker_free+0x690/0x840 [ 1264.297465][T20296] netlink_rcv_skb+0x241/0x4d0 [ 1264.302296][T20296] ? genl_bind+0x360/0x360 [ 1264.306736][T20296] ? netlink_ack+0x1180/0x1180 [ 1264.311545][T20296] ? __lock_acquire+0x7d40/0x7d40 [ 1264.316604][T20296] ? down_read+0x1ac/0x2e0 [ 1264.321040][T20296] genl_rcv+0x28/0x40 [ 1264.325033][T20296] netlink_unicast+0x751/0x8d0 [ 1264.329829][T20296] netlink_sendmsg+0x8d0/0xbf0 [ 1264.334620][T20296] ? netlink_getsockopt+0x590/0x590 [ 1264.339837][T20296] ? aa_sock_msg_perm+0x94/0x150 [ 1264.344789][T20296] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1264.350087][T20296] ? security_socket_sendmsg+0x80/0xa0 [ 1264.355551][T20296] ? netlink_getsockopt+0x590/0x590 [ 1264.360902][T20296] ____sys_sendmsg+0x5ba/0x960 [ 1264.365686][T20296] ? __asan_memset+0x22/0x40 [ 1264.370288][T20296] ? __sys_sendmsg_sock+0x30/0x30 [ 1264.375316][T20296] ? __import_iovec+0x5f2/0x850 [ 1264.380195][T20296] ? import_iovec+0x73/0xa0 [ 1264.384712][T20296] ___sys_sendmsg+0x2a6/0x360 [ 1264.389405][T20296] ? __sys_sendmsg+0x2a0/0x2a0 [ 1264.394221][T20296] ? debug_mutex_init+0x38/0x70 [ 1264.401032][T20296] __se_sys_sendmsg+0x1c2/0x2b0 [ 1264.405897][T20296] ? __x64_sys_sendmsg+0x80/0x80 [ 1264.410862][T20296] ? lockdep_hardirqs_on+0x98/0x150 [ 1264.416074][T20296] do_syscall_64+0x55/0xa0 [ 1264.420491][T20296] ? clear_bhb_loop+0x40/0x90 [ 1264.425175][T20296] ? clear_bhb_loop+0x40/0x90 [ 1264.429903][T20296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1264.435806][T20296] RIP: 0033:0x7fcd6239cdd9 [ 1264.440228][T20296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.459846][T20296] RSP: 002b:00007fcd632b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.468274][T20296] RAX: ffffffffffffffda RBX: 00007fcd62615fa0 RCX: 00007fcd6239cdd9 [ 1264.476255][T20296] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1264.484231][T20296] RBP: 00007fcd62432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1264.492207][T20296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.500187][T20296] R13: 00007fcd62616038 R14: 00007fcd62615fa0 R15: 00007ffdb5f475f8 [ 1264.508198][T20296] [ 1265.534435][T20316] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1265.603668][T20316] bridge_slave_1: default FDB implementation only supports local addresses [ 1265.872559][T20339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1265.900242][T20339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1265.909441][T20339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1265.923057][T20339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1265.936621][T20339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1265.945723][T20339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1266.112703][ T9079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.261771][ T9079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.264011][T20346] delete_channel: no stack [ 1268.040857][T13793] Bluetooth: hci1: command tx timeout [ 1268.510904][T20354] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1269.291808][T20349] netlink: 'syz.0.4693': attribute type 21 has an invalid length. [ 1269.303215][T20349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4693'. [ 1269.331438][ T9079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.353547][T20356] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1269.362763][T20356] bridge_slave_1: default FDB implementation only supports local addresses [ 1269.376502][T20354] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1269.384961][T20354] CPU: 0 PID: 20354 Comm: syz.1.4695 Not tainted syzkaller #0 [ 1269.392451][T20354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1269.402530][T20354] Call Trace: [ 1269.405823][T20354] [ 1269.408787][T20354] dump_stack_lvl+0x18c/0x250 [ 1269.413490][T20354] ? show_regs_print_info+0x20/0x20 [ 1269.418719][T20354] ? load_image+0x420/0x420 [ 1269.423264][T20354] sysfs_warn_dup+0x8e/0xa0 [ 1269.427785][T20354] sysfs_do_create_link_sd+0xc0/0x110 [ 1269.433181][T20354] device_add_class_symlinks+0x1cf/0x240 [ 1269.438829][T20354] device_add+0x507/0xc20 [ 1269.443175][T20354] wiphy_register+0x1dad/0x2ae0 [ 1269.448064][T20354] ? cfg80211_event_work+0x40/0x40 [ 1269.453188][T20354] ? minstrel_ht_alloc+0x88a/0x990 [ 1269.458319][T20354] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1269.464401][T20354] ieee80211_register_hw+0x3464/0x4250 [ 1269.469885][T20354] ? ieee80211_tasklet_handler+0x20/0x20 [ 1269.475520][T20354] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1269.481420][T20354] ? __debug_object_init+0xec/0x450 [ 1269.486719][T20354] ? __asan_memset+0x22/0x40 [ 1269.491320][T20354] ? __hrtimer_init+0x186/0x270 [ 1269.496179][T20354] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1269.501942][T20354] ? mac80211_hwsim_free+0x220/0x220 [ 1269.507236][T20354] ? rcu_is_watching+0x15/0xb0 [ 1269.512039][T20354] ? kstrndup+0xbd/0x140 [ 1269.516299][T20354] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1269.521427][T20354] ? __nla_validate+0x50/0x50 [ 1269.526122][T20354] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1269.532467][T20354] ? __nla_parse+0x40/0x50 [ 1269.536893][T20354] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1269.543243][T20354] genl_family_rcv_msg_doit+0x211/0x310 [ 1269.548821][T20354] ? end_current_label_crit_section+0x170/0x170 [ 1269.555104][T20354] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1269.561040][T20354] ? bpf_lsm_capable+0x9/0x10 [ 1269.565752][T20354] ? security_capable+0x89/0xb0 [ 1269.570638][T20354] genl_rcv_msg+0x619/0x7a0 [ 1269.575165][T20354] ? genl_bind+0x360/0x360 [ 1269.579590][T20354] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1269.585931][T20354] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1269.592538][T20354] ? ref_tracker_free+0x690/0x840 [ 1269.597582][T20354] netlink_rcv_skb+0x241/0x4d0 [ 1269.602362][T20354] ? genl_bind+0x360/0x360 [ 1269.606790][T20354] ? netlink_ack+0x1180/0x1180 [ 1269.611576][T20354] ? __lock_acquire+0x7d40/0x7d40 [ 1269.616624][T20354] ? down_read+0x1ac/0x2e0 [ 1269.621049][T20354] genl_rcv+0x28/0x40 [ 1269.625035][T20354] netlink_unicast+0x751/0x8d0 [ 1269.629819][T20354] netlink_sendmsg+0x8d0/0xbf0 [ 1269.634626][T20354] ? netlink_getsockopt+0x590/0x590 [ 1269.639836][T20354] ? aa_sock_msg_perm+0x94/0x150 [ 1269.644792][T20354] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1269.650115][T20354] ? security_socket_sendmsg+0x80/0xa0 [ 1269.655633][T20354] ? netlink_getsockopt+0x590/0x590 [ 1269.660874][T20354] ____sys_sendmsg+0x5ba/0x960 [ 1269.665669][T20354] ? __asan_memset+0x22/0x40 [ 1269.670268][T20354] ? __sys_sendmsg_sock+0x30/0x30 [ 1269.675306][T20354] ? __import_iovec+0x5f2/0x850 [ 1269.680194][T20354] ? import_iovec+0x73/0xa0 [ 1269.684731][T20354] ___sys_sendmsg+0x2a6/0x360 [ 1269.689443][T20354] ? __sys_sendmsg+0x2a0/0x2a0 [ 1269.694253][T20354] ? trace_call_bpf+0xc3/0x6c0 [ 1269.699061][T20354] __se_sys_sendmsg+0x1c2/0x2b0 [ 1269.703934][T20354] ? __x64_sys_sendmsg+0x80/0x80 [ 1269.708990][T20354] ? lockdep_hardirqs_on+0x98/0x150 [ 1269.714209][T20354] do_syscall_64+0x55/0xa0 [ 1269.718635][T20354] ? clear_bhb_loop+0x40/0x90 [ 1269.723330][T20354] ? clear_bhb_loop+0x40/0x90 [ 1269.728048][T20354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.733974][T20354] RIP: 0033:0x7fcd6239cdd9 [ 1269.738417][T20354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.758132][T20354] RSP: 002b:00007fcd632b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.766564][T20354] RAX: ffffffffffffffda RBX: 00007fcd62615fa0 RCX: 00007fcd6239cdd9 [ 1269.774544][T20354] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1269.782520][T20354] RBP: 00007fcd62432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1269.790497][T20354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.798658][T20354] R13: 00007fcd62616038 R14: 00007fcd62615fa0 R15: 00007ffdb5f475f8 [ 1269.806694][T20354] [ 1269.911118][ T9079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.113023][T13793] Bluetooth: hci1: command tx timeout [ 1270.724266][T20381] delete_channel: no stack [ 1271.097943][T20385] delete_channel: no stack [ 1271.396165][T20394] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1272.196471][T13793] Bluetooth: hci1: command tx timeout [ 1272.996509][T20372] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1273.006872][T20372] bridge_slave_1: default FDB implementation only supports local addresses [ 1273.065309][T20394] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1273.077011][T20394] CPU: 1 PID: 20394 Comm: syz.2.4698 Not tainted syzkaller #0 [ 1273.084566][T20394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1273.094660][T20394] Call Trace: [ 1273.097974][T20394] [ 1273.100937][T20394] dump_stack_lvl+0x18c/0x250 [ 1273.105661][T20394] ? show_regs_print_info+0x20/0x20 [ 1273.110897][T20394] ? load_image+0x420/0x420 [ 1273.115435][T20394] sysfs_warn_dup+0x8e/0xa0 [ 1273.119951][T20394] sysfs_do_create_link_sd+0xc0/0x110 [ 1273.125366][T20394] device_add_class_symlinks+0x1cf/0x240 [ 1273.131035][T20394] device_add+0x507/0xc20 [ 1273.135404][T20394] wiphy_register+0x1dad/0x2ae0 [ 1273.140305][T20394] ? cfg80211_event_work+0x40/0x40 [ 1273.145449][T20394] ? minstrel_ht_alloc+0x88a/0x990 [ 1273.150611][T20394] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1273.156718][T20394] ieee80211_register_hw+0x3464/0x4250 [ 1273.162234][T20394] ? ieee80211_tasklet_handler+0x20/0x20 [ 1273.167877][T20394] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1273.173767][T20394] ? __debug_object_init+0xec/0x450 [ 1273.178958][T20394] ? __asan_memset+0x22/0x40 [ 1273.183566][T20394] ? __hrtimer_init+0x186/0x270 [ 1273.188425][T20394] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1273.194148][T20394] ? mac80211_hwsim_free+0x220/0x220 [ 1273.199421][T20394] ? rcu_is_watching+0x15/0xb0 [ 1273.204193][T20394] ? kstrndup+0xbd/0x140 [ 1273.208457][T20394] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1273.213673][T20394] ? __nla_validate+0x50/0x50 [ 1273.218411][T20394] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1273.224793][T20394] ? __nla_parse+0x40/0x50 [ 1273.229249][T20394] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1273.235638][T20394] genl_family_rcv_msg_doit+0x211/0x310 [ 1273.241220][T20394] ? end_current_label_crit_section+0x170/0x170 [ 1273.247474][T20394] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1273.253457][T20394] ? bpf_lsm_capable+0x9/0x10 [ 1273.258132][T20394] ? security_capable+0x89/0xb0 [ 1273.262996][T20394] genl_rcv_msg+0x619/0x7a0 [ 1273.267515][T20394] ? genl_bind+0x360/0x360 [ 1273.271920][T20394] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1273.278255][T20394] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1273.284864][T20394] ? ref_tracker_free+0x690/0x840 [ 1273.289946][T20394] netlink_rcv_skb+0x241/0x4d0 [ 1273.294707][T20394] ? genl_bind+0x360/0x360 [ 1273.299114][T20394] ? netlink_ack+0x1180/0x1180 [ 1273.303897][T20394] ? __lock_acquire+0x7d40/0x7d40 [ 1273.308939][T20394] ? down_read+0x1ac/0x2e0 [ 1273.313367][T20394] genl_rcv+0x28/0x40 [ 1273.317370][T20394] netlink_unicast+0x751/0x8d0 [ 1273.322161][T20394] netlink_sendmsg+0x8d0/0xbf0 [ 1273.326946][T20394] ? netlink_getsockopt+0x590/0x590 [ 1273.332181][T20394] ? aa_sock_msg_perm+0x94/0x150 [ 1273.337150][T20394] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1273.342473][T20394] ? security_socket_sendmsg+0x80/0xa0 [ 1273.347967][T20394] ? netlink_getsockopt+0x590/0x590 [ 1273.353205][T20394] ____sys_sendmsg+0x5ba/0x960 [ 1273.358015][T20394] ? __asan_memset+0x22/0x40 [ 1273.362643][T20394] ? __sys_sendmsg_sock+0x30/0x30 [ 1273.367699][T20394] ? __import_iovec+0x5f2/0x850 [ 1273.372590][T20394] ? import_iovec+0x73/0xa0 [ 1273.377127][T20394] ___sys_sendmsg+0x2a6/0x360 [ 1273.381844][T20394] ? __sys_sendmsg+0x2a0/0x2a0 [ 1273.386666][T20394] ? trace_call_bpf+0xc3/0x6c0 [ 1273.391465][T20394] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1273.397769][T20394] __se_sys_sendmsg+0x1c2/0x2b0 [ 1273.402660][T20394] ? __x64_sys_sendmsg+0x80/0x80 [ 1273.407647][T20394] ? lockdep_hardirqs_on+0x98/0x150 [ 1273.412887][T20394] do_syscall_64+0x55/0xa0 [ 1273.417332][T20394] ? clear_bhb_loop+0x40/0x90 [ 1273.422022][T20394] ? clear_bhb_loop+0x40/0x90 [ 1273.426708][T20394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1273.432598][T20394] RIP: 0033:0x7fe833f9cdd9 [ 1273.437228][T20394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.457067][T20394] RSP: 002b:00007fe834ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.465495][T20394] RAX: ffffffffffffffda RBX: 00007fe834216180 RCX: 00007fe833f9cdd9 [ 1273.473467][T20394] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1273.481440][T20394] RBP: 00007fe834032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1273.489430][T20394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.497405][T20394] R13: 00007fe834216218 R14: 00007fe834216180 R15: 00007fff88176bf8 [ 1273.505566][T20394] [ 1273.856011][T20416] delete_channel: no stack [ 1274.273289][T13793] Bluetooth: hci1: command tx timeout [ 1276.136687][T20439] delete_channel: no stack [ 1276.342410][T20441] delete_channel: no stack [ 1277.618714][T20337] chnl_net:caif_netlink_parms(): no params data found [ 1278.025123][T20337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.032520][T20337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.044056][T20337] bridge_slave_0: entered allmulticast mode [ 1278.051557][T20337] bridge_slave_0: entered promiscuous mode [ 1278.254420][T20454] delete_channel: no stack [ 1278.285413][T20337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.326586][T20337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.348865][T20337] bridge_slave_1: entered allmulticast mode [ 1278.374455][T20337] bridge_slave_1: entered promiscuous mode [ 1278.622296][T20467] delete_channel: no stack [ 1279.039687][T20452] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1279.642561][T20448] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1279.663349][T20448] bridge_slave_1: default FDB implementation only supports local addresses [ 1279.679378][T20452] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1279.704905][T20452] CPU: 1 PID: 20452 Comm: syz.0.4715 Not tainted syzkaller #0 [ 1279.712436][T20452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1279.722568][T20452] Call Trace: [ 1279.725849][T20452] [ 1279.728771][T20452] dump_stack_lvl+0x18c/0x250 [ 1279.733466][T20452] ? show_regs_print_info+0x20/0x20 [ 1279.738680][T20452] ? load_image+0x420/0x420 [ 1279.743202][T20452] sysfs_warn_dup+0x8e/0xa0 [ 1279.747714][T20452] sysfs_do_create_link_sd+0xc0/0x110 [ 1279.753091][T20452] device_add_class_symlinks+0x1cf/0x240 [ 1279.758736][T20452] device_add+0x507/0xc20 [ 1279.763087][T20452] wiphy_register+0x1dad/0x2ae0 [ 