last executing test programs: 11m47.363384208s ago: executing program 4 (id=6745): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4a046) 11m47.089374151s ago: executing program 4 (id=6749): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000001300)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001540)=""/251, 0xfb}], 0x1, &(0x7f0000001640)=""/92, 0x5c}, 0x10023) (async) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000001300)=@generic, 0x80, &(0x7f0000001380)=[{&(0x7f0000001540)=""/251, 0xfb}], 0x1, &(0x7f0000001640)=""/92, 0x5c}, 0x10023) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40000000000000061141c00000000002400000000000b000000000013000062f1d7e4bacaf23db95e000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r6, &(0x7f00000004c0)="ac45457ed21bacd9de96cea9ed90cd72a332cb8ff130b8c9a7afb30a6047143fb5a564a6abeca20b567c447d06e2c257bc6cfc314f22516c83cc3d3422de2862a57211a11a8fbe7c94e23ab834c4ee71151e8f018b2d3643d36937094a307ac5b402bfef6d2504a879f93df1355c79a45acfe16f2f71fa4375e247ba58f8e5002916775d332fcbfd6e989b7952f83f3ea48f9ab6c9e04e3c4dda1ebbaa98a3e15e45b9b02523decdfc2e52d26394958f84ecdaab523696ea960a03ce84c9072c68e94251ab4ebcd526a136f4", &(0x7f00000005c0)=""/190, 0x4}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r8, 0x14, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r8, 0x14, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001700)=ANY=[@ANYRES32=r1, @ANYRES32=r9, @ANYBLOB="1b00000008000000", @ANYRES32=r9, @ANYBLOB="4eb32b969b63941814e754ab8007423b8505ef8d6e91625a3237fe56390f1819ce38b3dabbd5dcd5ac167572a34df6df3e311dafcb5d9ffe9fd3c7f9b413c51cceb735c9389dfa978a2fc601000080303b45083c2c325c0a21aa4a1b7b9dd6cf26eed2f6180dea37a960ff8495f6022a904ba48ca1ec25667de24173dc9873ad909ba7a683ce72b5ffabc2914f49113d2040e9cd983d0a3c34c7044c4d69", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r10}, 0x94) r12 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000980)="65638dd1a27af70d25eccd44033c4a14a72ba68a44e1d8ec01c38cb6bda40d0e5377089a35ff7ba8fb9da28670a0267163fbed8fd0c58c8a559e6a8a633923891cd02dc6f4881741272e86f93cf3ac4d0b79f375964a334e04defa0a1010c85d6d2ea3fecf38671d4c1f29706e54459d93729a7b3db65ac26ccc1b9fbd0149d5d2dbd01bdc97cb10a167ff3602fc0e1aaa329091faced23da7bbac159bfe30ebc8a14cb516492e829cffa6d23efda549e042dbad4ba11419c5bc73c75803fc8b713957c19cab7dd95d01068a3a1ed5f8af0c6ebaed8cf7d71618fc509abe58860b8d36de6a42ee1eba7294", 0xeb}, {&(0x7f0000000880)="d719a66dcd6dbd51460562e620f6712442bc84752bf57b02", 0x18}, {&(0x7f0000000a80)="4c501e948a03b98fbf326f40d2ebf1519bcf15fe5b342f14d1421ee77811a4e96f5b2730109d4d4df706a350fee0c9e44878c1411a38c953c141a640f6e96a5752ccbd5dc6cdb818a1bc077147bead2bbe398ac7c1bcb379746236c64298f0242a7f30fe5f4586858fd4236d14c6ad450148993286d3280a92ffce3ae2ad4fb7d4a91daa41ec4c9524fb10a0738a93268f9feb94c6b80ea7db", 0x99}, {&(0x7f0000000c80)="1786eb984e1e34b4daa620ebc56192f00d486c1953d01bf63f78b59489263ab464278fe51230abf931394a5c6ca0eb598ac67e8d26cff244de4d1cb0d0aaaf6c2037e009f7701f7c25bb4d8e7a25adf13f040f2ebf07a323248676c188297d511e4e5cc97634c3abe956c76ee06b2b86b2538222de096810cae253bc4e7a7044c67c802164006b905d041bf3e19a6a7e47b7f055bd603f3a5a45f5fb2bb3cdbc1f1df280a4b051d383d9f9f1894ed559d3e6bcc138f522649eb1331ca6725f826855e499f9033cc6", 0xc8}], 0x4, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x39}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x349a3fff}}], 0xb0}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000980)="65638dd1a27af70d25eccd44033c4a14a72ba68a44e1d8ec01c38cb6bda40d0e5377089a35ff7ba8fb9da28670a0267163fbed8fd0c58c8a559e6a8a633923891cd02dc6f4881741272e86f93cf3ac4d0b79f375964a334e04defa0a1010c85d6d2ea3fecf38671d4c1f29706e54459d93729a7b3db65ac26ccc1b9fbd0149d5d2dbd01bdc97cb10a167ff3602fc0e1aaa329091faced23da7bbac159bfe30ebc8a14cb516492e829cffa6d23efda549e042dbad4ba11419c5bc73c75803fc8b713957c19cab7dd95d01068a3a1ed5f8af0c6ebaed8cf7d71618fc509abe58860b8d36de6a42ee1eba7294", 0xeb}, {&(0x7f0000000880)="d719a66dcd6dbd51460562e620f6712442bc84752bf57b02", 0x18}, {&(0x7f0000000a80)="4c501e948a03b98fbf326f40d2ebf1519bcf15fe5b342f14d1421ee77811a4e96f5b2730109d4d4df706a350fee0c9e44878c1411a38c953c141a640f6e96a5752ccbd5dc6cdb818a1bc077147bead2bbe398ac7c1bcb379746236c64298f0242a7f30fe5f4586858fd4236d14c6ad450148993286d3280a92ffce3ae2ad4fb7d4a91daa41ec4c9524fb10a0738a93268f9feb94c6b80ea7db", 0x99}, {&(0x7f0000000c80)="1786eb984e1e34b4daa620ebc56192f00d486c1953d01bf63f78b59489263ab464278fe51230abf931394a5c6ca0eb598ac67e8d26cff244de4d1cb0d0aaaf6c2037e009f7701f7c25bb4d8e7a25adf13f040f2ebf07a323248676c188297d511e4e5cc97634c3abe956c76ee06b2b86b2538222de096810cae253bc4e7a7044c67c802164006b905d041bf3e19a6a7e47b7f055bd603f3a5a45f5fb2bb3cdbc1f1df280a4b051d383d9f9f1894ed559d3e6bcc138f522649eb1331ca6725f826855e499f9033cc6", 0xc8}], 0x4, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x86}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x39}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x349a3fff}}], 0xb0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r7) 11m46.90032605s ago: executing program 4 (id=6752): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001000000", @ANYRES32, @ANYBLOB="cd"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000200001304000000030000000000000b000000000400000000000008000000000000002e5f"], 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x100}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000008000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00570483be3b4a61033ba2649fa0709300000000000000000000000000000000ec7baa4c5f99d7becddc8b81952f8641945c43a432268c4d7bebbf9a37619b63aad2b8c9eeb2b944719d58c50b5f211a326320770e4edceec7e6c90ec14e1b5f444e0cb04eda9faf1fcc93c7a45942ba7788a23407bf3b7736324a13559569966619336db9bde0da144bfd13011a54524a2550f75666445f0588c3f1e6bb329bd1c71794c07261061dc929a791e0571e846c0324d777bbfe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 11m45.786134985s ago: executing program 4 (id=6763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3e0da119356349a5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x114004, 0xac5d, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x18, 0x0, 0x0) close(r1) socketpair(0xb, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000440)="4791c70a5ae532", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x200000000000022e, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES16=r2, @ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x7, 0x96, &(0x7f0000000000)=""/150}, 0x94) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000005c0)=ANY=[], 0xfffffffffffffe2f) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r8, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="3800000004000000", @ANYRES32=r11, @ANYRESHEX=r1, @ANYRES16=0x0, @ANYRES16=r6], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) r12 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x89e1, &(0x7f0000000500)={r12}) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xf1, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xb1, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) 11m45.27469828s ago: executing program 4 (id=6767): ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x81) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x8, 0x1, 0xc, 0x0, 0x7, 0x400, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3, 0x3, 0x5, 0x9, 0x81, 0x5, 0x0, 0x80, 0x0, 0x616}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x58) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x25, 0xa, 0x2, 0x6, 0x0, 0x2, 0xa3480, 0x55d95db21f68ea7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80000001, 0x100}, 0x4001, 0xc, 0x0, 0x1, 0x0, 0x3, 0x5, 0x0, 0x80, 0x0, 0xd8b6}, r1, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7b608f0d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x1, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000340)=""/164, 0x27, 0xa4, 0x0, 0x3}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', r4, r5, 0x5, 0x4}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x2c546c75, 0x0, 0xffffffffffffffff, 0xf, '\x00', r4, r5, 0x0, 0x4, 0x4}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r5, 0x20, &(0x7f0000000880)={&(0x7f0000000700)=""/164, 0xa4, 0x0, &(0x7f00000007c0)=""/142, 0x8e}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12ba63f763ac0bc7, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xd91e1d6a98fbe5c2}}}, &(0x7f0000000600)='syzkaller\x00', 0xd89, 0xab, &(0x7f0000000640)=""/171, 0x40f00, 0x0, '\x00', r4, @fallback=0x37, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r9, 0x8, &(0x7f0000000940)=[r3, r6, r3, r3, r3, r3, r6, r6], &(0x7f0000000980)=[{0x2, 0x5, 0x2}, {0x5, 0x4, 0x8, 0x6}, {0x5, 0x5, 0x9, 0x9}, {0x4, 0x2, 0x5, 0x8}, {0x4, 0x2, 0xa}, {0x0, 0x3, 0xf, 0x7}, {0x5, 0x5, 0x9, 0x9}, {0x0, 0x1, 0xa, 0x4}], 0x10, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000ac0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000b00)='\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000e00)={&(0x7f0000000b40)="a6ff9ee27781dcd03e81e31b636d89e9e3441654ec39a412812b817c1740137ea647782237ddc97618087aabb6a166d2fe94f1b7093882e0640d188294eedc0427de6399b36a85cb221825b55fb0f4fe715617f90cc959df950d2e4ec6a7221ca967756905f5d243ac0d8a0a08aa5f612ba90d81564dbf03b7c01b3c4e1e31513192bfda2d87dbb9c1e980206093911358c5742d987704cbdbfff45317bd2d51f5fbfec73de9896192", &(0x7f0000000c00)=""/144, &(0x7f0000000cc0)="76539a4db3704405d0d014a99fbbcce29e95c4798564646bcdc71c371de861fd8345aa52f728a93e869920bbe025e44654b2cc20b8b1", &(0x7f0000000d00)="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", 0x0, r6}, 0x38) r10 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x11, 0x1, 0x1, &(0x7f0000000e40)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000e80)={r11}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x2) openat$cgroup_subtree(r11, &(0x7f0000000ec0), 0x2, 0x0) r12 = getpid() perf_event_open(&(0x7f0000000f40)={0x5, 0x80, 0x2, 0xe3, 0x7, 0x4, 0x0, 0x6, 0xb1800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2000, 0x1, @perf_bp={&(0x7f0000000f00), 0x9}, 0x10040, 0x7, 0x7, 0x7, 0x7fffffff, 0x2, 0x286e, 0x0, 0x7ff, 0x0, 0x9}, r12, 0xd, r9, 0x0) socketpair(0x9, 0x80000, 0x73808419, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000001000)={r10}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0xc56, 0x0, r7, 0x9, '\x00', r4, r5, 0x5, 0x4, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r9, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0x61, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) sendmsg$sock(r10, &(0x7f0000002ac0)={&(0x7f0000001400)=@can={0x1d, r4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="aa4503e5d49e0902f4b5c1f258fbce49661fad6c85c0785d0802ea2fd03f227d9c9443725e071c6607ccc10ce8d01ad45d132d3ff93800f05dce7dd25e1fb5bd17180f9764bdab0d2d0dda1dce1d1cbc77965cc91f5a175332da265fbc323b7bd35501a3c13d00bfaaf336252c832990652b733dab10821063e895377cd872ebca72d0a08849295cc6a0606a278eedec09ef6cf2cc924e6a3d49b8dd01ff97f88be9eb738fffcd00673830cba5189f9966de53db439e3aaec733f11f", 0xbc}, {&(0x7f0000001540)="b09fa1aa9bc165449455c52ad3de9d0d8e10abf95eb2fbb3540d139e7811d7175e8d3370903180ec4f85bf53ed3f8a1a63a8c2429ea3a660fb3f8cb94989ec40f571c530417bdc98b8c70a209c8ab16b737f6ecfb73f30869fe3", 0x5a}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="bfacf1158116618d55e958aa10f4728a2871db3b99f5b5d533915208162554cfea0744c1a550ee5bf7a62b3199b433524a7002f2662506f5bf199c12a2ec59b3f7decac30c97054fcbf7d956127b23c58e26d574f289895d2e1dea17b43f03ee500aef5dc39a54ac0e9483535ff99907269494db0aab6635f44bc9019010c11df41ffb53712867977e196f085c", 0x8d}, {&(0x7f0000002680)="03803deb3e0154f910ad788b8013886831db9c0352fadbc7697d0d5104d643887f05d0aa064db286d34daae58735e37cccaf7585ae2dcdc0c4aa8e4d5f4603c3c1a0d82745ca22da76abb8dd435e33cc464aa4e0ae9de2125275018acc50e94b0fd34d3c2bd1fd94bf581e7afe00759b89a4306fa61d3de7d2853ed2d5ba63fde1d6cee9955822eaa5383e0831773a095abaebea188c6971e696cbb9c64fc0439b7318d438035a83ea098da34d444897e120120017744a4584a1abc9b0632370fb3bdde2c90b", 0xc6}, {&(0x7f0000002780)="1a93026e0bee6b28b905d04833a6815deadd8ed38ccea387040289d0fbae957550bdd417a99eeb016f455c28f18b3b6191f1b898323c3e113bed9dbd5b38cc4100316bb6845b39699b596aef9a0da352a204339919b6ff0dce10fedfc259", 0x5e}, {&(0x7f0000002800)="02aa9825f593c767bb3ea1e08c746b4349429e329a632d7f630765f8f001438051e7b0efcbc9451562253540c5688e20185ebfdc7ec35285c5d707c2a8c10a8eb35d8ec3c045436bc4dc16a594ccea28f486231b83dbb3f30da5267ba9e478086f042180ab01fbd1f00f7dc1bd840f1f0d4cc9dda015994eb185b60d40c7dac95eeb96d349da9adfaa3f683df0ee2093ffff2cebd08e4c5fff517d5cb367ef4bb5cc586ef1e21dec515ef82b99776bb7c4a3f6e09616", 0xb6}, {&(0x7f00000028c0)="9fc5fd09da12b0f3f3b4285bb9abcbc5a8dabf56a53ba18156894afbe85b0462ab812ee64b55fda393a5f1e5341ddcfefa34c2ab04c41b5743e7da49e9603f0f4bf478f83bc13dbab9729d070609fd2bd399336f6723130a62a4322d1b275b42c6e9081581c03544d953604f8e8329d2d430cc8f6f1ab289ae3379b5ce498301a0278939d51507ac98724845af9fee8918d1e28a113f17dfb833d24b3f4b1315ca29c92c671a950e7cbc0698508a2979bcd3f33c6d8f0755cf4b25446ca2d3f836d99f9c3330c7fc51abfdaae6603e2f5f239820933cdc532b3c801e58aee81bd61066d2af463f0dfe00a1875a327ccfa56fbb43", 0xf4}], 0x8, &(0x7f0000002a40)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18}}], 0x78}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002b00), 0x4) 11m44.935179737s ago: executing program 4 (id=6769): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000200)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) 11m29.81083049s ago: executing program 32 (id=6769): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000200)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) 19.559221608s ago: executing program 1 (id=10320): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x82000, &(0x7f0000000040)="fa468a719f265726dff8e1216f", 0xd, 0x0, 0x0, &(0x7f0000000b00)="c610c82e717dfbb1a8a9a038bd49aa242b071722cdaba709079a47cc6e71c8fa8040b5d8cab621d87233f3f9e4ee6eebcb0d8d38c29fc3e97f273340de06bec66ad4cc4de8ba2a55891ccf7a6dd9e0e9c01a5285e4b075e60cac") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0xa, 0x3, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) recvmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000380)=""/148, 0x94}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f00000006c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000000440)=""/17, 0x11}, {&(0x7f0000000800)=""/19, 0x13}], 0x8}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 19.053682843s ago: executing program 1 (id=10325): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000300)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="27010200d40f00000600ff2e88", 0xd}], 0x1}, 0x4) 18.587336975s ago: executing program 1 (id=10332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.040724842s ago: executing program 1 (id=10337): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="00000000000000000000e836b520", 0xe}], 0x1}, 0x8080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xa11b, @private2, 0x1, 0x4}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)="35b9a320fdb72d2345b3f151c6b62fcc7177112404e6020986864fcc774ad6de79d8962d0dec3a05148724084ce0918688c55aaa58e1", 0x36}, {&(0x7f00000001c0)="e3ffdb165558c61a3e012b075c1eb66aeae3", 0x12}, {&(0x7f0000000600)="3fd3944aa25f2190a27977d68f754652a2bdbbf84413b60c0800f53916c586bfc310a3aabeed4b0cac425da077d2b67f07998e901a85122077062fdf8a30a889f8228e3ef8a28a39417589d4c7aff8530cd52fa62331bcd76fc3386d212d3f922de1c948f52ecf5b3744a51860401c6fd0f25a27df09150514bc8b3d1cb7fc328a803dd2fcf1b18378009911755e12c2d9c3415849e6adaa2894db3fa0c6ab9a036ca62c52cc4c513e2a24ee8464c09539e70bdca725411fbc3dcac6dbad8681862d448ad6ecda02c9fea6d4d162", 0xce}, {&(0x7f0000000340)="fd356ce8c73b84219b3b25b92e66f0ea3952b88cb27f9850527626d2e802c0407466685c72e3df", 0x27}, {&(0x7f0000000500)="c195c153df9eaa5e300d2d0d994facfaa838617e12fabdbbc4d27fdffdbb9b3f8e68140c71b075c906e7ed35b2669399c457564f3ae3c76dfbfc5bf647ac1a928282fb0453b6326ab09b7c2c842a3157e58e6eaed4f97b3aad0038caf5e17d34e24ebed3d2a37754409fd65cd7f4134cf95b97f37fa87eb61f133479900cd8c4e203e9a7847928a05a40bd2e348fbcbe928eccb0e1c6a28343926d6ac7f527da429aa4862bd1f9478383e6d6e1", 0xad}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000000380)="4de983e5", 0x4}], 0x7}, 0x20044001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000ffff00e200000085000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000000000000181000", @ANYRES32, @ANYBLOB="f0f605748aed"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 17.428978811s ago: executing program 1 (id=10341): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xe2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9900, 0x0, 0x0, 0x0, 0xfff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x15, &(0x7f0000000440)=""/21, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x7, 0xcce7, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r0], &(0x7f0000000680)=[{0x0, 0x3, 0x6, 0x7}, {0x3, 0x4, 0x3, 0x3}], 0x10, 0x72e}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) recvmsg$unix(r1, &(0x7f0000003100)={&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000002d40)=""/213, 0xd5}, {&(0x7f0000002c40)=""/53, 0x35}, {&(0x7f0000002e40)=""/85, 0x55}, {&(0x7f0000002ec0)=""/167, 0xa7}], 0x6, &(0x7f0000003000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x1b, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x6, 0xfffffffa, 0x1, 0x3, 0x80, r5, 0xc37, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ac0)={r6, &(0x7f0000000a80)="fd20dd35e3ea891bfd34fd", &(0x7f0000000c40)=""/4096}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="914e861ecc3fdbd492bab4f2e7d92af37357d2e7a7f1016071321b52b4f478a8521b50f98a674e3f273597e6e2a18810c9516b1e7ea0fa15cdeb257803fd541f74f7c06ecfbc62e3a0c2182be88acc696df09e8e65a31f9e2088f14f911b1b3571db1e0674ad3df17f0d12a313cafce172cd62bf9046109b446f3fd2c69b506d6cd767e788f45f900d542e34db68886a98799afc443aadad673bd16898cf4d6e963a1631998cd8ca901e6b4b79413596d148e352d6abc81fc121486c84710fe9a305ce9729a0fcb144e966b95bd548613e4754d7165ab6d42aa75665", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) 16.067290237s ago: executing program 1 (id=10348): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd10"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331c00"/27, 0x1b}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() (async) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r8, r6, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x58, &(0x7f00000002c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r4, 0x3, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000180)=@raw=[@generic={0x5, 0x8, 0x1, 0x5, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xbe77}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1f}], &(0x7f0000000240)='GPL\x00', 0x9, 0x15, &(0x7f0000000280)=""/21, 0x40f00, 0x49, '\x00', r9, 0x25, r4, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xf, 0xf88, 0xff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r5, 0xffffffffffffffff, r10, r5], &(0x7f0000000500)=[{0x2, 0x4, 0xf, 0x4}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)}, 0x10) 11.43489339s ago: executing program 0 (id=10375): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000002ac0)=@hci={0x1f, 0x4788, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000600)='o', 0x1}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup(r7, &(0x7f0000000400)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x11, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xa, 0xa, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1018, &(0x7f0000004b00)=""/4120, 0x41100, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x33fe0) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r11, 0x29, 0x7, &(0x7f0000000000)=r10, 0x4) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="2b460cdb89e0c141bb6b56016391ebee4445d4540c7533a8855fd25bdcdd045d05f4d1914ef88a6aa9d3f0abbfc46e8c096241b7c1bb2d1889c1eab9dcb05070f79cd65e80b6ffcefb5dca9cbf0ec09a7904bc0738c6345ba053025e8d980e2b8f053931a0e474fe92fc27619b89b805fb7aafee336cbd47a127bd315907905c37fcec4f0e94de163a642defd49d45293ac2cd65b96a3d03b3710f0175a0a57fb9b8d2502ad08b3ce17f514c4bcae350f5430dce8db9fbdc0b5adf7619d809", 0xbf}, {&(0x7f0000000300)="b9c20bcaa00cabe3d570fc13b39d76c7ad9335ba6f3f40d33354e51ea4e6435d9ae54ece3f098f9782a342ecd981675536025d3520cc64bb2ead9ce6cbf4f424d74ce4d0fcf1349ddc13dadb8cde6cd7c0d586d674bd324e9e6b26c54f7ddc07aee87b094a7b3ba68d35ed8349df3b526225f1c92a2a3cb45782fb0b50797f655548585dbc13d32290fe64dc54d92cff8f7ace92f943600255f766bf23196b4988cb7363d4fe3b484c1b0bfbcfd4b0a54be5867a9a1a4981c7edb10b611329a2df2df1b0e6b5d26acbdd2d3113a1eaad4630409901eb03909149b8ea5db21d45f92d35a174896387d1c556bad71e05fd74dd7e", 0xfffffef7}], 0x2}, 0x24040080) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 8.747335169s ago: executing program 0 (id=10383): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x6}, 0x4001, 0x0, 0xfffffffc, 0x0, 0xb6eb, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfff5, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}, 0x48) 7.653027492s ago: executing program 2 (id=10386): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.650036682s ago: executing program 0 (id=10387): socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x1}, 0x11c249, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="5c00000012006bab9a3fe3d86e17d9", 0xf}, {&(0x7f0000000400)="a6d844e1a25921a92d04a00f8b", 0xd}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4004c400) r1 = perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x1a, 0x8, 0x9, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc, 0x0, @perf_bp={&(0x7f0000000340), 0x9}, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x2}}, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=[{0x10, 0x11, 0x100}, {0x18, 0x10b, 0x5, "06d3f2f3"}, {0x38, 0x119, 0xa0f8, "3f72ee92319899c4221abb8ff55142fd3c37f9d4b74be1191f12e97f54ffef159f"}], 0x60}, 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120cfe014006040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 7.387400525s ago: executing program 2 (id=10388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xdc0, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.105784158s ago: executing program 0 (id=10390): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) r5 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYRES8=r7], 0xfe33) 7.105293048s ago: executing program 2 (id=10391): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000200000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.819277212s ago: executing program 2 (id=10392): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="698be14db236c598ad58365238df0fc11f9c778a05742e6a119238bce2ac610fcc89b2ad08facda12b13f7d41b1e08a90933c4693beb4a9bf181823705baf4163d11b8fae53f3abe90bcc6750fa086c875782875a9979f76688d814c5b9fdeaf51c84c3e137bf80f96bcb0e219c1ea49c9941d9436bbd37e5e770c7c9baabb77b5523e64ff7793118f74997e4f29148ea7304e87a3024f090b0d3547f94f881e905d8f28d67a4dde21aad8d6ffcd", 0xae}], 0x1, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}}}}], 0x20}, 0x4841) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x106, &(0x7f0000000100)=""/262, 0x0, 0x46, '\x00', r3}, 0x94) 6.753719785s ago: executing program 3 (id=10393): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\t']) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000200)}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee0ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac02781245bd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000001c0)=r5, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x9, 0xf, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0xf}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="020003e7000a"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071104e0000000000950000000006915372cfea5e875297a48000f7cd857a0000000000000080f2b38e26f819a832b08d994a583e3bfb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$kcm(0xa, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.721016987s ago: executing program 5 (id=10395): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x6) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) recvmsg(r2, &(0x7f00000016c0)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/116, 0x74}, 0x10104) (async) perf_event_open(&(0x7f0000001700)={0x0, 0x80, 0x5, 0x1, 0x6, 0x2, 0x0, 0x6, 0x2000, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x8001, 0x7}, 0x114890, 0x80, 0x5, 0x7, 0x25a, 0x4, 0x4, 0x0, 0x6, 0x0, 0x1}, r1, 0x6, r0, 0x8) (async) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x1000, 0x7d, &(0x7f0000002d00)="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", &(0x7f00000008c0)=""/125, 0xd, 0x0, 0x67, 0x85, &(0x7f0000000940)="4e1b9124a2d1d4a81f15f531ee141330136f4f7528f2490db64e5556009fc93e155ae46a839a5234cf82f9d5871717774cc317ba7b5b695d7f99f089b4877bed8396cb952a4dfe1c0746f99d29a6d899887c1057174da36a0f7002b2b50324a36d9e5e073686d1", &(0x7f00000009c0)="47176c408caed50e7973809365b27fa835b35b963edc6b9e46ab60e416229ee9868e5b4a3c9ddbd77ad3707f197a4ae615409f576fb5bbe8dc442465715bd2877966a7cddc3e4d34469d5c084b98c14ccafbf010e6ec2f6c64aaec7ba0f91270ecb349acc7fb753005374099e3cdbd514a4ee237d68a8439fcbd23ced77db799047c049cb8", 0x4, 0x0, 0x3}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb709) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8912, &(0x7f0000000080)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.707163157s ago: executing program 0 (id=10396): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0xfff5, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 6.607042072s ago: executing program 2 (id=10397): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f00000005c0)=[{}, {0x23b, 0xe, 0x9, 0x2}, {0x8, 0x0, 0x10, 0xff}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000d5def790000041300000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1cb166f505d03d525cb9e899fcd581322876185a7c653fe3d7cbce50e451b34b99fbeb915f74a469a80cf6216cb40b9a3418e491cba5090ef325731ae83bcb81998b75949f2e29f330c0b1719bcbdfc32e03c29aa9536df1d695cf2ad532b0800211922a601aa433e1bc3832ec4e66311e0cb8612fa0bb8d4c22063d07a80ec1ab551639141d9e8c027f3565f55448f708d64c07c7b832598b81dda778b0e41d69444f8073a82471c154bb5fa82d8814a6a849e8e6ab61a8492149d69dc4678ca424f6db9cbe92f4", 0xc8}, {&(0x7f0000000440)="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", 0xfe}, {&(0x7f00000002c0)="26f82feadf614831dc56a42eff03e6f839f90877c19907b97a57893692380d5be240bfb48996d48b9ebc905beb7960ee1cc25219", 0x34}, {&(0x7f0000000300)="d52e46aa0ec002ae908c19d08cb642d32eed11a53c3189e72459ad4cde943147f2a3709445b85b2fea8697ff297adb12be4e761cd69b52c0a09985469eb329bda4482c325ea0b5dade5c6f00596afb47f2eb251b7916ba302a3ba58ab0bc822201d0996c3d4fdc8fd1541183dd3ab4fba425b2a135b2353602ad8d6d433dd4b06ae63654288d8d3926fca8485b3d72af4070ecabe925bf4adc3a49492bcc548ee984f02cf4de333dc75de661bfd1ccea025670a4c17c13a0508a69d3f5a02b82", 0xffffff77}], 0x4}, 0x8040) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.23179227s ago: executing program 0 (id=10398): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x62943, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a"], 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x18200, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x4000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000001300)={0x5, 0x80, 0x16, 0x1, 0xeb, 0x7, 0x0, 0xfffffffffffffffb, 0x10820, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x100000000, 0x8}, 0x2, 0xa9, 0x3, 0x5, 0x5, 0x3, 0x7, 0x0, 0x4, 0x0, 0x18}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e033c004d8c71ef2885634af80a000006"], 0xffdd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0xba, 0x0, 0x0, 0x0, 0x400000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x1028, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff0085000400030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) 6.001182512s ago: executing program 5 (id=10399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, 0x0, 0x400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d08fcfe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000b00200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0xbf28fa041556e426) 5.736674494s ago: executing program 3 (id=10400): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x11, &(0x7f0000000300)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x14, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a9", 0x0, 0x8007e73, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.349923483s ago: executing program 2 (id=10401): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x7fff}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x6, 0x3, 0x2, 0x7, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0xef, &(0x7f0000000200)=""/239, 0x41000, 0x69dd273cae8e34de, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000340)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=[{0x5, 0x1, 0xa, 0xc}, {0x4, 0x4, 0xe, 0x1}, {0x0, 0x2, 0x6, 0x7}, {0x1, 0x3, 0x0, 0xa}, {0x2, 0x5, 0x4, 0x1d}, {0x5, 0x1, 0x1, 0x9}, {0x0, 0x5, 0xa, 0xb}, {0x1, 0x2, 0x7, 0xb}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x20000890) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r11, 0x0, 0x4) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1ff}, 0x50) 5.215272539s ago: executing program 5 (id=10402): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}, 0x0) 5.20665858s ago: executing program 3 (id=10403): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x6}, 0x4001, 0x0, 0xfffffffc, 0x0, 0xb6eb, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000}, 0x48) 4.062808975s ago: executing program 3 (id=10404): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x4, 0x3, {0xa, 0x4e24, 0x4, @mcast2, 0x42}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) 3.775093189s ago: executing program 3 (id=10405): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0xffffffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x8001, 0x80000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x8404, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10002) socket$kcm(0x11, 0x2, 0x300) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x1e, 0x0, 0x7602, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/236, 0xec}], 0x1, &(0x7f00000002c0)=""/90, 0x5a}, 0x2000) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x7}, 0x8088, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x1c, 0x1, 0x0, 0x2, 0x10000000, 0x0, 0xb8a32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x5ac0000000000000}, 0xde81, 0x0, 0x0, 0x3, 0x3, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="2300f90ea35700"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000040000000500"/28], 0x50) 3.632845985s ago: executing program 5 (id=10406): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x8, 0x81, 0x6, 0x0, 0x7, 0x64b3, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={0x0, 0xc}, 0x8041, 0x7, 0x800, 0x7, 0x3, 0x2, 0x6, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], &(0x7f00000004c0)=""/147, 0x2b, 0x93, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800ffff0f000000240000002400000002000000000000000000000400000003000000000000000b01000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 1.881730389s ago: executing program 3 (id=10407): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x3, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa98, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x0, &(0x7f0000000240), &(0x7f00000002c0)='syzkaller\x00', 0xbbd, 0x0, 0x0, 0x41000, 0x34, '\x00', r1, @fallback=0x9, r2, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, r5, r6, r8, 0xffffffffffffffff, r9, r10], 0x0, 0x10, 0xabcac137}, 0x94) r11 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1b, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000010000000000000003f52bb7418110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009b82feff04000000850000002a000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0xf, 0xd2, &(0x7f0000000900)=""/210, 0x1e00, 0x4, '\x00', r1, @fallback=0x31, r2, 0x8, &(0x7f0000000a00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x6, 0x101, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r8, r7, r8], &(0x7f0000000c40)=[{0x1, 0x3, 0xc, 0x6}, {0x0, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x8, 0x9}, {0x1, 0x5, 0x5, 0x2}, {0x1, 0x1, 0x4, 0x3}, {0x2, 0x3, 0x7, 0x2}], 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x7, 0x30001, 0x8, 0x7, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000bc0), 0x8}, 0x110000, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8}, 0x1500, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r12, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x4c810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0x0}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d002000140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.763505916s ago: executing program 5 (id=10408): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7ce058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f96cfa2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b102db9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x2b, 0x80000, 0x8, &(0x7f0000000300)) (async, rerun: 32) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x6180, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000200)) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x4000, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0d, &(0x7f0000000040)={'netdevsim0\x00', @random="8dffffff0600"}) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e3900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.296562888s ago: executing program 5 (id=10409): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x8, 0x1, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r3, 0xd, 0x0, 0xd03, &(0x7f0000000600)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r5, r1, 0x11, 0x0, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r6, 0x11) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x0, 0x13, 0x0, 0x29) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000640)=r6, 0x3c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000ac30f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 33 (id=10348): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd10"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331c00"/27, 0x1b}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xf2ffffffffffffff}, 0x38) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r6 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() (async) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r8, r6, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x58, &(0x7f00000002c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r5, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r4, 0x3, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000180)=@raw=[@generic={0x5, 0x8, 0x1, 0x5, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xbe77}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1f}], &(0x7f0000000240)='GPL\x00', 0x9, 0x15, &(0x7f0000000280)=""/21, 0x40f00, 0x49, '\x00', r9, 0x25, r4, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xf, 0xf88, 0xff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r5, 0xffffffffffffffff, r10, r5], &(0x7f0000000500)=[{0x2, 0x4, 0xf, 0x4}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x58, &(0x7f0000000600)}, 0x10) kernel console output (not intermixed with test programs): : 105116 bytes leftover after parsing attributes in process `syz.5.8916'. [ 1764.323245][T32375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1764.358385][T32375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.411364][T32375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1764.448496][T32375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.472675][T32375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.488447][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1764.504810][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1764.522005][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1764.552300][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1764.574960][T32375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1764.603883][T32375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.643676][T32375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1764.699827][T32375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.753100][T32375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1764.773692][T32375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1764.785600][T32375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.810246][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1764.838896][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1764.904125][T32375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.945727][T32375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.976350][T32375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.086587][T32375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.188703][T32378] Bluetooth: hci2: ISO packet for unknown connection handle 60 [ 1765.733859][T15729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.743055][T31487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.784713][T15729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.802521][T31487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.810205][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1765.903957][T15729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1766.001647][T32756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8926'. [ 1766.617385][ T305] FAULT_INJECTION: forcing a failure. [ 1766.617385][ T305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1766.646119][ T305] CPU: 0 PID: 305 Comm: syz.3.8931 Not tainted syzkaller #0 [ 1766.653500][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1766.663612][ T305] Call Trace: [ 1766.666936][ T305] [ 1766.669921][ T305] dump_stack_lvl+0x188/0x24e [ 1766.674655][ T305] ? show_regs_print_info+0x12/0x12 [ 1766.679913][ T305] ? load_image+0x400/0x400 [ 1766.684484][ T305] ? __lock_acquire+0x7d10/0x7d10 [ 1766.689572][ T305] ? __rcu_read_unlock+0x78/0xd0 [ 1766.694541][ T305] should_fail_ex+0x399/0x4d0 [ 1766.699270][ T305] _copy_to_user+0x2c/0x130 [ 1766.703835][ T305] bpf_test_finish+0x198/0x600 [ 1766.708658][ T305] ? convert___skb_to_skb+0x580/0x580 [ 1766.714085][ T305] ? convert_skb_to___skb+0x420/0x420 [ 1766.719527][ T305] ? __build_skb+0x257/0x3c0 [ 1766.724168][ T305] ? bpf_prog_test_run_skb+0x773/0x12a0 [ 1766.729769][ T305] bpf_prog_test_run_skb+0xc99/0x12a0 [ 1766.735208][ T305] ? cpu_online+0xa0/0xa0 [ 1766.739598][ T305] bpf_prog_test_run+0x31e/0x390 [ 1766.744595][ T305] __sys_bpf+0x62b/0x780 [ 1766.748894][ T305] ? bpf_link_show_fdinfo+0x380/0x380 [ 1766.754335][ T305] ? lock_chain_count+0x20/0x20 [ 1766.759249][ T305] __x64_sys_bpf+0x78/0x90 [ 1766.763740][ T305] do_syscall_64+0x4c/0xa0 [ 1766.768219][ T305] ? clear_bhb_loop+0x60/0xb0 [ 1766.772955][ T305] ? clear_bhb_loop+0x60/0xb0 [ 1766.777689][ T305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1766.783627][ T305] RIP: 0033:0x7fb66679c799 [ 1766.788059][ T305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.807695][ T305] RSP: 002b:00007fb667626028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1766.816142][ T305] RAX: ffffffffffffffda RBX: 00007fb666a15fa0 RCX: 00007fb66679c799 [ 1766.824235][ T305] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1766.832258][ T305] RBP: 00007fb667626090 R08: 0000000000000000 R09: 0000000000000000 [ 1766.840272][ T305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.848295][ T305] R13: 00007fb666a16038 R14: 00007fb666a15fa0 R15: 00007ffd06df0ac8 [ 1766.856368][ T305] [ 1770.842462][ T373] device syzkaller0 entered promiscuous mode [ 1773.331677][ T422] netlink: 'syz.0.8970': attribute type 39 has an invalid length. [ 1774.312767][ T442] netlink: 'syz.3.8977': attribute type 29 has an invalid length. [ 1774.414117][ T442] netlink: 'syz.3.8977': attribute type 29 has an invalid length. [ 1776.428905][ T468] device syzkaller0 entered promiscuous mode [ 1776.575394][ T479] netlink: 'syz.2.8988': attribute type 29 has an invalid length. [ 1776.757398][ T479] netlink: 'syz.2.8988': attribute type 29 has an invalid length. [ 1777.246917][ T480] netlink: 'syz.2.8988': attribute type 29 has an invalid length. [ 1777.669912][ T494] netlink: 'syz.2.8993': attribute type 3 has an invalid length. [ 1777.684824][ T494] netlink: 'syz.2.8993': attribute type 1 has an invalid length. [ 1781.804530][ T534] device syzkaller0 entered promiscuous mode [ 1782.852113][ T565] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9016'. [ 1782.973081][ T565] team0: Port device team_slave_0 removed [ 1782.996578][ T565] net_ratelimit: 509 callbacks suppressed [ 1782.996597][ T565] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1791.675238][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.681673][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.010561][ T751] netlink: 'syz.2.9082': attribute type 2 has an invalid length. [ 1792.031493][ T751] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9082'. [ 1792.047825][ T751] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.9082'. [ 1793.110051][ T773] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.9088'. [ 1794.591632][ T802] device syzkaller0 entered promiscuous mode [ 1795.025062][ T811] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9101'. [ 1795.141006][ T819] netlink: 81056 bytes leftover after parsing attributes in process `syz.5.9104'. [ 1795.234419][ T811] team0: Port device team_slave_0 removed [ 1795.250206][ T811] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1796.104028][ T841] netlink: 'syz.2.9112': attribute type 6 has an invalid length. [ 1796.166409][ T841] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9112'. [ 1796.447101][ T847] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9114'. [ 1796.885811][ T857] device syzkaller0 entered promiscuous mode [ 1798.977967][ T921] netlink: 'syz.0.9133': attribute type 1 has an invalid length. [ 1799.012749][ T921] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.9133'. [ 1801.218866][ T912] netlink: 'syz.1.9132': attribute type 4 has an invalid length. [ 1801.228763][ T923] netlink: 'syz.0.9133': attribute type 10 has an invalid length. [ 1801.240701][ T923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9133'. [ 1801.262894][ T923] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1801.269577][ T923] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.308528][ T923] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1801.931779][ T942] netlink: 65027 bytes leftover after parsing attributes in process `syz.5.9139'. [ 1802.395973][ T951] netlink: 81056 bytes leftover after parsing attributes in process `syz.1.9143'. [ 1802.484617][ T959] netlink: 'syz.3.9146': attribute type 3 has an invalid length. [ 1802.509332][ T959] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9146'. [ 1802.545993][ T951] debugfs: Directory '.!—5‚Á7>7H€' with parent 'ieee80211' already present! [ 1802.840109][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 1802.903920][ T961] netlink: 'syz.3.9146': attribute type 10 has an invalid length. [ 1803.002435][ T961] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 1803.210338][ T977] FAULT_INJECTION: forcing a failure. [ 1803.210338][ T977] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.271493][ T977] CPU: 1 PID: 977 Comm: syz.5.9150 Not tainted syzkaller #0 [ 1803.278887][ T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1803.289003][ T977] Call Trace: [ 1803.292317][ T977] [ 1803.295286][ T977] dump_stack_lvl+0x188/0x24e [ 1803.300038][ T977] ? show_regs_print_info+0x12/0x12 [ 1803.305300][ T977] ? load_image+0x400/0x400 [ 1803.309865][ T977] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1803.315927][ T977] ? lock_chain_count+0x20/0x20 [ 1803.320826][ T977] should_fail_ex+0x399/0x4d0 [ 1803.325549][ T977] should_failslab+0x5/0x20 [ 1803.330199][ T977] slab_pre_alloc_hook+0x59/0x310 [ 1803.335255][ T977] ? sctp_add_bind_addr+0x89/0x350 [ 1803.340398][ T977] __kmem_cache_alloc_node+0x4f/0x260 [ 1803.345804][ T977] ? sctp_add_bind_addr+0x89/0x350 [ 1803.350967][ T977] kmalloc_trace+0x26/0xe0 [ 1803.355521][ T977] sctp_add_bind_addr+0x89/0x350 [ 1803.360511][ T977] sctp_copy_local_addr_list+0x311/0x4e0 [ 1803.366184][ T977] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1803.371946][ T977] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1803.378055][ T977] ? sctp_v4_is_any+0x31/0x50 [ 1803.382768][ T977] ? sctp_copy_one_addr+0x93/0x660 [ 1803.387915][ T977] sctp_bind_addr_copy+0xaf/0x3c0 [ 1803.393003][ T977] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1803.399359][ T977] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1803.404680][ T977] ? __sctp_connect+0xd80/0xd80 [ 1803.409559][ T977] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1803.415144][ T977] ? security_sctp_bind_connect+0x85/0xb0 [ 1803.420919][ T977] sctp_sendmsg+0x15b0/0x2940 [ 1803.425655][ T977] ? sctp_getsockopt+0x8a0/0x8a0 [ 1803.430633][ T977] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1803.436818][ T977] ? aa_af_perm+0x340/0x340 [ 1803.441349][ T977] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1803.447808][ T977] ? inet_sendmsg+0xe5/0x2f0 [ 1803.452483][ T977] ? inet_send_prepare+0x260/0x260 [ 1803.457632][ T977] ____sys_sendmsg+0x5be/0x970 [ 1803.462453][ T977] ? __sys_sendmsg_sock+0x30/0x30 [ 1803.467505][ T977] ? __import_iovec+0x315/0x500 [ 1803.472394][ T977] ? import_iovec+0x6f/0xa0 [ 1803.476927][ T977] ___sys_sendmsg+0x2a2/0x360 [ 1803.481639][ T977] ? __sys_sendmsg+0x290/0x290 [ 1803.486445][ T977] ? irqentry_enter+0x33/0x50 [ 1803.491191][ T977] __se_sys_sendmsg+0x1bb/0x2a0 [ 1803.496075][ T977] ? __x64_sys_sendmsg+0x80/0x80 [ 1803.501065][ T977] ? lockdep_hardirqs_on+0x94/0x140 [ 1803.506295][ T977] do_syscall_64+0x4c/0xa0 [ 1803.510741][ T977] ? clear_bhb_loop+0x60/0xb0 [ 1803.515444][ T977] ? clear_bhb_loop+0x60/0xb0 [ 1803.520153][ T977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1803.526070][ T977] RIP: 0033:0x7fecb959c799 [ 1803.530518][ T977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.550154][ T977] RSP: 002b:00007fecba385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1803.558597][ T977] RAX: ffffffffffffffda RBX: 00007fecb9815fa0 RCX: 00007fecb959c799 [ 1803.566606][ T977] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1803.574592][ T977] RBP: 00007fecba385090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.582588][ T977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.590574][ T977] R13: 00007fecb9816038 R14: 00007fecb9815fa0 R15: 00007ffd254f80e8 [ 1803.598579][ T977] [ 1804.392978][ T995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9156'. [ 1807.532337][ T1051] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.9168'. [ 1807.631225][ T1057] netlink: 'syz.5.9169': attribute type 10 has an invalid length. [ 1807.642383][ T1056] device pim6reg1 entered promiscuous mode [ 1808.576493][ T1074] FAULT_INJECTION: forcing a failure. [ 1808.576493][ T1074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1808.628058][ T1074] CPU: 1 PID: 1074 Comm: syz.0.9177 Not tainted syzkaller #0 [ 1808.635546][ T1074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1808.645657][ T1074] Call Trace: [ 1808.648982][ T1074] [ 1808.651951][ T1074] dump_stack_lvl+0x188/0x24e [ 1808.656692][ T1074] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1808.662956][ T1074] ? show_regs_print_info+0x12/0x12 [ 1808.668218][ T1074] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1808.674491][ T1074] should_fail_ex+0x399/0x4d0 [ 1808.679240][ T1074] _copy_from_user+0x2c/0x170 [ 1808.683989][ T1074] __sys_bpf+0x2ea/0x780 [ 1808.688292][ T1074] ? bpf_link_show_fdinfo+0x380/0x380 [ 1808.693741][ T1074] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1808.699974][ T1074] __x64_sys_bpf+0x78/0x90 [ 1808.704464][ T1074] do_syscall_64+0x4c/0xa0 [ 1808.708945][ T1074] ? clear_bhb_loop+0x60/0xb0 [ 1808.713679][ T1074] ? clear_bhb_loop+0x60/0xb0 [ 1808.718420][ T1074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1808.724364][ T1074] RIP: 0033:0x7f4266f9c799 [ 1808.728835][ T1074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.748498][ T1074] RSP: 002b:00007f4267e6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1808.756985][ T1074] RAX: ffffffffffffffda RBX: 00007f4267215fa0 RCX: 00007f4266f9c799 [ 1808.765016][ T1074] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 1808.773041][ T1074] RBP: 00007f4267e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.781057][ T1074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.789076][ T1074] R13: 00007f4267216038 R14: 00007f4267215fa0 R15: 00007ffd12d3a468 [ 1808.797108][ T1074] [ 1809.066382][ T1079] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.9175'. [ 1811.045116][ T1126] netlink: 'syz.2.9193': attribute type 16 has an invalid length. [ 1811.110333][ T1126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9193'. [ 1811.818303][ T1142] netlink: 'syz.3.9198': attribute type 10 has an invalid length. [ 1815.473931][ T1201] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1815.553236][ T1201] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1815.574645][ T1201] CPU: 0 PID: 1201 Comm: syz.3.9220 Not tainted syzkaller #0 [ 1815.582113][ T1201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1815.592205][ T1201] Call Trace: [ 1815.595517][ T1201] [ 1815.598486][ T1201] dump_stack_lvl+0x188/0x24e [ 1815.603220][ T1201] ? show_regs_print_info+0x12/0x12 [ 1815.608480][ T1201] ? load_image+0x400/0x400 [ 1815.613049][ T1201] sysfs_warn_dup+0x8a/0xa0 [ 1815.617611][ T1201] sysfs_do_create_link_sd+0xc0/0x110 [ 1815.623035][ T1201] device_add+0x7ed/0xfb0 [ 1815.627430][ T1201] wiphy_register+0x1d9f/0x2ac0 [ 1815.632360][ T1201] ? cfg80211_event_work+0x40/0x40 [ 1815.637534][ T1201] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1815.643779][ T1201] ? ieee80211_register_hw+0x28b7/0x39f0 [ 1815.649489][ T1201] ieee80211_register_hw+0x2d00/0x39f0 [ 1815.655007][ T1201] ? lockdep_hardirqs_on+0x94/0x140 [ 1815.660256][ T1201] ? ieee80211_register_hw+0xee1/0x39f0 [ 1815.665833][ T1201] ? ieee80211_register_hw+0xee1/0x39f0 [ 1815.671429][ T1201] ? ieee80211_tasklet_handler+0x20/0x20 [ 1815.677099][ T1201] ? memset+0x1e/0x40 [ 1815.681108][ T1201] ? __hrtimer_init+0x186/0x270 [ 1815.685991][ T1201] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1815.691776][ T1201] hwsim_new_radio_nl+0xafa/0xce0 [ 1815.696874][ T1201] genl_family_rcv_msg_doit+0x22a/0x330 [ 1815.702460][ T1201] ? end_current_label_crit_section+0x170/0x170 [ 1815.708728][ T1201] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1815.714657][ T1201] ? bpf_lsm_capable+0x5/0x10 [ 1815.719413][ T1201] ? security_capable+0x85/0xb0 [ 1815.724298][ T1201] genl_rcv_msg+0x604/0x790 [ 1815.728842][ T1201] ? genl_bind+0x360/0x360 [ 1815.733286][ T1201] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1815.739674][ T1201] netlink_rcv_skb+0x1fb/0x450 [ 1815.744506][ T1201] ? genl_bind+0x360/0x360 [ 1815.748960][ T1201] ? netlink_ack+0x1170/0x1170 [ 1815.753766][ T1201] ? down_read+0x1a8/0x2d0 [ 1815.758235][ T1201] genl_rcv+0x24/0x40 [ 1815.762310][ T1201] netlink_unicast+0x74d/0x8d0 [ 1815.767146][ T1201] netlink_sendmsg+0x8ad/0xbd0 [ 1815.771974][ T1201] ? lockdep_hardirqs_on+0x94/0x140 [ 1815.777219][ T1201] ? netlink_getsockopt+0x550/0x550 [ 1815.782470][ T1201] ? netlink_getsockopt+0x550/0x550 [ 1815.787705][ T1201] ____sys_sendmsg+0x5be/0x970 [ 1815.792538][ T1201] ? __sys_sendmsg_sock+0x30/0x30 [ 1815.797600][ T1201] ? __import_iovec+0x315/0x500 [ 1815.802482][ T1201] ? import_iovec+0x6f/0xa0 [ 1815.807012][ T1201] ___sys_sendmsg+0x2a2/0x360 [ 1815.811722][ T1201] ? __sys_sendmsg+0x290/0x290 [ 1815.816559][ T1201] __se_sys_sendmsg+0x1bb/0x2a0 [ 1815.821442][ T1201] ? ct_nmi_exit+0x145/0x1c0 [ 1815.826059][ T1201] ? __x64_sys_sendmsg+0x80/0x80 [ 1815.831046][ T1201] ? lockdep_hardirqs_on+0x94/0x140 [ 1815.836282][ T1201] do_syscall_64+0x4c/0xa0 [ 1815.840747][ T1201] ? clear_bhb_loop+0x60/0xb0 [ 1815.845474][ T1201] ? clear_bhb_loop+0x60/0xb0 [ 1815.850185][ T1201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.856103][ T1201] RIP: 0033:0x7fb66679c799 [ 1815.860550][ T1201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.880187][ T1201] RSP: 002b:00007fb667626028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1815.888629][ T1201] RAX: ffffffffffffffda RBX: 00007fb666a15fa0 RCX: 00007fb66679c799 [ 1815.896640][ T1201] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1815.904662][ T1201] RBP: 00007fb666832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1815.912656][ T1201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1815.920653][ T1201] R13: 00007fb666a16038 R14: 00007fb666a15fa0 R15: 00007ffd06df0ac8 [ 1815.928669][ T1201] [ 1816.263582][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1816.283769][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1816.297398][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1816.308929][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9226'. [ 1816.598381][ T1223] FAULT_INJECTION: forcing a failure. [ 1816.598381][ T1223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.686363][ T1223] CPU: 1 PID: 1223 Comm: syz.2.9230 Not tainted syzkaller #0 [ 1816.693840][ T1223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1816.703941][ T1223] Call Trace: [ 1816.707263][ T1223] [ 1816.710232][ T1223] dump_stack_lvl+0x188/0x24e [ 1816.714970][ T1223] ? show_regs_print_info+0x12/0x12 [ 1816.720234][ T1223] ? load_image+0x400/0x400 [ 1816.724794][ T1223] ? __lock_acquire+0x7d10/0x7d10 [ 1816.729881][ T1223] ? snprintf+0xe5/0x140 [ 1816.734163][ T1223] should_fail_ex+0x399/0x4d0 [ 1816.738877][ T1223] _copy_to_user+0x2c/0x130 [ 1816.743415][ T1223] simple_read_from_buffer+0xe3/0x150 [ 