1279.767963][T20452] ? cfg80211_event_work+0x40/0x40 [ 1279.773091][T20452] ? minstrel_ht_alloc+0x88a/0x990 [ 1279.778229][T20452] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1279.784311][T20452] ieee80211_register_hw+0x3464/0x4250 [ 1279.789793][T20452] ? ieee80211_tasklet_handler+0x20/0x20 [ 1279.795417][T20452] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1279.801306][T20452] ? __debug_object_init+0xec/0x450 [ 1279.806597][T20452] ? __asan_memset+0x22/0x40 [ 1279.811202][T20452] ? __hrtimer_init+0x186/0x270 [ 1279.816045][T20452] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1279.821774][T20452] ? mac80211_hwsim_free+0x220/0x220 [ 1279.827052][T20452] ? rcu_is_watching+0x15/0xb0 [ 1279.831831][T20452] ? kstrndup+0xbd/0x140 [ 1279.836125][T20452] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1279.841272][T20452] ? __nla_validate+0x50/0x50 [ 1279.845982][T20452] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1279.852430][T20452] ? __nla_parse+0x40/0x50 [ 1279.856879][T20452] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1279.863238][T20452] genl_family_rcv_msg_doit+0x211/0x310 [ 1279.868806][T20452] ? end_current_label_crit_section+0x170/0x170 [ 1279.875077][T20452] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1279.881124][T20452] ? bpf_lsm_capable+0x9/0x10 [ 1279.885846][T20452] ? security_capable+0x89/0xb0 [ 1279.890748][T20452] genl_rcv_msg+0x619/0x7a0 [ 1279.895379][T20452] ? genl_bind+0x360/0x360 [ 1279.899845][T20452] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1279.906194][T20452] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1279.912828][T20452] netlink_rcv_skb+0x241/0x4d0 [ 1279.917617][T20452] ? genl_bind+0x360/0x360 [ 1279.922043][T20452] ? netlink_ack+0x1180/0x1180 [ 1279.926834][T20452] ? __lock_acquire+0x7d40/0x7d40 [ 1279.931876][T20452] ? down_read+0x1ac/0x2e0 [ 1279.936302][T20452] genl_rcv+0x28/0x40 [ 1279.940294][T20452] netlink_unicast+0x751/0x8d0 [ 1279.945086][T20452] netlink_sendmsg+0x8d0/0xbf0 [ 1279.949874][T20452] ? netlink_getsockopt+0x590/0x590 [ 1279.955100][T20452] ? aa_sock_msg_perm+0x94/0x150 [ 1279.960049][T20452] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1279.965343][T20452] ? security_socket_sendmsg+0x80/0xa0 [ 1279.970807][T20452] ? netlink_getsockopt+0x590/0x590 [ 1279.976024][T20452] ____sys_sendmsg+0x5ba/0x960 [ 1279.980801][T20452] ? __asan_memset+0x22/0x40 [ 1279.985405][T20452] ? __sys_sendmsg_sock+0x30/0x30 [ 1279.990436][T20452] ? __import_iovec+0x5f2/0x850 [ 1279.995313][T20452] ? import_iovec+0x73/0xa0 [ 1279.999831][T20452] ___sys_sendmsg+0x2a6/0x360 [ 1280.004527][T20452] ? __sys_sendmsg+0x2a0/0x2a0 [ 1280.009320][T20452] ? trace_call_bpf+0xc3/0x6c0 [ 1280.014122][T20452] __se_sys_sendmsg+0x1c2/0x2b0 [ 1280.018988][T20452] ? __x64_sys_sendmsg+0x80/0x80 [ 1280.023954][T20452] ? lockdep_hardirqs_on+0x98/0x150 [ 1280.029177][T20452] do_syscall_64+0x55/0xa0 [ 1280.033606][T20452] ? clear_bhb_loop+0x40/0x90 [ 1280.038306][T20452] ? clear_bhb_loop+0x40/0x90 [ 1280.043007][T20452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1280.048915][T20452] RIP: 0033:0x7f862279cdd9 [ 1280.053349][T20452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.072967][T20452] RSP: 002b:00007f8623684028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.081393][T20452] RAX: ffffffffffffffda RBX: 00007f8622a16090 RCX: 00007f862279cdd9 [ 1280.089461][T20452] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1280.097448][T20452] RBP: 00007f8622832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1280.105427][T20452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.113407][T20452] R13: 00007f8622a16128 R14: 00007f8622a16090 R15: 00007fffdc7a6668 [ 1280.121574][T20452] [ 1281.761030][T20337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.886305][T20337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.978769][T20337] team0: Port device team_slave_0 added [ 1281.999589][T20500] delete_channel: no stack [ 1282.078516][T20337] team0: Port device team_slave_1 added [ 1282.308122][T20510] delete_channel: no stack [ 1282.315006][T20337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.322023][T20337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.394043][T20337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.428113][T20337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.444746][T20337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.518302][T20337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.793001][T20515] delete_channel: no stack [ 1283.514594][T20337] hsr_slave_0: entered promiscuous mode [ 1283.523539][T20337] hsr_slave_1: entered promiscuous mode [ 1284.549432][T20541] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1284.797926][T20532] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1284.834891][T20532] bridge_slave_1: default FDB implementation only supports local addresses [ 1284.967855][T20541] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1285.000793][T20541] CPU: 0 PID: 20541 Comm: syz.2.4731 Not tainted syzkaller #0 [ 1285.008343][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1285.018518][T20541] Call Trace: [ 1285.021810][T20541] [ 1285.024759][T20541] dump_stack_lvl+0x18c/0x250 [ 1285.029482][T20541] ? show_regs_print_info+0x20/0x20 [ 1285.034719][T20541] ? load_image+0x420/0x420 [ 1285.039281][T20541] sysfs_warn_dup+0x8e/0xa0 [ 1285.043823][T20541] sysfs_do_create_link_sd+0xc0/0x110 [ 1285.049228][T20541] device_add_class_symlinks+0x1cf/0x240 [ 1285.054919][T20541] device_add+0x507/0xc20 [ 1285.059291][T20541] wiphy_register+0x1dad/0x2ae0 [ 1285.064183][T20541] ? cfg80211_event_work+0x40/0x40 [ 1285.069321][T20541] ? minstrel_ht_alloc+0x88a/0x990 [ 1285.074573][T20541] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1285.080688][T20541] ieee80211_register_hw+0x3464/0x4250 [ 1285.086219][T20541] ? ieee80211_tasklet_handler+0x20/0x20 [ 1285.091899][T20541] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1285.097795][T20541] ? __debug_object_init+0xec/0x450 [ 1285.103009][T20541] ? __asan_memset+0x22/0x40 [ 1285.107640][T20541] ? __hrtimer_init+0x186/0x270 [ 1285.112532][T20541] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1285.118312][T20541] ? mac80211_hwsim_free+0x220/0x220 [ 1285.123632][T20541] ? rcu_is_watching+0x15/0xb0 [ 1285.128429][T20541] ? kstrndup+0xbd/0x140 [ 1285.132715][T20541] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1285.137869][T20541] ? __nla_validate+0x50/0x50 [ 1285.142595][T20541] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1285.148970][T20541] ? __nla_parse+0x40/0x50 [ 1285.153421][T20541] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1285.159790][T20541] genl_family_rcv_msg_doit+0x211/0x310 [ 1285.165378][T20541] ? end_current_label_crit_section+0x170/0x170 [ 1285.171669][T20541] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1285.177609][T20541] ? bpf_lsm_capable+0x9/0x10 [ 1285.182330][T20541] ? security_capable+0x89/0xb0 [ 1285.187231][T20541] genl_rcv_msg+0x619/0x7a0 [ 1285.191778][T20541] ? genl_bind+0x360/0x360 [ 1285.196227][T20541] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1285.202590][T20541] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1285.209221][T20541] ? ref_tracker_free+0x690/0x840 [ 1285.214301][T20541] netlink_rcv_skb+0x241/0x4d0 [ 1285.219115][T20541] ? genl_bind+0x360/0x360 [ 1285.223745][T20541] ? netlink_ack+0x1180/0x1180 [ 1285.228587][T20541] ? __lock_acquire+0x7d40/0x7d40 [ 1285.233656][T20541] ? down_read+0x1ac/0x2e0 [ 1285.238108][T20541] genl_rcv+0x28/0x40 [ 1285.242123][T20541] netlink_unicast+0x751/0x8d0 [ 1285.247020][T20541] netlink_sendmsg+0x8d0/0xbf0 [ 1285.251842][T20541] ? netlink_getsockopt+0x590/0x590 [ 1285.257087][T20541] ? aa_sock_msg_perm+0x94/0x150 [ 1285.262065][T20541] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1285.267381][T20541] ? security_socket_sendmsg+0x80/0xa0 [ 1285.272958][T20541] ? netlink_getsockopt+0x590/0x590 [ 1285.278201][T20541] ____sys_sendmsg+0x5ba/0x960 [ 1285.283010][T20541] ? __asan_memset+0x22/0x40 [ 1285.287625][T20541] ? __sys_sendmsg_sock+0x30/0x30 [ 1285.292639][T20541] ? __import_iovec+0x5f2/0x850 [ 1285.297488][T20541] ? import_iovec+0x73/0xa0 [ 1285.301982][T20541] ___sys_sendmsg+0x2a6/0x360 [ 1285.306660][T20541] ? __sys_sendmsg+0x2a0/0x2a0 [ 1285.311451][T20541] ? trace_call_bpf+0xc3/0x6c0 [ 1285.316231][T20541] ? debug_mutex_init+0x38/0x70 [ 1285.321092][T20541] __se_sys_sendmsg+0x1c2/0x2b0 [ 1285.325951][T20541] ? __x64_sys_sendmsg+0x80/0x80 [ 1285.330911][T20541] ? lockdep_hardirqs_on+0x98/0x150 [ 1285.336114][T20541] do_syscall_64+0x55/0xa0 [ 1285.340530][T20541] ? clear_bhb_loop+0x40/0x90 [ 1285.345209][T20541] ? clear_bhb_loop+0x40/0x90 [ 1285.349887][T20541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1285.355785][T20541] RIP: 0033:0x7fe833f9cdd9 [ 1285.360206][T20541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.379985][T20541] RSP: 002b:00007fe834eec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1285.388399][T20541] RAX: ffffffffffffffda RBX: 00007fe834216090 RCX: 00007fe833f9cdd9 [ 1285.396366][T20541] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1285.404337][T20541] RBP: 00007fe834032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1285.412308][T20541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.420280][T20541] R13: 00007fe834216128 R14: 00007fe834216090 R15: 00007fff88176bf8 [ 1285.428269][T20541] [ 1285.735810][T20567] netlink: 'syz.1.4736': attribute type 21 has an invalid length. [ 1285.781280][T20567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1285.810319][T20571] delete_channel: no stack [ 1285.961621][T20574] delete_channel: no stack [ 1286.216221][ T9079] vlan0: left allmulticast mode [ 1286.221153][ T9079] veth0_vlan: left allmulticast mode [ 1286.259378][ T9079] vlan0: left promiscuous mode [ 1286.274522][ T9079] À: port 1(vlan0) entered disabled state [ 1286.315718][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.335581][T20580] delete_channel: no stack [ 1286.344726][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.357681][T20581] delete_channel: no stack [ 1286.364421][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.383589][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.395068][ T9079] bridge0: port 4(team0) entered disabled state [ 1286.418361][ T9079] bond0: left allmulticast mode [ 1286.423682][ T9079] bond_slave_0: left allmulticast mode [ 1286.429185][ T9079] bond_slave_1: left allmulticast mode [ 1286.435106][ T9079] batadv0: left allmulticast mode [ 1286.440549][ T9079] bridge0: port 3(bond0) entered disabled state [ 1286.457811][ T9079] bridge_slave_1: left allmulticast mode [ 1286.465262][ T9079] bridge_slave_1: left promiscuous mode [ 1286.471068][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.482606][ T9079] bridge_slave_0: left allmulticast mode [ 1286.489449][ T9079] bridge_slave_0: left promiscuous mode [ 1286.497421][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.529750][ T9079] veth0_macvtap: left promiscuous mode [ 1286.539367][ T9079] veth1_vlan: left allmulticast mode [ 1286.555657][ T9079] veth1_vlan: left promiscuous mode [ 1286.561086][ T9079] veth0_vlan: left promiscuous mode [ 1287.388043][ T9079] macvlan1 (unregistering): left promiscuous mode [ 1287.400995][ T9079] team0 (unregistering): Port device macvlan1 removed [ 1287.940955][T20594] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1287.965931][ T9079] team_slave_1 (unregistering): left promiscuous mode [ 1287.972844][ T9079] team_slave_1 (unregistering): left allmulticast mode [ 1287.982279][ T9079] team0 (unregistering): Port device team_slave_1 removed [ 1288.066287][ T9079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.075482][ T9079] bond_slave_1 (unregistering): left promiscuous mode [ 1288.127219][ T9079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.138117][ T9079] bond_slave_0 (unregistering): left promiscuous mode [ 1288.350605][ T9079] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1288.359369][ T9079] batadv0 (unregistering): left promiscuous mode [ 1288.450875][ T9079] bond0 (unregistering): Released all slaves [ 1288.579429][T20587] netlink: 'syz.0.4742': attribute type 21 has an invalid length. [ 1288.590874][T20587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4742'. [ 1288.610572][T20595] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1288.621610][T20595] bridge_slave_1: default FDB implementation only supports local addresses [ 1288.664989][T20594] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1288.697503][T20594] CPU: 0 PID: 20594 Comm: syz.1.4745 Not tainted syzkaller #0 [ 1288.705037][T20594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.715100][T20594] Call Trace: [ 1288.718381][T20594] [ 1288.721313][T20594] dump_stack_lvl+0x18c/0x250 [ 1288.726006][T20594] ? show_regs_print_info+0x20/0x20 [ 1288.731299][T20594] ? load_image+0x420/0x420 [ 1288.735844][T20594] sysfs_warn_dup+0x8e/0xa0 [ 1288.740370][T20594] sysfs_do_create_link_sd+0xc0/0x110 [ 1288.745771][T20594] device_add_class_symlinks+0x1cf/0x240 [ 1288.751453][T20594] device_add+0x507/0xc20 [ 1288.755810][T20594] wiphy_register+0x1dad/0x2ae0 [ 1288.760686][T20594] ? cfg80211_event_work+0x40/0x40 [ 1288.765807][T20594] ? minstrel_ht_alloc+0x88a/0x990 [ 1288.770934][T20594] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1288.777008][T20594] ieee80211_register_hw+0x3464/0x4250 [ 1288.782491][T20594] ? ieee80211_tasklet_handler+0x20/0x20 [ 1288.788119][T20594] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1288.794013][T20594] ? __debug_object_init+0xec/0x450 [ 1288.799222][T20594] ? __asan_memset+0x22/0x40 [ 1288.803817][T20594] ? __hrtimer_init+0x186/0x270 [ 1288.808672][T20594] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1288.814410][T20594] ? mac80211_hwsim_free+0x220/0x220 [ 1288.819689][T20594] ? rcu_is_watching+0x15/0xb0 [ 1288.824496][T20594] ? kstrndup+0xbd/0x140 [ 1288.828762][T20594] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1288.833896][T20594] ? __nla_validate+0x50/0x50 [ 1288.838588][T20594] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1288.844952][T20594] ? __nla_parse+0x40/0x50 [ 1288.849388][T20594] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1288.855734][T20594] genl_family_rcv_msg_doit+0x211/0x310 [ 1288.861310][T20594] ? end_current_label_crit_section+0x170/0x170 [ 1288.867574][T20594] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1288.873478][T20594] ? bpf_lsm_capable+0x9/0x10 [ 1288.878154][T20594] ? security_capable+0x89/0xb0 [ 1288.883036][T20594] genl_rcv_msg+0x619/0x7a0 [ 1288.887552][T20594] ? genl_bind+0x360/0x360 [ 1288.892067][T20594] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1288.898396][T20594] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1288.904993][T20594] ? ref_tracker_free+0x690/0x840 [ 1288.910029][T20594] netlink_rcv_skb+0x241/0x4d0 [ 1288.914797][T20594] ? genl_bind+0x360/0x360 [ 1288.919216][T20594] ? netlink_ack+0x1180/0x1180 [ 1288.923995][T20594] ? __lock_acquire+0x7d40/0x7d40 [ 1288.929023][T20594] ? down_read+0x1ac/0x2e0 [ 1288.933438][T20594] genl_rcv+0x28/0x40 [ 1288.937416][T20594] netlink_unicast+0x751/0x8d0 [ 1288.942190][T20594] netlink_sendmsg+0x8d0/0xbf0 [ 1288.946967][T20594] ? netlink_getsockopt+0x590/0x590 [ 1288.952182][T20594] ? aa_sock_msg_perm+0x94/0x150 [ 1288.957132][T20594] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1288.962415][T20594] ? security_socket_sendmsg+0x80/0xa0 [ 1288.967956][T20594] ? netlink_getsockopt+0x590/0x590 [ 1288.973176][T20594] ____sys_sendmsg+0x5ba/0x960 [ 1288.977947][T20594] ? __asan_memset+0x22/0x40 [ 1288.982541][T20594] ? __sys_sendmsg_sock+0x30/0x30 [ 1288.987560][T20594] ? __import_iovec+0x5f2/0x850 [ 1288.992413][T20594] ? import_iovec+0x73/0xa0 [ 1288.996938][T20594] ___sys_sendmsg+0x2a6/0x360 [ 1289.001639][T20594] ? __sys_sendmsg+0x2a0/0x2a0 [ 1289.006420][T20594] ? debug_mutex_init+0x38/0x70 [ 1289.011292][T20594] __se_sys_sendmsg+0x1c2/0x2b0 [ 1289.016143][T20594] ? __x64_sys_sendmsg+0x80/0x80 [ 1289.021095][T20594] ? lockdep_hardirqs_on+0x98/0x150 [ 1289.026293][T20594] do_syscall_64+0x55/0xa0 [ 1289.030704][T20594] ? clear_bhb_loop+0x40/0x90 [ 1289.035392][T20594] ? clear_bhb_loop+0x40/0x90 [ 1289.040071][T20594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.045972][T20594] RIP: 0033:0x7fcd6239cdd9 [ 1289.050398][T20594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.070369][T20594] RSP: 002b:00007fcd632b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.078785][T20594] RAX: ffffffffffffffda RBX: 00007fcd62615fa0 RCX: 00007fcd6239cdd9 [ 1289.086754][T20594] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1289.094725][T20594] RBP: 00007fcd62432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1289.102712][T20594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1289.110696][T20594] R13: 00007fcd62616038 R14: 00007fcd62615fa0 R15: 00007ffdb5f475f8 [ 1289.118955][T20594] [ 1289.312503][T20337] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1289.341466][T20337] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1289.374568][T20605] netlink: 'syz.1.4749': attribute type 21 has an invalid length. [ 1289.394842][T20602] delete_channel: no stack [ 1289.400461][T20605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1289.423383][T20337] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1289.454567][T20337] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1289.920300][T20337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.957009][T20337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.959198][T20609] delete_channel: no stack [ 1289.976083][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.983325][ T9079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.016127][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.023363][ T9079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.529020][T20639] netlink: 'syz.2.4762': attribute type 21 has an invalid length. [ 1290.563324][T20639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1290.657530][T20337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.785385][T20337] veth0_vlan: entered promiscuous mode [ 1290.861195][T20337] veth1_vlan: entered promiscuous mode [ 1290.894444][T20337] veth0_macvtap: entered promiscuous mode [ 1290.909182][T20337] veth1_macvtap: entered promiscuous mode [ 1291.010821][T20337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1291.032382][T20337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.059118][T20337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1291.124127][T20337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1291.172381][T20337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1291.214526][T20337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1291.272138][T20655] netlink: 'syz.0.4759': attribute type 21 has an invalid length. [ 1291.306871][T20655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4759'. [ 1291.430880][T20337] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.472968][T20337] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.523491][T20337] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.539028][T20337] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.585385][T20656] delete_channel: no stack [ 1291.633608][T20649] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4756'. [ 1291.652470][T20652] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4756'. [ 1291.665624][T20652] bridge_slave_1: default FDB implementation only supports local addresses [ 1291.847703][T20649] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1291.856175][T20649] CPU: 0 PID: 20649 Comm: syz.2.4756 Not tainted syzkaller #0 [ 1291.863673][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1291.873758][T20649] Call Trace: [ 1291.877059][T20649] [ 1291.880014][T20649] dump_stack_lvl+0x18c/0x250 [ 1291.884735][T20649] ? show_regs_print_info+0x20/0x20 [ 1291.889979][T20649] ? load_image+0x420/0x420 [ 1291.894540][T20649] sysfs_warn_dup+0x8e/0xa0 [ 1291.899078][T20649] sysfs_do_create_link_sd+0xc0/0x110 [ 1291.904490][T20649] device_add_class_symlinks+0x1cf/0x240 [ 1291.910166][T20649] device_add+0x507/0xc20 [ 1291.914543][T20649] wiphy_register+0x1dad/0x2ae0 [ 1291.919445][T20649] ? cfg80211_event_work+0x40/0x40 [ 1291.924585][T20649] ? minstrel_ht_alloc+0x88a/0x990 [ 1291.929745][T20649] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1291.935843][T20649] ieee80211_register_hw+0x3464/0x4250 [ 1291.941322][T20649] ? ieee80211_tasklet_handler+0x20/0x20 [ 1291.946954][T20649] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1291.952851][T20649] ? __debug_object_init+0xec/0x450 [ 1291.958066][T20649] ? __asan_memset+0x22/0x40 [ 1291.962667][T20649] ? __hrtimer_init+0x186/0x270 [ 1291.967546][T20649] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1291.973290][T20649] ? mac80211_hwsim_free+0x220/0x220 [ 1291.978576][T20649] ? rcu_is_watching+0x15/0xb0 [ 1291.983343][T20649] ? kstrndup+0xbd/0x140 [ 1291.987590][T20649] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1291.992707][T20649] ? mark_lock+0x94/0x320 [ 1291.997044][T20649] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1292.003372][T20649] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1292.009532][T20649] ? lockdep_hardirqs_on+0x98/0x150 [ 1292.014730][T20649] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1292.020905][T20649] genl_family_rcv_msg_doit+0x211/0x310 [ 1292.026450][T20649] ? end_current_label_crit_section+0x170/0x170 [ 1292.032698][T20649] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1292.038595][T20649] ? bpf_lsm_capable+0x9/0x10 [ 1292.043283][T20649] ? security_capable+0x89/0xb0 [ 1292.048144][T20649] genl_rcv_msg+0x619/0x7a0 [ 1292.052656][T20649] ? genl_bind+0x360/0x360 [ 1292.057067][T20649] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1292.063406][T20649] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1292.070206][T20649] netlink_rcv_skb+0x241/0x4d0 [ 1292.075038][T20649] ? genl_bind+0x360/0x360 [ 1292.079469][T20649] ? netlink_ack+0x1180/0x1180 [ 1292.084284][T20649] ? __lock_acquire+0x7d40/0x7d40 [ 1292.089324][T20649] ? down_read+0x1ac/0x2e0 [ 1292.093746][T20649] genl_rcv+0x28/0x40 [ 1292.097728][T20649] netlink_unicast+0x751/0x8d0 [ 1292.102592][T20649] netlink_sendmsg+0x8d0/0xbf0 [ 1292.107379][T20649] ? netlink_getsockopt+0x590/0x590 [ 1292.112595][T20649] ? aa_sock_msg_perm+0x94/0x150 [ 1292.117539][T20649] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1292.122829][T20649] ? security_socket_sendmsg+0x80/0xa0 [ 1292.128292][T20649] ? netlink_getsockopt+0x590/0x590 [ 1292.133499][T20649] ____sys_sendmsg+0x5ba/0x960 [ 1292.138263][T20649] ? __asan_memset+0x22/0x40 [ 1292.142856][T20649] ? __sys_sendmsg_sock+0x30/0x30 [ 1292.147880][T20649] ? __import_iovec+0x5f2/0x850 [ 1292.152732][T20649] ? import_iovec+0x73/0xa0 [ 1292.157229][T20649] ___sys_sendmsg+0x2a6/0x360 [ 1292.161901][T20649] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1292.168496][T20649] ? __sys_sendmsg+0x2a0/0x2a0 [ 1292.173302][T20649] __se_sys_sendmsg+0x1c2/0x2b0 [ 1292.178186][T20649] ? __x64_sys_sendmsg+0x80/0x80 [ 1292.183129][T20649] ? lockdep_hardirqs_on+0x98/0x150 [ 1292.188335][T20649] do_syscall_64+0x55/0xa0 [ 1292.192744][T20649] ? clear_bhb_loop+0x40/0x90 [ 1292.197473][T20649] ? clear_bhb_loop+0x40/0x90 [ 1292.202148][T20649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1292.208040][T20649] RIP: 0033:0x7fe833f9cdd9 [ 1292.212453][T20649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.232061][T20649] RSP: 002b:00007fe834f0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1292.240478][T20649] RAX: ffffffffffffffda RBX: 00007fe834215fa0 RCX: 00007fe833f9cdd9 [ 1292.248445][T20649] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1292.256420][T20649] RBP: 00007fe834032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1292.264481][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.272448][T20649] R13: 00007fe834216038 R14: 00007fe834215fa0 R15: 00007fff88176bf8 [ 1292.280428][T20649] [ 1292.444312][ T9079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.452207][ T9079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.531517][T20684] netlink: 'syz.1.4765': attribute type 21 has an invalid length. [ 1292.541072][T20684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4765'. [ 1292.598574][ T9083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.606744][ T9083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.938362][T20695] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4686'. [ 1293.994757][T20710] delete_channel: no stack [ 1295.673727][T20715] netlink: 'syz.3.4770': attribute type 21 has an invalid length. [ 1295.706945][T20715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4770'. [ 1295.964432][T20727] netlink: 'syz.0.4775': attribute type 21 has an invalid length. [ 1295.972363][T20727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4775'. [ 1296.055038][T20729] netlink: 'syz.2.4774': attribute type 21 has an invalid length. [ 1296.111752][T20729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4774'. [ 1297.041338][T20339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1297.051620][T20339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1297.069460][T20339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1297.078224][T20339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1297.086981][T20339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1297.097112][T20339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.571141][ T9079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.936517][ T9079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.084183][T20753] delete_channel: no stack [ 1298.202236][ T9079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.218132][T20724] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4773'. [ 1298.241737][T20724] bridge_slave_1: default FDB implementation only supports local addresses [ 1298.308689][T20767] netlink: 'syz.0.4780': attribute type 21 has an invalid length. [ 1298.327484][T20767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1298.367445][ T9079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.609089][T20724] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4773'. [ 1298.682939][T20724] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1298.824648][T20740] chnl_net:caif_netlink_parms(): no params data found [ 1298.903100][T20778] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4781'. [ 1299.153196][T20339] Bluetooth: hci2: command tx timeout [ 1299.165746][T20786] netlink: 'syz.2.4783': attribute type 21 has an invalid length. [ 1299.176274][T20786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1299.692569][T20796] netlink: 'syz.0.4786': attribute type 21 has an invalid length. [ 1299.714382][T20796] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4786'. [ 1300.000962][T20797] À: port 1(vlan0) entered blocking state [ 1300.013296][T20797] À: port 1(vlan0) entered disabled state [ 1300.023708][T20797] vlan0: entered allmulticast mode [ 1300.028899][T20797] veth0_vlan: entered allmulticast mode [ 1300.054376][T20797] vlan0: entered promiscuous mode [ 1300.071395][T20791] À: port 1(vlan0) entered blocking state [ 1300.077483][T20791] À: port 1(vlan0) entered forwarding state [ 1300.118447][T20740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.126458][T20740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.134302][T20740] bridge_slave_0: entered allmulticast mode [ 1300.142702][T20740] bridge_slave_0: entered promiscuous mode [ 1300.211384][T20740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.222633][T20740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.234059][T20740] bridge_slave_1: entered allmulticast mode [ 1300.245190][T20740] bridge_slave_1: entered promiscuous mode [ 1300.428316][T20740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.459223][T20819] netlink: 'syz.0.4789': attribute type 21 has an invalid length. [ 1300.483056][T20819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1300.517118][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.524131][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.545350][T20740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.588745][T20821] netlink: 'syz.2.4795': attribute type 21 has an invalid length. [ 1300.745078][T20740] team0: Port device team_slave_0 added [ 1300.798270][T20740] team0: Port device team_slave_1 added [ 1300.889579][T20740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.897222][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.930067][T20740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.983341][T20740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.990433][T20740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.059863][T20740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.110794][T20839] netlink: 'syz.0.4798': attribute type 21 has an invalid length. [ 1301.142779][T20839] __nla_validate_parse: 1 callbacks suppressed [ 1301.142796][T20839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4798'. [ 1301.233925][T20339] Bluetooth: hci2: command tx timeout [ 1301.416054][T20740] hsr_slave_0: entered promiscuous mode [ 1301.424811][T20740] hsr_slave_1: entered promiscuous mode [ 1301.435890][T20740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1301.458679][T20740] Cannot create hsr debugfs directory [ 1302.067497][T20866] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4794'. [ 1302.351878][T20858] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4793'. [ 1302.474298][T20858] bridge_slave_1: default FDB implementation only supports local addresses [ 1302.604841][T20858] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4793'. [ 1302.689398][T20858] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1302.723137][T20858] CPU: 1 PID: 20858 Comm: syz.0.4793 Not tainted syzkaller #0 [ 1302.730687][T20858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1302.740785][T20858] Call Trace: [ 1302.744108][T20858] [ 1302.747069][T20858] dump_stack_lvl+0x18c/0x250 [ 1302.751799][T20858] ? show_regs_print_info+0x20/0x20 [ 1302.757048][T20858] ? load_image+0x420/0x420 [ 1302.761617][T20858] ? kasan_save_alloc_info+0xb/0x30 [ 1302.766876][T20858] sysfs_warn_dup+0x8e/0xa0 [ 1302.771423][T20858] sysfs_do_create_link_sd+0xc0/0x110 [ 1302.776838][T20858] device_add_class_symlinks+0x1cf/0x240 [ 1302.782526][T20858] device_add+0x507/0xc20 [ 1302.786914][T20858] wiphy_register+0x1dad/0x2ae0 [ 1302.791852][T20858] ? cfg80211_event_work+0x40/0x40 [ 1302.797008][T20858] ? minstrel_ht_alloc+0x88a/0x990 [ 1302.802212][T20858] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1302.808356][T20858] ieee80211_register_hw+0x3464/0x4250 [ 1302.813908][T20858] ? ieee80211_tasklet_handler+0x20/0x20 [ 1302.819586][T20858] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1302.825527][T20858] ? __debug_object_init+0xec/0x450 [ 1302.830757][T20858] ? __asan_memset+0x22/0x40 [ 1302.835376][T20858] ? __hrtimer_init+0x186/0x270 [ 1302.840254][T20858] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1302.846031][T20858] ? mac80211_hwsim_free+0x220/0x220 [ 1302.851348][T20858] ? rcu_is_watching+0x15/0xb0 [ 1302.856137][T20858] ? kstrndup+0xbd/0x140 [ 1302.860442][T20858] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1302.865603][T20858] ? __nla_validate+0x50/0x50 [ 1302.870328][T20858] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1302.876697][T20858] ? __nla_parse+0x40/0x50 [ 1302.881135][T20858] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1302.887486][T20858] genl_family_rcv_msg_doit+0x211/0x310 [ 1302.893044][T20858] ? end_current_label_crit_section+0x170/0x170 [ 1302.899303][T20858] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1302.905223][T20858] ? bpf_lsm_capable+0x9/0x10 [ 1302.909913][T20858] ? security_capable+0x89/0xb0 [ 1302.914962][T20858] genl_rcv_msg+0x619/0x7a0 [ 1302.919604][T20858] ? genl_bind+0x360/0x360 [ 1302.924599][T20858] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1302.931005][T20858] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1302.937657][T20858] netlink_rcv_skb+0x241/0x4d0 [ 1302.942454][T20858] ? genl_bind+0x360/0x360 [ 1302.946887][T20858] ? netlink_ack+0x1180/0x1180 [ 1302.951699][T20858] ? __lock_acquire+0x7d40/0x7d40 [ 1302.956767][T20858] ? down_read+0x1ac/0x2e0 [ 1302.961901][T20858] genl_rcv+0x28/0x40 [ 1302.965927][T20858] netlink_unicast+0x751/0x8d0 [ 1302.971277][T20858] netlink_sendmsg+0x8d0/0xbf0 [ 1302.976090][T20858] ? netlink_getsockopt+0x590/0x590 [ 1302.981312][T20858] ? aa_sock_msg_perm+0x94/0x150 [ 1302.986297][T20858] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1302.991615][T20858] ? security_socket_sendmsg+0x80/0xa0 [ 1302.997117][T20858] ? netlink_getsockopt+0x590/0x590 [ 1303.002341][T20858] ____sys_sendmsg+0x5ba/0x960 [ 1303.007152][T20858] ? __asan_memset+0x22/0x40 [ 1303.011770][T20858] ? __sys_sendmsg_sock+0x30/0x30 [ 1303.016808][T20858] ? __import_iovec+0x5f2/0x850 [ 1303.021682][T20858] ? import_iovec+0x73/0xa0 [ 1303.026198][T20858] ___sys_sendmsg+0x2a6/0x360 [ 1303.030902][T20858] ? __sys_sendmsg+0x2a0/0x2a0 [ 1303.035843][T20858] __se_sys_sendmsg+0x1c2/0x2b0 [ 1303.040736][T20858] ? __x64_sys_sendmsg+0x80/0x80 [ 1303.045734][T20858] ? lockdep_hardirqs_on+0x98/0x150 [ 1303.050959][T20858] do_syscall_64+0x55/0xa0 [ 1303.055386][T20858] ? clear_bhb_loop+0x40/0x90 [ 1303.060073][T20858] ? clear_bhb_loop+0x40/0x90 [ 1303.064784][T20858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1303.070693][T20858] RIP: 0033:0x7f862279cdd9 [ 1303.075128][T20858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1303.094781][T20858] RSP: 002b:00007f86236a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1303.103213][T20858] RAX: ffffffffffffffda RBX: 00007f8622a15fa0 RCX: 00007f862279cdd9 [ 1303.111192][T20858] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1303.119192][T20858] RBP: 00007f8622832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1303.127183][T20858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1303.135170][T20858] R13: 00007f8622a16038 R14: 00007f8622a15fa0 R15: 00007fffdc7a6668 [ 1303.143178][T20858] [ 1303.268134][ T9079] vlan0: left allmulticast mode [ 1303.275198][ T9079] veth0_vlan: left allmulticast mode [ 1303.280602][ T9079] vlan0: left promiscuous mode [ 1303.297335][ T9079] À: port 1(vlan0) entered disabled state [ 1303.313227][T20339] Bluetooth: hci2: command tx timeout [ 1303.350889][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.378306][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.394560][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.402042][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.410401][ T9079] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1303.418193][ T9079] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1303.445343][ T9079] veth1_macvtap: left allmulticast mode [ 1303.451114][ T9079] veth1_macvtap: left promiscuous mode [ 1303.463627][ T9079] veth1_vlan: left promiscuous mode [ 1303.469031][ T9079] veth0_vlan: left promiscuous mode [ 1304.174773][ T9079] team0 (unregistering): Port device team_slave_1 removed [ 1304.259875][ T9079] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.306998][ T9079] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.597268][ T9079] .` (unregistering): Released all slaves [ 1304.636616][T20883] netlink: 'syz.3.4797': attribute type 21 has an invalid length. [ 1304.644594][T20883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1304.799882][T20901] FAULT_INJECTION: forcing a failure. [ 1304.799882][T20901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.820946][T20901] CPU: 1 PID: 20901 Comm: syz.0.4800 Not tainted syzkaller #0 [ 1304.828466][T20901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1304.838543][T20901] Call Trace: [ 1304.841855][T20901] [ 1304.844846][T20901] dump_stack_lvl+0x18c/0x250 [ 1304.849557][T20901] ? show_regs_print_info+0x20/0x20 [ 1304.854786][T20901] ? load_image+0x420/0x420 [ 1304.859319][T20901] ? __might_fault+0xaa/0x120 [ 1304.864014][T20901] ? __lock_acquire+0x7d40/0x7d40 [ 1304.869070][T20901] should_fail_ex+0x39d/0x4d0 [ 1304.873789][T20901] _copy_from_user+0x2f/0xe0 [ 1304.878401][T20901] ___sys_sendmsg+0x1c7/0x360 [ 1304.883087][T20901] ? get_pid_task+0x20/0x1e0 [ 1304.887692][T20901] ? __sys_sendmsg+0x2a0/0x2a0 [ 1304.892469][T20901] ? __lock_acquire+0x7d40/0x7d40 [ 1304.897578][T20901] __se_sys_sendmsg+0x1c2/0x2b0 [ 1304.902435][T20901] ? __x64_sys_sendmsg+0x80/0x80 [ 1304.907383][T20901] ? lockdep_hardirqs_on+0x98/0x150 [ 1304.912658][T20901] do_syscall_64+0x55/0xa0 [ 1304.917070][T20901] ? clear_bhb_loop+0x40/0x90 [ 1304.921769][T20901] ? clear_bhb_loop+0x40/0x90 [ 1304.926446][T20901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1304.932332][T20901] RIP: 0033:0x7f862279cdd9 [ 1304.936743][T20901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.956447][T20901] RSP: 002b:00007f86236a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.964944][T20901] RAX: ffffffffffffffda RBX: 00007f8622a15fa0 RCX: 00007f862279cdd9 [ 1304.972913][T20901] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000003 [ 1304.980883][T20901] RBP: 00007f86236a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.988851][T20901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.996819][T20901] R13: 00007f8622a16038 R14: 00007f8622a15fa0 R15: 00007fffdc7a6668 [ 1305.004804][T20901] [ 1305.038569][T20903] netlink: 'syz.3.4801': attribute type 21 has an invalid length. [ 1305.049950][T20903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4801'. [ 1305.370032][T20740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1305.393436][T20339] Bluetooth: hci2: command tx timeout [ 1305.414021][T20740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1305.486782][T20740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1305.584003][T20740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1305.611589][T20926] netlink: 'syz.0.4808': attribute type 21 has an invalid length. [ 1305.627428][T20926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4808'. [ 1309.265748][T20941] netlink: 'syz.2.4812': attribute type 21 has an invalid length. [ 1309.273996][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4812'. [ 1309.300328][T20740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.322650][T20740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.362436][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.369624][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.422479][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.429719][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.789231][T20952] netlink: 'syz.2.4816': attribute type 21 has an invalid length. [ 1309.814317][T20952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4816'. [ 1309.896763][T20740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.051620][T20740] veth0_vlan: entered promiscuous mode [ 1310.074695][T20959] netlink: 'syz.0.4819': attribute type 21 has an invalid length. [ 1310.094884][T20959] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1310.166857][T20740] veth1_vlan: entered promiscuous mode [ 1310.475414][T20740] veth0_macvtap: entered promiscuous mode [ 1310.559203][T20740] veth1_macvtap: entered promiscuous mode [ 1310.864502][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.875448][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.890942][T20740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.915362][T20740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.937076][T20740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.944568][T20962] delete_channel: no stack [ 1310.959954][T20740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.977279][T20740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.986668][T20740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.995738][T20740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.005015][T20740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.147470][ T9073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.167751][ T9073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.201764][T20969] netlink: 'syz.2.4822': attribute type 21 has an invalid length. [ 1311.211787][T20969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4822'. [ 1311.239849][T16213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.250028][T16213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.367772][T20974] netlink: 'syz.0.4824': attribute type 21 has an invalid length. [ 1311.375881][T20974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4824'. [ 1311.657028][T20973] delete_channel: no stack [ 1311.677203][T20982] netlink: 'syz.1.4827': attribute type 21 has an invalid length. [ 1311.690031][T20982] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4827'. [ 1312.302339][T20985] delete_channel: no stack [ 1312.732045][T20996] netlink: 'syz.3.4833': attribute type 21 has an invalid length. [ 1312.740885][T20996] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4833'. [ 1313.058357][T20999] netlink: 'syz.0.4835': attribute type 21 has an invalid length. [ 1313.083290][T20999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4835'. [ 1313.453700][T21006] netlink: 'syz.2.4837': attribute type 21 has an invalid length. [ 1313.461636][T21006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1313.942583][T21011] netlink: 'syz.0.4839': attribute type 21 has an invalid length. [ 1313.999634][T21011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1314.100081][T21014] netlink: 'syz.3.4840': attribute type 21 has an invalid length. [ 1314.195249][T21015] bridge_slave_1: default FDB implementation only supports local addresses [ 1314.945028][T21015] __nla_validate_parse: 2 callbacks suppressed [ 1314.945048][T21015] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4834'. [ 1315.024479][T21015] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1315.750891][T13793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1315.813442][T13793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1315.835366][T13793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1315.855820][T13793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1315.875461][T13793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1315.884794][T13793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1317.956228][T13793] Bluetooth: hci4: command tx timeout [ 1318.268498][T21036] netlink: 'syz.3.4846': attribute type 39 has an invalid length. [ 1318.278285][T21036] veth0_macvtap: left promiscuous mode [ 1318.291449][T21039] netlink: 'syz.1.4847': attribute type 21 has an invalid length. [ 1318.312596][T21039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4847'. [ 1318.514758][T21041] delete_channel: no stack [ 1318.542042][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.745576][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.860685][T21029] chnl_net:caif_netlink_parms(): no params data found [ 1319.174049][T21055] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1319.226753][T21055] bridge_slave_1: default FDB implementation only supports local addresses [ 1319.360662][T21064] netlink: 'syz.1.4854': attribute type 21 has an invalid length. [ 1319.369051][T21064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1319.610184][T21055] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1319.829382][T21029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.836863][T21029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.844712][T21029] bridge_slave_0: entered allmulticast mode [ 1319.852176][T21029] bridge_slave_0: entered promiscuous mode [ 1319.866166][T21029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.882774][T21029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.890466][T21029] bridge_slave_1: entered allmulticast mode [ 1319.901405][T21029] bridge_slave_1: entered promiscuous mode [ 1319.950322][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.037360][T13793] Bluetooth: hci4: command tx timeout [ 1320.061316][T21029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.105904][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.126575][T21071] FAULT_INJECTION: forcing a failure. [ 1320.126575][T21071] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.141769][T21071] CPU: 0 PID: 21071 Comm: syz.1.4856 Not tainted syzkaller #0 [ 1320.142372][T21055] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1320.149257][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1320.149272][T21071] Call Trace: [ 