1816.748840][ T1223] proc_fail_nth_read+0x1a6/0x220 [ 1816.753902][ T1223] ? proc_fault_inject_write+0x310/0x310 [ 1816.759584][ T1223] ? fsnotify_perm+0x248/0x550 [ 1816.764521][ T1223] ? proc_fault_inject_write+0x310/0x310 [ 1816.770196][ T1223] vfs_read+0x2de/0xa00 [ 1816.774401][ T1223] ? kernel_read+0x1e0/0x1e0 [ 1816.779041][ T1223] ? __fget_files+0x28/0x4b0 [ 1816.783668][ T1223] ? __fget_files+0x28/0x4b0 [ 1816.788293][ T1223] ? __fget_files+0x43d/0x4b0 [ 1816.793038][ T1223] ? __fdget_pos+0x2ae/0x360 [ 1816.797714][ T1223] ? ksys_read+0x71/0x250 [ 1816.802096][ T1223] ksys_read+0x14c/0x250 [ 1816.806396][ T1223] ? vfs_write+0xa30/0xa30 [ 1816.810866][ T1223] ? lockdep_hardirqs_on+0x94/0x140 [ 1816.816104][ T1223] do_syscall_64+0x4c/0xa0 [ 1816.820556][ T1223] ? clear_bhb_loop+0x60/0xb0 [ 1816.825279][ T1223] ? clear_bhb_loop+0x60/0xb0 [ 1816.829994][ T1223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.835945][ T1223] RIP: 0033:0x7fd5f1d5cfce [ 1816.840397][ T1223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1816.860057][ T1223] RSP: 002b:00007fd5f2c18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1816.868521][ T1223] RAX: ffffffffffffffda RBX: 00007fd5f2c196c0 RCX: 00007fd5f1d5cfce [ 1816.876533][ T1223] RDX: 000000000000000f RSI: 00007fd5f2c190a0 RDI: 0000000000000005 [ 1816.884543][ T1223] RBP: 00007fd5f2c19090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.892541][ T1223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.900542][ T1223] R13: 00007fd5f2016038 R14: 00007fd5f2015fa0 R15: 00007ffcb085ca88 [ 1816.908570][ T1223] [ 1818.197554][ T1250] device veth0_vlan left promiscuous mode [ 1818.227052][ T1250] device veth0_vlan entered promiscuous mode [ 1818.316445][ T1260] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9240'. [ 1818.357925][ T1260] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1818.375632][ T1260] CPU: 1 PID: 1260 Comm: syz.1.9240 Not tainted syzkaller #0 [ 1818.383097][ T1260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1818.393199][ T1260] Call Trace: [ 1818.396514][ T1260] [ 1818.399525][ T1260] dump_stack_lvl+0x188/0x24e [ 1818.404284][ T1260] ? show_regs_print_info+0x12/0x12 [ 1818.409561][ T1260] ? load_image+0x400/0x400 [ 1818.414178][ T1260] sysfs_warn_dup+0x8a/0xa0 [ 1818.418739][ T1260] sysfs_do_create_link_sd+0xc0/0x110 [ 1818.424179][ T1260] device_add+0x7ed/0xfb0 [ 1818.428590][ T1260] wiphy_register+0x1d9f/0x2ac0 [ 1818.433556][ T1260] ? cfg80211_event_work+0x40/0x40 [ 1818.438730][ T1260] ? minstrel_ht_alloc+0x894/0xa20 [ 1818.443902][ T1260] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1818.450046][ T1260] ieee80211_register_hw+0x2d00/0x39f0 [ 1818.455589][ T1260] ? ieee80211_register_hw+0xee1/0x39f0 [ 1818.461196][ T1260] ? ieee80211_register_hw+0xee1/0x39f0 [ 1818.466810][ T1260] ? ieee80211_tasklet_handler+0x20/0x20 [ 1818.472515][ T1260] ? memset+0x1e/0x40 [ 1818.476545][ T1260] ? __hrtimer_init+0x186/0x270 [ 1818.481485][ T1260] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1818.487288][ T1260] hwsim_new_radio_nl+0xafa/0xce0 [ 1818.492376][ T1260] genl_family_rcv_msg_doit+0x22a/0x330 [ 1818.497965][ T1260] ? end_current_label_crit_section+0x170/0x170 [ 1818.504240][ T1260] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1818.510182][ T1260] ? bpf_lsm_capable+0x5/0x10 [ 1818.514887][ T1260] ? security_capable+0x85/0xb0 [ 1818.519773][ T1260] genl_rcv_msg+0x604/0x790 [ 1818.524311][ T1260] ? genl_bind+0x360/0x360 [ 1818.528751][ T1260] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1818.535131][ T1260] netlink_rcv_skb+0x1fb/0x450 [ 1818.539932][ T1260] ? genl_bind+0x360/0x360 [ 1818.544372][ T1260] ? netlink_ack+0x1170/0x1170 [ 1818.549177][ T1260] ? down_read+0x1a8/0x2d0 [ 1818.553645][ T1260] genl_rcv+0x24/0x40 [ 1818.557657][ T1260] netlink_unicast+0x74d/0x8d0 [ 1818.562502][ T1260] netlink_sendmsg+0x8ad/0xbd0 [ 1818.567315][ T1260] ? netlink_getsockopt+0x550/0x550 [ 1818.573676][ T1260] ? aa_sock_msg_perm+0x94/0x150 [ 1818.578739][ T1260] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1818.584061][ T1260] ? security_socket_sendmsg+0x7c/0xa0 [ 1818.589592][ T1260] ? netlink_getsockopt+0x550/0x550 [ 1818.594855][ T1260] ____sys_sendmsg+0x5be/0x970 [ 1818.599662][ T1260] ? __sys_sendmsg_sock+0x30/0x30 [ 1818.604735][ T1260] ? __import_iovec+0x315/0x500 [ 1818.609621][ T1260] ? import_iovec+0x6f/0xa0 [ 1818.614156][ T1260] ___sys_sendmsg+0x2a2/0x360 [ 1818.618881][ T1260] ? __sys_sendmsg+0x290/0x290 [ 1818.623728][ T1260] __se_sys_sendmsg+0x1bb/0x2a0 [ 1818.628609][ T1260] ? ct_nmi_exit+0x145/0x1c0 [ 1818.633226][ T1260] ? __x64_sys_sendmsg+0x80/0x80 [ 1818.638217][ T1260] ? lockdep_hardirqs_on+0x94/0x140 [ 1818.643450][ T1260] do_syscall_64+0x4c/0xa0 [ 1818.647904][ T1260] ? clear_bhb_loop+0x60/0xb0 [ 1818.652696][ T1260] ? clear_bhb_loop+0x60/0xb0 [ 1818.657404][ T1260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1818.663324][ T1260] RIP: 0033:0x7fc3efd9c799 [ 1818.667765][ T1260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.687411][ T1260] RSP: 002b:00007fc3f0cc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1818.695855][ T1260] RAX: ffffffffffffffda RBX: 00007fc3f0015fa0 RCX: 00007fc3efd9c799 [ 1818.703853][ T1260] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1818.711871][ T1260] RBP: 00007fc3efe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1818.719962][ T1260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1818.727954][ T1260] R13: 00007fc3f0016038 R14: 00007fc3f0015fa0 R15: 00007ffccc5da408 [ 1818.735966][ T1260] [ 1818.793518][ T1270] FAULT_INJECTION: forcing a failure. [ 1818.793518][ T1270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.824235][ T1270] CPU: 0 PID: 1270 Comm: syz.3.9243 Not tainted syzkaller #0 [ 1818.831695][ T1270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1818.841794][ T1270] Call Trace: [ 1818.845101][ T1270] [ 1818.848048][ T1270] dump_stack_lvl+0x188/0x24e [ 1818.852805][ T1270] ? show_regs_print_info+0x12/0x12 [ 1818.858030][ T1270] ? load_image+0x400/0x400 [ 1818.862559][ T1270] ? __might_fault+0xa6/0x120 [ 1818.867260][ T1270] should_fail_ex+0x399/0x4d0 [ 1818.871958][ T1270] copyin+0x1b/0x120 [ 1818.875880][ T1270] _copy_from_iter+0x447/0x1130 [ 1818.880805][ T1270] ? copyout_mc+0x110/0x110 [ 1818.885345][ T1270] ? __virt_addr_valid+0x188/0x540 [ 1818.890516][ T1270] ? __virt_addr_valid+0x188/0x540 [ 1818.895663][ T1270] ? __virt_addr_valid+0x465/0x540 [ 1818.900810][ T1270] ? __check_object_size+0x500/0xa40 [ 1818.906120][ T1270] netlink_sendmsg+0x755/0xbd0 [ 1818.910921][ T1270] ? netlink_getsockopt+0x550/0x550 [ 1818.916154][ T1270] ? aa_sock_msg_perm+0x94/0x150 [ 1818.921123][ T1270] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1818.926436][ T1270] ? security_socket_sendmsg+0x7c/0xa0 [ 1818.931937][ T1270] ? netlink_getsockopt+0x550/0x550 [ 1818.937164][ T1270] ____sys_sendmsg+0x5be/0x970 [ 1818.941970][ T1270] ? __sys_sendmsg_sock+0x30/0x30 [ 1818.947016][ T1270] ? __import_iovec+0x315/0x500 [ 1818.951894][ T1270] ? import_iovec+0x6f/0xa0 [ 1818.956417][ T1270] ___sys_sendmsg+0x2a2/0x360 [ 1818.961134][ T1270] ? __sys_sendmsg+0x290/0x290 [ 1818.966013][ T1270] ? __lock_acquire+0x7d10/0x7d10 [ 1818.971101][ T1270] __se_sys_sendmsg+0x1bb/0x2a0 [ 1818.975995][ T1270] ? ct_nmi_exit+0x145/0x1c0 [ 1818.980621][ T1270] ? __x64_sys_sendmsg+0x80/0x80 [ 1818.985615][ T1270] ? lockdep_hardirqs_on+0x94/0x140 [ 1818.990856][ T1270] do_syscall_64+0x4c/0xa0 [ 1818.995301][ T1270] ? clear_bhb_loop+0x60/0xb0 [ 1819.000003][ T1270] ? clear_bhb_loop+0x60/0xb0 [ 1819.004707][ T1270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1819.010630][ T1270] RIP: 0033:0x7fb66679c799 [ 1819.015074][ T1270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.034701][ T1270] RSP: 002b:00007fb667626028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1819.043138][ T1270] RAX: ffffffffffffffda RBX: 00007fb666a15fa0 RCX: 00007fb66679c799 [ 1819.051139][ T1270] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 1819.059133][ T1270] RBP: 00007fb667626090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.067121][ T1270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.075106][ T1270] R13: 00007fb666a16038 R14: 00007fb666a15fa0 R15: 00007ffd06df0ac8 [ 1819.083106][ T1270] [ 1819.156852][ T1273] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1821.272764][ T1331] netlink: 'syz.5.9260': attribute type 13 has an invalid length. [ 1821.306553][ T1331] netlink: 160 bytes leftover after parsing attributes in process `syz.5.9260'. [ 1821.517282][ T1333] netlink: 'syz.1.9265': attribute type 3 has an invalid length. [ 1821.545963][ T1333] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9265'. [ 1821.570114][ T1337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9266'. [ 1821.603285][ T1337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9266'. [ 1821.670107][ T1337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9266'. [ 1821.733703][ T1342] netlink: 'syz.5.9268': attribute type 3 has an invalid length. [ 1821.770806][ T1342] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9268'. [ 1822.559637][ T1349] device veth0_vlan left promiscuous mode [ 1822.595528][ T1349] device veth0_vlan entered promiscuous mode [ 1822.837834][T13907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1822.847949][T13907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1822.856204][T13907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1822.865253][T13907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1822.873231][T13907] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1822.880798][T13907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1823.354459][ T9472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.397870][ T1361] chnl_net:caif_netlink_parms(): no params data found [ 1823.425754][ T1375] netlink: 830 bytes leftover after parsing attributes in process `syz.5.9278'. [ 1823.529593][ T9472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.553253][ T1378] netlink: 'syz.0.9279': attribute type 27 has an invalid length. [ 1823.849235][ T1378] bond0: (slave bond_slave_0): Releasing backup interface [ 1823.886412][ T1386] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.9282'. [ 1824.297505][ T9472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.313717][ T1386] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1824.340797][ T1386] CPU: 0 PID: 1386 Comm: syz.5.9282 Not tainted syzkaller #0 [ 1824.348287][ T1386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1824.358407][ T1386] Call Trace: [ 1824.361727][ T1386] [ 1824.364702][ T1386] dump_stack_lvl+0x188/0x24e [ 1824.369437][ T1386] ? show_regs_print_info+0x12/0x12 [ 1824.374689][ T1386] ? load_image+0x400/0x400 [ 1824.379253][ T1386] sysfs_warn_dup+0x8a/0xa0 [ 1824.383811][ T1386] sysfs_do_create_link_sd+0xc0/0x110 [ 1824.389236][ T1386] device_add+0x7ed/0xfb0 [ 1824.393656][ T1386] wiphy_register+0x1d9f/0x2ac0 [ 1824.398604][ T1386] ? cfg80211_event_work+0x40/0x40 [ 1824.403869][ T1386] ? minstrel_ht_alloc+0x894/0xa20 [ 1824.409071][ T1386] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1824.415196][ T1386] ieee80211_register_hw+0x2d00/0x39f0 [ 1824.420726][ T1386] ? ieee80211_register_hw+0xee1/0x39f0 [ 1824.426322][ T1386] ? ieee80211_register_hw+0xee1/0x39f0 [ 1824.431935][ T1386] ? ieee80211_tasklet_handler+0x20/0x20 [ 1824.437636][ T1386] ? memset+0x1e/0x40 [ 1824.441667][ T1386] ? __hrtimer_init+0x186/0x270 [ 1824.446571][ T1386] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1824.452383][ T1386] hwsim_new_radio_nl+0xafa/0xce0 [ 1824.457487][ T1386] genl_family_rcv_msg_doit+0x22a/0x330 [ 1824.463078][ T1386] ? end_current_label_crit_section+0x170/0x170 [ 1824.469381][ T1386] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1824.475350][ T1386] ? bpf_lsm_capable+0x5/0x10 [ 1824.480114][ T1386] ? security_capable+0x85/0xb0 [ 1824.485033][ T1386] genl_rcv_msg+0x604/0x790 [ 1824.489611][ T1386] ? genl_bind+0x360/0x360 [ 1824.494074][ T1386] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1824.500499][ T1386] netlink_rcv_skb+0x1fb/0x450 [ 1824.505320][ T1386] ? genl_bind+0x360/0x360 [ 1824.509782][ T1386] ? netlink_ack+0x1170/0x1170 [ 1824.514613][ T1386] ? down_read+0x1a8/0x2d0 [ 1824.519095][ T1386] genl_rcv+0x24/0x40 [ 1824.523126][ T1386] netlink_unicast+0x74d/0x8d0 [ 1824.527961][ T1386] netlink_sendmsg+0x8ad/0xbd0 [ 1824.532796][ T1386] ? netlink_getsockopt+0x550/0x550 [ 1824.538071][ T1386] ? aa_sock_msg_perm+0x94/0x150 [ 1824.543065][ T1386] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1824.548406][ T1386] ? security_socket_sendmsg+0x7c/0xa0 [ 1824.553938][ T1386] ? netlink_getsockopt+0x550/0x550 [ 1824.559209][ T1386] ____sys_sendmsg+0x5be/0x970 [ 1824.564063][ T1386] ? __sys_sendmsg_sock+0x30/0x30 [ 1824.569167][ T1386] ? __import_iovec+0x315/0x500 [ 1824.574091][ T1386] ? import_iovec+0x6f/0xa0 [ 1824.578650][ T1386] ___sys_sendmsg+0x2a2/0x360 [ 1824.583394][ T1386] ? __sys_sendmsg+0x290/0x290 [ 1824.588262][ T1386] ? trace_call_bpf+0xbf/0x6b0 [ 1824.593116][ T1386] __se_sys_sendmsg+0x1bb/0x2a0 [ 1824.598027][ T1386] ? ct_nmi_exit+0x145/0x1c0 [ 1824.602675][ T1386] ? __x64_sys_sendmsg+0x80/0x80 [ 1824.607689][ T1386] ? lockdep_hardirqs_on+0x94/0x140 [ 1824.612947][ T1386] do_syscall_64+0x4c/0xa0 [ 1824.617427][ T1386] ? clear_bhb_loop+0x60/0xb0 [ 1824.622154][ T1386] ? clear_bhb_loop+0x60/0xb0 [ 1824.626903][ T1386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.632862][ T1386] RIP: 0033:0x7fecb959c799 [ 1824.637328][ T1386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.656994][ T1386] RSP: 002b:00007fecb77f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.665490][ T1386] RAX: ffffffffffffffda RBX: 00007fecb9816090 RCX: 00007fecb959c799 [ 1824.673529][ T1386] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1824.681552][ T1386] RBP: 00007fecb9632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1824.689576][ T1386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1824.697593][ T1386] R13: 00007fecb9816128 R14: 00007fecb9816090 R15: 00007ffd254f80e8 [ 1824.705634][ T1386] [ 1824.844638][ T9472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.901148][ T1361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.908568][ T1361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.917216][ T1361] device bridge_slave_0 entered promiscuous mode [ 1824.926845][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.934238][ T1361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.943432][ T1361] device bridge_slave_1 entered promiscuous mode [ 1824.951302][T13907] Bluetooth: hci4: command 0x0409 tx timeout [ 1825.046177][ T1361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1825.107280][ T1361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1825.301200][ T1361] team0: Port device team_slave_0 added [ 1825.364299][ T1361] team0: Port device team_slave_1 added [ 1825.373798][ T1417] sock: sock_set_timeout: `syz.2.9294' (pid 1417) tries to set negative timeout [ 1825.495705][ T9472] device 0 left promiscuous mode [ 1825.667749][ T1361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1825.700581][ T1361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1825.778299][ T1361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.056775][ T1361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.084334][ T1361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.187730][ T1361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.917731][ T1361] device hsr_slave_0 entered promiscuous mode [ 1826.935575][ T1361] device hsr_slave_1 entered promiscuous mode [ 1826.961796][ T1361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1826.979854][ T1361] Cannot create hsr debugfs directory [ 1827.027793][ T1463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9303'. [ 1827.037034][T13907] Bluetooth: hci4: command 0x041b tx timeout [ 1829.113676][T13907] Bluetooth: hci4: command 0x040f tx timeout [ 1829.526476][ T9472] team0: Port device wlan1 removed [ 1829.591991][ T1505] netlink: 'syz.5.9316': attribute type 27 has an invalid length. [ 1830.179998][ T9472] device hsr_slave_0 left promiscuous mode [ 1830.230241][ T9472] device hsr_slave_1 left promiscuous mode [ 1830.297102][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.374328][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.401830][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.420700][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.693191][ T9472] device veth1_macvtap left promiscuous mode [ 1830.699422][ T9472] device veth0_macvtap left promiscuous mode [ 1830.762128][ T9472] device veth1_vlan left promiscuous mode [ 1830.788302][ T9472] device veth0_vlan left promiscuous mode [ 1831.190588][T13907] Bluetooth: hci4: command 0x0419 tx timeout [ 1833.088074][ T9472] team0 (unregistering): Port device team_slave_1 removed [ 1833.206589][ T9472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1833.280183][ T9472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1833.749847][ T9472] bond0 (unregistering): (slave team0): Releasing backup interface [ 1833.795934][ T9472] bond0 (unregistering): Released all slaves [ 1833.861949][ T1520] netlink: 'syz.0.9322': attribute type 46 has an invalid length. [ 1833.911556][ T1567] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1833.930684][ T1568] netlink: 'syz.2.9335': attribute type 27 has an invalid length. [ 1833.961457][ T1567] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1834.020128][ T1567] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1834.070017][ T1361] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1834.111123][ T1361] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1834.151094][ T1361] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1834.192789][ T1361] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1834.553375][ T1361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1834.620582][T15729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1834.653653][T15729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1834.709150][ T1361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1834.774932][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1834.788757][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1834.808560][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.815866][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1834.857149][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1834.913958][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1834.949327][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1835.009308][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.016560][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.084022][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1835.140596][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1835.163310][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1835.243868][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1835.271755][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1835.295315][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1835.326436][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1835.358742][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1835.398380][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1835.454808][ T1361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1835.479237][ T1361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1835.500147][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1835.529122][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1836.575639][ T1648] netlink: 'syz.0.9359': attribute type 3 has an invalid length. [ 1836.629370][ T1648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1836.686623][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1836.697652][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1836.734215][ T1361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1836.814544][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1836.851394][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1836.966455][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1836.981340][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1837.010327][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1837.056820][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1837.096209][ T1361] device veth0_vlan entered promiscuous mode [ 1837.128685][ T1361] device veth1_vlan entered promiscuous mode [ 1837.264240][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1837.341350][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1837.378594][ T1361] device veth0_macvtap entered promiscuous mode [ 1837.441380][ T1361] device veth1_macvtap entered promiscuous mode [ 1837.562916][ T1361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1837.613371][ T1361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.633701][ T1361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1837.654668][ T1361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.677535][ T1361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1837.699415][ T1361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.742770][ T1361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.775208][T15729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1837.793924][T15729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1837.834360][T15729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1837.862209][T15729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1837.903090][ T1361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1837.946642][ T1361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.997897][ T1361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1838.029190][ T1361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1838.070195][ T1361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1838.098173][ T1361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1838.117077][ T1361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1838.128112][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1838.143809][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1838.157680][ T1685] netlink: 'syz.5.9371': attribute type 10 has an invalid length. [ 1838.172032][ T1361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.197153][ T1361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.226226][ T1361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.249601][ T1361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.528572][T15729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.545463][T15729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.580658][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1838.663362][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.680576][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.688249][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1839.212076][ T1717] netlink: 'syz.0.9379': attribute type 10 has an invalid length. [ 1841.288290][T13907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1841.299052][T13907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1841.308924][T13907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1841.321606][T13907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1841.363696][T13907] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1841.378063][T13907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1841.415012][ T1717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1841.426015][ T1717] bond0: (slave team0): Enslaving as an active interface with an up link [ 1841.961288][ T1745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9386'. [ 1841.992639][ T1746] netlink: 'syz.5.9387': attribute type 10 has an invalid length. [ 1842.031328][ T1747] netlink: 'syz.0.9386': attribute type 10 has an invalid length. [ 1842.145310][ T1745] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.9386'. [ 1842.444861][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.669684][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.716989][ T1762] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.9391'. [ 1842.738716][ T1760] IPv6: NLM_F_CREATE should be specified when creating new route [ 1842.757398][ T1760] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9390'. [ 1842.865803][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.885957][ T1733] chnl_net:caif_netlink_parms(): no params data found [ 1842.937892][ T1762] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1842.963278][ T1762] CPU: 1 PID: 1762 Comm: syz.5.9391 Not tainted syzkaller #0 [ 1842.970757][ T1762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1842.980890][ T1762] Call Trace: [ 1842.984218][ T1762] [ 1842.987189][ T1762] dump_stack_lvl+0x188/0x24e [ 1842.991932][ T1762] ? show_regs_print_info+0x12/0x12 [ 1842.997198][ T1762] ? load_image+0x400/0x400 [ 1843.001768][ T1762] sysfs_warn_dup+0x8a/0xa0 [ 1843.006341][ T1762] sysfs_do_create_link_sd+0xc0/0x110 [ 1843.011897][ T1762] device_add+0x7ed/0xfb0 [ 1843.016313][ T1762] wiphy_register+0x1d9f/0x2ac0 [ 1843.021257][ T1762] ? cfg80211_event_work+0x40/0x40 [ 1843.026426][ T1762] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1843.032912][ T1762] ? rtnl_unlock+0x5/0x10 [ 1843.037345][ T1762] ieee80211_register_hw+0x2d00/0x39f0 [ 1843.042886][ T1762] ? ieee80211_register_hw+0xee1/0x39f0 [ 1843.048484][ T1762] ? ieee80211_register_hw+0xee1/0x39f0 [ 1843.054108][ T1762] ? ieee80211_tasklet_handler+0x20/0x20 [ 1843.059809][ T1762] ? memset+0x1e/0x40 [ 1843.063830][ T1762] ? __hrtimer_init+0x186/0x270 [ 1843.068744][ T1762] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1843.074562][ T1762] hwsim_new_radio_nl+0xafa/0xce0 [ 1843.079664][ T1762] genl_family_rcv_msg_doit+0x22a/0x330 [ 1843.085446][ T1762] ? end_current_label_crit_section+0x170/0x170 [ 1843.091760][ T1762] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1843.097713][ T1762] ? bpf_lsm_capable+0x5/0x10 [ 1843.102451][ T1762] ? security_capable+0x85/0xb0 [ 1843.107407][ T1762] genl_rcv_msg+0x604/0x790 [ 1843.111983][ T1762] ? genl_bind+0x360/0x360 [ 1843.116453][ T1762] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1843.122866][ T1762] netlink_rcv_skb+0x1fb/0x450 [ 1843.127695][ T1762] ? genl_bind+0x360/0x360 [ 1843.132170][ T1762] ? netlink_ack+0x1170/0x1170 [ 1843.137026][ T1762] ? down_read+0x1a8/0x2d0 [ 1843.141535][ T1762] genl_rcv+0x24/0x40 [ 1843.145562][ T1762] netlink_unicast+0x74d/0x8d0 [ 1843.150396][ T1762] netlink_sendmsg+0x8ad/0xbd0 [ 1843.155222][ T1762] ? netlink_getsockopt+0x550/0x550 [ 1843.160481][ T1762] ? __sanitizer_cov_trace_pc+0x2c/0x60 [ 1843.166095][ T1762] ? aa_sock_msg_perm+0x94/0x150 [ 1843.171089][ T1762] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1843.176462][ T1762] ? security_socket_sendmsg+0x7c/0xa0 [ 1843.181998][ T1762] ? netlink_getsockopt+0x550/0x550 [ 1843.187284][ T1762] ____sys_sendmsg+0x5be/0x970 [ 1843.192124][ T1762] ? __sys_sendmsg_sock+0x30/0x30 [ 1843.197216][ T1762] ? __import_iovec+0x315/0x500 [ 1843.202131][ T1762] ? import_iovec+0x6f/0xa0 [ 1843.206700][ T1762] ___sys_sendmsg+0x2a2/0x360 [ 1843.211438][ T1762] ? try_to_wake_up+0x6ae/0x1080 [ 1843.216449][ T1762] ? __sys_sendmsg+0x290/0x290 [ 1843.221307][ T1762] ? ktime_get_real_ts64+0x440/0x440 [ 1843.226676][ T1762] __se_sys_sendmsg+0x1bb/0x2a0 [ 1843.231688][ T1762] ? __x64_sys_sendmsg+0x80/0x80 [ 1843.236707][ T1762] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1843.242661][ T1762] do_syscall_64+0x4c/0xa0 [ 1843.247152][ T1762] ? clear_bhb_loop+0x60/0xb0 [ 1843.251898][ T1762] ? clear_bhb_loop+0x60/0xb0 [ 1843.256647][ T1762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1843.262620][ T1762] RIP: 0033:0x7fecb959c799 [ 1843.267106][ T1762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.286774][ T1762] RSP: 002b:00007fecba385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1843.295251][ T1762] RAX: ffffffffffffffda RBX: 00007fecb9815fa0 RCX: 00007fecb959c799 [ 1843.303273][ T1762] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1843.311296][ T1762] RBP: 00007fecb9632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1843.319318][ T1762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1843.327323][ T1762] R13: 00007fecb9816038 R14: 00007fecb9815fa0 R15: 00007ffd254f80e8 [ 1843.335357][ T1762] [ 1843.511156][T32378] Bluetooth: hci5: command 0x0409 tx timeout [ 1844.002681][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.387078][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.400743][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.409799][ T1733] device bridge_slave_0 entered promiscuous mode [ 1844.478266][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.503545][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.573313][ T1733] device bridge_slave_1 entered promiscuous mode [ 1844.606015][ T63] device 0 left promiscuous mode [ 1844.813676][ T1733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.627070][T13907] Bluetooth: hci5: command 0x041b tx timeout [ 1847.497593][ T1733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.670620][T32378] Bluetooth: hci5: command 0x040f tx timeout [ 1847.870892][ T1825] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9412'. [ 1847.886237][ T1733] team0: Port device team_slave_0 added [ 1847.895743][ T1733] team0: Port device team_slave_1 added [ 1848.626681][ T1733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1848.667553][ T1733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1848.806060][ T1733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1849.023901][ T1733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1849.053169][ T1733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1849.420988][ T1733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1849.696368][ T1855] netlink: 'syz.3.9418': attribute type 10 has an invalid length. [ 1849.750741][T32378] Bluetooth: hci5: command 0x0419 tx timeout [ 1850.049551][ T1733] device hsr_slave_0 entered promiscuous mode [ 1850.099533][ T1733] device hsr_slave_1 entered promiscuous mode [ 1850.131744][ T1733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1850.159908][ T1733] Cannot create hsr debugfs directory [ 1850.508494][ T1880] netlink: 'syz.0.9425': attribute type 2 has an invalid length. [ 1850.531411][ T1880] netlink: 'syz.0.9425': attribute type 8 has an invalid length. [ 1850.547580][ T1880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1850.743599][ T1880] device sit0 entered promiscuous mode [ 1851.781563][ T1912] netlink: 'syz.0.9432': attribute type 3 has an invalid length. [ 1851.789400][ T1912] netlink: 'syz.0.9432': attribute type 1 has an invalid length. [ 1851.870520][ T1912] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1851.909182][ T1916] netlink: 'syz.5.9431': attribute type 2 has an invalid length. [ 1851.960612][ T1916] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.9431'. [ 1852.199237][ T1921] netlink: 'syz.0.9433': attribute type 3 has an invalid length. [ 1852.224712][ T1921] netlink: 'syz.0.9433': attribute type 1 has an invalid length. [ 1852.247475][ T1921] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.9433'. [ 1853.115872][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.122309][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.458191][ T63] device hsr_slave_0 left promiscuous mode [ 1853.478778][ T63] device hsr_slave_1 left promiscuous mode [ 1853.558492][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1853.630180][ T1953] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1853.660898][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1853.691658][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1853.699207][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1853.791869][ T63] device veth1_macvtap left promiscuous mode [ 1853.798015][ T63] device veth0_macvtap left promiscuous mode [ 1853.835441][ T63] device veth1_vlan left promiscuous mode [ 1853.849945][ T63] device veth0_vlan left promiscuous mode [ 1858.467078][ T1953] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1858.479394][ T1953] CPU: 1 PID: 1953 Comm: syz.3.9441 Not tainted syzkaller #0 [ 1858.486842][ T1953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1858.496954][ T1953] Call Trace: [ 1858.500246][ T1953] [ 1858.503186][ T1953] dump_stack_lvl+0x188/0x24e [ 1858.507884][ T1953] ? show_regs_print_info+0x12/0x12 [ 1858.513099][ T1953] ? load_image+0x400/0x400 [ 1858.517621][ T1953] sysfs_warn_dup+0x8a/0xa0 [ 1858.522141][ T1953] sysfs_do_create_link_sd+0xc0/0x110 [ 1858.527555][ T1953] device_add+0x7ed/0xfb0 [ 1858.531921][ T1953] wiphy_register+0x1d9f/0x2ac0 [ 1858.536834][ T1953] ? cfg80211_event_work+0x40/0x40 [ 1858.541997][ T1953] ? minstrel_ht_alloc+0x894/0xa20 [ 1858.547133][ T1953] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1858.553219][ T1953] ieee80211_register_hw+0x2d00/0x39f0 [ 1858.558735][ T1953] ? ieee80211_register_hw+0xee1/0x39f0 [ 1858.564296][ T1953] ? ieee80211_register_hw+0xee1/0x39f0 [ 1858.569881][ T1953] ? ieee80211_tasklet_handler+0x20/0x20 [ 1858.575543][ T1953] ? memset+0x1e/0x40 [ 1858.579535][ T1953] ? __hrtimer_init+0x186/0x270 [ 1858.584405][ T1953] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1858.590158][ T1953] hwsim_new_radio_nl+0xafa/0xce0 [ 1858.595211][ T1953] genl_family_rcv_msg_doit+0x22a/0x330 [ 1858.600821][ T1953] ? end_current_label_crit_section+0x170/0x170 [ 1858.607118][ T1953] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1858.613035][ T1953] ? bpf_lsm_capable+0x5/0x10 [ 1858.617727][ T1953] ? security_capable+0x85/0xb0 [ 1858.622633][ T1953] genl_rcv_msg+0x604/0x790 [ 1858.627148][ T1953] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1858.633347][ T1953] ? genl_bind+0x360/0x360 [ 1858.637772][ T1953] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1858.644129][ T1953] ? lock_acquire+0x225/0x4a0 [ 1858.648833][ T1953] netlink_rcv_skb+0x1fb/0x450 [ 1858.653641][ T1953] ? genl_bind+0x360/0x360 [ 1858.658086][ T1953] ? netlink_ack+0x1170/0x1170 [ 1858.662875][ T1953] ? down_read+0x1a8/0x2d0 [ 1858.667316][ T1953] genl_rcv+0x24/0x40 [ 1858.671303][ T1953] netlink_unicast+0x74d/0x8d0 [ 1858.676090][ T1953] netlink_sendmsg+0x8ad/0xbd0 [ 1858.680882][ T1953] ? netlink_getsockopt+0x550/0x550 [ 1858.686096][ T1953] ? aa_sock_msg_perm+0x94/0x150 [ 1858.691040][ T1953] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1858.696334][ T1953] ? security_socket_sendmsg+0x7c/0xa0 [ 1858.701837][ T1953] ? netlink_getsockopt+0x550/0x550 [ 1858.707051][ T1953] ____sys_sendmsg+0x5be/0x970 [ 1858.711840][ T1953] ? __sys_sendmsg_sock+0x30/0x30 [ 1858.716877][ T1953] ? __import_iovec+0x315/0x500 [ 1858.721744][ T1953] ? import_iovec+0x6f/0xa0 [ 1858.726276][ T1953] ___sys_sendmsg+0x2a2/0x360 [ 1858.730971][ T1953] ? try_to_wake_up+0x6ae/0x1080 [ 1858.735926][ T1953] ? __sys_sendmsg+0x290/0x290 [ 1858.740725][ T1953] ? ktime_get_real_ts64+0x440/0x440 [ 1858.746045][ T1953] __se_sys_sendmsg+0x1bb/0x2a0 [ 1858.750927][ T1953] ? ct_nmi_exit+0x145/0x1c0 [ 1858.755555][ T1953] ? __x64_sys_sendmsg+0x80/0x80 [ 1858.760559][ T1953] ? lockdep_hardirqs_on+0x94/0x140 [ 1858.765791][ T1953] do_syscall_64+0x4c/0xa0 [ 1858.770276][ T1953] ? clear_bhb_loop+0x60/0xb0 [ 1858.774993][ T1953] ? clear_bhb_loop+0x60/0xb0 [ 1858.779697][ T1953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1858.785610][ T1953] RIP: 0033:0x7f4c8819c799 [ 1858.790056][ T1953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.809684][ T1953] RSP: 002b:00007f4c89103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1858.818138][ T1953] RAX: ffffffffffffffda RBX: 00007f4c88415fa0 RCX: 00007f4c8819c799 [ 1858.826154][ T1953] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1858.834152][ T1953] RBP: 00007f4c88232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1858.842146][ T1953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1858.850138][ T1953] R13: 00007f4c88416038 R14: 00007f4c88415fa0 R15: 00007fff184669a8 [ 1858.858138][ T1953] [ 1858.890614][ T1951] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9442'. [ 1858.942437][ T1951] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1859.007417][ T1966] netlink: 'syz.2.9446': attribute type 3 has an invalid length. [ 1859.027469][ T1966] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9446'. [ 1859.255531][ T1976] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.9448'. [ 1859.362289][ T1733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1859.414702][ T1733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1859.450922][ T1733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1859.509883][ T1733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1859.972322][ T1733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1860.054535][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1860.082966][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1860.140542][ T1733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1860.178486][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1860.210142][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1860.253820][T28810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1860.261041][T28810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1860.321985][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1860.340829][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1860.360212][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1860.379290][T28810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.386633][T28810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1860.422899][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1860.493925][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1860.528535][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1860.547590][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1860.579171][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1860.597845][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1860.608411][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1860.636130][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1860.645902][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1860.688983][ T1733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1860.739233][ T1733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1860.752661][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1860.764245][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1860.892600][ T2002] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.9453'. [ 1862.008088][ T2021] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.9457'. [ 1862.056034][ T2026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9458'. [ 1862.169892][ T2021] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1862.260844][ T2021] CPU: 0 PID: 2021 Comm: syz.5.9457 Not tainted syzkaller #0 [ 1862.268416][ T2021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1862.278530][ T2021] Call Trace: [ 1862.281872][ T2021] [ 1862.284862][ T2021] dump_stack_lvl+0x188/0x24e [ 1862.289606][ T2021] ? show_regs_print_info+0x12/0x12 [ 1862.294869][ T2021] ? load_image+0x400/0x400 [ 1862.299480][ T2021] sysfs_warn_dup+0x8a/0xa0 [ 1862.304055][ T2021] sysfs_do_create_link_sd+0xc0/0x110 [ 1862.309499][ T2021] device_add+0x7ed/0xfb0 [ 1862.313914][ T2021] wiphy_register+0x1d9f/0x2ac0 [ 1862.318847][ T2021] ? cfg80211_event_work+0x40/0x40 [ 1862.324021][ T2021] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1862.330246][ T2021] ? ieee80211_register_hw+0x2b34/0x39f0 [ 1862.335954][ T2021] ieee80211_register_hw+0x2d00/0x39f0 [ 1862.341490][ T2021] ? lockdep_hardirqs_on+0x94/0x140 [ 1862.346792][ T2021] ? ieee80211_register_hw+0xee1/0x39f0 [ 1862.352416][ T2021] ? ieee80211_register_hw+0xee1/0x39f0 [ 1862.358042][ T2021] ? ieee80211_tasklet_handler+0x20/0x20 [ 1862.363749][ T2021] ? memset+0x1e/0x40 [ 1862.367785][ T2021] ? __hrtimer_init+0x186/0x270 [ 1862.372714][ T2021] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1862.378523][ T2021] hwsim_new_radio_nl+0xafa/0xce0 [ 1862.383625][ T2021] genl_family_rcv_msg_doit+0x22a/0x330 [ 1862.389232][ T2021] ? end_current_label_crit_section+0x170/0x170 [ 1862.395548][ T2021] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1862.401505][ T2021] ? bpf_lsm_capable+0x5/0x10 [ 1862.406234][ T2021] ? security_capable+0x85/0xb0 [ 1862.411155][ T2021] genl_rcv_msg+0x604/0x790 [ 1862.415714][ T2021] ? genl_bind+0x360/0x360 [ 1862.420175][ T2021] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1862.426604][ T2021] netlink_rcv_skb+0x1fb/0x450 [ 1862.431464][ T2021] ? genl_bind+0x360/0x360 [ 1862.435931][ T2021] ? netlink_ack+0x1170/0x1170 [ 1862.440753][ T2021] ? down_read+0x1a8/0x2d0 [ 1862.445356][ T2021] genl_rcv+0x24/0x40 [ 1862.449378][ T2021] netlink_unicast+0x74d/0x8d0 [ 1862.454185][ T2021] netlink_sendmsg+0x8ad/0xbd0 [ 1862.459072][ T2021] ? lockdep_hardirqs_on+0x94/0x140 [ 1862.464335][ T2021] ? netlink_getsockopt+0x550/0x550 [ 1862.469603][ T2021] ? bpf_lsm_socket_accept+0x10/0x10 [ 1862.474937][ T2021] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1862.480268][ T2021] ? security_socket_sendmsg+0x7c/0xa0 [ 1862.485780][ T2021] ? netlink_getsockopt+0x550/0x550 [ 1862.491020][ T2021] ____sys_sendmsg+0x5be/0x970 [ 1862.495855][ T2021] ? __sys_sendmsg_sock+0x30/0x30 [ 1862.500931][ T2021] ? __import_iovec+0x315/0x500 [ 1862.505835][ T2021] ? import_iovec+0x6f/0xa0 [ 1862.510384][ T2021] ___sys_sendmsg+0x2a2/0x360 [ 1862.515122][ T2021] ? __sys_sendmsg+0x290/0x290 [ 1862.519943][ T2021] ? ktime_get_real_ts64+0x440/0x440 [ 1862.525290][ T2021] __se_sys_sendmsg+0x1bb/0x2a0 [ 1862.530177][ T2021] ? ct_nmi_exit+0x145/0x1c0 [ 1862.534794][ T2021] ? __x64_sys_sendmsg+0x80/0x80 [ 1862.539806][ T2021] ? lockdep_hardirqs_on+0x94/0x140 [ 1862.545045][ T2021] do_syscall_64+0x4c/0xa0 [ 1862.549497][ T2021] ? clear_bhb_loop+0x60/0xb0 [ 1862.554204][ T2021] ? clear_bhb_loop+0x60/0xb0 [ 1862.558910][ T2021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1862.564834][ T2021] RIP: 0033:0x7fecb959c799 [ 1862.569275][ T2021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.588935][ T2021] RSP: 002b:00007fecba385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1862.597390][ T2021] RAX: ffffffffffffffda RBX: 00007fecb9815fa0 RCX: 00007fecb959c799 [ 1862.605398][ T2021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1862.613407][ T2021] RBP: 00007fecb9632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1862.621420][ T2021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1862.629419][ T2021] R13: 00007fecb9816038 R14: 00007fecb9815fa0 R15: 00007ffd254f80e8 [ 1862.637438][ T2021] [ 1862.794648][T31485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1862.823211][T31485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1862.869581][ T2040] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9459'. [ 1862.970147][ T1733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.012733][ T2040] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1863.030783][ T2040] CPU: 0 PID: 2040 Comm: syz.3.9459 Not tainted syzkaller #0 [ 1863.038249][ T2040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1863.048363][ T2040] Call Trace: [ 1863.051720][ T2040] [ 1863.054708][ T2040] dump_stack_lvl+0x188/0x24e [ 1863.059445][ T2040] ? show_regs_print_info+0x12/0x12 [ 1863.064701][ T2040] ? load_image+0x400/0x400 [ 1863.069279][ T2040] sysfs_warn_dup+0x8a/0xa0 [ 1863.073834][ T2040] sysfs_do_create_link_sd+0xc0/0x110 [ 1863.079272][ T2040] device_add+0x7ed/0xfb0 [ 1863.083679][ T2040] wiphy_register+0x1d9f/0x2ac0 [ 1863.088629][ T2040] ? cfg80211_event_work+0x40/0x40 [ 1863.093816][ T2040] ? minstrel_ht_alloc+0x894/0xa20 [ 1863.099012][ T2040] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1863.105143][ T2040] ieee80211_register_hw+0x2d00/0x39f0 [ 1863.110678][ T2040] ? ieee80211_register_hw+0xee1/0x39f0 [ 1863.116280][ T2040] ? ieee80211_register_hw+0xee1/0x39f0 [ 1863.121914][ T2040] ? ieee80211_tasklet_handler+0x20/0x20 [ 1863.127617][ T2040] ? memset+0x1e/0x40 [ 1863.131647][ T2040] ? __hrtimer_init+0x186/0x270 [ 1863.136554][ T2040] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1863.142380][ T2040] hwsim_new_radio_nl+0xafa/0xce0 [ 1863.147490][ T2040] genl_family_rcv_msg_doit+0x22a/0x330 [ 1863.153084][ T2040] ? end_current_label_crit_section+0x170/0x170 [ 1863.159398][ T2040] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1863.165359][ T2040] ? bpf_lsm_capable+0x5/0x10 [ 1863.170094][ T2040] ? security_capable+0x85/0xb0 [ 1863.175009][ T2040] genl_rcv_msg+0x604/0x790 [ 1863.179569][ T2040] ? genl_bind+0x360/0x360 [ 1863.184032][ T2040] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1863.190450][ T2040] netlink_rcv_skb+0x1fb/0x450 [ 1863.195289][ T2040] ? genl_bind+0x360/0x360 [ 1863.199746][ T2040] ? netlink_ack+0x1170/0x1170 [ 1863.204575][ T2040] ? down_read+0x1a8/0x2d0 [ 1863.209066][ T2040] genl_rcv+0x24/0x40 [ 1863.213098][ T2040] netlink_unicast+0x74d/0x8d0 [ 1863.217943][ T2040] netlink_sendmsg+0x8ad/0xbd0 [ 1863.222769][ T2040] ? netlink_getsockopt+0x550/0x550 [ 1863.228027][ T2040] ? aa_sock_msg_perm+0x94/0x150 [ 1863.233029][ T2040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1863.238377][ T2040] ? security_socket_sendmsg+0x7c/0xa0 [ 1863.243905][ T2040] ? netlink_getsockopt+0x550/0x550 [ 1863.249174][ T2040] ____sys_sendmsg+0x5be/0x970 [ 1863.254005][ T2040] ? __sys_sendmsg_sock+0x30/0x30 [ 1863.259087][ T2040] ? __import_iovec+0x315/0x500 [ 1863.264000][ T2040] ? import_iovec+0x6f/0xa0 [ 1863.268570][ T2040] ___sys_sendmsg+0x2a2/0x360 [ 1863.273307][ T2040] ? try_to_wake_up+0x6ae/0x1080 [ 1863.278307][ T2040] ? __sys_sendmsg+0x290/0x290 [ 1863.283208][ T2040] __se_sys_sendmsg+0x1bb/0x2a0 [ 1863.288128][ T2040] ? ct_nmi_exit+0x145/0x1c0 [ 1863.292788][ T2040] ? __x64_sys_sendmsg+0x80/0x80 [ 1863.297807][ T2040] ? lockdep_hardirqs_on+0x94/0x140 [ 1863.303071][ T2040] do_syscall_64+0x4c/0xa0 [ 1863.307551][ T2040] ? clear_bhb_loop+0x60/0xb0 [ 1863.312278][ T2040] ? clear_bhb_loop+0x60/0xb0 [ 1863.317022][ T2040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.322973][ T2040] RIP: 0033:0x7f4c8819c799 [ 1863.327440][ T2040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.347102][ T2040] RSP: 002b:00007f4c890e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1863.355588][ T2040] RAX: ffffffffffffffda RBX: 00007f4c88416090 RCX: 00007f4c8819c799 [ 1863.363617][ T2040] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1863.371645][ T2040] RBP: 00007f4c88232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1863.379672][ T2040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1863.387690][ T2040] R13: 00007f4c88416128 R14: 00007f4c88416090 R15: 00007fff184669a8 [ 1863.395735][ T2040] [ 1863.539534][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1863.558843][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1863.629940][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1863.661685][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1863.682326][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1863.711145][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1863.740697][ T1733] device veth0_vlan entered promiscuous mode [ 1863.803354][ T1733] device veth1_vlan entered promiscuous mode [ 1863.838231][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1863.939760][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1863.961490][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1863.993209][ T1733] device veth0_macvtap entered promiscuous mode [ 1864.011782][ T1733] device veth1_macvtap entered promiscuous mode [ 1864.158395][ T2052] device syzkaller0 entered promiscuous mode [ 1864.213482][ T1733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1864.243970][ T1733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.265534][ T1733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1864.296747][ T1733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.334120][ T1733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1864.368886][ T1733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.414690][ T1733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1864.450091][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1864.473938][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1864.504576][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1864.521688][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1864.558261][ T1733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1864.581892][ T1733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.620608][ T1733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1864.660553][ T1733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.701876][ T1733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1864.733339][ T1733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.767490][ T1733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1864.797658][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1864.829625][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1865.440645][T13907] Bluetooth: hci3: command 0x0406 tx timeout [ 1866.463476][ T2084] netlink: 'syz.2.9473': attribute type 29 has an invalid length. [ 1868.609049][ T1733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.620650][ T1733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.629497][ T1733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.645692][ T1733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.658464][ T2069] netlink: 'syz.3.9466': attribute type 21 has an invalid length. [ 1868.676247][ T2073] netlink: 'syz.3.9466': attribute type 10 has an invalid length. [ 1868.739369][ T2073] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1868.766452][ T2078] netlink: 'syz.0.9470': attribute type 10 has an invalid length. [ 1868.790882][ T2084] netlink: 'syz.2.9473': attribute type 29 has an invalid length. [ 1868.801714][ T2085] netlink: 'syz.2.9473': attribute type 29 has an invalid length. [ 1869.058852][T31481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.095827][T31481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.151072][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1869.205393][T31481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1869.227437][T31481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1869.279189][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1869.610790][ T2110] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.9477'. [ 1869.751652][ T2110] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1869.759495][ T2110] CPU: 1 PID: 2110 Comm: syz.5.9477 Not tainted syzkaller #0 [ 1869.766935][ T2110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1869.777045][ T2110] Call Trace: [ 1869.780364][ T2110] [ 1869.783347][ T2110] dump_stack_lvl+0x188/0x24e [ 1869.788106][ T2110] ? show_regs_print_info+0x12/0x12 [ 1869.793369][ T2110] ? load_image+0x400/0x400 [ 1869.797960][ T2110] sysfs_warn_dup+0x8a/0xa0 [ 1869.802531][ T2110] sysfs_do_create_link_sd+0xc0/0x110 [ 1869.807968][ T2110] device_add+0x7ed/0xfb0 [ 1869.812385][ T2110] wiphy_register+0x1d9f/0x2ac0 [ 1869.817320][ T2110] ? cfg80211_event_work+0x40/0x40 [ 1869.822494][ T2110] ? minstrel_ht_alloc+0x894/0xa20 [ 1869.827672][ T2110] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1869.833802][ T2110] ieee80211_register_hw+0x2d00/0x39f0 [ 1869.839329][ T2110] ? ieee80211_register_hw+0xee1/0x39f0 [ 1869.844929][ T2110] ? ieee80211_register_hw+0xee1/0x39f0 [ 1869.850560][ T2110] ? ieee80211_tasklet_handler+0x20/0x20 [ 1869.856313][ T2110] ? memset+0x1e/0x40 [ 1869.860353][ T2110] ? __hrtimer_init+0x186/0x270 [ 1869.865277][ T2110] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1869.871095][ T2110] hwsim_new_radio_nl+0xafa/0xce0 [ 1869.876212][ T2110] genl_family_rcv_msg_doit+0x22a/0x330 [ 1869.881809][ T2110] ? end_current_label_crit_section+0x170/0x170 [ 1869.888108][ T2110] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1869.894063][ T2110] ? bpf_lsm_capable+0x5/0x10 [ 1869.898794][ T2110] ? security_capable+0x85/0xb0 [ 1869.903907][ T2110] genl_rcv_msg+0x604/0x790 [ 1869.908506][ T2110] ? genl_bind+0x360/0x360 [ 1869.912986][ T2110] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1869.919402][ T2110] netlink_rcv_skb+0x1fb/0x450 [ 1869.924241][ T2110] ? genl_bind+0x360/0x360 [ 1869.928718][ T2110] ? netlink_ack+0x1170/0x1170 [ 1869.933559][ T2110] ? down_read+0x1a8/0x2d0 [ 1869.938041][ T2110] genl_rcv+0x24/0x40 [ 1869.942084][ T2110] netlink_unicast+0x74d/0x8d0 [ 1869.946921][ T2110] netlink_sendmsg+0x8ad/0xbd0 [ 1869.951766][ T2110] ? netlink_getsockopt+0x550/0x550 [ 1869.957030][ T2110] ? aa_sock_msg_perm+0x94/0x150 [ 1869.962026][ T2110] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1869.967361][ T2110] ? security_socket_sendmsg+0x7c/0xa0 [ 1869.972891][ T2110] ? netlink_getsockopt+0x550/0x550 [ 1869.978159][ T2110] ____sys_sendmsg+0x5be/0x970 [ 1869.983015][ T2110] ? __sys_sendmsg_sock+0x30/0x30 [ 1869.988129][ T2110] ? __import_iovec+0x315/0x500 [ 1869.993077][ T2110] ? import_iovec+0x6f/0xa0 [ 1869.997650][ T2110] ___sys_sendmsg+0x2a2/0x360 [ 1870.002394][ T2110] ? try_to_wake_up+0x67c/0x1080 [ 1870.007410][ T2110] ? __sys_sendmsg+0x290/0x290 [ 1870.012305][ T2110] __se_sys_sendmsg+0x1bb/0x2a0 [ 1870.017224][ T2110] ? ct_nmi_exit+0x145/0x1c0 [ 1870.021878][ T2110] ? __x64_sys_sendmsg+0x80/0x80 [ 1870.026902][ T2110] ? lockdep_hardirqs_on+0x94/0x140 [ 1870.032167][ T2110] do_syscall_64+0x4c/0xa0 [ 1870.036651][ T2110] ? clear_bhb_loop+0x60/0xb0 [ 1870.041392][ T2110] ? clear_bhb_loop+0x60/0xb0 [ 1870.046122][ T2110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1870.052071][ T2110] RIP: 0033:0x7fecb959c799 [ 1870.056539][ T2110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.076221][ T2110] RSP: 002b:00007fecb77f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1870.084694][ T2110] RAX: ffffffffffffffda