1320.149280][T21071] [ 1320.149287][T21071] dump_stack_lvl+0x18c/0x250 [ 1320.149321][T21071] ? show_regs_print_info+0x20/0x20 [ 1320.149344][T21071] ? load_image+0x420/0x420 [ 1320.149367][T21071] ? __might_sleep+0xe0/0xe0 [ 1320.149387][T21071] ? __lock_acquire+0x7d40/0x7d40 [ 1320.149413][T21071] should_fail_ex+0x39d/0x4d0 [ 1320.149441][T21071] should_failslab+0x9/0x20 [ 1320.149464][T21071] slab_pre_alloc_hook+0x59/0x310 [ 1320.211692][T21071] ? __lock_acquire+0x7d40/0x7d40 [ 1320.216727][T21071] kmem_cache_alloc_node+0x60/0x320 [ 1320.221927][T21071] ? __alloc_skb+0x103/0x2c0 [ 1320.226515][T21071] __alloc_skb+0x103/0x2c0 [ 1320.230927][T21071] netlink_sendmsg+0x66a/0xbf0 [ 1320.235701][T21071] ? netlink_getsockopt+0x590/0x590 [ 1320.240987][T21071] ? aa_sock_msg_perm+0x94/0x150 [ 1320.245921][T21071] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1320.251206][T21071] ? security_socket_sendmsg+0x80/0xa0 [ 1320.256657][T21071] ? netlink_getsockopt+0x590/0x590 [ 1320.261852][T21071] ____sys_sendmsg+0x5ba/0x960 [ 1320.266613][T21071] ? __asan_memset+0x22/0x40 [ 1320.271195][T21071] ? __sys_sendmsg_sock+0x30/0x30 [ 1320.276210][T21071] ? __import_iovec+0x5f2/0x850 [ 1320.281058][T21071] ? import_iovec+0x73/0xa0 [ 1320.285555][T21071] ___sys_sendmsg+0x2a6/0x360 [ 1320.290230][T21071] ? __sys_sendmsg+0x2a0/0x2a0 [ 1320.294996][T21071] ? trace_call_bpf+0xc3/0x6c0 [ 1320.299777][T21071] __se_sys_sendmsg+0x1c2/0x2b0 [ 1320.304626][T21071] ? __x64_sys_sendmsg+0x80/0x80 [ 1320.309567][T21071] ? lockdep_hardirqs_on+0x98/0x150 [ 1320.314771][T21071] do_syscall_64+0x55/0xa0 [ 1320.319180][T21071] ? clear_bhb_loop+0x40/0x90 [ 1320.323852][T21071] ? clear_bhb_loop+0x40/0x90 [ 1320.328526][T21071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.334414][T21071] RIP: 0033:0x7fcbf959cdd9 [ 1320.338821][T21071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.358422][T21071] RSP: 002b:00007fcbfa3d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.366834][T21071] RAX: ffffffffffffffda RBX: 00007fcbf9815fa0 RCX: 00007fcbf959cdd9 [ 1320.374805][T21071] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1320.382772][T21071] RBP: 00007fcbfa3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.390758][T21071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.398730][T21071] R13: 00007fcbf9816038 R14: 00007fcbf9815fa0 R15: 00007fffc0ab4d58 [ 1320.406710][T21071] [ 1320.410054][T21055] CPU: 1 PID: 21055 Comm: syz.3.4852 Not tainted syzkaller #0 [ 1320.417550][T21055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1320.427603][T21055] Call Trace: [ 1320.430883][T21055] [ 1320.433810][T21055] dump_stack_lvl+0x18c/0x250 [ 1320.438501][T21055] ? show_regs_print_info+0x20/0x20 [ 1320.443702][T21055] ? load_image+0x420/0x420 [ 1320.448585][T21055] sysfs_warn_dup+0x8e/0xa0 [ 1320.453442][T21055] sysfs_do_create_link_sd+0xc0/0x110 [ 1320.459353][T21055] device_add_class_symlinks+0x1cf/0x240 [ 1320.465040][T21055] device_add+0x507/0xc20 [ 1320.469426][T21055] wiphy_register+0x1dad/0x2ae0 [ 1320.474304][T21055] ? cfg80211_event_work+0x40/0x40 [ 1320.479420][T21055] ? minstrel_ht_alloc+0x88a/0x990 [ 1320.484562][T21055] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1320.490646][T21055] ieee80211_register_hw+0x3464/0x4250 [ 1320.496144][T21055] ? ieee80211_tasklet_handler+0x20/0x20 [ 1320.501798][T21055] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1320.507702][T21055] ? __debug_object_init+0xec/0x450 [ 1320.512910][T21055] ? __asan_memset+0x22/0x40 [ 1320.517508][T21055] ? __hrtimer_init+0x186/0x270 [ 1320.522361][T21055] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1320.528101][T21055] ? mac80211_hwsim_free+0x220/0x220 [ 1320.533385][T21055] ? rcu_is_watching+0x15/0xb0 [ 1320.538191][T21055] ? kstrndup+0xbd/0x140 [ 1320.542441][T21055] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1320.547551][T21055] ? __nla_validate+0x50/0x50 [ 1320.552231][T21055] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1320.558565][T21055] ? __nla_parse+0x40/0x50 [ 1320.563001][T21055] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1320.569348][T21055] genl_family_rcv_msg_doit+0x211/0x310 [ 1320.574922][T21055] ? end_current_label_crit_section+0x170/0x170 [ 1320.581172][T21055] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1320.587077][T21055] ? bpf_lsm_capable+0x9/0x10 [ 1320.591767][T21055] ? security_capable+0x89/0xb0 [ 1320.596625][T21055] genl_rcv_msg+0x619/0x7a0 [ 1320.601135][T21055] ? genl_bind+0x360/0x360 [ 1320.605566][T21055] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1320.611892][T21055] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1320.618479][T21055] ? ref_tracker_free+0x690/0x840 [ 1320.623519][T21055] netlink_rcv_skb+0x241/0x4d0 [ 1320.628290][T21055] ? genl_bind+0x360/0x360 [ 1320.632703][T21055] ? netlink_ack+0x1180/0x1180 [ 1320.637478][T21055] ? __lock_acquire+0x7d40/0x7d40 [ 1320.642509][T21055] ? down_read+0x1ac/0x2e0 [ 1320.646924][T21055] genl_rcv+0x28/0x40 [ 1320.650902][T21055] netlink_unicast+0x751/0x8d0 [ 1320.655677][T21055] netlink_sendmsg+0x8d0/0xbf0 [ 1320.660454][T21055] ? netlink_getsockopt+0x590/0x590 [ 1320.665657][T21055] ? aa_sock_msg_perm+0x94/0x150 [ 1320.670596][T21055] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1320.675885][T21055] ? security_socket_sendmsg+0x80/0xa0 [ 1320.681340][T21055] ? netlink_getsockopt+0x590/0x590 [ 1320.686544][T21055] ____sys_sendmsg+0x5ba/0x960 [ 1320.691312][T21055] ? __asan_memset+0x22/0x40 [ 1320.695904][T21055] ? __sys_sendmsg_sock+0x30/0x30 [ 1320.700943][T21055] ? __import_iovec+0x5f2/0x850 [ 1320.705796][T21055] ? import_iovec+0x73/0xa0 [ 1320.710293][T21055] ___sys_sendmsg+0x2a6/0x360 [ 1320.714968][T21055] ? __sys_sendmsg+0x2a0/0x2a0 [ 1320.719747][T21055] ? trace_call_bpf+0xc3/0x6c0 [ 1320.724533][T21055] __se_sys_sendmsg+0x1c2/0x2b0 [ 1320.729383][T21055] ? __x64_sys_sendmsg+0x80/0x80 [ 1320.734329][T21055] ? lockdep_hardirqs_on+0x98/0x150 [ 1320.739528][T21055] do_syscall_64+0x55/0xa0 [ 1320.743939][T21055] ? clear_bhb_loop+0x40/0x90 [ 1320.748636][T21055] ? clear_bhb_loop+0x40/0x90 [ 1320.753336][T21055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1320.759230][T21055] RIP: 0033:0x7fe080f9cdd9 [ 1320.763644][T21055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.783339][T21055] RSP: 002b:00007fe081e5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.791755][T21055] RAX: ffffffffffffffda RBX: 00007fe081215fa0 RCX: 00007fe080f9cdd9 [ 1320.799732][T21055] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1320.807699][T21055] RBP: 00007fe081032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1320.816003][T21055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.823969][T21055] R13: 00007fe081216038 R14: 00007fe081215fa0 R15: 00007ffe6167fd38 [ 1320.831956][T21055] [ 1320.883820][T21029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.991978][T21029] team0: Port device team_slave_0 added [ 1321.021170][T21029] team0: Port device team_slave_1 added [ 1321.100384][T21029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.109331][T21029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.181028][T21029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.197839][T21076] delete_channel: no stack [ 1321.203803][T21029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.210929][T21029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.241357][T21029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.113183][T13793] Bluetooth: hci4: command tx timeout [ 1324.200060][T13793] Bluetooth: hci4: command tx timeout [ 1324.549233][T21095] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4864'. [ 1325.547883][T21029] hsr_slave_0: entered promiscuous mode [ 1325.554718][T21029] hsr_slave_1: entered promiscuous mode [ 1325.560804][T21029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1325.568474][T21029] Cannot create hsr debugfs directory [ 1325.575841][T21088] netlink: 'syz.1.4863': attribute type 21 has an invalid length. [ 1325.585210][T21088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4863'. [ 1325.668996][T21094] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4864'. [ 1325.679511][T21094] bridge_slave_1: default FDB implementation only supports local addresses [ 1325.725403][T21095] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1325.755060][T21095] CPU: 0 PID: 21095 Comm: syz.0.4864 Not tainted syzkaller #0 [ 1325.762603][T21095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1325.772691][T21095] Call Trace: [ 1325.775999][T21095] [ 1325.778954][T21095] dump_stack_lvl+0x18c/0x250 [ 1325.783669][T21095] ? show_regs_print_info+0x20/0x20 [ 1325.788906][T21095] ? load_image+0x420/0x420 [ 1325.793470][T21095] sysfs_warn_dup+0x8e/0xa0 [ 1325.798000][T21095] sysfs_do_create_link_sd+0xc0/0x110 [ 1325.803403][T21095] device_add_class_symlinks+0x1cf/0x240 [ 1325.809074][T21095] device_add+0x507/0xc20 [ 1325.813446][T21095] wiphy_register+0x1dad/0x2ae0 [ 1325.818352][T21095] ? cfg80211_event_work+0x40/0x40 [ 1325.823492][T21095] ? minstrel_ht_alloc+0x88a/0x990 [ 1325.828648][T21095] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1325.834755][T21095] ieee80211_register_hw+0x3464/0x4250 [ 1325.840279][T21095] ? ieee80211_tasklet_handler+0x20/0x20 [ 1325.845946][T21095] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1325.851888][T21095] ? __debug_object_init+0xec/0x450 [ 1325.857148][T21095] ? __asan_memset+0x22/0x40 [ 1325.861780][T21095] ? __hrtimer_init+0x186/0x270 [ 1325.866668][T21095] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1325.872445][T21095] ? mac80211_hwsim_free+0x220/0x220 [ 1325.877761][T21095] ? rcu_is_watching+0x15/0xb0 [ 1325.882560][T21095] ? kstrndup+0xbd/0x140 [ 1325.886845][T21095] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1325.892006][T21095] ? __nla_validate+0x50/0x50 [ 1325.896728][T21095] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1325.903095][T21095] ? __nla_parse+0x40/0x50 [ 1325.907542][T21095] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1325.913902][T21095] genl_family_rcv_msg_doit+0x211/0x310 [ 1325.919481][T21095] ? end_current_label_crit_section+0x170/0x170 [ 1325.925759][T21095] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1325.931685][T21095] ? bpf_lsm_capable+0x9/0x10 [ 1325.936399][T21095] ? security_capable+0x89/0xb0 [ 1325.941288][T21095] genl_rcv_msg+0x619/0x7a0 [ 1325.945826][T21095] ? genl_bind+0x360/0x360 [ 1325.950267][T21095] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1325.956628][T21095] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1325.963248][T21095] ? ref_tracker_free+0x690/0x840 [ 1325.968319][T21095] netlink_rcv_skb+0x241/0x4d0 [ 1325.973123][T21095] ? genl_bind+0x360/0x360 [ 1325.977573][T21095] ? netlink_ack+0x1180/0x1180 [ 1325.982384][T21095] ? __lock_acquire+0x7d40/0x7d40 [ 1325.987447][T21095] ? down_read+0x1ac/0x2e0 [ 1325.991893][T21095] genl_rcv+0x28/0x40 [ 1325.995905][T21095] netlink_unicast+0x751/0x8d0 [ 1326.000720][T21095] netlink_sendmsg+0x8d0/0xbf0 [ 1326.006485][T21095] ? netlink_getsockopt+0x590/0x590 [ 1326.011723][T21095] ? aa_sock_msg_perm+0x94/0x150 [ 1326.016696][T21095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1326.022010][T21095] ? security_socket_sendmsg+0x80/0xa0 [ 1326.027502][T21095] ? netlink_getsockopt+0x590/0x590 [ 1326.032745][T21095] ____sys_sendmsg+0x5ba/0x960 [ 1326.037545][T21095] ? __asan_memset+0x22/0x40 [ 1326.042177][T21095] ? __sys_sendmsg_sock+0x30/0x30 [ 1326.047238][T21095] ? __import_iovec+0x5f2/0x850 [ 1326.052122][T21095] ? import_iovec+0x73/0xa0 [ 1326.056654][T21095] ___sys_sendmsg+0x2a6/0x360 [ 1326.061360][T21095] ? __sys_sendmsg+0x2a0/0x2a0 [ 1326.066142][T21095] ? trace_call_bpf+0xc3/0x6c0 [ 1326.070913][T21095] ? debug_mutex_init+0x38/0x70 [ 1326.075809][T21095] __se_sys_sendmsg+0x1c2/0x2b0 [ 1326.080698][T21095] ? __x64_sys_sendmsg+0x80/0x80 [ 1326.085656][T21095] ? lockdep_hardirqs_on+0x98/0x150 [ 1326.090874][T21095] do_syscall_64+0x55/0xa0 [ 1326.095307][T21095] ? clear_bhb_loop+0x40/0x90 [ 1326.099988][T21095] ? clear_bhb_loop+0x40/0x90 [ 1326.104671][T21095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1326.110581][T21095] RIP: 0033:0x7f862279cdd9 [ 1326.115016][T21095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.134630][T21095] RSP: 002b:00007f8623663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.143043][T21095] RAX: ffffffffffffffda RBX: 00007f8622a16180 RCX: 00007f862279cdd9 [ 1326.151047][T21095] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1326.159058][T21095] RBP: 00007f8622832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1326.167043][T21095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1326.175061][T21095] R13: 00007f8622a16218 R14: 00007f8622a16180 R15: 00007fffdc7a6668 [ 1326.183068][T21095] [ 1326.935127][T21029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1326.945057][T21029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1326.956366][T21029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1326.981676][T21029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1327.132721][T21029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.177208][T21029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.192466][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.199656][ T9083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.256959][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.264195][ T9083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.578893][T21029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.710346][T21029] veth0_vlan: entered promiscuous mode [ 1327.721053][ T1138] ªªªªªª: left allmulticast mode [ 1327.731649][ T1138] veth0_vlan: left allmulticast mode [ 1327.738597][ T1138] ªªªªªª: left promiscuous mode [ 1327.748744][ T1138] À: port 1(ªªªªªª) entered disabled state [ 1327.764748][ T1138] bridge_slave_1: left allmulticast mode [ 1327.770486][ T1138] bridge_slave_1: left promiscuous mode [ 1327.783160][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.792383][ T1138] bridge_slave_0: left allmulticast mode [ 1327.798660][ T1138] bridge_slave_0: left promiscuous mode [ 1327.804775][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.835534][ T1138] veth1_vlan: left promiscuous mode [ 1327.840926][ T1138] veth0_vlan: left promiscuous mode [ 1328.109713][ T1138] team0 (unregistering): Port device geneve1 removed [ 1328.522196][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 1328.597607][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.640222][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.896736][ T1138] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1328.905831][ T1138] bond0 (unregistering): Released all slaves [ 1328.993477][T21029] veth1_vlan: entered promiscuous mode [ 1329.049645][T21029] veth0_macvtap: entered promiscuous mode [ 1329.072612][T21029] veth1_macvtap: entered promiscuous mode [ 1329.108519][T21029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.119273][T21029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.133318][T21029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.144054][T21029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.166277][T21029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.187362][T21029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.198208][T21029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.210342][T21029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.223393][T21029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.250276][T21029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.267324][T21029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.287390][T21029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.296419][T21029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.308570][T21029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.439129][ T9073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.458186][ T9073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.493643][ T9073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.507042][ T9073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.732090][T21186] netlink: 'syz.1.4873': attribute type 21 has an invalid length. [ 1329.888182][T21178] delete_channel: no stack [ 1330.065443][T21194] netlink: 'syz.2.4865': attribute type 21 has an invalid length. [ 1330.074512][T21194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1330.741224][T21197] delete_channel: no stack [ 1331.129864][T21210] delete_channel: no stack [ 1332.013370][T21215] FAULT_INJECTION: forcing a failure. [ 1332.013370][T21215] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.026518][T21215] CPU: 1 PID: 21215 Comm: syz.1.4877 Not tainted syzkaller #0 [ 1332.034029][T21215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1332.044156][T21215] Call Trace: [ 1332.047458][T21215] [ 1332.050404][T21215] dump_stack_lvl+0x18c/0x250 [ 1332.055090][T21215] ? show_regs_print_info+0x20/0x20 [ 1332.060291][T21215] ? load_image+0x420/0x420 [ 1332.064810][T21215] ? __might_sleep+0xe0/0xe0 [ 1332.069432][T21215] ? __lock_acquire+0x7d40/0x7d40 [ 1332.074458][T21215] ? perf_trace_lock_acquire+0x104/0x410 [ 1332.080089][T21215] should_fail_ex+0x39d/0x4d0 [ 1332.084778][T21215] should_failslab+0x9/0x20 [ 1332.089298][T21215] slab_pre_alloc_hook+0x59/0x310 [ 1332.094319][T21215] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1332.099868][T21215] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1332.105439][T21215] __kmem_cache_alloc_node+0x53/0x250 [ 1332.110826][T21215] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1332.116382][T21215] __kmalloc+0xa4/0x230 [ 1332.120554][T21215] bpf_prog_test_run_skb+0x238/0x12b0 [ 1332.125931][T21215] ? __fget_files+0x28/0x4b0 [ 1332.130521][T21215] ? __fget_files+0x28/0x4b0 [ 1332.135108][T21215] ? __fget_files+0x43d/0x4b0 [ 1332.139790][T21215] ? cpu_online+0x60/0x60 [ 1332.144125][T21215] bpf_prog_test_run+0x321/0x390 [ 1332.149059][T21215] __sys_bpf+0x49d/0x890 [ 1332.153304][T21215] ? bpf_link_show_fdinfo+0x390/0x390 [ 1332.158709][T21215] ? lock_chain_count+0x20/0x20 [ 1332.163584][T21215] __x64_sys_bpf+0x7c/0x90 [ 1332.168013][T21215] do_syscall_64+0x55/0xa0 [ 1332.172791][T21215] ? clear_bhb_loop+0x40/0x90 [ 1332.177481][T21215] ? clear_bhb_loop+0x40/0x90 [ 1332.182167][T21215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.188065][T21215] RIP: 0033:0x7fcbf959cdd9 [ 1332.192510][T21215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.212119][T21215] RSP: 002b:00007fcbfa3d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1332.220533][T21215] RAX: ffffffffffffffda RBX: 00007fcbf9815fa0 RCX: 00007fcbf959cdd9 [ 1332.228503][T21215] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1332.236481][T21215] RBP: 00007fcbfa3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.244446][T21215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.252568][T21215] R13: 00007fcbf9816038 R14: 00007fcbf9815fa0 R15: 00007fffc0ab4d58 [ 1332.260587][T21215] [ 1334.260842][T21228] netlink: 'syz.2.4882': attribute type 21 has an invalid length. [ 1334.269819][T21228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4882'. [ 1334.438384][T21230] delete_channel: no stack [ 1334.447202][T21234] FAULT_INJECTION: forcing a failure. [ 1334.447202][T21234] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.457612][T21232] delete_channel: no stack [ 1334.479967][T21234] CPU: 1 PID: 21234 Comm: syz.3.4884 Not tainted syzkaller #0 [ 1334.487484][T21234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1334.497558][T21234] Call Trace: [ 1334.500834][T21234] [ 1334.503762][T21234] dump_stack_lvl+0x18c/0x250 [ 1334.508447][T21234] ? show_regs_print_info+0x20/0x20 [ 1334.513650][T21234] ? load_image+0x420/0x420 [ 1334.518157][T21234] ? __might_sleep+0xe0/0xe0 [ 1334.522747][T21234] ? __lock_acquire+0x7d40/0x7d40 [ 1334.527770][T21234] should_fail_ex+0x39d/0x4d0 [ 1334.532448][T21234] should_failslab+0x9/0x20 [ 1334.536947][T21234] slab_pre_alloc_hook+0x59/0x310 [ 1334.542150][T21234] kmem_cache_alloc_node+0x60/0x320 [ 1334.547349][T21234] ? __alloc_skb+0x103/0x2c0 [ 1334.551939][T21234] __alloc_skb+0x103/0x2c0 [ 1334.556349][T21234] tcp_stream_alloc_skb+0x3d/0x330 [ 1334.561463][T21234] tcp_sendmsg_locked+0xea4/0x4bd0 [ 1334.566570][T21234] ? verify_lock_unused+0x140/0x140 [ 1334.571775][T21234] ? verify_lock_unused+0x140/0x140 [ 1334.576994][T21234] ? tcp_set_state+0x680/0x680 [ 1334.581780][T21234] tcp_sendmsg+0x2f/0x50 [ 1334.586018][T21234] ? inet_send_prepare+0x260/0x260 [ 1334.591129][T21234] ____sys_sendmsg+0x5ba/0x960 [ 1334.595896][T21234] ? __asan_memset+0x22/0x40 [ 1334.600483][T21234] ? __sys_sendmsg_sock+0x30/0x30 [ 1334.605498][T21234] ? __import_iovec+0x5f2/0x850 [ 1334.610349][T21234] ? import_iovec+0x73/0xa0 [ 1334.614852][T21234] ___sys_sendmsg+0x2a6/0x360 [ 1334.619521][T21234] ? get_pid_task+0x20/0x1e0 [ 1334.624116][T21234] ? __sys_sendmsg+0x2a0/0x2a0 [ 1334.628886][T21234] ? __lock_acquire+0x7d40/0x7d40 [ 1334.633918][T21234] __se_sys_sendmsg+0x1c2/0x2b0 [ 1334.638764][T21234] ? __x64_sys_sendmsg+0x80/0x80 [ 1334.643793][T21234] ? lockdep_hardirqs_on+0x98/0x150 [ 1334.648990][T21234] do_syscall_64+0x55/0xa0 [ 1334.653403][T21234] ? clear_bhb_loop+0x40/0x90 [ 1334.658073][T21234] ? clear_bhb_loop+0x40/0x90 [ 1334.662753][T21234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1334.668638][T21234] RIP: 0033:0x7fe080f9cdd9 [ 1334.673056][T21234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.692670][T21234] RSP: 002b:00007fe081e5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1334.701079][T21234] RAX: ffffffffffffffda RBX: 00007fe081215fa0 RCX: 00007fe080f9cdd9 [ 1334.709050][T21234] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 1334.717018][T21234] RBP: 00007fe081e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.724997][T21234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.732962][T21234] R13: 00007fe081216038 R14: 00007fe081215fa0 R15: 00007ffe6167fd38 [ 1334.740939][T21234] [ 1335.784683][T21252] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4891'. [ 1335.843250][T21252] bridge_slave_1: default FDB implementation only supports local addresses [ 1335.961713][T21246] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4891'. [ 1336.045453][T21257] netlink: 'syz.3.4893': attribute type 21 has an invalid length. [ 1336.074218][T21257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4893'. [ 1336.242180][T21260] delete_channel: no stack [ 1336.459934][T21270] FAULT_INJECTION: forcing a failure. [ 1336.459934][T21270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.470977][T21265] delete_channel: no stack [ 1336.500420][T21270] CPU: 0 PID: 21270 Comm: syz.3.4897 Not tainted syzkaller #0 [ 1336.508078][T21270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1336.518164][T21270] Call Trace: [ 1336.521470][T21270] [ 1336.524420][T21270] dump_stack_lvl+0x18c/0x250 [ 1336.529122][T21270] ? show_regs_print_info+0x20/0x20 [ 1336.534335][T21270] ? load_image+0x420/0x420 [ 1336.538857][T21270] ? __might_fault+0xaa/0x120 [ 1336.543532][T21270] ? __lock_acquire+0x7d40/0x7d40 [ 1336.548565][T21270] should_fail_ex+0x39d/0x4d0 [ 1336.553260][T21270] _copy_from_user+0x2f/0xe0 [ 1336.557864][T21270] ___sys_sendmsg+0x1c7/0x360 [ 1336.562653][T21270] ? __sys_sendmsg+0x2a0/0x2a0 [ 1336.567518][T21270] ? trace_call_bpf+0xc3/0x6c0 [ 1336.572298][T21270] __se_sys_sendmsg+0x1c2/0x2b0 [ 1336.577147][T21270] ? __x64_sys_sendmsg+0x80/0x80 [ 1336.582092][T21270] ? lockdep_hardirqs_on+0x98/0x150 [ 1336.587288][T21270] do_syscall_64+0x55/0xa0 [ 1336.591700][T21270] ? clear_bhb_loop+0x40/0x90 [ 1336.596372][T21270] ? clear_bhb_loop+0x40/0x90 [ 1336.601045][T21270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1336.606935][T21270] RIP: 0033:0x7fe080f9cdd9 [ 1336.611347][T21270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1336.630952][T21270] RSP: 002b:00007fe081e5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1336.639360][T21270] RAX: ffffffffffffffda RBX: 00007fe081215fa0 RCX: 00007fe080f9cdd9 [ 1336.647345][T21270] RDX: 0000000000008841 RSI: 0000200000000500 RDI: 0000000000000003 [ 1336.655452][T21270] RBP: 00007fe081e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.663427][T21270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.671393][T21270] R13: 00007fe081216038 R14: 00007fe081215fa0 R15: 00007ffe6167fd38 [ 1336.679404][T21270] [ 1338.448768][T21289] sctp: [Deprecated]: syz.3.4905 (pid 21289) Use of int in maxseg socket option. [ 1338.448768][T21289] Use struct sctp_assoc_value instead [ 1339.927878][T21277] netlink: 'syz.0.4900': attribute type 21 has an invalid length. [ 1340.178729][T21297] delete_channel: no stack [ 1340.255000][T21308] FAULT_INJECTION: forcing a failure. [ 1340.255000][T21308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.287965][T21308] CPU: 0 PID: 21308 Comm: syz.3.4910 Not tainted syzkaller #0 [ 1340.295737][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1340.305829][T21308] Call Trace: [ 1340.309153][T21308] [ 1340.312110][T21308] dump_stack_lvl+0x18c/0x250 [ 1340.316835][T21308] ? show_regs_print_info+0x20/0x20 [ 1340.322069][T21308] ? load_image+0x420/0x420 [ 1340.326609][T21308] ? __lock_acquire+0x7d40/0x7d40 [ 1340.331661][T21308] ? snprintf+0xe9/0x140 [ 1340.335933][T21308] should_fail_ex+0x39d/0x4d0 [ 1340.340651][T21308] _copy_to_user+0x2f/0xa0 [ 1340.345096][T21308] simple_read_from_buffer+0xe7/0x150 [ 1340.350499][T21308] proc_fail_nth_read+0x1e8/0x260 [ 1340.355525][T21308] ? proc_fault_inject_write+0x360/0x360 [ 1340.361157][T21308] ? fsnotify_perm+0x271/0x5e0 [ 1340.365918][T21308] ? proc_fault_inject_write+0x360/0x360 [ 1340.371547][T21308] vfs_read+0x28b/0x970 [ 1340.375702][T21308] ? kernel_read+0x1e0/0x1e0 [ 1340.380286][T21308] ? __fget_files+0x28/0x4b0 [ 1340.384868][T21308] ? __fget_files+0x28/0x4b0 [ 1340.389452][T21308] ? __fget_files+0x43d/0x4b0 [ 1340.394130][T21308] ? __fdget_pos+0x2a3/0x330 [ 1340.398714][T21308] ? ksys_read+0x75/0x260 [ 1340.403040][T21308] ksys_read+0x150/0x260 [ 1340.407283][T21308] ? vfs_write+0x990/0x990 [ 1340.411695][T21308] ? lockdep_hardirqs_on+0x98/0x150 [ 1340.416891][T21308] do_syscall_64+0x55/0xa0 [ 1340.421295][T21308] ? clear_bhb_loop+0x40/0x90 [ 1340.425966][T21308] ? clear_bhb_loop+0x40/0x90 [ 1340.430635][T21308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1340.436521][T21308] RIP: 0033:0x7fe080f5d60e [ 1340.440930][T21308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1340.460629][T21308] RSP: 002b:00007fe081e5bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1340.469041][T21308] RAX: ffffffffffffffda RBX: 00007fe081e5c6c0 RCX: 00007fe080f5d60e [ 1340.477007][T21308] RDX: 000000000000000f RSI: 00007fe081e5c0a0 RDI: 0000000000000005 [ 1340.484969][T21308] RBP: 00007fe081e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.492939][T21308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.500909][T21308] R13: 00007fe081216038 R14: 00007fe081215fa0 R15: 00007ffe6167fd38 [ 1340.508882][T21308] [ 1341.410309][T21314] netlink: 'syz.3.4915': attribute type 21 has an invalid length. [ 1341.444604][T21314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4915'. [ 1344.431583][T21350] FAULT_INJECTION: forcing a failure. [ 1344.431583][T21350] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.461944][T21350] CPU: 1 PID: 21350 Comm: syz.0.4923 Not tainted syzkaller #0 [ 1344.469488][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1344.479566][T21350] Call Trace: [ 1344.482864][T21350] [ 1344.485816][T21350] dump_stack_lvl+0x18c/0x250 [ 1344.490526][T21350] ? show_regs_print_info+0x20/0x20 [ 1344.495746][T21350] ? load_image+0x420/0x420 [ 1344.500686][T21350] ? __might_sleep+0xe0/0xe0 [ 1344.505303][T21350] ? __lock_acquire+0x7d40/0x7d40 [ 1344.510350][T21350] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1344.516375][T21350] should_fail_ex+0x39d/0x4d0 [ 1344.521102][T21350] should_failslab+0x9/0x20 [ 1344.525722][T21350] slab_pre_alloc_hook+0x59/0x310 [ 1344.530770][T21350] ? lockdep_hardirqs_on+0x98/0x150 [ 1344.535991][T21350] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1344.541555][T21350] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1344.547119][T21350] __kmem_cache_alloc_node+0x53/0x250 [ 1344.552532][T21350] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1344.558101][T21350] __kmalloc+0xa4/0x230 [ 1344.562283][T21350] bpf_prog_test_run_skb+0x238/0x12b0 [ 1344.567675][T21350] ? __fget_files+0x28/0x4b0 [ 1344.572288][T21350] ? __fget_files+0x28/0x4b0 [ 1344.576925][T21350] ? __fget_files+0x43d/0x4b0 [ 1344.582174][T21350] ? cpu_online+0x60/0x60 [ 1344.586531][T21350] bpf_prog_test_run+0x321/0x390 [ 1344.591495][T21350] __sys_bpf+0x49d/0x890 [ 1344.595768][T21350] ? bpf_link_show_fdinfo+0x390/0x390 [ 1344.601174][T21350] ? lock_chain_count+0x20/0x20 [ 1344.606042][T21350] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1344.612055][T21350] __x64_sys_bpf+0x7c/0x90 [ 1344.616498][T21350] do_syscall_64+0x55/0xa0 [ 1344.620940][T21350] ? clear_bhb_loop+0x40/0x90 [ 1344.625639][T21350] ? clear_bhb_loop+0x40/0x90 [ 1344.630339][T21350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1344.636257][T21350] RIP: 0033:0x7f862279cdd9 [ 1344.640694][T21350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.660322][T21350] RSP: 002b:00007f86236a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1344.668755][T21350] RAX: ffffffffffffffda RBX: 00007f8622a15fa0 RCX: 00007f862279cdd9 [ 1344.676740][T21350] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1344.684727][T21350] RBP: 00007f86236a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.692705][T21350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.700690][T21350] R13: 00007f8622a16038 R14: 00007f8622a15fa0 R15: 00007fffdc7a6668 [ 1344.708691][T21350] [ 1344.921786][T21337] delete_channel: no stack [ 1347.868286][T21340] team0: Port device team_slave_0 removed [ 1347.971518][T21365] netlink: 'syz.1.4927': attribute type 21 has an invalid length. [ 1347.981175][T21365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4927'. [ 1348.329374][T21380] netlink: 'syz.3.4934': attribute type 21 has an invalid length. [ 1348.349883][T21380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1348.492628][T21381] delete_channel: no stack [ 1349.552205][T21410] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4944'. [ 1350.955529][T21394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.963130][T21394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.970868][T21394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.978392][T21394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.035906][T21408] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4944'. [ 1351.047061][T21408] bridge_slave_1: default FDB implementation only supports local addresses [ 1351.070255][T21410] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1351.087275][T21410] CPU: 1 PID: 21410 Comm: syz.3.4944 Not tainted syzkaller #0 [ 1351.094827][T21410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1351.104910][T21410] Call Trace: [ 1351.108213][T21410] [ 1351.111191][T21410] dump_stack_lvl+0x18c/0x250 [ 1351.115907][T21410] ? show_regs_print_info+0x20/0x20 [ 1351.121137][T21410] ? load_image+0x420/0x420 [ 1351.125683][T21410] sysfs_warn_dup+0x8e/0xa0 [ 1351.130194][T21410] sysfs_do_create_link_sd+0xc0/0x110 [ 1351.135590][T21410] device_add_class_symlinks+0x1cf/0x240 [ 1351.141238][T21410] device_add+0x507/0xc20 [ 1351.145581][T21410] wiphy_register+0x1dad/0x2ae0 [ 1351.150452][T21410] ? cfg80211_event_work+0x40/0x40 [ 1351.155565][T21410] ? minstrel_ht_alloc+0x88a/0x990 [ 1351.160685][T21410] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1351.166762][T21410] ieee80211_register_hw+0x3464/0x4250 [ 1351.172239][T21410] ? ieee80211_tasklet_handler+0x20/0x20 [ 1351.177866][T21410] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1351.183765][T21410] ? __debug_object_init+0xec/0x450 [ 1351.188970][T21410] ? __asan_memset+0x22/0x40 [ 1351.193571][T21410] ? __hrtimer_init+0x186/0x270 [ 1351.198437][T21410] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1351.204186][T21410] ? mac80211_hwsim_free+0x220/0x220 [ 1351.209472][T21410] ? rcu_is_watching+0x15/0xb0 [ 1351.214239][T21410] ? kstrndup+0xbd/0x140 [ 1351.218491][T21410] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1351.223700][T21410] ? __nla_validate+0x50/0x50 [ 1351.228386][T21410] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1351.234728][T21410] ? __nla_parse+0x40/0x50 [ 1351.239149][T21410] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1351.245488][T21410] genl_family_rcv_msg_doit+0x211/0x310 [ 1351.251049][T21410] ? end_current_label_crit_section+0x170/0x170 [ 1351.257297][T21410] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1351.263197][T21410] ? bpf_lsm_capable+0x9/0x10 [ 1351.267965][T21410] ? security_capable+0x89/0xb0 [ 1351.272823][T21410] genl_rcv_msg+0x619/0x7a0 [ 1351.277354][T21410] ? genl_bind+0x360/0x360 [ 1351.281855][T21410] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1351.288182][T21410] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1351.294776][T21410] ? ref_tracker_free+0x690/0x840 [ 1351.299845][T21410] netlink_rcv_skb+0x241/0x4d0 [ 1351.304621][T21410] ? genl_bind+0x360/0x360 [ 1351.309037][T21410] ? netlink_ack+0x1180/0x1180 [ 1351.313815][T21410] ? __lock_acquire+0x7d40/0x7d40 [ 1351.318844][T21410] ? down_read+0x1ac/0x2e0 [ 1351.323261][T21410] genl_rcv+0x28/0x40 [ 1351.327242][T21410] netlink_unicast+0x751/0x8d0 [ 1351.332023][T21410] netlink_sendmsg+0x8d0/0xbf0 [ 1351.336799][T21410] ? netlink_getsockopt+0x590/0x590 [ 1351.342011][T21410] ? aa_sock_msg_perm+0x94/0x150 [ 1351.346952][T21410] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1351.352237][T21410] ? security_socket_sendmsg+0x80/0xa0 [ 1351.357713][T21410] ? netlink_getsockopt+0x590/0x590 [ 1351.362919][T21410] ____sys_sendmsg+0x5ba/0x960 [ 1351.367773][T21410] ? __asan_memset+0x22/0x40 [ 1351.372362][T21410] ? __sys_sendmsg_sock+0x30/0x30 [ 1351.377387][T21410] ? __import_iovec+0x5f2/0x850 [ 1351.382241][T21410] ? import_iovec+0x73/0xa0 [ 1351.386742][T21410] ___sys_sendmsg+0x2a6/0x360 [ 1351.391420][T21410] ? __sys_sendmsg+0x2a0/0x2a0 [ 1351.396220][T21410] __se_sys_sendmsg+0x1c2/0x2b0 [ 1351.401160][T21410] ? __x64_sys_sendmsg+0x80/0x80 [ 1351.406111][T21410] ? lockdep_hardirqs_on+0x98/0x150 [ 1351.411347][T21410] do_syscall_64+0x55/0xa0 [ 1351.415757][T21410] ? clear_bhb_loop+0x40/0x90 [ 1351.420432][T21410] ? clear_bhb_loop+0x40/0x90 [ 1351.425111][T21410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.431001][T21410] RIP: 0033:0x7fe080f9cdd9 [ 1351.435410][T21410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.455023][T21410] RSP: 002b:00007fe081e1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1351.463439][T21410] RAX: ffffffffffffffda RBX: 00007fe081216180 RCX: 00007fe080f9cdd9 [ 1351.471410][T21410] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1351.479378][T21410] RBP: 00007fe081032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1351.487376][T21410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.495345][T21410] R13: 00007fe081216218 R14: 00007fe081216180 R15: 00007ffe6167fd38 [ 1351.503335][T21410] [ 1351.738307][T21417] delete_channel: no stack [ 1351.838525][T21429] netlink: 'syz.1.4950': attribute type 21 has an invalid length. [ 1351.847662][T21429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4950'. [ 1351.885288][T21432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1351.953512][T21432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1353.844768][T21433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1353.970871][T21446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1353.994242][T21446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1354.030916][T21446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1354.063725][T21446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4956'. [ 1354.240039][T21458] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 1354.360056][T21464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4964'. [ 1354.818347][T21457] team0: Port device team_slave_0 removed [ 1354.825752][T21460] netlink: 'syz.0.4963': attribute type 21 has an invalid length. [ 1354.834305][T21460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1354.844755][T21464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4964'. [ 1354.855653][T21455] delete_channel: no stack [ 1354.861747][T21466] FAULT_INJECTION: forcing a failure. [ 1354.861747][T21466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.876569][T21466] CPU: 0 PID: 21466 Comm: syz.1.4964 Not tainted syzkaller #0 [ 1354.884168][T21466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1354.894324][T21466] Call Trace: [ 1354.897609][T21466] [ 1354.900539][T21466] dump_stack_lvl+0x18c/0x250 [ 1354.905223][T21466] ? show_regs_print_info+0x20/0x20 [ 1354.910419][T21466] ? load_image+0x420/0x420 [ 1354.914952][T21466] ? __might_fault+0xaa/0x120 [ 1354.919712][T21466] should_fail_ex+0x39d/0x4d0 [ 1354.924388][T21466] copyout+0x1a/0x90 [ 1354.928279][T21466] _copy_to_iter+0x432/0x1120 [ 1354.932974][T21466] ? iov_iter_init+0x1e0/0x1e0 [ 1354.937750][T21466] ? __virt_addr_valid+0x18c/0x540 [ 1354.942863][T21466] ? __virt_addr_valid+0x469/0x540 [ 1354.947983][T21466] ? __phys_addr_symbol+0x2f/0x70 [ 1354.953011][T21466] __skb_datagram_iter+0xdb/0x780 [ 1354.958034][T21466] ? skb_copy_datagram_iter+0x200/0x200 [ 1354.963595][T21466] skb_copy_datagram_iter+0xb1/0x200 [ 1354.968883][T21466] netlink_recvmsg+0x2d4/0xe60 [ 1354.973649][T21466] ? netlink_sendmsg+0xbf0/0xbf0 [ 1354.978587][T21466] ? aa_af_perm+0x330/0x330 [ 1354.983093][T21466] ? __lock_acquire+0x1273/0x7d40 [ 1354.988119][T21466] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1354.993401][T21466] ? security_socket_recvmsg+0x89/0xb0 [ 1354.998854][T21466] ? netlink_sendmsg+0xbf0/0xbf0 [ 1355.003790][T21466] ____sys_recvmsg+0x2ce/0x5e0 [ 1355.008557][T21466] ? __sys_recvmsg_sock+0x50/0x50 [ 1355.013597][T21466] ? import_iovec+0x73/0xa0 [ 1355.018118][T21466] ___sys_recvmsg+0x216/0x590 [ 1355.022804][T21466] ? __sys_recvmsg+0x2a0/0x2a0 [ 1355.027884][T21466] ? trace_call_bpf+0xc3/0x6c0 [ 1355.032700][T21466] ? trace_call_bpf+0x5e9/0x6c0 [ 1355.037577][T21466] ? __fget_files+0x43d/0x4b0 [ 1355.042449][T21466] __x64_sys_recvmsg+0x20c/0x2e0 [ 1355.047409][T21466] ? perf_trace_preemptirq_template+0x269/0x330 [ 1355.053664][T21466] ? ___sys_recvmsg+0x590/0x590 [ 1355.058527][T21466] ? lockdep_hardirqs_on+0x98/0x150 [ 1355.063727][T21466] do_syscall_64+0x55/0xa0 [ 1355.068148][T21466] ? clear_bhb_loop+0x40/0x90 [ 1355.072817][T21466] ? clear_bhb_loop+0x40/0x90 [ 1355.077526][T21466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.083431][T21466] RIP: 0033:0x7fcbf959cdd9 [ 1355.087848][T21466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.107458][T21466] RSP: 002b:00007fcbfa3b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1355.115871][T21466] RAX: ffffffffffffffda RBX: 00007fcbf9816090 RCX: 00007fcbf959cdd9 [ 1355.123836][T21466] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 1355.131821][T21466] RBP: 00007fcbfa3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.139787][T21466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.147786][T21466] R13: 00007fcbf9816128 R14: 00007fcbf9816090 R15: 00007fffc0ab4d58 [ 1355.155768][T21466] [ 1355.173691][T21466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4964'. [ 1355.330612][T21475] FAULT_INJECTION: forcing a failure. [ 1355.330612][T21475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.344729][T21475] CPU: 1 PID: 21475 Comm: syz.0.4968 Not tainted syzkaller #0 [ 1355.352234][T21475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1355.362324][T21475] Call Trace: [ 1355.365621][T21475] [ 1355.368583][T21475] dump_stack_lvl+0x18c/0x250 [ 1355.373300][T21475] ? show_regs_print_info+0x20/0x20 [ 1355.378526][T21475] ? load_image+0x420/0x420 [ 1355.383055][T21475] ? __might_fault+0xaa/0x120 [ 1355.387750][T21475] ? __lock_acquire+0x7d40/0x7d40 [ 1355.392778][T21475] should_fail_ex+0x39d/0x4d0 [ 1355.397458][T21475] _copy_from_user+0x2f/0xe0 [ 1355.402042][T21475] ___sys_sendmsg+0x1c7/0x360 [ 1355.406711][T21475] ? get_pid_task+0x20/0x1e0 [ 1355.411300][T21475] ? __sys_sendmsg+0x2a0/0x2a0 [ 1355.416079][T21475] ? __lock_acquire+0x7d40/0x7d40 [ 1355.421113][T21475] __se_sys_sendmsg+0x1c2/0x2b0 [ 1355.425961][T21475] ? __x64_sys_sendmsg+0x80/0x80 [ 1355.430898][T21475] ? lockdep_hardirqs_on+0x98/0x150 [ 1355.436095][T21475] do_syscall_64+0x55/0xa0 [ 1355.440501][T21475] ? clear_bhb_loop+0x40/0x90 [ 1355.445173][T21475] ? clear_bhb_loop+0x40/0x90 [ 1355.449845][T21475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.455733][T21475] RIP: 0033:0x7f862279cdd9 [ 1355.460151][T21475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.479751][T21475] RSP: 002b:00007f86236a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.488160][T21475] RAX: ffffffffffffffda RBX: 00007f8622a15fa0 RCX: 00007f862279cdd9 [ 1355.496133][T21475] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1355.504100][T21475] RBP: 00007f86236a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.512066][T21475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.520031][T21475] R13: 00007f8622a16038 R14: 00007f8622a15fa0 R15: 00007fffdc7a6668 [ 1355.528012][T21475] [ 1355.545214][T21474] netlink: 'syz.1.4967': attribute type 21 has an invalid length. [ 1355.557109][T21474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4967'. [ 1357.367014][T21478] À: port 1(vlan0) entered blocking state [ 1357.373702][T21478] À: port 1(vlan0) entered disabled state [ 1357.379609][T21478] vlan0: entered allmulticast mode [ 1357.384980][T21478] veth0_vlan: entered allmulticast mode [ 1357.391366][T21478] vlan0: entered promiscuous mode [ 1357.399342][T21470] À: port 1(vlan0) entered blocking state [ 1357.405303][T21470] À: port 1(vlan0) entered forwarding state [ 1357.627305][T21489] netlink: 'syz.0.4972': attribute type 1 has an invalid length. [ 1357.820615][T21494] delete_channel: no stack [ 1358.146057][T21508] netlink: 'syz.3.4979': attribute type 21 has an invalid length. [ 1358.948948][T20339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1358.967501][T20339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1358.979263][T20339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1359.005641][T20339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1359.023473][T20339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1359.031608][T20339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1359.666876][T21518] delete_channel: no stack [ 1360.697278][T21516] netlink: 'syz.2.4983': attribute type 21 has an invalid length. [ 1360.707412][T21516] __nla_validate_parse: 5 callbacks suppressed [ 1360.707423][T21516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4983'. [ 1360.760229][T21519] team0: Port device team_slave_0 removed [ 1361.011061][T21536] FAULT_INJECTION: forcing a failure. [ 1361.011061][T21536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.025151][T21536] CPU: 1 PID: 21536 Comm: syz.2.4989 Not tainted syzkaller #0 [ 1361.032653][T21536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1361.042735][T21536] Call Trace: [ 1361.046033][T21536] [ 1361.048980][T21536] dump_stack_lvl+0x18c/0x250 [ 1361.053693][T21536] ? show_regs_print_info+0x20/0x20 [ 1361.058909][T21536] ? load_image+0x420/0x420 [ 1361.063421][T21536] ? __might_fault+0xaa/0x120 [ 1361.068105][T21536] ? __lock_acquire+0x7d40/0x7d40 [ 1361.073133][T21536] should_fail_ex+0x39d/0x4d0 [ 1361.077811][T21536] _copy_from_user+0x2f/0xe0 [ 1361.082421][T21536] sk_setsockopt+0x2b2/0x2bc0 [ 1361.087100][T21536] ? sockopt_capable+0x60/0x60 [ 1361.091861][T21536] ? aa_sk_perm+0x83c/0x970 [ 1361.096360][T21536] ? __fget_files+0x28/0x4b0 [ 1361.100951][T21536] ? aa_af_perm+0x330/0x330 [ 1361.105480][T21536] ? __fget_files+0x28/0x4b0 [ 1361.110077][T21536] ? __fget_files+0x28/0x4b0 [ 1361.114686][T21536] ? aa_sock_opt_perm+0x74/0x100 [ 1361.119629][T21536] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1361.125177][T21536] ? security_socket_setsockopt+0x7e/0xa0 [ 1361.130923][T21536] do_sock_setsockopt+0x11b/0x1a0 [ 1361.135959][T21536] __x64_sys_setsockopt+0x182/0x200 [ 1361.141162][T21536] do_syscall_64+0x55/0xa0 [ 1361.145572][T21536] ? clear_bhb_loop+0x40/0x90 [ 1361.150245][T21536] ? clear_bhb_loop+0x40/0x90 [ 1361.154918][T21536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.160811][T21536] RIP: 0033:0x7f6990b9cdd9 [ 1361.165248][T21536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.184866][T21536] RSP: 002b:00007f6991b2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1361.193283][T21536] RAX: ffffffffffffffda RBX: 00007f6990e15fa0 RCX: 00007f6990b9cdd9 [ 1361.201254][T21536] RDX: 000000000000002b RSI: 0000000000000001 RDI: 0000000000000003 [ 1361.209230][T21536] RBP: 00007f6991b2d090 R08: 0000000000000042 R09: 0000000000000000 [ 1361.217211][T21536] R10: 0000200000002640 R11: 0000000000000246 R12: 0000000000000001 [ 1361.225201][T21536] R13: 00007f6990e16038 R14: 00007f6990e15fa0 R15: 00007fff25153fa8 [ 1361.233206][T21536] [ 1361.242579][T20339] Bluetooth: hci0: command tx timeout [ 1361.250159][T21526] delete_channel: no stack [ 1361.278075][ T9079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.340805][T21540] netlink: 'syz.1.4991': attribute type 21 has an invalid length. [ 1361.350086][T21540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4991'. [ 1361.500631][T21545] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1361.569869][ T9079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.619207][T21542] netlink: 'syz.2.4992': attribute type 21 has an invalid length. [ 1361.632167][T21542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4992'. [ 1361.671235][T21545] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1361.680876][T21547] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4993'. [ 1361.726627][ T9079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.854913][ T9079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.879164][T21521] chnl_net:caif_netlink_parms(): no params data found [ 1361.961600][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.969707][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.235412][T21566] netlink: 'syz.2.4999': attribute type 1 has an invalid length. [ 1362.255989][T21566] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4999'. [ 1362.854550][T21557] delete_channel: no stack [ 1363.321042][T20339] Bluetooth: hci0: command tx timeout [ 1364.167958][T21521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.201577][T21521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.222313][T21521] bridge_slave_0: entered allmulticast mode [ 1364.245131][T21521] bridge_slave_0: entered promiscuous mode [ 1364.270682][T21521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.280752][T21521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.288639][T21521] bridge_slave_1: entered allmulticast mode [ 1364.301320][T21521] bridge_slave_1: entered promiscuous mode [ 1364.308867][T21581] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1364.598604][T21574] delete_channel: no stack [ 1364.666825][T21581] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1364.694048][T21583] netlink: 'syz.3.5004': attribute type 21 has an invalid length. [ 1364.732489][T21583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1364.769505][T21521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.782668][T21521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.818636][T21521] team0: Port device team_slave_0 added [ 1364.846891][T21521] team0: Port device team_slave_1 added [ 1365.092665][T21521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.133139][T21521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.177922][T21521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.201212][T21589] delete_channel: no stack [ 1365.208008][T21521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.215815][T21521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.247666][T21521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.368705][T21521] hsr_slave_0: entered promiscuous mode [ 1365.380900][T21521] hsr_slave_1: entered promiscuous mode [ 1365.388976][T21521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1365.403447][T20339] Bluetooth: hci0: command tx timeout [ 1365.412540][T21521] Cannot create hsr debugfs directory [ 1366.061662][T21521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1366.080689][T21521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1366.119652][T21521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1366.147663][T21521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1366.244866][ T9079] [ 1366.247231][ T9079] ====================================================== [ 1366.254245][ T9079] WARNING: possible circular locking dependency detected [ 1366.262069][ T9079] syzkaller #0 Not tainted [ 1366.266473][ T9079] ------------------------------------------------------ [ 1366.273477][ T9079] kworker/u4:13/9079 is trying to acquire lock: [ 1366.279717][ T9079] ffff888142b8cd00 (team->team_lock_key#8){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 1366.289267][ T9079] [ 1366.289267][ T9079] but task is already holding lock: [ 1366.296613][ T9079] ffff888052fe8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1366.306964][ T9079] [ 1366.306964][ T9079] which lock already depends on the new lock. [ 1366.306964][ T9079] [ 1366.317365][ T9079] [ 1366.317365][ T9079] the existing dependency chain (in reverse order) is: [ 1366.326370][ T9079] [ 1366.326370][ T9079] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1366.334122][ T9079] __mutex_lock+0x136/0xcc0 [ 1366.339160][ T9079] ieee80211_open+0x144/0x200 [ 1366.344368][ T9079] __dev_open+0x2cb/0x430 [ 1366.349215][ T9079] dev_open+0xab/0x190 [ 1366.353807][ T9079] team_add_slave+0x75f/0x29a0 [ 1366.359103][ T9079] do_setlink+0xdfe/0x4130 [ 1366.364030][ T9079] rtnl_newlink+0x17da/0x20a0 [ 1366.369213][ T9079] rtnetlink_rcv_msg+0x869/0xfa0 [ 1366.374656][ T9079] netlink_rcv_skb+0x241/0x4d0 [ 1366.379930][ T9079] netlink_unicast+0x751/0x8d0 [ 1366.385204][ T9079] netlink_sendmsg+0x8d0/0xbf0 [ 1366.390476][ T9079] ____sys_sendmsg+0x5ba/0x960 [ 1366.395776][ T9079] ___sys_sendmsg+0x2a6/0x360 [ 1366.401073][ T9079] __se_sys_sendmsg+0x1c2/0x2b0 [ 1366.406535][ T9079] do_syscall_64+0x55/0xa0 [ 1366.411570][ T9079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.417996][ T9079] [ 1366.417996][ T9079] -> #0 (team->team_lock_key#8){+.+.}-{3:3}: [ 1366.426224][ T9079] __lock_acquire+0x2df1/0x7d40 [ 1366.431611][ T9079] lock_acquire+0x19e/0x420 [ 1366.436626][ T9079] __mutex_lock+0x136/0xcc0 [ 1366.441644][ T9079] team_del_slave+0x32/0x1c0 [ 1366.446744][ T9079] team_device_event+0x28d/0xa20 [ 1366.452210][ T9079] notifier_call_chain+0x197/0x380 [ 1366.457868][ T9079] unregister_netdevice_many_notify+0x100d/0x1900 [ 1366.464835][ T9079] unregister_netdevice_queue+0x32c/0x370 [ 1366.471066][ T9079] _cfg80211_unregister_wdev+0x16b/0x580 [ 1366.477229][ T9079] ieee80211_remove_interfaces+0x49e/0x690 [ 1366.483564][ T9079] ieee80211_unregister_hw+0x5d/0x2a0 [ 1366.489447][ T9079] mac80211_hwsim_del_radio+0x289/0x480 [ 1366.495524][ T9079] hwsim_exit_net+0x58d/0x650 [ 1366.500800][ T9079] cleanup_net+0x70a/0xbb0 [ 1366.505732][ T9079] process_scheduled_works+0xa5d/0x15d0 [ 1366.511792][ T9079] worker_thread+0xa55/0xfc0 [ 1366.516898][ T9079] kthread+0x2fa/0x390 [ 1366.521484][ T9079] ret_from_fork+0x48/0x80 [ 1366.526425][ T9079] ret_from_fork_asm+0x11/0x20 [ 1366.531720][ T9079] [ 1366.531720][ T9079] other info that might help us debug this: [ 1366.531720][ T9079] [ 1366.541954][ T9079] Possible unsafe locking scenario: [ 1366.541954][ T9079] [ 1366.549392][ T9079] CPU0 CPU1 [ 1366.554747][ T9079] ---- ---- [ 1366.560101][ T9079] lock(&rdev->wiphy.mtx); [ 1366.564595][ T9079] lock(team->team_lock_key#8); [ 1366.572047][ T9079] lock(&rdev->wiphy.mtx); [ 1366.579059][ T9079] lock(team->team_lock_key#8); [ 1366.583987][ T9079] [ 1366.583987][ T9079] *** DEADLOCK *** [ 1366.583987][ T9079] [ 1366.592118][ T9079] 5 locks held by kworker/u4:13/9079: [ 1366.597490][ T9079] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1366.608354][ T9079] #1: ffffc9001924fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1366.618932][ T9079] #2: ffffffff8e3b5a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1366.628321][ T9079] #3: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1366.638141][ T9079] #4: ffff888052fe8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 1366.648923][ T9079] [ 1366.648923][ T9079] stack backtrace: [ 1366.654803][ T9079] CPU: 0 PID: 9079 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 1366.662447][ T9079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1366.672529][ T9079] Workqueue: netns cleanup_net [ 1366.677296][ T9079] Call Trace: [ 1366.680569][ T9079] [ 1366.683487][ T9079] dump_stack_lvl+0x18c/0x250 [ 1366.688181][ T9079] ? load_image+0x420/0x420 [ 1366.692678][ T9079] ? show_regs_print_info+0x20/0x20 [ 1366.697882][ T9079] ? print_circular_bug+0x12b/0x1a0 [ 1366.703079][ T9079] check_noncircular+0x2fc/0x400 [ 1366.708024][ T9079] ? print_deadlock_bug+0x5d0/0x5d0 [ 1366.713228][ T9079] ? lockdep_lock+0xf5/0x230 [ 1366.717806][ T9079] ? __lock_acquire+0x1273/0x7d40 [ 1366.722815][ T9079] ? _find_first_zero_bit+0xd3/0x100 [ 1366.728103][ T9079] __lock_acquire+0x2df1/0x7d40 [ 1366.732963][ T9079] ? verify_lock_unused+0x140/0x140 [ 1366.738156][ T9079] ? verify_lock_unused+0x140/0x140 [ 1366.743357][ T9079] lock_acquire+0x19e/0x420 [ 1366.747847][ T9079] ? team_del_slave+0x32/0x1c0 [ 1366.752612][ T9079] ? __might_sleep+0xe0/0xe0 [ 1366.757192][ T9079] ? read_lock_is_recursive+0x20/0x20 [ 1366.762555][ T9079] __mutex_lock+0x136/0xcc0 [ 1366.767050][ T9079] ? team_del_slave+0x32/0x1c0 [ 1366.771796][ T9079] ? __lock_acquire+0x7d40/0x7d40 [ 1366.776803][ T9079] ? rcu_is_watching+0x15/0xb0 [ 1366.781556][ T9079] ? trace_contention_end+0x39/0xe0 [ 1366.786737][ T9079] ? __mutex_lock+0x315/0xcc0 [ 1366.791394][ T9079] ? team_del_slave+0x32/0x1c0 [ 1366.796140][ T9079] ? mutex_lock_nested+0x20/0x20 [ 1366.801085][ T9079] ? bond_netdev_event+0xeb/0xf20 [ 1366.806115][ T9079] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1366.811738][ T9079] team_del_slave+0x32/0x1c0 [ 1366.816312][ T9079] team_device_event+0x28d/0xa20 [ 1366.821255][ T9079] notifier_call_chain+0x197/0x380 [ 1366.826379][ T9079] unregister_netdevice_many_notify+0x100d/0x1900 [ 1366.832807][ T9079] ? lock_chain_count+0x20/0x20 [ 1366.837662][ T9079] ? unregister_netdevice_many+0x20/0x20 [ 1366.843283][ T9079] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1366.848991][ T9079] ? __lock_acquire+0x7d40/0x7d40 [ 1366.854009][ T9079] unregister_netdevice_queue+0x32c/0x370 [ 1366.859716][ T9079] ? list_netdevice+0x730/0x730 [ 1366.864586][ T9079] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1366.870300][ T9079] _cfg80211_unregister_wdev+0x16b/0x580 [ 1366.875924][ T9079] ieee80211_remove_interfaces+0x49e/0x690 [ 1366.881722][ T9079] ? ieee80211_do_stop+0x1e20/0x1e20 [ 1366.887029][ T9079] ? rcu_is_watching+0x15/0xb0 [ 1366.891782][ T9079] ieee80211_unregister_hw+0x5d/0x2a0 [ 1366.897147][ T9079] mac80211_hwsim_del_radio+0x289/0x480 [ 1366.902685][ T9079] ? rhashtable_remove_fast+0xc00/0xc00 [ 1366.908233][ T9079] hwsim_exit_net+0x58d/0x650 [ 1366.912910][ T9079] ? hwsim_init_net+0x90/0x90 [ 1366.917584][ T9079] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1366.923393][ T9079] cleanup_net+0x70a/0xbb0 [ 1366.927801][ T9079] ? ops_free_list+0x3b0/0x3b0 [ 1366.932554][ T9079] ? _raw_spin_unlock_irq+0x23/0x50 [ 1366.937738][ T9079] ? process_scheduled_works+0x96f/0x15d0 [ 1366.943446][ T9079] ? process_scheduled_works+0x96f/0x15d0 [ 1366.949164][ T9079] process_scheduled_works+0xa5d/0x15d0 [ 1366.954737][ T9079] ? worker_attach_to_pool+0x380/0x380 [ 1366.960194][ T9079] ? assign_work+0x3d2/0x5d0 [ 1366.964780][ T9079] worker_thread+0xa55/0xfc0 [ 1366.969365][ T9079] kthread+0x2fa/0x390 [ 1366.973415][ T9079] ? pr_cont_work+0x560/0x560 [ 1366.978109][ T9079] ? kthread_blkcg+0xd0/0xd0 [ 1366.982694][ T9079] ret_from_fork+0x48/0x80 [ 1366.987113][ T9079] ? kthread_blkcg+0xd0/0xd0 [ 1366.991700][ T9079] ret_from_fork_asm+0x11/0x20 [ 1366.996461][ T9079] [ 1367.005848][ T9079] team0: Port device wlan1 removed [ 1367.057242][T21521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.135280][T21521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.151690][T16213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.158902][T16213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.174941][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.182098][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.216940][ T9079] vlan0: left allmulticast mode [ 1367.221866][ T9079] veth0_vlan: left allmulticast mode [ 1367.232537][ T9079] vlan0: left promiscuous mode [ 1367.241756][ T9079] À: port 1(vlan0) entered disabled state [ 1367.254840][ T9079] veth1_vlan: left allmulticast mode [ 1367.260449][ T9079] veth1_vlan: left promiscuous mode [ 1367.265838][ T9079] veth0_vlan: left promiscuous mode [ 1367.478355][T20339] Bluetooth: hci0: command tx timeout [ 1367.526343][ T9079] team0 (unregistering): Port device macvlan1 removed [ 1367.659894][ T9079] team0 (unregistering): Port device team_slave_1 removed [ 1367.752380][ T9079] .` (unregistering): (slave 4@0Ù): Releasing backup interface [ 1367.794334][ T9079] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.907129][ T9079] .` (unregistering): Released all slaves [ 1368.178622][T21521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1368.227346][T21521] veth0_vlan: entered promiscuous mode [ 1368.240354][T21521] veth1_vlan: entered promiscuous mode [ 1368.270436][T21521] veth0_macvtap: entered promiscuous mode [ 1368.284600][T21521] veth1_macvtap: entered promiscuous mode [ 1368.302068][T21521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.312794][T21521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.323654][T21521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.334205][T21521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.345128][T21521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.357697][T21521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.368240][T21521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.378768][T21521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.389586][T21521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.400989][T21521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.412271][T21521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.421160][T21521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.431385][T21521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.441167][T21521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.469535][T21521] ieee80211 phy366: Selected rate control algorithm 'minstrel_ht' [ 1368.489453][ T9079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.492102][T21521] ieee80211 phy367: Selected rate control algorithm 'minstrel_ht' [ 1368.499965][ T9079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.525404][ T9083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1368.533640][ T9083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50