RBX: 00007fecb9816090 RCX: 00007fecb959c799 [ 1870.092726][ T2110] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1870.100746][ T2110] RBP: 00007fecb9632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1870.108854][ T2110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1870.116872][ T2110] R13: 00007fecb9816128 R14: 00007fecb9816090 R15: 00007ffd254f80e8 [ 1870.125041][ T2110] [ 1870.466177][ T2118] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1870.709360][ T2118] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1871.482555][T32378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1871.492225][T32378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1871.501062][T32378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1871.509221][T32378] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1871.526802][T32378] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1871.535318][T32378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1871.995693][ T2155] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1872.125538][ T2151] netlink: 'syz.0.9490': attribute type 10 has an invalid length. [ 1872.194064][ T2151] device hsr0 entered promiscuous mode [ 1872.245046][ T2151] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1872.329951][ T2155] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1872.371088][ T2137] chnl_net:caif_netlink_parms(): no params data found [ 1872.548717][ T2155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1872.642518][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.661585][ T2137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.704655][ T2137] device bridge_slave_0 entered promiscuous mode [ 1872.718612][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.729667][ T2137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.746493][ T2137] device bridge_slave_1 entered promiscuous mode [ 1872.887755][ T2137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1872.948752][ T2137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.076745][ T2137] team0: Port device team_slave_0 added [ 1873.225811][ T2137] team0: Port device team_slave_1 added [ 1873.381987][ T2137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1873.389784][ T2137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.500849][ T2137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1873.569037][ T2137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1873.592195][T13907] Bluetooth: hci0: command 0x0409 tx timeout [ 1873.670938][ T2137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.716330][ T2182] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9494'. [ 1873.752488][ T2137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1873.986387][ T2137] device hsr_slave_0 entered promiscuous mode [ 1874.042312][ T2137] device hsr_slave_1 entered promiscuous mode [ 1874.135639][ T2137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1874.159917][ T2137] Cannot create hsr debugfs directory [ 1874.217281][ T2182] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1874.235880][ T2182] CPU: 0 PID: 2182 Comm: syz.1.9494 Not tainted syzkaller #0 [ 1874.243342][ T2182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.253430][ T2182] Call Trace: [ 1874.256740][ T2182] [ 1874.259727][ T2182] dump_stack_lvl+0x188/0x24e [ 1874.264452][ T2182] ? show_regs_print_info+0x12/0x12 [ 1874.269696][ T2182] ? load_image+0x400/0x400 [ 1874.274241][ T2182] sysfs_warn_dup+0x8a/0xa0 [ 1874.278785][ T2182] sysfs_do_create_link_sd+0xc0/0x110 [ 1874.284194][ T2182] device_add+0x7ed/0xfb0 [ 1874.288577][ T2182] wiphy_register+0x1d9f/0x2ac0 [ 1874.293486][ T2182] ? cfg80211_event_work+0x40/0x40 [ 1874.298630][ T2182] ? minstrel_ht_alloc+0x894/0xa20 [ 1874.303793][ T2182] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1874.309893][ T2182] ieee80211_register_hw+0x2d00/0x39f0 [ 1874.315408][ T2182] ? ieee80211_register_hw+0xee1/0x39f0 [ 1874.321001][ T2182] ? ieee80211_register_hw+0xee1/0x39f0 [ 1874.326599][ T2182] ? ieee80211_tasklet_handler+0x20/0x20 [ 1874.332275][ T2182] ? memset+0x1e/0x40 [ 1874.336288][ T2182] ? __hrtimer_init+0x186/0x270 [ 1874.341180][ T2182] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1874.346958][ T2182] hwsim_new_radio_nl+0xafa/0xce0 [ 1874.352040][ T2182] genl_family_rcv_msg_doit+0x22a/0x330 [ 1874.357608][ T2182] ? end_current_label_crit_section+0x170/0x170 [ 1874.363903][ T2182] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1874.369816][ T2182] ? lockdep_hardirqs_on+0x94/0x140 [ 1874.375049][ T2182] ? bpf_lsm_capable+0x5/0x10 [ 1874.379754][ T2182] ? security_capable+0x85/0xb0 [ 1874.384649][ T2182] genl_rcv_msg+0x604/0x790 [ 1874.389188][ T2182] ? genl_bind+0x360/0x360 [ 1874.393622][ T2182] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1874.399994][ T2182] netlink_rcv_skb+0x1fb/0x450 [ 1874.404792][ T2182] ? genl_bind+0x360/0x360 [ 1874.409239][ T2182] ? netlink_ack+0x1170/0x1170 [ 1874.414050][ T2182] ? down_read+0x1a8/0x2d0 [ 1874.418510][ T2182] genl_rcv+0x24/0x40 [ 1874.422523][ T2182] netlink_unicast+0x74d/0x8d0 [ 1874.427338][ T2182] netlink_sendmsg+0x8ad/0xbd0 [ 1874.432145][ T2182] ? netlink_getsockopt+0x550/0x550 [ 1874.437380][ T2182] ? aa_sock_msg_perm+0x94/0x150 [ 1874.442344][ T2182] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1874.447663][ T2182] ? security_socket_sendmsg+0x7c/0xa0 [ 1874.453154][ T2182] ? netlink_getsockopt+0x550/0x550 [ 1874.458387][ T2182] ____sys_sendmsg+0x5be/0x970 [ 1874.463195][ T2182] ? __sys_sendmsg_sock+0x30/0x30 [ 1874.468254][ T2182] ? __import_iovec+0x315/0x500 [ 1874.473147][ T2182] ? import_iovec+0x6f/0xa0 [ 1874.477683][ T2182] ___sys_sendmsg+0x2a2/0x360 [ 1874.482411][ T2182] ? __sys_sendmsg+0x290/0x290 [ 1874.487292][ T2182] __se_sys_sendmsg+0x1bb/0x2a0 [ 1874.492243][ T2182] ? ct_nmi_exit+0x145/0x1c0 [ 1874.496987][ T2182] ? __x64_sys_sendmsg+0x80/0x80 [ 1874.501991][ T2182] ? lockdep_hardirqs_on+0x94/0x140 [ 1874.507227][ T2182] do_syscall_64+0x4c/0xa0 [ 1874.511684][ T2182] ? clear_bhb_loop+0x60/0xb0 [ 1874.516386][ T2182] ? clear_bhb_loop+0x60/0xb0 [ 1874.521189][ T2182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.527125][ T2182] RIP: 0033:0x7f6dc3d9c799 [ 1874.531567][ T2182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.551494][ T2182] RSP: 002b:00007f6dc4c5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1874.559978][ T2182] RAX: ffffffffffffffda RBX: 00007f6dc4015fa0 RCX: 00007f6dc3d9c799 [ 1874.567982][ T2182] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1874.575981][ T2182] RBP: 00007f6dc3e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1874.583986][ T2182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1874.591997][ T2182] R13: 00007f6dc4016038 R14: 00007f6dc4015fa0 R15: 00007fffe4986c58 [ 1874.600032][ T2182] [ 1875.527561][ T2137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.671675][T13907] Bluetooth: hci0: command 0x041b tx timeout [ 1875.724952][ T2137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.755975][ T2217] netlink: 'syz.1.9504': attribute type 2 has an invalid length. [ 1875.764678][ T2217] netlink: 'syz.1.9504': attribute type 8 has an invalid length. [ 1875.773584][ T2217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9504'. [ 1875.800493][ T2220] netlink: 'syz.1.9504': attribute type 19 has an invalid length. [ 1875.811017][ T2220] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9504'. [ 1875.824659][ T2219] netlink: 'syz.1.9504': attribute type 21 has an invalid length. [ 1875.914647][ T2137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.185513][ T2137] team0: Port device netdevsim0 removed [ 1876.217940][ T2137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.468526][ T2230] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9508'. [ 1876.813738][ T2137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1876.867704][ T2137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1876.922444][ T2137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1876.991403][ T2137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1877.295720][ T2137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.343571][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1877.364495][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1877.402214][ T2137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.440924][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1877.453840][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1877.479023][T28810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.486271][T28810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.499169][ T2249] FAULT_INJECTION: forcing a failure. [ 1877.499169][ T2249] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.512352][ T2249] CPU: 1 PID: 2249 Comm: syz.0.9513 Not tainted syzkaller #0 [ 1877.519776][ T2249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1877.529878][ T2249] Call Trace: [ 1877.533199][ T2249] [ 1877.536169][ T2249] dump_stack_lvl+0x188/0x24e [ 1877.540891][ T2249] ? show_regs_print_info+0x12/0x12 [ 1877.546123][ T2249] ? load_image+0x400/0x400 [ 1877.550651][ T2249] ? mark_lock+0x94/0x320 [ 1877.555014][ T2249] ? __lock_acquire+0x13cf/0x7d10 [ 1877.560077][ T2249] should_fail_ex+0x399/0x4d0 [ 1877.564784][ T2249] should_failslab+0x5/0x20 [ 1877.569315][ T2249] slab_pre_alloc_hook+0x59/0x310 [ 1877.574370][ T2249] kmem_cache_alloc+0x56/0x2f0 [ 1877.579163][ T2249] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1877.584575][ T2249] radix_tree_node_alloc+0x7e/0x3a0 [ 1877.589808][ T2249] idr_get_free+0x2af/0xa60 [ 1877.594360][ T2249] idr_alloc_cyclic+0x277/0x5c0 [ 1877.599259][ T2249] ? idr_alloc+0x2e0/0x2e0 [ 1877.603714][ T2249] ? do_raw_spin_lock+0x128/0x2f0 [ 1877.608767][ T2249] ? __radix_tree_preload+0x82/0x880 [ 1877.614094][ T2249] ? btf_alloc_id+0x30/0x2d0 [ 1877.618733][ T2249] btf_alloc_id+0x4f/0x2d0 [ 1877.623192][ T2249] btf_new_fd+0x5b8/0x780 [ 1877.627560][ T2249] __sys_bpf+0x612/0x780 [ 1877.631841][ T2249] ? bpf_link_show_fdinfo+0x380/0x380 [ 1877.637263][ T2249] ? lock_chain_count+0x20/0x20 [ 1877.642246][ T2249] __x64_sys_bpf+0x78/0x90 [ 1877.646698][ T2249] do_syscall_64+0x4c/0xa0 [ 1877.651184][ T2249] ? clear_bhb_loop+0x60/0xb0 [ 1877.655905][ T2249] ? clear_bhb_loop+0x60/0xb0 [ 1877.660617][ T2249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1877.666546][ T2249] RIP: 0033:0x7f4266f9c799 [ 1877.670994][ T2249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.690632][ T2249] RSP: 002b:00007f4267e6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1877.699073][ T2249] RAX: ffffffffffffffda RBX: 00007f4267215fa0 RCX: 00007f4266f9c799 [ 1877.707067][ T2249] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 1877.715408][ T2249] RBP: 00007f4267e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.723402][ T2249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1877.731388][ T2249] R13: 00007f4267216038 R14: 00007f4267215fa0 R15: 00007ffd12d3a468 [ 1877.739441][ T2249] [ 1877.751241][T13907] Bluetooth: hci0: command 0x040f tx timeout [ 1877.781076][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1877.840881][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1877.849700][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1877.913614][T28810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.920829][T28810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1877.941051][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1878.008327][ T2137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1878.048487][ T2137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1878.153116][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1878.174890][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1878.241753][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1878.343079][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1878.401148][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1878.441130][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1878.518282][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1878.555431][ T2256] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.9515'. [ 1878.577479][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1878.606468][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1878.629358][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1878.656563][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1879.831478][T13907] Bluetooth: hci0: command 0x0419 tx timeout [ 1880.297203][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1880.307220][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1880.334077][ T2137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1880.391921][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1880.418014][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1880.462284][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1880.483804][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1880.511633][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1880.538381][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1880.564716][ T2137] device veth0_vlan entered promiscuous mode [ 1880.912735][ T2137] device veth1_vlan entered promiscuous mode [ 1881.047664][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1881.059749][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1881.078916][ T2137] device veth0_macvtap entered promiscuous mode [ 1881.101858][ T2137] device veth1_macvtap entered promiscuous mode [ 1881.217527][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1881.265019][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.314560][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1881.357322][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.394365][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1881.424390][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.447647][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1881.475086][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.496237][ T2137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1881.584826][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1881.621171][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1881.629502][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1881.663942][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1881.701622][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1881.730626][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.775264][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1881.804310][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.837141][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1881.847912][ T2320] netlink: 'syz.0.9537': attribute type 2 has an invalid length. [ 1881.856092][ T2320] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9537'. [ 1881.867084][ T2320] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.9537'. [ 1881.872407][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.896193][ T2137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1881.908724][ T2137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1881.922937][ T2137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1881.933546][ T2313] tap0: tun_chr_ioctl cmd 1074025677 [ 1881.939073][ T2313] tap0: linktype set to 822 [ 1881.949749][T31485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1881.960700][T31485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1881.980711][ T2137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.996788][ T2137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.026271][ T2137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.055986][ T2137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1882.083270][ T2322] netlink: 'syz.3.9538': attribute type 10 has an invalid length. [ 1882.258770][ T2322] team0 (unregistering): Port device team_slave_0 removed [ 1882.315583][ T2322] team0 (unregistering): Port device team_slave_1 removed [ 1882.600964][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1882.608884][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.637056][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1882.716854][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1882.726435][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.772207][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1886.033354][ T2415] device wlan1 entered promiscuous mode [ 1886.256570][ T2423] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9570'. [ 1886.475879][ T2423] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1886.485121][ T2423] CPU: 0 PID: 2423 Comm: syz.1.9570 Not tainted syzkaller #0 [ 1886.492570][ T2423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1886.502674][ T2423] Call Trace: [ 1886.506004][ T2423] [ 1886.508979][ T2423] dump_stack_lvl+0x188/0x24e [ 1886.513719][ T2423] ? show_regs_print_info+0x12/0x12 [ 1886.518972][ T2423] ? load_image+0x400/0x400 [ 1886.523510][ T2423] ? sysfs_warn_dup+0x61/0xa0 [ 1886.528249][ T2423] sysfs_warn_dup+0x8a/0xa0 [ 1886.532804][ T2423] sysfs_do_create_link_sd+0xc0/0x110 [ 1886.538205][ T2423] device_add+0x7ed/0xfb0 [ 1886.542606][ T2423] wiphy_register+0x1d9f/0x2ac0 [ 1886.547545][ T2423] ? cfg80211_event_work+0x40/0x40 [ 1886.552746][ T2423] ? _dev_printk+0x1/0x175 [ 1886.557258][ T2423] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1886.563397][ T2423] ieee80211_register_hw+0x2d00/0x39f0 [ 1886.568927][ T2423] ? lockdep_hardirqs_on+0x94/0x140 [ 1886.574198][ T2423] ? ieee80211_register_hw+0xee1/0x39f0 [ 1886.579801][ T2423] ? ieee80211_register_hw+0xee1/0x39f0 [ 1886.585425][ T2423] ? ieee80211_tasklet_handler+0x20/0x20 [ 1886.591136][ T2423] ? memset+0x1e/0x40 [ 1886.595177][ T2423] ? __hrtimer_init+0x186/0x270 [ 1886.600085][ T2423] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1886.605941][ T2423] hwsim_new_radio_nl+0xafa/0xce0 [ 1886.611044][ T2423] genl_family_rcv_msg_doit+0x22a/0x330 [ 1886.616660][ T2423] ? end_current_label_crit_section+0x170/0x170 [ 1886.622957][ T2423] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1886.628918][ T2423] ? bpf_lsm_capable+0x5/0x10 [ 1886.633640][ T2423] ? security_capable+0x85/0xb0 [ 1886.638564][ T2423] genl_rcv_msg+0x604/0x790 [ 1886.643121][ T2423] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1886.649337][ T2423] ? genl_bind+0x360/0x360 [ 1886.653805][ T2423] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1886.660204][ T2423] ? lock_acquire+0x225/0x4a0 [ 1886.664962][ T2423] netlink_rcv_skb+0x1fb/0x450 [ 1886.669788][ T2423] ? genl_bind+0x360/0x360 [ 1886.674263][ T2423] ? netlink_ack+0x1170/0x1170 [ 1886.679084][ T2423] ? down_read+0x1a8/0x2d0 [ 1886.683527][ T2423] genl_rcv+0x24/0x40 [ 1886.687538][ T2423] netlink_unicast+0x74d/0x8d0 [ 1886.692407][ T2423] netlink_sendmsg+0x8ad/0xbd0 [ 1886.697258][ T2423] ? netlink_getsockopt+0x550/0x550 [ 1886.702525][ T2423] ? aa_sock_msg_perm+0x94/0x150 [ 1886.707536][ T2423] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1886.712891][ T2423] ? security_socket_sendmsg+0x7c/0xa0 [ 1886.718435][ T2423] ? netlink_getsockopt+0x550/0x550 [ 1886.723682][ T2423] ____sys_sendmsg+0x5be/0x970 [ 1886.728535][ T2423] ? __sys_sendmsg_sock+0x30/0x30 [ 1886.733607][ T2423] ? __import_iovec+0x315/0x500 [ 1886.738509][ T2423] ? import_iovec+0x6f/0xa0 [ 1886.743069][ T2423] ___sys_sendmsg+0x2a2/0x360 [ 1886.747809][ T2423] ? try_to_wake_up+0x6ae/0x1080 [ 1886.752832][ T2423] ? __sys_sendmsg+0x290/0x290 [ 1886.757717][ T2423] __se_sys_sendmsg+0x1bb/0x2a0 [ 1886.762628][ T2423] ? ct_nmi_exit+0x145/0x1c0 [ 1886.767271][ T2423] ? __x64_sys_sendmsg+0x80/0x80 [ 1886.772306][ T2423] ? lockdep_hardirqs_on+0x94/0x140 [ 1886.777563][ T2423] do_syscall_64+0x4c/0xa0 [ 1886.782028][ T2423] ? clear_bhb_loop+0x60/0xb0 [ 1886.786726][ T2423] ? clear_bhb_loop+0x60/0xb0 [ 1886.791441][ T2423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1886.797411][ T2423] RIP: 0033:0x7f6dc3d9c799 [ 1886.801890][ T2423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.821595][ T2423] RSP: 002b:00007f6dc4c5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.830078][ T2423] RAX: ffffffffffffffda RBX: 00007f6dc4015fa0 RCX: 00007f6dc3d9c799 [ 1886.838075][ T2423] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1886.846082][ T2423] RBP: 00007f6dc3e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1886.854106][ T2423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1886.862138][ T2423] R13: 00007f6dc4016038 R14: 00007f6dc4015fa0 R15: 00007fffe4986c58 [ 1886.870165][ T2423] [ 1887.294340][ T2437] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1887.300870][ T2437] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1887.379633][ T2446] netlink: 'syz.2.9576': attribute type 6 has an invalid length. [ 1887.398301][ T2446] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9576'. [ 1887.845776][T28810] wlan1: Trigger new scan to find an IBSS to join [ 1888.277121][ T2470] netlink: 'syz.2.9582': attribute type 2 has an invalid length. [ 1888.291359][ T2470] netlink: 'syz.2.9582': attribute type 8 has an invalid length. [ 1888.299878][ T2470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1888.387598][ T2470] netlink: 'syz.2.9582': attribute type 19 has an invalid length. [ 1888.405017][ T2470] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1888.419811][ T2471] netlink: 'syz.2.9582': attribute type 21 has an invalid length. [ 1888.809034][ T2473] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9584'. [ 1888.928462][ T2473] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1889.011839][ T2473] CPU: 1 PID: 2473 Comm: syz.0.9584 Not tainted syzkaller #0 [ 1889.019316][ T2473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1889.029427][ T2473] Call Trace: [ 1889.032775][ T2473] [ 1889.035843][ T2473] dump_stack_lvl+0x188/0x24e [ 1889.040595][ T2473] ? show_regs_print_info+0x12/0x12 [ 1889.045852][ T2473] ? load_image+0x400/0x400 [ 1889.050423][ T2473] sysfs_warn_dup+0x8a/0xa0 [ 1889.055009][ T2473] sysfs_do_create_link_sd+0xc0/0x110 [ 1889.060451][ T2473] device_add+0x7ed/0xfb0 [ 1889.064864][ T2473] wiphy_register+0x1d9f/0x2ac0 [ 1889.069794][ T2473] ? cfg80211_event_work+0x40/0x40 [ 1889.075057][ T2473] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1889.081291][ T2473] ieee80211_register_hw+0x2d00/0x39f0 [ 1889.086820][ T2473] ? lockdep_hardirqs_on+0x94/0x140 [ 1889.092087][ T2473] ? ieee80211_register_hw+0xee1/0x39f0 [ 1889.097703][ T2473] ? ieee80211_register_hw+0xee1/0x39f0 [ 1889.103322][ T2473] ? ieee80211_tasklet_handler+0x20/0x20 [ 1889.109029][ T2473] ? memset+0x1e/0x40 [ 1889.113066][ T2473] ? __hrtimer_init+0x186/0x270 [ 1889.118006][ T2473] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1889.123817][ T2473] hwsim_new_radio_nl+0xafa/0xce0 [ 1889.128920][ T2473] genl_family_rcv_msg_doit+0x22a/0x330 [ 1889.134541][ T2473] ? end_current_label_crit_section+0x170/0x170 [ 1889.140837][ T2473] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1889.146898][ T2473] ? bpf_lsm_capable+0x5/0x10 [ 1889.151656][ T2473] ? security_capable+0x85/0xb0 [ 1889.156558][ T2473] genl_rcv_msg+0x604/0x790 [ 1889.161140][ T2473] ? genl_bind+0x360/0x360 [ 1889.165597][ T2473] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1889.172042][ T2473] netlink_rcv_skb+0x1fb/0x450 [ 1889.176880][ T2473] ? genl_bind+0x360/0x360 [ 1889.181368][ T2473] ? netlink_ack+0x1170/0x1170 [ 1889.186215][ T2473] ? down_read+0x1a8/0x2d0 [ 1889.190696][ T2473] genl_rcv+0x24/0x40 [ 1889.194727][ T2473] netlink_unicast+0x74d/0x8d0 [ 1889.199583][ T2473] netlink_sendmsg+0x8ad/0xbd0 [ 1889.204432][ T2473] ? netlink_getsockopt+0x550/0x550 [ 1889.209696][ T2473] ? aa_sock_msg_perm+0x94/0x150 [ 1889.214697][ T2473] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1889.220033][ T2473] ? security_socket_sendmsg+0x7c/0xa0 [ 1889.225563][ T2473] ? netlink_getsockopt+0x550/0x550 [ 1889.230824][ T2473] ____sys_sendmsg+0x5be/0x970 [ 1889.235668][ T2473] ? __sys_sendmsg_sock+0x30/0x30 [ 1889.240778][ T2473] ? __import_iovec+0x315/0x500 [ 1889.245685][ T2473] ? import_iovec+0x6f/0xa0 [ 1889.250235][ T2473] ___sys_sendmsg+0x2a2/0x360 [ 1889.254986][ T2473] ? __sys_sendmsg+0x290/0x290 [ 1889.259870][ T2473] __se_sys_sendmsg+0x1bb/0x2a0 [ 1889.264790][ T2473] ? ct_nmi_exit+0x145/0x1c0 [ 1889.269444][ T2473] ? __x64_sys_sendmsg+0x80/0x80 [ 1889.274477][ T2473] ? lockdep_hardirqs_on+0x94/0x140 [ 1889.279747][ T2473] do_syscall_64+0x4c/0xa0 [ 1889.284227][ T2473] ? clear_bhb_loop+0x60/0xb0 [ 1889.288961][ T2473] ? clear_bhb_loop+0x60/0xb0 [ 1889.293697][ T2473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.299647][ T2473] RIP: 0033:0x7f4266f9c799 [ 1889.304134][ T2473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.323799][ T2473] RSP: 002b:00007f4267e6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1889.332299][ T2473] RAX: ffffffffffffffda RBX: 00007f4267215fa0 RCX: 00007f4266f9c799 [ 1889.340332][ T2473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1889.348364][ T2473] RBP: 00007f4267032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1889.356393][ T2473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1889.364413][ T2473] R13: 00007f4267216038 R14: 00007f4267215fa0 R15: 00007ffd12d3a468 [ 1889.372479][ T2473] [ 1890.399864][T31481] device 0 left promiscuous mode [ 1891.473220][ T2534] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9599'. [ 1891.857387][ T2542] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1891.967908][ T2527] netlink: 'syz.5.9597': attribute type 2 has an invalid length. [ 1891.992062][ T2527] netlink: 'syz.5.9597': attribute type 8 has an invalid length. [ 1891.999915][ T2527] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9597'. [ 1892.051946][ T2531] netlink: 'syz.5.9597': attribute type 19 has an invalid length. [ 1892.059852][ T2531] netlink: 156 bytes leftover after parsing attributes in process `syz.5.9597'. [ 1892.090223][ T2533] netlink: 'syz.5.9597': attribute type 21 has an invalid length. [ 1892.122523][ T2534] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1892.230904][ T2542] netlink: 'syz.1.9600': attribute type 21 has an invalid length. [ 1892.241118][ T2542] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9600'. [ 1892.874638][T31495] wlan1: Trigger new scan to find an IBSS to join [ 1893.883045][T31495] wlan1: Creating new IBSS network, BSSID 36:67:26:98:01:63 [ 1893.896131][ T2580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9610'. [ 1896.036687][ T2608] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9614'. [ 1896.369918][ T2608] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1896.388814][ T2608] CPU: 1 PID: 2608 Comm: syz.2.9614 Not tainted syzkaller #0 [ 1896.396291][ T2608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1896.406415][ T2608] Call Trace: [ 1896.409740][ T2608] [ 1896.412712][ T2608] dump_stack_lvl+0x188/0x24e [ 1896.417493][ T2608] ? show_regs_print_info+0x12/0x12 [ 1896.422758][ T2608] ? load_image+0x400/0x400 [ 1896.427338][ T2608] sysfs_warn_dup+0x8a/0xa0 [ 1896.431945][ T2608] sysfs_do_create_link_sd+0xc0/0x110 [ 1896.437406][ T2608] device_add+0x7ed/0xfb0 [ 1896.441812][ T2608] wiphy_register+0x1d9f/0x2ac0 [ 1896.446728][ T2608] ? cfg80211_event_work+0x40/0x40 [ 1896.451886][ T2608] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1896.458090][ T2608] ieee80211_register_hw+0x2d00/0x39f0 [ 1896.463611][ T2608] ? ieee80211_register_hw+0xee1/0x39f0 [ 1896.469215][ T2608] ? ieee80211_register_hw+0xee1/0x39f0 [ 1896.474799][ T2608] ? ieee80211_tasklet_handler+0x20/0x20 [ 1896.480482][ T2608] ? memset+0x1e/0x40 [ 1896.484514][ T2608] ? __hrtimer_init+0x186/0x270 [ 1896.489412][ T2608] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1896.495195][ T2608] hwsim_new_radio_nl+0xafa/0xce0 [ 1896.500285][ T2608] genl_family_rcv_msg_doit+0x22a/0x330 [ 1896.505876][ T2608] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1896.511821][ T2608] ? bpf_lsm_capable+0x5/0x10 [ 1896.516532][ T2608] ? security_capable+0x85/0xb0 [ 1896.521431][ T2608] genl_rcv_msg+0x604/0x790 [ 1896.525983][ T2608] ? genl_bind+0x360/0x360 [ 1896.530445][ T2608] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1896.536849][ T2608] netlink_rcv_skb+0x1fb/0x450 [ 1896.541665][ T2608] ? genl_bind+0x360/0x360 [ 1896.546122][ T2608] ? netlink_ack+0x1170/0x1170 [ 1896.550935][ T2608] ? lockdep_hardirqs_on+0x94/0x140 [ 1896.556187][ T2608] ? down_read+0x1a8/0x2d0 [ 1896.560649][ T2608] genl_rcv+0x24/0x40 [ 1896.564655][ T2608] netlink_unicast+0x74d/0x8d0 [ 1896.569458][ T2608] netlink_sendmsg+0x8ad/0xbd0 [ 1896.574265][ T2608] ? netlink_getsockopt+0x550/0x550 [ 1896.579509][ T2608] ? aa_sock_msg_perm+0x94/0x150 [ 1896.584476][ T2608] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1896.589791][ T2608] ? security_socket_sendmsg+0x7c/0xa0 [ 1896.595291][ T2608] ? netlink_getsockopt+0x550/0x550 [ 1896.600525][ T2608] ____sys_sendmsg+0x5be/0x970 [ 1896.605339][ T2608] ? __sys_sendmsg_sock+0x30/0x30 [ 1896.610427][ T2608] ? __import_iovec+0x315/0x500 [ 1896.615323][ T2608] ? import_iovec+0x6f/0xa0 [ 1896.619868][ T2608] ___sys_sendmsg+0x2a2/0x360 [ 1896.624594][ T2608] ? __sys_sendmsg+0x290/0x290 [ 1896.629447][ T2608] ? ktime_get_real_ts64+0x440/0x440 [ 1896.634794][ T2608] __se_sys_sendmsg+0x1bb/0x2a0 [ 1896.639710][ T2608] ? ct_nmi_exit+0x145/0x1c0 [ 1896.644328][ T2608] ? __x64_sys_sendmsg+0x80/0x80 [ 1896.649315][ T2608] ? lockdep_hardirqs_on+0x94/0x140 [ 1896.654546][ T2608] do_syscall_64+0x4c/0xa0 [ 1896.659006][ T2608] ? clear_bhb_loop+0x60/0xb0 [ 1896.663721][ T2608] ? clear_bhb_loop+0x60/0xb0 [ 1896.668429][ T2608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.674356][ T2608] RIP: 0033:0x7fc38459c799 [ 1896.678812][ T2608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1896.698452][ T2608] RSP: 002b:00007fc385462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1896.706905][ T2608] RAX: ffffffffffffffda RBX: 00007fc384815fa0 RCX: 00007fc38459c799 [ 1896.714915][ T2608] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1896.722911][ T2608] RBP: 00007fc384632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1896.730910][ T2608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1896.738902][ T2608] R13: 00007fc384816038 R14: 00007fc384815fa0 R15: 00007ffe3237a088 [ 1896.746914][ T2608] [ 1897.175251][T31481] device hsr_slave_0 left promiscuous mode [ 1897.248321][T31481] device hsr_slave_1 left promiscuous mode [ 1897.290853][T31481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.298357][T31481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.327870][T31481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.337124][T31481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.366912][T31481] device bridge_slave_0 left promiscuous mode [ 1897.383566][T31481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.429624][ T2638] FAULT_INJECTION: forcing a failure. [ 1897.429624][ T2638] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.444173][T31481] device veth1_macvtap left promiscuous mode [ 1897.470712][T31481] device veth0_macvtap left promiscuous mode [ 1897.487577][T31481] device veth1_vlan left promiscuous mode [ 1897.517387][T31481] device veth0_vlan left promiscuous mode [ 1897.532261][ T2638] CPU: 0 PID: 2638 Comm: syz.2.9623 Not tainted syzkaller #0 [ 1897.539716][ T2638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1897.549813][ T2638] Call Trace: [ 1897.553136][ T2638] [ 1897.556116][ T2638] dump_stack_lvl+0x188/0x24e [ 1897.560850][ T2638] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1897.567059][ T2638] ? show_regs_print_info+0x12/0x12 [ 1897.572316][ T2638] ? load_image+0x400/0x400 [ 1897.576899][ T2638] ? ___ratelimit+0x4f0/0x5f0 [ 1897.581637][ T2638] should_fail_ex+0x399/0x4d0 [ 1897.586368][ T2638] should_failslab+0x5/0x20 [ 1897.590944][ T2638] slab_pre_alloc_hook+0x59/0x310 [ 1897.596018][ T2638] kmem_cache_alloc+0x56/0x2f0 [ 1897.600834][ T2638] ? getname_flags+0xb7/0x500 [ 1897.605566][ T2638] getname_flags+0xb7/0x500 [ 1897.610111][ T2638] do_sys_openat2+0xdd/0x4b0 [ 1897.614737][ T2638] ? do_sys_open+0xe0/0xe0 [ 1897.619185][ T2638] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1897.625374][ T2638] __x64_sys_openat+0x135/0x160 [ 1897.630266][ T2638] do_syscall_64+0x4c/0xa0 [ 1897.634716][ T2638] ? clear_bhb_loop+0x60/0xb0 [ 1897.639421][ T2638] ? clear_bhb_loop+0x60/0xb0 [ 1897.644126][ T2638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1897.650088][ T2638] RIP: 0033:0x7fc38459c799 [ 1897.654530][ T2638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1897.674167][ T2638] RSP: 002b:00007fc385462028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1897.682621][ T2638] RAX: ffffffffffffffda RBX: 00007fc384815fa0 RCX: 00007fc38459c799 [ 1897.690617][ T2638] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1897.698618][ T2638] RBP: 00007fc385462090 R08: 0000000000000000 R09: 0000000000000000 [ 1897.706610][ T2638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1897.714604][ T2638] R13: 00007fc384816038 R14: 00007fc384815fa0 R15: 00007ffe3237a088 [ 1897.722639][ T2638] [ 1900.684640][ T2693] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.9635'. [ 1902.547368][ T2710] FAULT_INJECTION: forcing a failure. [ 1902.547368][ T2710] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.580899][ T2710] CPU: 0 PID: 2710 Comm: syz.1.9640 Not tainted syzkaller #0 [ 1902.588382][ T2710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1902.598504][ T2710] Call Trace: [ 1902.601822][ T2710] [ 1902.604791][ T2710] dump_stack_lvl+0x188/0x24e [ 1902.609552][ T2710] ? show_regs_print_info+0x12/0x12 [ 1902.614810][ T2710] ? load_image+0x400/0x400 [ 1902.619460][ T2710] ? mark_lock+0x94/0x320 [ 1902.623857][ T2710] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1902.629919][ T2710] should_fail_ex+0x399/0x4d0 [ 1902.634661][ T2710] should_failslab+0x5/0x20 [ 1902.639220][ T2710] slab_pre_alloc_hook+0x59/0x310 [ 1902.644299][ T2710] ? lockdep_hardirqs_on+0x94/0x140 [ 1902.649546][ T2710] ? sctp_add_bind_addr+0x89/0x350 [ 1902.654719][ T2710] __kmem_cache_alloc_node+0x4f/0x260 [ 1902.660137][ T2710] ? sctp_add_bind_addr+0x89/0x350 [ 1902.665298][ T2710] kmalloc_trace+0x26/0xe0 [ 1902.669769][ T2710] sctp_add_bind_addr+0x89/0x350 [ 1902.674767][ T2710] sctp_copy_local_addr_list+0x311/0x4e0 [ 1902.680468][ T2710] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1902.686244][ T2710] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1902.692373][ T2710] ? sctp_v4_is_any+0x31/0x50 [ 1902.697105][ T2710] ? sctp_copy_one_addr+0x93/0x660 [ 1902.702272][ T2710] sctp_bind_addr_copy+0xaf/0x3c0 [ 1902.707348][ T2710] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1902.713725][ T2710] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1902.719095][ T2710] ? __sctp_connect+0xd80/0xd80 [ 1902.724010][ T2710] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1902.729597][ T2710] ? security_sctp_bind_connect+0x85/0xb0 [ 1902.735367][ T2710] sctp_sendmsg+0x15b0/0x2940 [ 1902.740116][ T2710] ? irqentry_enter+0x33/0x50 [ 1902.744859][ T2710] ? sctp_getsockopt+0x8a0/0x8a0 [ 1902.749857][ T2710] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1902.756064][ T2710] ? lockdep_hardirqs_on+0x94/0x140 [ 1902.761321][ T2710] ? inet_send_prepare+0x260/0x260 [ 1902.766510][ T2710] ? inet_sendmsg+0xe5/0x2f0 [ 1902.771156][ T2710] ? inet_send_prepare+0x260/0x260 [ 1902.776322][ T2710] ____sys_sendmsg+0x5be/0x970 [ 1902.781175][ T2710] ? __sys_sendmsg_sock+0x30/0x30 [ 1902.786265][ T2710] ? __import_iovec+0x315/0x500 [ 1902.791172][ T2710] ? import_iovec+0x6f/0xa0 [ 1902.795730][ T2710] ___sys_sendmsg+0x2a2/0x360 [ 1902.800470][ T2710] ? __sys_sendmsg+0x290/0x290 [ 1902.805314][ T2710] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1902.811125][ T2710] __se_sys_sendmsg+0x1bb/0x2a0 [ 1902.816038][ T2710] ? __x64_sys_sendmsg+0x80/0x80 [ 1902.821065][ T2710] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1902.827010][ T2710] do_syscall_64+0x4c/0xa0 [ 1902.831500][ T2710] ? clear_bhb_loop+0x60/0xb0 [ 1902.836232][ T2710] ? clear_bhb_loop+0x60/0xb0 [ 1902.840962][ T2710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1902.846905][ T2710] RIP: 0033:0x7f6dc3d9c799 [ 1902.851364][ T2710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1902.871039][ T2710] RSP: 002b:00007f6dc4c5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1902.879531][ T2710] RAX: ffffffffffffffda RBX: 00007f6dc4015fa0 RCX: 00007f6dc3d9c799 [ 1902.887561][ T2710] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1902.895602][ T2710] RBP: 00007f6dc4c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.903616][ T2710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1902.911647][ T2710] R13: 00007f6dc4016038 R14: 00007f6dc4015fa0 R15: 00007fffe4986c58 [ 1902.919686][ T2710] [ 1903.224443][T31481] team0 (unregistering): Port device team_slave_1 removed [ 1903.433659][T31481] team0 (unregistering): Port device team_slave_0 removed [ 1903.638070][T31481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1903.820091][T31481] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1904.677844][T31481] bond0 (unregistering): (slave team0): Releasing backup interface [ 1904.761322][T31481] bond0 (unregistering): Released all slaves [ 1904.957591][ T2693] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1904.982349][ T2693] CPU: 0 PID: 2693 Comm: syz.5.9635 Not tainted syzkaller #0 [ 1904.989841][ T2693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1904.999962][ T2693] Call Trace: [ 1905.003282][ T2693] [ 1905.006249][ T2693] dump_stack_lvl+0x188/0x24e [ 1905.010978][ T2693] ? show_regs_print_info+0x12/0x12 [ 1905.016214][ T2693] ? load_image+0x400/0x400 [ 1905.020791][ T2693] sysfs_warn_dup+0x8a/0xa0 [ 1905.025344][ T2693] sysfs_do_create_link_sd+0xc0/0x110 [ 1905.030760][ T2693] device_add+0x7ed/0xfb0 [ 1905.035239][ T2693] wiphy_register+0x1d9f/0x2ac0 [ 1905.040146][ T2693] ? cfg80211_event_work+0x40/0x40 [ 1905.045301][ T2693] ? minstrel_ht_alloc+0x894/0xa20 [ 1905.050468][ T2693] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1905.056573][ T2693] ieee80211_register_hw+0x2d00/0x39f0 [ 1905.062115][ T2693] ? ieee80211_register_hw+0xee1/0x39f0 [ 1905.067714][ T2693] ? ieee80211_register_hw+0xee1/0x39f0 [ 1905.073326][ T2693] ? ieee80211_tasklet_handler+0x20/0x20 [ 1905.079030][ T2693] ? memset+0x1e/0x40 [ 1905.083040][ T2693] ? __hrtimer_init+0x186/0x270 [ 1905.087933][ T2693] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1905.093709][ T2693] hwsim_new_radio_nl+0xafa/0xce0 [ 1905.098804][ T2693] genl_family_rcv_msg_doit+0x22a/0x330 [ 1905.104384][ T2693] ? end_current_label_crit_section+0x170/0x170 [ 1905.110661][ T2693] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1905.116591][ T2693] ? bpf_lsm_capable+0x5/0x10 [ 1905.121308][ T2693] ? security_capable+0x85/0xb0 [ 1905.126207][ T2693] genl_rcv_msg+0x604/0x790 [ 1905.130745][ T2693] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1905.136948][ T2693] ? genl_bind+0x360/0x360 [ 1905.141386][ T2693] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1905.147771][ T2693] ? lock_acquire+0x225/0x4a0 [ 1905.152495][ T2693] netlink_rcv_skb+0x1fb/0x450 [ 1905.157329][ T2693] ? genl_bind+0x360/0x360 [ 1905.161809][ T2693] ? netlink_ack+0x1170/0x1170 [ 1905.166621][ T2693] ? down_read+0x1a8/0x2d0 [ 1905.171072][ T2693] genl_rcv+0x24/0x40 [ 1905.175083][ T2693] netlink_unicast+0x74d/0x8d0 [ 1905.179893][ T2693] netlink_sendmsg+0x8ad/0xbd0 [ 1905.184743][ T2693] ? netlink_getsockopt+0x550/0x550 [ 1905.189978][ T2693] ? aa_sock_msg_perm+0x94/0x150 [ 1905.194941][ T2693] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1905.200254][ T2693] ? security_socket_sendmsg+0x7c/0xa0 [ 1905.205748][ T2693] ? netlink_getsockopt+0x550/0x550 [ 1905.210984][ T2693] ____sys_sendmsg+0x5be/0x970 [ 1905.215820][ T2693] ? __sys_sendmsg_sock+0x30/0x30 [ 1905.220908][ T2693] ? __import_iovec+0x315/0x500 [ 1905.225809][ T2693] ? import_iovec+0x6f/0xa0 [ 1905.230351][ T2693] ___sys_sendmsg+0x2a2/0x360 [ 1905.235068][ T2693] ? __sys_sendmsg+0x290/0x290 [ 1905.239923][ T2693] __se_sys_sendmsg+0x1bb/0x2a0 [ 1905.244808][ T2693] ? __x64_sys_sendmsg+0x80/0x80 [ 1905.249798][ T2693] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1905.255725][ T2693] do_syscall_64+0x4c/0xa0 [ 1905.260176][ T2693] ? clear_bhb_loop+0x60/0xb0 [ 1905.264882][ T2693] ? clear_bhb_loop+0x60/0xb0 [ 1905.269593][ T2693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1905.275516][ T2693] RIP: 0033:0x7fecb959c799 [ 1905.279961][ T2693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.299599][ T2693] RSP: 002b:00007fecba385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1905.308054][ T2693] RAX: ffffffffffffffda RBX: 00007fecb9815fa0 RCX: 00007fecb959c799 [ 1905.316062][ T2693] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1905.324058][ T2693] RBP: 00007fecb9632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1905.332077][ T2693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1905.340071][ T2693] R13: 00007fecb9816038 R14: 00007fecb9815fa0 R15: 00007ffd254f80e8 [ 1905.348085][ T2693] [ 1906.428916][ T2756] validate_nla: 1 callbacks suppressed [ 1906.428941][ T2756] netlink: 'syz.5.9650': attribute type 39 has an invalid length. [ 1906.609030][ T2765] netlink: 'syz.2.9654': attribute type 21 has an invalid length. [ 1906.655582][ T2758] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9652'. [ 1906.763615][ T2765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9654'. [ 1907.037978][ T2776] netlink: 'syz.5.9655': attribute type 1 has an invalid length. [ 1907.066604][ T2776] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.9655'. [ 1907.908362][ T2786] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9657'. [ 1909.110059][ T2794] FAULT_INJECTION: forcing a failure. [ 1909.110059][ T2794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.141323][ T2794] CPU: 0 PID: 2794 Comm: syz.2.9660 Not tainted syzkaller #0 [ 1909.148790][ T2794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1909.158895][ T2794] Call Trace: [ 1909.162210][ T2794] [ 1909.165183][ T2794] dump_stack_lvl+0x188/0x24e [ 1909.169938][ T2794] ? show_regs_print_info+0x12/0x12 [ 1909.175214][ T2794] ? load_image+0x400/0x400 [ 1909.179788][ T2794] ? __lock_acquire+0x7d10/0x7d10 [ 1909.184867][ T2794] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1909.190566][ T2794] should_fail_ex+0x399/0x4d0 [ 1909.195316][ T2794] strncpy_from_user+0x32/0x350 [ 1909.200223][ T2794] bpf_prog_load+0x1f3/0x1560 [ 1909.205022][ T2794] ? map_freeze+0x390/0x390 [ 1909.209584][ T2794] ? __might_fault+0xa6/0x120 [ 1909.214356][ T2794] ? __might_fault+0xa6/0x120 [ 1909.219078][ T2794] ? __might_fault+0xc2/0x120 [ 1909.223794][ T2794] ? __might_fault+0xa6/0x120 [ 1909.228518][ T2794] ? bpf_lsm_bpf+0x5/0x10 [ 1909.232986][ T2794] ? security_bpf+0x7a/0xa0 [ 1909.237542][ T2794] __sys_bpf+0x5b8/0x780 [ 1909.241853][ T2794] ? bpf_link_show_fdinfo+0x380/0x380 [ 1909.247309][ T2794] ? lock_chain_count+0x20/0x20 [ 1909.252208][ T2794] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1909.258300][ T2794] __x64_sys_bpf+0x78/0x90 [ 1909.262769][ T2794] do_syscall_64+0x4c/0xa0 [ 1909.267229][ T2794] ? clear_bhb_loop+0x60/0xb0 [ 1909.271954][ T2794] ? clear_bhb_loop+0x60/0xb0 [ 1909.276691][ T2794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1909.282646][ T2794] RIP: 0033:0x7fc38459c799 [ 1909.287113][ T2794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1909.306786][ T2794] RSP: 002b:00007fc385462028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1909.315293][ T2794] RAX: ffffffffffffffda RBX: 00007fc384815fa0 RCX: 00007fc38459c799 [ 1909.323327][ T2794] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 1909.331347][ T2794] RBP: 00007fc385462090 R08: 0000000000000000 R09: 0000000000000000 [ 1909.339363][ T2794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1909.347376][ T2794] R13: 00007fc384816038 R14: 00007fc384815fa0 R15: 00007ffe3237a088 [ 1909.355463][ T2794] [ 1909.488299][ T2786] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1909.502100][ T2786] CPU: 1 PID: 2786 Comm: syz.0.9657 Not tainted syzkaller #0 [ 1909.509557][ T2786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1909.519675][ T2786] Call Trace: [ 1909.522998][ T2786] [ 1909.525967][ T2786] dump_stack_lvl+0x188/0x24e [ 1909.530722][ T2786] ? show_regs_print_info+0x12/0x12 [ 1909.536007][ T2786] ? load_image+0x400/0x400 [ 1909.540596][ T2786] sysfs_warn_dup+0x8a/0xa0 [ 1909.545159][ T2786] sysfs_do_create_link_sd+0xc0/0x110 [ 1909.550591][ T2786] device_add+0x7ed/0xfb0 [ 1909.555005][ T2786] wiphy_register+0x1d9f/0x2ac0 [ 1909.559960][ T2786] ? cfg80211_event_work+0x40/0x40 [ 1909.565132][ T2786] ? minstrel_ht_alloc+0x894/0xa20 [ 1909.570311][ T2786] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1909.576434][ T2786] ieee80211_register_hw+0x2d00/0x39f0 [ 1909.581976][ T2786] ? ieee80211_register_hw+0xee1/0x39f0 [ 1909.587578][ T2786] ? ieee80211_register_hw+0xee1/0x39f0 [ 1909.593194][ T2786] ? ieee80211_tasklet_handler+0x20/0x20 [ 1909.598913][ T2786] ? memset+0x1e/0x40 [ 1909.602954][ T2786] ? __hrtimer_init+0x186/0x270 [ 1909.607863][ T2786] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1909.613751][ T2786] hwsim_new_radio_nl+0xafa/0xce0 [ 1909.618859][ T2786] genl_family_rcv_msg_doit+0x22a/0x330 [ 1909.624473][ T2786] ? end_current_label_crit_section+0x170/0x170 [ 1909.630788][ T2786] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1909.636747][ T2786] ? bpf_lsm_capable+0x5/0x10 [ 1909.641481][ T2786] ? security_capable+0x85/0xb0 [ 1909.646403][ T2786] genl_rcv_msg+0x604/0x790 [ 1909.650976][ T2786] ? genl_bind+0x360/0x360 [ 1909.655447][ T2786] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1909.661846][ T2786] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1909.667911][ T2786] netlink_rcv_skb+0x1fb/0x450 [ 1909.672734][ T2786] ? genl_bind+0x360/0x360 [ 1909.677202][ T2786] ? netlink_ack+0x1170/0x1170 [ 1909.682088][ T2786] genl_rcv+0x24/0x40 [ 1909.686119][ T2786] netlink_unicast+0x74d/0x8d0 [ 1909.690966][ T2786] netlink_sendmsg+0x8ad/0xbd0 [ 1909.695803][ T2786] ? netlink_getsockopt+0x550/0x550 [ 1909.701079][ T2786] ? aa_sock_msg_perm+0x94/0x150 [ 1909.706074][ T2786] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1909.711405][ T2786] ? security_socket_sendmsg+0x7c/0xa0 [ 1909.716928][ T2786] ? netlink_getsockopt+0x550/0x550 [ 1909.722179][ T2786] ____sys_sendmsg+0x5be/0x970 [ 1909.727009][ T2786] ? __sys_sendmsg_sock+0x30/0x30 [ 1909.732214][ T2786] ? __import_iovec+0x315/0x500 [ 1909.737120][ T2786] ? import_iovec+0x6f/0xa0 [ 1909.741677][ T2786] ___sys_sendmsg+0x2a2/0x360 [ 1909.746427][ T2786] ? __sys_sendmsg+0x290/0x290 [ 1909.751315][ T2786] __se_sys_sendmsg+0x1bb/0x2a0 [ 1909.756230][ T2786] ? ct_nmi_exit+0x145/0x1c0 [ 1909.760867][ T2786] ? __x64_sys_sendmsg+0x80/0x80 [ 1909.765900][ T2786] ? lockdep_hardirqs_on+0x94/0x140 [ 1909.771153][ T2786] do_syscall_64+0x4c/0xa0 [ 1909.775623][ T2786] ? clear_bhb_loop+0x60/0xb0 [ 1909.780355][ T2786] ? clear_bhb_loop+0x60/0xb0 [ 1909.785088][ T2786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1909.791031][ T2786] RIP: 0033:0x7f4266f9c799 [ 1909.795503][ T2786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1909.815167][ T2786] RSP: 002b:00007f4267e6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1909.823652][ T2786] RAX: ffffffffffffffda RBX: 00007f4267215fa0 RCX: 00007f4266f9c799 [ 1909.831684][ T2786] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1909.839715][ T2786] RBP: 00007f4267032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1909.847742][ T2786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1909.855766][ T2786] R13: 00007f4267216038 R14: 00007f4267215fa0 R15: 00007ffd12d3a468 [ 1909.863821][ T2786] [ 1911.377364][ T2844] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9672'. [ 1911.493602][ T2844] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1911.511311][ T2844] CPU: 0 PID: 2844 Comm: syz.0.9672 Not tainted syzkaller #0 [ 1911.518786][ T2844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1911.528888][ T2844] Call Trace: [ 1911.532206][ T2844] [ 1911.535158][ T2844] dump_stack_lvl+0x188/0x24e [ 1911.539883][ T2844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1911.546074][ T2844] ? show_regs_print_info+0x12/0x12 [ 1911.551307][ T2844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1911.557500][ T2844] ? dump_stack+0x5/0x12 [ 1911.561785][ T2844] sysfs_warn_dup+0x8a/0xa0 [ 1911.566324][ T2844] sysfs_do_create_link_sd+0xc0/0x110 [ 1911.571737][ T2844] device_add+0x7ed/0xfb0 [ 1911.576128][ T2844] wiphy_register+0x1d9f/0x2ac0 [ 1911.581034][ T2844] ? cfg80211_event_work+0x40/0x40 [ 1911.586185][ T2844] ? minstrel_ht_alloc+0x894/0xa20 [ 1911.591366][ T2844] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1911.597464][ T2844] ieee80211_register_hw+0x2d00/0x39f0 [ 1911.602959][ T2844] ? lock_chain_count+0x20/0x20 [ 1911.607864][ T2844] ? ieee80211_register_hw+0xee1/0x39f0 [ 1911.613446][ T2844] ? ieee80211_register_hw+0xee1/0x39f0 [ 1911.619030][ T2844] ? ieee80211_tasklet_handler+0x20/0x20 [ 1911.624707][ T2844] ? rcu_is_watching+0x56/0xa0 [ 1911.629514][ T2844] ? memset+0x1e/0x40 [ 1911.633528][ T2844] ? __hrtimer_init+0x186/0x270 [ 1911.638415][ T2844] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1911.644192][ T2844] hwsim_new_radio_nl+0xafa/0xce0 [ 1911.649267][ T2844] genl_family_rcv_msg_doit+0x22a/0x330 [ 1911.654838][ T2844] ? end_current_label_crit_section+0x170/0x170 [ 1911.661114][ T2844] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1911.667047][ T2844] ? bpf_lsm_capable+0x5/0x10 [ 1911.671777][ T2844] ? security_capable+0x85/0xb0 [ 1911.676676][ T2844] genl_rcv_msg+0x604/0x790 [ 1911.681215][ T2844] ? genl_bind+0x360/0x360 [ 1911.685660][ T2844] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1911.692050][ T2844] netlink_rcv_skb+0x1fb/0x450 [ 1911.696873][ T2844] ? genl_bind+0x360/0x360 [ 1911.701334][ T2844] ? netlink_ack+0x1170/0x1170 [ 1911.706161][ T2844] ? down_read+0x1a8/0x2d0 [ 1911.710642][ T2844] genl_rcv+0x24/0x40 [ 1911.714670][ T2844] netlink_unicast+0x74d/0x8d0 [ 1911.719494][ T2844] netlink_sendmsg+0x8ad/0xbd0 [ 1911.724306][ T2844] ? netlink_getsockopt+0x550/0x550 [ 1911.729550][ T2844] ? aa_sock_msg_perm+0x94/0x150 [ 1911.734519][ T2844] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1911.739832][ T2844] ? security_socket_sendmsg+0x7c/0xa0 [ 1911.745354][ T2844] ? netlink_getsockopt+0x550/0x550 [ 1911.750603][ T2844] ____sys_sendmsg+0x5be/0x970 [ 1911.755424][ T2844] ? __sys_sendmsg_sock+0x30/0x30 [ 1911.760507][ T2844] ? __import_iovec+0x315/0x500 [ 1911.765404][ T2844] ? import_iovec+0x6f/0xa0 [ 1911.769951][ T2844] ___sys_sendmsg+0x2a2/0x360 [ 1911.774682][ T2844] ? __sys_sendmsg+0x290/0x290 [ 1911.779506][ T2844] ? ktime_get_real_ts64+0x440/0x440 [ 1911.784868][ T2844] __se_sys_sendmsg+0x1bb/0x2a0 [ 1911.789802][ T2844] ? ct_nmi_exit+0x145/0x1c0 [ 1911.794424][ T2844] ? __x64_sys_sendmsg+0x80/0x80 [ 1911.799410][ T2844] ? lockdep_hardirqs_on+0x94/0x140 [ 1911.804642][ T2844] do_syscall_64+0x4c/0xa0 [ 1911.809099][ T2844] ? clear_bhb_loop+0x60/0xb0 [ 1911.813816][ T2844] ? clear_bhb_loop+0x60/0xb0 [ 1911.818535][ T2844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1911.824486][ T2844] RIP: 0033:0x7f4266f9c799 [ 1911.828957][ T2844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.848608][ T2844] RSP: 002b:00007f4267e6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1911.857087][ T2844] RAX: ffffffffffffffda RBX: 00007f4267215fa0 RCX: 00007f4266f9c799 [ 1911.865095][ T2844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1911.873104][ T2844] RBP: 00007f4267032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1911.881135][ T2844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1911.889136][ T2844] R13: 00007f4267216038 R14: 00007f4267215fa0 R15: 00007ffd12d3a468 [ 1911.897163][ T2844] [ 1912.304897][ T2851] netlink: 'syz.3.9674': attribute type 1 has an invalid length. [ 1912.417351][ T2851] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9674'. [ 1912.648529][ T2859] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9677'. [ 1912.784424][ T2859] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1912.831524][ T2859] CPU: 0 PID: 2859 Comm: syz.2.9677 Not tainted syzkaller #0 [ 1912.839005][ T2859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1912.849111][ T2859] Call Trace: [ 1912.852424][ T2859] [ 1912.855387][ T2859] dump_stack_lvl+0x188/0x24e [ 1912.860114][ T2859] ? show_regs_print_info+0x12/0x12 [ 1912.865355][ T2859] ? load_image+0x400/0x400 [ 1912.869905][ T2859] sysfs_warn_dup+0x8a/0xa0 [ 1912.874451][ T2859] sysfs_do_create_link_sd+0xc0/0x110 [ 1912.879865][ T2859] device_add+0x7ed/0xfb0 [ 1912.884242][ T2859] wiphy_register+0x1d9f/0x2ac0 [ 1912.889145][ T2859] ? cfg80211_event_work+0x40/0x40 [ 1912.894298][ T2859] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1912.900540][ T2859] ? ieee80211_register_hw+0x27e1/0x39f0 [ 1912.906222][ T2859] ? ieee80211_register_hw+0x28b7/0x39f0 [ 1912.911906][ T2859] ieee80211_register_hw+0x2d00/0x39f0 [ 1912.917411][ T2859] ? lockdep_hardirqs_on+0x94/0x140 [ 1912.922647][ T2859] ? ieee80211_register_hw+0xee1/0x39f0 [ 1912.928223][ T2859] ? ieee80211_register_hw+0xee1/0x39f0 [ 1912.933814][ T2859] ? ieee80211_tasklet_handler+0x20/0x20 [ 1912.939496][ T2859] ? memset+0x1e/0x40 [ 1912.943680][ T2859] ? __hrtimer_init+0x186/0x270 [ 1912.948564][ T2859] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1912.954354][ T2859] hwsim_new_radio_nl+0xafa/0xce0 [ 1912.959426][ T2859] genl_family_rcv_msg_doit+0x22a/0x330 [ 1912.965000][ T2859] ? end_current_label_crit_section+0x170/0x170 [ 1912.971271][ T2859] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1912.977199][ T2859] ? bpf_lsm_capable+0x5/0x10 [ 1912.981901][ T2859] ? security_capable+0x85/0xb0 [ 1912.986784][ T2859] genl_rcv_msg+0x604/0x790 [ 1912.991327][ T2859] ? genl_bind+0x360/0x360 [ 1912.995791][ T2859] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1913.002175][ T2859] netlink_rcv_skb+0x1fb/0x450 [ 1913.006973][ T2859] ? genl_bind+0x360/0x360 [ 1913.011417][ T2859] ? netlink_ack+0x1170/0x1170 [ 1913.016239][ T2859] ? down_read+0x1a8/0x2d0 [ 1913.020699][ T2859] genl_rcv+0x24/0x40 [ 1913.024707][ T2859] netlink_unicast+0x74d/0x8d0 [ 1913.029515][ T2859] netlink_sendmsg+0x8ad/0xbd0 [ 1913.034326][ T2859] ? netlink_getsockopt+0x550/0x550 [ 1913.039562][ T2859] ? aa_sock_msg_perm+0x94/0x150 [ 1913.044530][ T2859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1913.049850][ T2859] ? security_socket_sendmsg+0x7c/0xa0 [ 1913.055345][ T2859] ? netlink_getsockopt+0x550/0x550 [ 1913.060617][ T2859] ____sys_sendmsg+0x5be/0x970 [ 1913.065432][ T2859] ? __sys_sendmsg_sock+0x30/0x30 [ 1913.070524][ T2859] ? __import_iovec+0x315/0x500 [ 1913.075417][ T2859] ? import_iovec+0x6f/0xa0 [ 1913.079947][ T2859] ___sys_sendmsg+0x2a2/0x360 [ 1913.084672][ T2859] ? __sys_sendmsg+0x290/0x290 [ 1913.089535][ T2859] __se_sys_sendmsg+0x1bb/0x2a0 [ 1913.094426][ T2859] ? __x64_sys_sendmsg+0x80/0x80 [ 1913.099411][ T2859] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1913.105329][ T2859] do_syscall_64+0x4c/0xa0 [ 1913.109774][ T2859] ? clear_bhb_loop+0x60/0xb0 [ 1913.114470][ T2859] ? clear_bhb_loop+0x60/0xb0 [ 1913.119174][ T2859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1913.125094][ T2859] RIP: 0033:0x7fc38459c799 [ 1913.129568][ T2859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1913.149211][ T2859] RSP: 002b:00007fc385462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1913.157655][ T2859] RAX: ffffffffffffffda RBX: 00007fc384815fa0 RCX: 00007fc38459c799 [ 1913.165651][ T2859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1913.173663][ T2859] RBP: 00007fc384632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1913.181735][ T2859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1913.189725][ T2859] R13: 00007fc384816038 R14: 00007fc384815fa0 R15: 00007ffe3237a088 [ 1913.197740][ T2859] [ 1913.488255][ T2869] netlink: 'syz.5.9680': attribute type 21 has an invalid length. [ 1913.919526][ T2872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9680'. [ 1914.161728][ T2882] FAULT_INJECTION: forcing a failure. [ 1914.161728][ T2882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1914.183923][ T2882] CPU: 0 PID: 2882 Comm: syz.2.9684 Not tainted syzkaller #0 [ 1914.191391][ T2882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1914.201500][ T2882] Call Trace: [ 1914.204825][ T2882] [ 1914.207800][ T2882] dump_stack_lvl+0x188/0x24e [ 1914.212540][ T2882] ? show_regs_print_info+0x12/0x12 [ 1914.217864][ T2882] ? load_image+0x400/0x400 [ 1914.222441][ T2882] ? __lock_acquire+0x7d10/0x7d10 [ 1914.227553][ T2882] should_fail_ex+0x399/0x4d0 [ 1914.232294][ T2882] _copy_from_user+0x2c/0x170 [ 1914.237064][ T2882] __copy_msghdr+0x3b7/0x580 [ 1914.241725][ T2882] ___sys_sendmsg+0x210/0x360 [ 1914.246496][ T2882] ? __sys_sendmsg+0x290/0x290 [ 1914.251371][ T2882] ? __lock_acquire+0x7d10/0x7d10 [ 1914.256513][ T2882] __se_sys_sendmsg+0x1bb/0x2a0 [ 1914.261453][ T2882] ? ct_nmi_exit+0x145/0x1c0 [ 1914.266098][ T2882] ? __x64_sys_sendmsg+0x80/0x80 [ 1914.271137][ T2882] ? lockdep_hardirqs_on+0x94/0x140 [ 1914.276489][ T2882] do_syscall_64+0x4c/0xa0 [ 1914.280990][ T2882] ? clear_bhb_loop+0x60/0xb0 [ 1914.285729][ T2882] ? clear_bhb_loop+0x60/0xb0 [ 1914.290483][ T2882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1914.296440][ T2882] RIP: 0033:0x7fc38459c799 [ 1914.300916][ T2882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.320582][ T2882] RSP: 002b:00007fc385462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1914.329070][ T2882] RAX: ffffffffffffffda RBX: 00007fc384815fa0 RCX: 00007fc38459c799 [ 1914.337105][ T2882] RDX: 000000002004c081 RSI: 0000200000000140 RDI: 0000000000000006 [ 1914.345128][ T2882] RBP: 00007fc385462090 R08: 0000000000000000 R09: 0000000000000000 [ 1914.353162][ T2882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.361187][ T2882] R13: 00007fc384816038 R14: 00007fc384815fa0 R15: 00007ffe3237a088 [ 1914.369248][ T2882] [ 1914.404274][ T2887] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9686'. [ 1914.465174][ T2887] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1914.489201][ T2887] CPU: 1 PID: 2887 Comm: syz.3.9686 Not tainted syzkaller #0 [ 1914.496683][ T2887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1914.506776][ T2887] Call Trace: [ 1914.510080][ T2887] [ 1914.513033][ T2887] dump_stack_lvl+0x188/0x24e [ 1914.517754][ T2887] ? show_regs_print_info+0x12/0x12 [ 1914.522984][ T2887] ? load_image+0x400/0x400 [ 1914.527529][ T2887] sysfs_warn_dup+0x8a/0xa0 [ 1914.532070][ T2887] sysfs_do_create_link_sd+0xc0/0x110 [ 1914.537476][ T2887] device_add+0x7ed/0xfb0 [ 1914.541860][ T2887] wiphy_register+0x1d9f/0x2ac0 [ 1914.546759][ T2887] ? cfg80211_event_work+0x40/0x40 [ 1914.551905][ T2887] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1914.558105][ T2887] ieee80211_register_hw+0x2d00/0x39f0 [ 1914.563615][ T2887] ? ieee80211_register_hw+0xee1/0x39f0 [ 1914.569217][ T2887] ? ieee80211_register_hw+0xee1/0x39f0 [ 1914.574828][ T2887] ? ieee80211_tasklet_handler+0x20/0x20 [ 1914.580527][ T2887] ? memset+0x1e/0x40 [ 1914.584547][ T2887] ? __hrtimer_init+0x186/0x270 [ 1914.589449][ T2887] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1914.595219][ T2887] hwsim_new_radio_nl+0xafa/0xce0 [ 1914.600287][ T2887] genl_family_rcv_msg_doit+0x22a/0x330 [ 1914.605868][ T2887] ? end_current_label_crit_section+0x170/0x170 [ 1914.612145][ T2887] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1914.618071][ T2887] ? bpf_lsm_capable+0x5/0x10 [ 1914.622772][ T2887] ? security_capable+0x85/0xb0 [ 1914.627649][ T2887] genl_rcv_msg+0x604/0x790 [ 1914.632192][ T2887] ? genl_bind+0x360/0x360 [ 1914.636755][ T2887] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1914.643167][ T2887] netlink_rcv_skb+0x1fb/0x450 [ 1914.647987][ T2887] ? genl_bind+0x360/0x360 [ 1914.652438][ T2887] ? netlink_ack+0x1170/0x1170 [ 1914.657248][ T2887] ? down_read+0x1a8/0x2d0 [ 1914.661741][ T2887] genl_rcv+0x24/0x40 [ 1914.665840][ T2887] netlink_unicast+0x74d/0x8d0 [ 1914.670658][ T2887] netlink_sendmsg+0x8ad/0xbd0 [ 1914.675477][ T2887] ? netlink_getsockopt+0x550/0x550 [ 1914.680713][ T2887] ? aa_sock_msg_perm+0x94/0x150 [ 1914.685678][ T2887] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1914.690997][ T2887] ? security_socket_sendmsg+0x7c/0xa0 [ 1914.696490][ T2887] ? netlink_getsockopt+0x550/0x550 [ 1914.701719][ T2887] ____sys_sendmsg+0x5be/0x970 [ 1914.706519][ T2887] ? __sys_sendmsg_sock+0x30/0x30 [ 1914.711591][ T2887] ? __import_iovec+0x315/0x500 [ 1914.716473][ T2887] ? import_iovec+0x6f/0xa0 [ 1914.721005][ T2887] ___sys_sendmsg+0x2a2/0x360 [ 1914.725720][ T2887] ? try_to_wake_up+0x6ae/0x1080 [ 1914.730696][ T2887] ? __sys_sendmsg+0x290/0x290 [ 1914.735572][ T2887] __se_sys_sendmsg+0x1bb/0x2a0 [ 1914.740476][ T2887] ? __x64_sys_sendmsg+0x80/0x80 [ 1914.745907][ T2887] ? lockdep_hardirqs_on+0x94/0x140 [ 1914.751142][ T2887] do_syscall_64+0x4c/0xa0 [ 1914.755596][ T2887] ? clear_bhb_loop+0x60/0xb0 [ 1914.760305][ T2887] ? clear_bhb_loop+0x60/0xb0 [ 1914.765016][ T2887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1914.770942][ T2887] RIP: 0033:0x7f4c8819c799 [ 1914.775383][ T2887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.795045][ T2887] RSP: 002b:00007f4c890e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1914.803518][ T2887] RAX: ffffffffffffffda RBX: 00007f4c88416090 RCX: 00007f4c8819c799 [ 1914.811604][ T2887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1914.819608][ T2887] RBP: 00007f4c88232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1914.827608][ T2887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1914.835674][ T2887] R13: 00007f4c88416128 R14: 00007f4c88416090 R15: 00007fff184669a8 [ 1914.843705][ T2887] [ 1914.848340][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.854762][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1918.827043][ T2940] netlink: 'syz.1.9699': attribute type 5 has an invalid length. [ 1919.686544][ T2954] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9703'. [ 1919.874697][ T2956] netlink: 'syz.3.9704': attribute type 1 has an invalid length. [ 1919.896767][ T2956] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.9704'. [ 1920.352361][ T2967] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1920.437183][ T2971] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1920.696522][ T2970] netlink: 'syz.2.9711': attribute type 27 has an invalid length. [ 1922.410050][ T2970] bond0: (slave bond_slave_0): Releasing backup interface [ 1922.923341][ T3011] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9725'. [ 1923.155737][ T3019] netlink: 'syz.0.9727': attribute type 29 has an invalid length. [ 1923.186224][ T3022] netlink: 'syz.3.9728': attribute type 11 has an invalid length. [ 1923.194600][ T3022] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9728'. [ 1923.250936][ T3019] netlink: 'syz.0.9727': attribute type 29 has an invalid length. [ 1923.286756][ T3019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1923.330206][ T3019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1923.362869][ T3026] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9729'. [ 1923.394304][ T3030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1923.424023][ T3024] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1923.469697][ T3026] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1923.492304][ T3026] CPU: 1 PID: 3026 Comm: syz.1.9729 Not tainted syzkaller #0 [ 1923.499769][ T3026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1923.509880][ T3026] Call Trace: [ 1923.513196][ T3026] [ 1923.516159][ T3026] dump_stack_lvl+0x188/0x24e [ 1923.520882][ T3026] ? show_regs_print_info+0x12/0x12 [ 1923.526111][ T3026] ? load_image+0x400/0x400 [ 1923.530664][ T3026] sysfs_warn_dup+0x8a/0xa0 [ 1923.535218][ T3026] sysfs_do_create_link_sd+0xc0/0x110 [ 1923.540626][ T3026] device_add+0x7ed/0xfb0 [ 1923.545008][ T3026] wiphy_register+0x1d9f/0x2ac0 [ 1923.549913][ T3026] ? cfg80211_event_work+0x40/0x40 [ 1923.555065][ T3026] ? minstrel_ht_alloc+0x894/0xa20 [ 1923.560261][ T3026] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1923.566369][ T3026] ieee80211_register_hw+0x2d00/0x39f0 [ 1923.571874][ T3026] ? lockdep_hardirqs_on+0x94/0x140 [ 1923.577109][ T3026] ? ieee80211_register_hw+0xee1/0x39f0 [ 1923.582682][ T3026] ? ieee80211_register_hw+0xee1/0x39f0 [ 1923.588276][ T3026] ? ieee80211_tasklet_handler+0x20/0x20 [ 1923.593954][ T3026] ? memset+0x1e/0x40 [ 1923.597963][ T3026] ? __hrtimer_init+0x186/0x270 [ 1923.602857][ T3026] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1923.608643][ T3026] hwsim_new_radio_nl+0xafa/0xce0 [ 1923.613744][ T3026] genl_family_rcv_msg_doit+0x22a/0x330 [ 1923.619316][ T3026] ? end_current_label_crit_section+0x170/0x170 [ 1923.625593][ T3026] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1923.631521][ T3026] ? bpf_lsm_capable+0x5/0x10 [ 1923.636231][ T3026] ? security_capable+0x85/0xb0 [ 1923.641114][ T3026] genl_rcv_msg+0x604/0x790 [ 1923.645654][ T3026] ? genl_bind+0x360/0x360 [ 1923.650104][ T3026] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1923.656492][ T3026] netlink_rcv_skb+0x1fb/0x450 [ 1923.661291][ T3026] ? genl_bind+0x360/0x360 [ 1923.665735][ T3026] ? netlink_ack+0x1170/0x1170 [ 1923.670558][ T3026] ? down_read+0x1a8/0x2d0 [ 1923.675018][ T3026] genl_rcv+0x24/0x40 [ 1923.679028][ T3026] netlink_unicast+0x74d/0x8d0 [ 1923.683855][ T3026] netlink_sendmsg+0x8ad/0xbd0 [ 1923.688667][ T3026] ? netlink_getsockopt+0x550/0x550 [ 1923.693923][ T3026] ? netlink_getsockopt+0x550/0x550 [ 1923.699156][ T3026] ____sys_sendmsg+0x5be/0x970 [ 1923.703979][ T3026] ? __sys_sendmsg_sock+0x30/0x30 [ 1923.709039][ T3026] ? __import_iovec+0x315/0x500 [ 1923.713946][ T3026] ? import_iovec+0x6f/0xa0 [ 1923.718477][ T3026] ___sys_sendmsg+0x2a2/0x360 [ 1923.723213][ T3026] ? __sys_sendmsg+0x290/0x290 [ 1923.728042][ T3026] ? ktime_get_real_ts64+0x440/0x440 [ 1923.733392][ T3026] __se_sys_sendmsg+0x1bb/0x2a0 [ 1923.738290][ T3026] ? __x64_sys_sendmsg+0x80/0x80 [ 1923.743290][ T3026] do_syscall_64+0x4c/0xa0 [ 1923.747740][ T3026] ? clear_bhb_loop+0x60/0xb0 [ 1923.752446][ T3026] ? clear_bhb_loop+0x60/0xb0 [ 1923.757160][ T3026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1923.763084][ T3026] RIP: 0033:0x7f6dc3d9c799 [ 1923.767527][ T3026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1923.787282][ T3026] RSP: 002b:00007f6dc4c5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1923.795746][ T3026] RAX: ffffffffffffffda RBX: 00007f6dc4015fa0 RCX: 00007f6dc3d9c799 [ 1923.803766][ T3026] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1923.811772][ T3026] RBP: 00007f6dc3e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1923.819774][ T3026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1923.827781][ T3026] R13: 00007f6dc4016038 R14: 00007f6dc4015fa0 R15: 00007fffe4986c58 [ 1923.835816][ T3026] [ 1923.939024][ T3021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1924.049119][ T3028] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1924.073479][T31481] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1924.085962][ T3028] CPU: 0 PID: 3028 Comm: syz.5.9730 Not tainted syzkaller #0 [ 1924.093419][ T3028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1924.103528][ T3028] Call Trace: [ 1924.106865][ T3028] [ 1924.109836][ T3028] dump_stack_lvl+0x188/0x24e [ 1924.114584][ T3028] ? show_regs_print_info+0x12/0x12 [ 1924.119837][ T3028] ? load_image+0x400/0x400 [ 1924.124393][ T3028] sysfs_warn_dup+0x8a/0xa0 [ 1924.128949][ T3028] sysfs_do_create_link_sd+0xc0/0x110 [ 1924.134371][ T3028] device_add+0x7ed/0xfb0 [ 1924.138775][ T3028] wiphy_register+0x1d9f/0x2ac0 [ 1924.143697][ T3028] ? cfg80211_event_work+0x40/0x40 [ 1924.148858][ T3028] ? minstrel_ht_alloc+0x894/0xa20 [ 1924.154057][ T3028] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1924.160179][ T3028] ieee80211_register_hw+0x2d00/0x39f0 [ 1924.165698][ T3028] ? lockdep_hardirqs_on+0x94/0x140 [ 1924.170955][ T3028] ? ieee80211_register_hw+0xee1/0x39f0 [ 1924.176560][ T3028] ? ieee80211_register_hw+0xee1/0x39f0 [ 1924.182188][ T3028] ? ieee80211_tasklet_handler+0x20/0x20 [ 1924.187887][ T3028] ? memset+0x1e/0x40 [ 1924.191912][ T3028] ? __hrtimer_init+0x186/0x270 [ 1924.196808][ T3028] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1924.202607][ T3028] hwsim_new_radio_nl+0xafa/0xce0 [ 1924.207699][ T3028] genl_family_rcv_msg_doit+0x22a/0x330 [ 1924.213295][ T3028] ? end_current_label_crit_section+0x170/0x170 [ 1924.219591][ T3028] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1924.225549][ T3028] ? bpf_lsm_capable+0x5/0x10 [ 1924.230274][ T3028] ? security_capable+0x85/0xb0 [ 1924.235186][ T3028] genl_rcv_msg+0x604/0x790 [ 1924.239746][ T3028] ? genl_bind+0x360/0x360 [ 1924.244205][ T3028] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1924.250615][ T3028] netlink_rcv_skb+0x1fb/0x450 [ 1924.255463][ T3028] ? genl_bind+0x360/0x360 [ 1924.259944][ T3028] ? netlink_ack+0x1170/0x1170 [ 1924.264766][ T3028] ? down_read+0x1a8/0x2d0 [ 1924.269241][ T3028] genl_rcv+0x24/0x40 [ 1924.273260][ T3028] netlink_unicast+0x74d/0x8d0 [ 1924.278069][ T3028] netlink_sendmsg+0x8ad/0xbd0 [ 1924.282908][ T3028] ? netlink_getsockopt+0x550/0x550 [ 1924.288144][ T3028] ? aa_sock_msg_perm+0x94/0x150 [ 1924.293109][ T3028] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1924.298417][ T3028] ? security_socket_sendmsg+0x7c/0xa0 [ 1924.303916][ T3028] ? netlink_getsockopt+0x550/0x550 [ 1924.309154][ T3028] ____sys_sendmsg+0x5be/0x970 [ 1924.313993][ T3028] ? __sys_sendmsg_sock+0x30/0x30 [ 1924.319056][ T3028] ? ___sys_sendmsg+0x287/0x360 [ 1924.323950][ T3028] ___sys_sendmsg+0x2a2/0x360 [ 1924.328766][ T3028] ? __sys_sendmsg+0x290/0x290 [ 1924.333613][ T3028] __se_sys_sendmsg+0x1bb/0x2a0 [ 1924.338509][ T3028] ? __x64_sys_sendmsg+0x80/0x80 [ 1924.343510][ T3028] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1924.349450][ T3028] do_syscall_64+0x4c/0xa0 [ 1924.353911][ T3028] ? clear_bhb_loop+0x60/0xb0 [ 1924.358622][ T3028] ? clear_bhb_loop+0x60/0xb0 [ 1924.363330][ T3028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1924.369251][ T3028] RIP: 0033:0x7fecb959c799 [ 1924.373688][ T3028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.393354][ T3028] RSP: 002b:00007fecba385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1924.401835][ T3028] RAX: ffffffffffffffda RBX: 00007fecb9815fa0 RCX: 00007fecb959c799 [ 1924.409836][ T3028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1924.417840][ T3028] RBP: 00007fecb9632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1924.425839][ T3028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1924.433840][ T3028] R13: 00007fecb9816038 R14: 00007fecb9815fa0 R15: 00007ffd254f80e8 [ 1924.441858][ T3028] [ 1925.388056][ T3051] __nla_validate_parse: 1 callbacks suppressed [ 1925.388077][ T3051] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9738'. [ 1926.028578][ T3069] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9745'. [ 1926.105178][ T3069] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1926.166094][ T3069] CPU: 0 PID: 3069 Comm: syz.0.9745 Not tainted syzkaller #0 [ 1926.173595][ T3069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1926.183716][ T3069] Call Trace: [ 1926.187035][ T3069] [ 1926.190010][ T3069] dump_stack_lvl+0x188/0x24e [ 1926.194751][ T3069] ? show_regs_print_info+0x12/0x12 [ 1926.200021][ T3069] ? load_image+0x400/0x400 [ 1926.204618][ T3069] sysfs_warn_dup+0x8a/0xa0 [ 1926.209189][ T3069] sysfs_do_create_link_sd+0xc0/0x110 [ 1926.214655][ T3069] device_add+0x7ed/0xfb0 [ 1926.219062][ T3069] wiphy_register+0x1d9f/0x2ac0 [ 1926.223986][ T3069] ? cfg80211_event_work+0x40/0x40 [ 1926.229152][ T3069] ? minstrel_ht_alloc+0x894/0xa20 [ 1926.234374][ T3069] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1926.240502][ T3069] ieee80211_register_hw+0x2d00/0x39f0 [ 1926.246044][ T3069] ? ieee80211_register_hw+0xee1/0x39f0 [ 1926.251661][ T3069] ? ieee80211_register_hw+0xee1/0x39f0 [ 1926.257288][ T3069] ? ieee80211_tasklet_handler+0x20/0x20 [ 1926.262985][ T3069] ? memset+0x1e/0x40 [ 1926.267017][ T3069] ? __hrtimer_init+0x186/0x270 [ 1926.271924][ T3069] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1926.277732][ T3069] hwsim_new_radio_nl+0xafa/0xce0 [ 1926.282846][ T3069] genl_family_rcv_msg_doit+0x22a/0x330 [ 1926.288446][ T3069] ? end_current_label_crit_section+0x170/0x170 [ 1926.294742][ T3069] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1926.300717][ T3069] ? bpf_lsm_capable+0x5/0x10 [ 1926.305546][ T3069] ? security_capable+0x85/0xb0 [ 1926.310470][ T3069] genl_rcv_msg+0x604/0x790 [ 1926.315042][ T3069] ? genl_bind+0x360/0x360 [ 1926.319518][ T3069] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1926.325969][ T3069] netlink_rcv_skb+0x1fb/0x450 [ 1926.330802][ T3069] ? genl_bind+0x360/0x360 [ 1926.335274][ T3069] ? netlink_ack+0x1170/0x1170 [ 1926.340111][ T3069] ? down_read+0x1a8/0x2d0 [ 1926.344597][ T3069] genl_rcv+0x24/0x40 [ 1926.348626][ T3069] netlink_unicast+0x74d/0x8d0 [ 1926.353479][ T3069] netlink_sendmsg+0x8ad/0xbd0 [ 1926.358341][ T3069] ? netlink_getsockopt+0x550/0x550 [ 1926.363615][ T3069] ? aa_sock_msg_perm+0x94/0x150 [ 1926.368608][ T3069] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1926.373949][ T3069] ? security_socket_sendmsg+0x7c/0xa0 [ 1926.379473][ T3069] ? netlink_getsockopt+0x550/0x550 [ 1926.384750][ T3069] ____sys_sendmsg+0x5be/0x970 [ 1926.389602][ T3069] ? __sys_sendmsg_sock+0x30/0x30 [ 1926.394699][ T3069] ? __import_iovec+0x315/0x500 [ 1926.399623][ T3069] ? import_iovec+0x6f/0xa0 [ 1926.404293][ T3069] ___sys_sendmsg+0x2a2/0x360 [ 1926.409035][ T3069] ? try_to_wake_up+0x6ae/0x1080 [ 1926.414043][ T3069] ? __sys_sendmsg+0x290/0x290 [ 1926.418944][ T3069] __se_sys_sendmsg+0x1bb/0x2a0 [ 1926.423859][ T3069] ? ct_nmi_exit+0x145/0x1c0 [ 1926.428511][ T3069] ? __x64_sys_sendmsg+0x80/0x80 [ 1926.433891][ T3069] ? lockdep_hardirqs_on+0x94/0x140 [ 1926.439167][ T3069] do_syscall_64+0x4c/0xa0 [ 1926.443642][ T3069] ? clear_bhb_loop+0x60/0xb0 [ 1926.448376][ T3069] ? clear_bhb_loop+0x60/0xb0 [ 1926.453108][ T3069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1926.459068][ T3069] RIP: 0033:0x7f4266f9c799 [ 1926.463532][ T3069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1926.483225][ T3069] RSP: 002b:00007f4267e4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1926.491698][ T3069] RAX: ffffffffffffffda RBX: 00007f4267216090 RCX: 00007f4266f9c799 [ 1926.499730][ T3069] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1926.507753][ T3069] RBP: 00007f4267032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1926.515781][ T3069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1926.523825][ T3069] R13: 00007f4267216128 R14: 00007f4267216090 R15: 00007ffd12d3a468 [ 1926.531867][ T3069] [ 1926.697196][ T3072] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9746'. [ 1926.729415][ T3072] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1926.769004][ T3072] CPU: 0 PID: 3072 Comm: syz.3.9746 Not tainted syzkaller #0 [ 1926.776515][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1926.786630][ T3072] Call Trace: [ 1926.789965][ T3072] [ 1926.792939][ T3072] dump_stack_lvl+0x188/0x24e [ 1926.797722][ T3072] ? show_regs_print_info+0x12/0x12 [ 1926.803042][ T3072] ? load_image+0x400/0x400 [ 1926.807614][ T3072] sysfs_warn_dup+0x8a/0xa0 [ 1926.812193][ T3072] sysfs_do_create_link_sd+0xc0/0x110 [ 1926.817633][ T3072] device_add+0x7ed/0xfb0 [ 1926.822042][ T3072] wiphy_register+0x1d9f/0x2ac0 [ 1926.826996][ T3072] ? cfg80211_event_work+0x40/0x40 [ 1926.832169][ T3072] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1926.838400][ T3072] ? rtnl_unlock+0x5/0x10 [ 1926.842790][ T3072] ieee80211_register_hw+0x2d00/0x39f0 [ 1926.848317][ T3072] ? lockdep_hardirqs_on+0x94/0x140 [ 1926.853583][ T3072] ? ieee80211_register_hw+0xee1/0x39f0 [ 1926.859228][ T3072] ? ieee80211_register_hw+0xee1/0x39f0 [ 1926.864842][ T3072] ? ieee80211_tasklet_handler+0x20/0x20 [ 1926.870548][ T3072] ? memset+0x1e/0x40 [ 1926.874581][ T3072] ? __hrtimer_init+0x186/0x270 [ 1926.879493][ T3072] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1926.885308][ T3072] hwsim_new_radio_nl+0xafa/0xce0 [ 1926.890427][ T3072] genl_family_rcv_msg_doit+0x22a/0x330 [ 1926.896028][ T3072] ? end_current_label_crit_section+0x170/0x170 [ 1926.902327][ T3072] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1926.908278][ T3072] ? bpf_lsm_capable+0x5/0x10 [ 1926.913007][ T3072] ? security_capable+0x85/0xb0 [ 1926.917916][ T3072] genl_rcv_msg+0x604/0x790 [ 1926.922485][ T3072] ? genl_bind+0x360/0x360 [ 1926.926951][ T3072] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1926.933431][ T3072] netlink_rcv_skb+0x1fb/0x450 [ 1926.938271][ T3072] ? genl_bind+0x360/0x360 [ 1926.942736][ T3072] ? netlink_ack+0x1170/0x1170 [ 1926.947571][ T3072] ? down_read+0x1a8/0x2d0 [ 1926.952054][ T3072] genl_rcv+0x24/0x40 [ 1926.956091][ T3072] netlink_unicast+0x74d/0x8d0 [ 1926.960934][ T3072] netlink_sendmsg+0x8ad/0xbd0 [ 1926.965765][ T3072] ? netlink_getsockopt+0x550/0x550 [ 1926.971019][ T3072] ? aa_sock_msg_perm+0x94/0x150 [ 1926.976008][ T3072] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1926.981346][ T3072] ? security_socket_sendmsg+0x7c/0xa0 [ 1926.986876][ T3072] ? netlink_getsockopt+0x550/0x550 [ 1926.992130][ T3072] ____sys_sendmsg+0x5be/0x970 [ 1926.996963][ T3072] ? __sys_sendmsg_sock+0x30/0x30 [ 1927.002041][ T3072] ? __import_iovec+0x315/0x500 [ 1927.006954][ T3072] ? import_iovec+0x6f/0xa0 [ 1927.011595][ T3072] ___sys_sendmsg+0x2a2/0x360 [ 1927.016350][ T3072] ? __sys_sendmsg+0x290/0x290 [ 1927.021223][ T3072] __se_sys_sendmsg+0x1bb/0x2a0 [ 1927.026128][ T3072] ? ct_nmi_exit+0x145/0x1c0 [ 1927.030771][ T3072] ? __x64_sys_sendmsg+0x80/0x80 [ 1927.035795][ T3072] ? lockdep_hardirqs_on+0x94/0x140 [ 1927.041051][ T3072] do_syscall_64+0x4c/0xa0 [ 1927.045526][ T3072] ? clear_bhb_loop+0x60/0xb0 [ 1927.050251][ T3072] ? clear_bhb_loop+0x60/0xb0 [ 1927.055003][ T3072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1927.060959][ T3072] RIP: 0033:0x7f4c8819c799 [ 1927.065418][ T3072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1927.085083][ T3072] RSP: 002b:00007f4c89103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1927.093555][ T3072] RAX: ffffffffffffffda RBX: 00007f4c88415fa0 RCX: 00007f4c8819c799 [ 1927.101581][ T3072] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1927.109610][ T3072] RBP: 00007f4c88232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1927.117639][ T3072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1927.125664][ T3072] R13: 00007f4c88416038 R14: 00007f4c88415fa0 R15: 00007fff184669a8 [ 1927.133714][ T3072] [ 1927.401318][ T3080] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1927.460897][ T3080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1927.486670][ T3080] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1927.646410][ T3088] netlink: 'syz.1.9751': attribute type 1 has an invalid length. [ 1927.734123][ T3088] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1929.212858][ T3110] netlink: 'syz.2.9756': attribute type 10 has an invalid length. [ 1929.250245][ T3110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9756'. [ 1929.285820][ T3110] bridge0: port 3(veth0_vlan) entered blocking state [ 1929.302961][ T3110] bridge0: port 3(veth0_vlan) entered disabled state [ 1929.321566][ T3115] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9760'. [ 1929.340120][ T3110] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1929.359085][ T3115] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1929.373054][ T3115] CPU: 0 PID: 3115 Comm: syz.0.9760 Not tainted syzkaller #0 [ 1929.380519][ T3115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1929.390637][ T3115] Call Trace: [ 1929.393959][ T3115] [ 1929.396924][ T3115] dump_stack_lvl+0x188/0x24e [ 1929.401685][ T3115] ? show_regs_print_info+0x12/0x12 [ 1929.406942][ T3115] ? load_image+0x400/0x400 [ 1929.411506][ T3115] sysfs_warn_dup+0x8a/0xa0 [ 1929.416070][ T3115] sysfs_do_create_link_sd+0xc0/0x110 [ 1929.421503][ T3115] device_add+0x7ed/0xfb0 [ 1929.425909][ T3115] wiphy_register+0x1d9f/0x2ac0 [ 1929.430823][ T3115] ? cfg80211_event_work+0x40/0x40 [ 1929.435974][ T3115] ? minstrel_ht_alloc+0x894/0xa20 [ 1929.441122][ T3115] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1929.447222][ T3115] ieee80211_register_hw+0x2d00/0x39f0 [ 1929.452725][ T3115] ? ieee80211_register_hw+0xee1/0x39f0 [ 1929.458305][ T3115] ? ieee80211_register_hw+0xee1/0x39f0 [ 1929.463938][ T3115] ? ieee80211_tasklet_handler+0x20/0x20 [ 1929.469611][ T3115] ? memset+0x1e/0x40 [ 1929.473623][ T3115] ? __hrtimer_init+0x186/0x270 [ 1929.478503][ T3115] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1929.484265][ T3115] hwsim_new_radio_nl+0xafa/0xce0 [ 1929.489355][ T3115] genl_family_rcv_msg_doit+0x22a/0x330 [ 1929.494931][ T3115] ? end_current_label_crit_section+0x170/0x170 [ 1929.501200][ T3115] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1929.507119][ T3115] ? bpf_lsm_capable+0x5/0x10 [ 1929.511844][ T3115] ? security_capable+0x85/0xb0 [ 1929.516723][ T3115] genl_rcv_msg+0x604/0x790 [ 1929.521257][ T3115] ? genl_bind+0x360/0x360 [ 1929.525704][ T3115] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1929.532079][ T3115] netlink_rcv_skb+0x1fb/0x450 [ 1929.536876][ T3115] ? genl_bind+0x360/0x360 [ 1929.541315][ T3115] ? netlink_ack+0x1170/0x1170 [ 1929.546121][ T3115] ? down_read+0x1a8/0x2d0 [ 1929.550570][ T3115] genl_rcv+0x24/0x40 [ 1929.554576][ T3115] netlink_unicast+0x74d/0x8d0 [ 1929.559384][ T3115] netlink_sendmsg+0x8ad/0xbd0 [ 1929.564192][ T3115] ? netlink_getsockopt+0x550/0x550 [ 1929.569446][ T3115] ? aa_sock_msg_perm+0x94/0x150 [ 1929.574411][ T3115] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1929.579749][ T3115] ? security_socket_sendmsg+0x7c/0xa0 [ 1929.585247][ T3115] ? netlink_getsockopt+0x550/0x550 [ 1929.590486][ T3115] ____sys_sendmsg+0x5be/0x970 [ 1929.595299][ T3115] ? __sys_sendmsg_sock+0x30/0x30 [ 1929.600354][ T3115] ? __import_iovec+0x315/0x500 [ 1929.605235][ T3115] ? import_iovec+0x6f/0xa0 [ 1929.609774][ T3115] ___sys_sendmsg+0x2a2/0x360 [ 1929.614489][ T3115] ? try_to_wake_up+0x67c/0x1080 [ 1929.619489][ T3115] ? __sys_sendmsg+0x290/0x290 [ 1929.624327][ T3115] __se_sys_sendmsg+0x1bb/0x2a0 [ 1929.629211][ T3115] ? ct_nmi_exit+0x145/0x1c0 [ 1929.633827][ T3115] ? __x64_sys_sendmsg+0x80/0x80 [ 1929.638802][ T3115] ? lockdep_hardirqs_on+0x94/0x140 [ 1929.644029][ T3115] do_syscall_64+0x4c/0xa0 [ 1929.648505][ T3115] ? clear_bhb_loop+0x60/0xb0 [ 1929.653212][ T3115] ? clear_bhb_loop+0x60/0xb0 [ 1929.657946][ T3115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1929.663870][ T3115] RIP: 0033:0x7f4266f9c799 [ 1929.668329][ T3115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1929.687965][ T3115] RSP: 002b:00007f4267e4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1929.696412][ T3115] RAX: ffffffffffffffda RBX: 00007f4267216090 RCX: 00007f4266f9c799 [ 1929.704408][ T3115] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1929.712409][ T3115] RBP: 00007f4267032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1929.720427][ T3115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1929.728423][ T3115] R13: 00007f4267216128 R14: 00007f4267216090 R15: 00007ffd12d3a468 [ 1929.736442][ T3115] [ 1929.943056][ T3123] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9763'. [ 1929.988832][ T3123] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1930.020777][ T3123] CPU: 1 PID: 3123 Comm: syz.2.9763 Not tainted syzkaller #0 [ 1930.028259][ T3123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1930.038369][ T3123] Call Trace: [ 1930.041695][ T3123] [ 1930.044676][ T3123] dump_stack_lvl+0x188/0x24e [ 1930.049418][ T3123] ? show_regs_print_info+0x12/0x12 [ 1930.054685][ T3123] ? load_image+0x400/0x400 [ 1930.059277][ T3123] sysfs_warn_dup+0x8a/0xa0 [ 1930.063906][ T3123] sysfs_do_create_link_sd+0xc0/0x110 [ 1930.069346][ T3123] device_add+0x7ed/0xfb0 [ 1930.073756][ T3123] wiphy_register+0x1d9f/0x2ac0 [ 1930.078682][ T3123] ? cfg80211_event_work+0x40/0x40 [ 1930.083852][ T3123] ? minstrel_ht_alloc+0x894/0xa20 [ 1930.089028][ T3123] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1930.095182][ T3123] ieee80211_register_hw+0x2d00/0x39f0 [ 1930.100700][ T3123] ? lockdep_hardirqs_on+0x94/0x140 [ 1930.105956][ T3123] ? ieee80211_register_hw+0xee1/0x39f0 [ 1930.111590][ T3123] ? ieee80211_register_hw+0xee1/0x39f0 [ 1930.117189][ T3123] ? ieee80211_tasklet_handler+0x20/0x20 [ 1930.122879][ T3123] ? memset+0x1e/0x40 [ 1930.126881][ T3123] ? __hrtimer_init+0x186/0x270 [ 1930.131768][ T3123] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1930.137529][ T3123] hwsim_new_radio_nl+0xafa/0xce0 [ 1930.142594][ T3123] genl_family_rcv_msg_doit+0x22a/0x330 [ 1930.148160][ T3123] ? end_current_label_crit_section+0x170/0x170 [ 1930.154434][ T3123] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1930.160363][ T3123] ? bpf_lsm_capable+0x5/0x10 [ 1930.165078][ T3123] ? security_capable+0x85/0xb0 [ 1930.169960][ T3123] genl_rcv_msg+0x604/0x790 [ 1930.174501][ T3123] ? genl_bind+0x360/0x360 [ 1930.178946][ T3123] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1930.185321][ T3123] netlink_rcv_skb+0x1fb/0x450 [ 1930.190119][ T3123] ? genl_bind+0x360/0x360 [ 1930.194567][ T3123] ? netlink_ack+0x1170/0x1170 [ 1930.199377][ T3123] ? down_read+0x1a8/0x2d0 [ 1930.203826][ T3123] genl_rcv+0x24/0x40 [ 1930.207832][ T3123] netlink_unicast+0x74d/0x8d0 [ 1930.212644][ T3123] netlink_sendmsg+0x8ad/0xbd0 [ 1930.217479][ T3123] ? netlink_getsockopt+0x550/0x550 [ 1930.222745][ T3123] ? _copy_from_user+0xe7/0x170 [ 1930.227647][ T3123] ? aa_sock_msg_perm+0x94/0x150 [ 1930.232638][ T3123] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1930.237963][ T3123] ? security_socket_sendmsg+0x7c/0xa0 [ 1930.243567][ T3123] ? netlink_getsockopt+0x550/0x550 [ 1930.248813][ T3123] ____sys_sendmsg+0x5be/0x970 [ 1930.253627][ T3123] ? __sys_sendmsg_sock+0x30/0x30 [ 1930.258699][ T3123] ? __import_iovec+0x315/0x500 [ 1930.263589][ T3123] ? import_iovec+0x6f/0xa0 [ 1930.268127][ T3123] ___sys_sendmsg+0x2a2/0x360 [ 1930.272853][ T3123] ? __sys_sendmsg+0x290/0x290 [ 1930.277694][ T3123] __se_sys_sendmsg+0x1bb/0x2a0 [ 1930.282582][ T3123] ? ct_nmi_exit+0x145/0x1c0 [ 1930.287232][ T3123] ? __x64_sys_sendmsg+0x80/0x80 [ 1930.292248][ T3123] ? lockdep_hardirqs_on+0x94/0x140 [ 1930.297487][ T3123] do_syscall_64+0x4c/0xa0 [ 1930.301952][ T3123] ? clear_bhb_loop+0x60/0xb0 [ 1930.306667][ T3123] ? clear_bhb_loop+0x60/0xb0 [ 1930.311378][ T3123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1930.317311][ T3123] RIP: 0033:0x7fc38459c799 [ 1930.321757][ T3123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1930.341394][ T3123] RSP: 002b:00007fc385462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1930.349836][ T3123] RAX: ffffffffffffffda RBX: 00007fc384815fa0 RCX: 00007fc38459c799 [ 1930.357859][ T3123] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1930.365859][ T3123] RBP: 00007fc384632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1930.373854][ T3123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.381860][ T3123] R13: 00007fc384816038 R14: 00007fc384815fa0 R15: 00007ffe3237a088 [ 1930.389885][ T3123] [ 1930.526744][ T3135] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9764'. [ 1930.581650][ T3135] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1930.600550][ T3135] CPU: 0 PID: 3135 Comm: syz.1.9764 Not tainted syzkaller #0 [ 1930.608022][ T3135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1930.618135][ T3135] Call Trace: [ 1930.621461][ T3135] [ 1930.624430][ T3135] dump_stack_lvl+0x188/0x24e [ 1930.629169][ T3135] ? show_regs_print_info+0x12/0x12 [ 1930.634426][ T3135] ? load_image+0x400/0x400 [ 1930.638998][ T3135] sysfs_warn_dup+0x8a/0xa0 [ 1930.643554][ T3135] sysfs_do_create_link_sd+0xc0/0x110 [ 1930.649017][ T3135] device_add+0x7ed/0xfb0 [ 1930.653422][ T3135] wiphy_register+0x1d9f/0x2ac0 [ 1930.658342][ T3135] ? cfg80211_event_work+0x40/0x40 [ 1930.663502][ T3135] ? minstrel_ht_alloc+0x894/0xa20 [ 1930.668698][ T3135] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1930.674853][ T3135] ieee80211_register_hw+0x2d00/0x39f0 [ 1930.680387][ T3135] ? ieee80211_register_hw+0xee1/0x39f0 [ 1930.685990][ T3135] ? ieee80211_register_hw+0xee1/0x39f0 [ 1930.691601][ T3135] ? ieee80211_tasklet_handler+0x20/0x20 [ 1930.697387][ T3135] ? memset+0x1e/0x40 [ 1930.701446][ T3135] ? __hrtimer_init+0x186/0x270 [ 1930.706361][ T3135] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1930.712168][ T3135] hwsim_new_radio_nl+0xafa/0xce0 [ 1930.717263][ T3135] genl_family_rcv_msg_doit+0x22a/0x330 [ 1930.722851][ T3135] ? end_current_label_crit_section+0x170/0x170 [ 1930.729142][ T3135] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1930.735094][ T3135] ? bpf_lsm_capable+0x5/0x10 [ 1930.739822][ T3135] ? security_capable+0x85/0xb0 [ 1930.744725][ T3135] genl_rcv_msg+0x604/0x790 [ 1930.749283][ T3135] ? genl_bind+0x360/0x360 [ 1930.753744][ T3135] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1930.760140][ T3135] netlink_rcv_skb+0x1fb/0x450 [ 1930.764966][ T3135] ? genl_bind+0x360/0x360 [ 1930.769428][ T3135] ? netlink_ack+0x1170/0x1170 [ 1930.774259][ T3135] ? down_read+0x1a8/0x2d0 [ 1930.778734][ T3135] genl_rcv+0x24/0x40 [ 1930.782757][ T3135] netlink_unicast+0x74d/0x8d0 [ 1930.787605][ T3135] netlink_sendmsg+0x8ad/0xbd0 [ 1930.792447][ T3135] ? netlink_getsockopt+0x550/0x550 [ 1930.797698][ T3135] ? aa_sock_msg_perm+0x94/0x150 [ 1930.802788][ T3135] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1930.808127][ T3135] ? security_socket_sendmsg+0x7c/0xa0 [ 1930.813655][ T3135] ? netlink_getsockopt+0x550/0x550 [ 1930.818909][ T3135] ____sys_sendmsg+0x5be/0x970 [ 1930.823743][ T3135] ? __sys_sendmsg_sock+0x30/0x30 [ 1930.828828][ T3135] ? __import_iovec+0x315/0x500 [ 1930.833731][ T3135] ? import_iovec+0x6f/0xa0 [ 1930.838281][ T3135] ___sys_sendmsg+0x2a2/0x360 [ 1930.843014][ T3135] ? try_to_wake_up+0x67c/0x1080 [ 1930.848007][ T3135] ? __sys_sendmsg+0x290/0x290 [ 1930.852880][ T3135] __se_sys_sendmsg+0x1bb/0x2a0 [ 1930.857815][ T3135] ? ct_nmi_exit+0x145/0x1c0 [ 1930.862459][ T3135] ? __x64_sys_sendmsg+0x80/0x80 [ 1930.867465][ T3135] ? lockdep_hardirqs_on+0x94/0x140 [ 1930.872706][ T3135] do_syscall_64+0x4c/0xa0 [ 1930.877178][ T3135] ? clear_bhb_loop+0x60/0xb0 [ 1930.881935][ T3135] ? clear_bhb_loop+0x60/0xb0 [ 1930.886671][ T3135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1930.892789][ T3135] RIP: 0033:0x7f6dc3d9c799 [ 1930.897256][ T3135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1930.916997][ T3135] RSP: 002b:00007f6dc4c18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1930.925485][ T3135] RAX: ffffffffffffffda RBX: 00007f6dc4016180 RCX: 00007f6dc3d9c799 [ 1930.933590][ T3135] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1930.941636][ T3135] RBP: 00007f6dc3e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1930.949656][ T3135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.957761][ T3135] R13: 00007f6dc4016218 R14: 00007f6dc4016180 R15: 00007fffe4986c58 [ 1930.965893][ T3135] [ 1931.388726][ T3144] netlink: 'syz.3.9769': attribute type 1 has an invalid length. [ 1931.471080][ T3144] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9769'. [ 1932.145721][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1932.155924][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1932.166225][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1932.178244][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1932.186185][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1932.193877][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1932.455470][T31485] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.637465][T31485] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.957466][T31485] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.046029][ T3174] netlink: 'syz.0.9779': attribute type 4 has an invalid length. [ 1933.093074][ T3177] gre0: mtu less than device minimum [ 1933.207407][T31485] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.836776][T31485] device 0 left promiscuous mode [ 1933.933474][T31485] device 1 left promiscuous mode [ 1933.979370][ T3157] chnl_net:caif_netlink_parms(): no params data found [ 1934.236796][T13907] Bluetooth: hci1: command 0x0409 tx timeout [ 1934.932227][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1934.960061][ T3157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.000144][ T3157] device bridge_slave_0 entered promiscuous mode [ 1935.422233][ T3157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.429546][ T3157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.490748][ T3157] device bridge_slave_1 entered promiscuous mode [ 1935.905532][ T3238] netlink: 'syz.2.9792': attribute type 3 has an invalid length. [ 1935.963816][ T3238] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9792'. [ 1936.310847][T13907] Bluetooth: hci1: command 0x041b tx timeout [ 1937.989630][ T3157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1938.052156][ T3157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1938.233035][ T3157] team0: Port device team_slave_0 added [ 1938.336914][ T3157] team0: Port device team_slave_1 added [ 1938.390748][T13907] Bluetooth: hci1: command 0x040f tx timeout [ 1938.408107][ T3157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.416593][ T3157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.447628][ T3157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1938.472299][ T3157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1938.499922][ T3157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1938.599333][ T3157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.869284][ T3274] netlink: 'syz.0.9802': attribute type 22 has an invalid length. [ 1938.903296][ T3274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1938.984583][ T3278] netlink: 'syz.2.9803': attribute type 1 has an invalid length. [ 1939.057203][ T3278] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9803'. [ 1939.069382][ T3157] device hsr_slave_0 entered promiscuous mode [ 1939.103203][ T3157] device hsr_slave_1 entered promiscuous mode [ 1939.109678][ T3279] netlink: 'syz.1.9801': attribute type 46 has an invalid length. [ 1939.173252][ T3157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1939.186900][ T3157] Cannot create hsr debugfs directory [ 1939.217133][ T3274] netlink: 'syz.0.9802': attribute type 10 has an invalid length. [ 1940.470837][T13907] Bluetooth: hci1: command 0x0419 tx timeout [ 1940.526348][ T3279] netlink: 'syz.1.9801': attribute type 46 has an invalid length. [ 1941.309973][ T3313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1941.904995][ T3320] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1941.913314][ T3320] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1942.259383][T31485] device hsr_slave_0 left promiscuous mode [ 1942.345901][T31485] device hsr_slave_1 left promiscuous mode [ 1942.362380][ T3328] netlink: 'syz.3.9815': attribute type 1 has an invalid length. [ 1942.370209][ T3328] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9815'. [ 1942.491438][T31485] device veth1_macvtap left promiscuous mode [ 1942.497655][T31485] device veth1_vlan left promiscuous mode [ 1945.553114][ T3383] netlink: 'syz.2.9827': attribute type 1 has an invalid length. [ 1945.554467][T31485] team0 (unregistering): Port device team_slave_1 removed [ 1945.580198][ T3383] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9827'. [ 1945.748343][T31485] team0 (unregistering): Port device team_slave_0 removed [ 1946.795945][ T3368] netlink: 'syz.0.9823': attribute type 10 has an invalid length. [ 1946.987377][ T3395] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1946.993924][ T3395] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1947.350733][T32378] Bluetooth: hci4: command 0x0406 tx timeout [ 1947.651109][ T3410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9833'. [ 1947.712407][ T3410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9833'. [ 1947.769124][ T3414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9833'. [ 1947.811172][ T3405] netlink: 'syz.1.9835': attribute type 10 has an invalid length. [ 1947.968434][ T3405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1948.032272][ T3405] bond0: (slave team0): Enslaving as an active interface with an up link [ 1948.618380][ T3157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1948.688291][ T3157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1948.733922][ T3157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1948.796058][ T3157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1949.178753][ T3157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1949.248720][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1949.260707][ T3448] netlink: 'syz.3.9845': attribute type 1 has an invalid length. [ 1949.277667][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1949.285798][ T3448] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9845'. [ 1949.300039][ T3157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1949.324443][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1949.344668][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1949.364092][T31481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1949.371443][T31481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1949.402713][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1949.417300][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1949.435067][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1949.476832][T31481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.484260][T31481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.518644][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1949.548395][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1949.567872][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1949.594566][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1949.624778][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1949.639778][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1949.658874][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1949.669969][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1949.707787][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1949.747091][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1949.769229][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1949.791737][ T3157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1950.555869][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1950.584079][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1950.624006][ T3157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1951.204773][ T3468] netlink: 'syz.2.9846': attribute type 1 has an invalid length. [ 1951.257154][ T3468] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9846'. [ 1951.461641][ T3475] netlink: 'syz.0.9849': attribute type 12 has an invalid length. [ 1951.493456][ T3475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9849'. [ 1951.605566][ T3484] netlink: 'syz.2.9850': attribute type 10 has an invalid length. [ 1951.618346][ T3484] device wlan1 left promiscuous mode [ 1952.223521][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1952.244657][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1952.347832][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1952.371374][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1952.418142][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1952.439308][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1952.480010][ T3157] device veth0_vlan entered promiscuous mode [ 1952.522782][ T3157] device veth1_vlan entered promiscuous mode [ 1952.581859][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1952.668417][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1952.682268][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1952.715745][ T3157] device veth0_macvtap entered promiscuous mode [ 1952.753200][ T3157] device veth1_macvtap entered promiscuous mode [ 1952.812442][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1952.856217][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.924002][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1952.946736][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.959520][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1952.970575][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1952.981011][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1952.992512][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.005944][ T3157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1953.031941][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1953.041172][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1953.081111][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1953.109481][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1953.155520][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1953.168513][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.225663][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1953.250882][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.277118][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1953.307120][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.337942][ T3157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1953.367649][ T3157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1953.397620][ T3157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1953.677229][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1953.701537][T31478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1953.723707][ T3157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.741003][ T3157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.760107][ T3157] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.788014][ T3157] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.999391][ T3571] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9877'. [ 1955.715390][T31478] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1958.309453][ T3571] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1958.329416][ T3571] CPU: 1 PID: 3571 Comm: syz.3.9877 Not tainted syzkaller #0 [ 1958.336881][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1958.346987][ T3571] Call Trace: [ 1958.350303][ T3571] [ 1958.353272][ T3571] dump_stack_lvl+0x188/0x24e [ 1958.358013][ T3571] ? show_regs_print_info+0x12/0x12 [ 1958.363263][ T3571] ? load_image+0x400/0x400 [ 1958.367830][ T3571] sysfs_warn_dup+0x8a/0xa0 [ 1958.372383][ T3571] sysfs_do_create_link_sd+0xc0/0x110 [ 1958.377819][ T3571] device_add+0x7ed/0xfb0 [ 1958.382222][ T3571] wiphy_register+0x1d9f/0x2ac0 [ 1958.387143][ T3571] ? cfg80211_event_work+0x40/0x40 [ 1958.392311][ T3571] ? minstrel_ht_alloc+0x894/0xa20 [ 1958.397493][ T3571] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1958.403617][ T3571] ieee80211_register_hw+0x2d00/0x39f0 [ 1958.409139][ T3571] ? ieee80211_register_hw+0xee1/0x39f0 [ 1958.414719][ T3571] ? ieee80211_register_hw+0xee1/0x39f0 [ 1958.420303][ T3571] ? ieee80211_tasklet_handler+0x20/0x20 [ 1958.425975][ T3571] ? memset+0x1e/0x40 [ 1958.429983][ T3571] ? __hrtimer_init+0x186/0x270 [ 1958.434867][ T3571] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1958.440633][ T3571] hwsim_new_radio_nl+0xafa/0xce0 [ 1958.445703][ T3571] genl_family_rcv_msg_doit+0x22a/0x330 [ 1958.451274][ T3571] ? end_current_label_crit_section+0x170/0x170 [ 1958.457541][ T3571] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1958.463463][ T3571] ? bpf_lsm_capable+0x5/0x10 [ 1958.468164][ T3571] ? security_capable+0x85/0xb0 [ 1958.473044][ T3571] genl_rcv_msg+0x604/0x790 [ 1958.477587][ T3571] ? genl_bind+0x360/0x360 [ 1958.482021][ T3571] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1958.488398][ T3571] netlink_rcv_skb+0x1fb/0x450 [ 1958.493203][ T3571] ? genl_bind+0x360/0x360 [ 1958.497650][ T3571] ? netlink_ack+0x1170/0x1170 [ 1958.502452][ T3571] ? down_read+0x1a8/0x2d0 [ 1958.506902][ T3571] genl_rcv+0x24/0x40 [ 1958.510937][ T3571] netlink_unicast+0x74d/0x8d0 [ 1958.515757][ T3571] netlink_sendmsg+0x8ad/0xbd0 [ 1958.520558][ T3571] ? netlink_getsockopt+0x550/0x550 [ 1958.525794][ T3571] ? aa_sock_msg_perm+0x94/0x150 [ 1958.530757][ T3571] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1958.536068][ T3571] ? security_socket_sendmsg+0x7c/0xa0 [ 1958.541560][ T3571] ? netlink_getsockopt+0x550/0x550 [ 1958.546805][ T3571] ____sys_sendmsg+0x5be/0x970 [ 1958.551618][ T3571] ? __sys_sendmsg_sock+0x30/0x30 [ 1958.556677][ T3571] ? __import_iovec+0x315/0x500 [ 1958.561574][ T3571] ? import_iovec+0x6f/0xa0 [ 1958.566118][ T3571] ___sys_sendmsg+0x2a2/0x360 [ 1958.570834][ T3571] ? __sys_sendmsg+0x290/0x290 [ 1958.575666][ T3571] __se_sys_sendmsg+0x1bb/0x2a0 [ 1958.580552][ T3571] ? ct_nmi_exit+0x145/0x1c0 [ 1958.585186][ T3571] ? __x64_sys_sendmsg+0x80/0x80 [ 1958.590170][ T3571] ? lockdep_hardirqs_on+0x94/0x140 [ 1958.595397][ T3571] do_syscall_64+0x4c/0xa0 [ 1958.599866][ T3571] ? clear_bhb_loop+0x60/0xb0 [ 1958.604588][ T3571] ? clear_bhb_loop+0x60/0xb0 [ 1958.609311][ T3571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1958.615246][ T3571] RIP: 0033:0x7f4c8819c799 [ 1958.619687][ T3571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1958.639317][ T3571] RSP: 002b:00007f4c89103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1958.647759][ T3571] RAX: ffffffffffffffda RBX: 00007f4c88415fa0 RCX: 00007f4c8819c799 [ 1958.655763][ T3571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1958.663771][ T3571] RBP: 00007f4c88232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1958.671771][ T3571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1958.679763][ T3571] R13: 00007f4c88416038 R14: 00007f4c88415fa0 R15: 00007fff184669a8 [ 1958.687775][ T3571] [ 1958.933209][T31495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.951204][T31495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.998503][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1959.064211][T31495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1959.111481][T31495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.139469][T31495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1959.465870][ T3637] netlink: 'syz.1.9890': attribute type 10 has an invalid length. [ 1959.589416][ T3645] netlink: 'syz.3.9888': attribute type 21 has an invalid length. [ 1960.298909][ T3645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9888'. [ 1960.391006][ T3645] netlink: 'syz.3.9888': attribute type 1 has an invalid length. [ 1960.612190][ T3629] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.9888'. [ 1960.965843][ T3663] FAULT_INJECTION: forcing a failure. [ 1960.965843][ T3663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.017415][ T3663] CPU: 0 PID: 3663 Comm: syz.1.9903 Not tainted syzkaller #0 [ 1961.024990][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1961.035116][ T3663] Call Trace: [ 1961.038468][ T3663] [ 1961.041440][ T3663] dump_stack_lvl+0x188/0x24e [ 1961.046185][ T3663] ? show_regs_print_info+0x12/0x12 [ 1961.051438][ T3663] ? load_image+0x400/0x400 [ 1961.055990][ T3663] ? __lock_acquire+0x7d10/0x7d10 [ 1961.061073][ T3663] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1961.066763][ T3663] should_fail_ex+0x399/0x4d0 [ 1961.071547][ T3663] _copy_from_user+0x2c/0x170 [ 1961.076285][ T3663] ___sys_sendmsg+0x1c3/0x360 [ 1961.081040][ T3663] ? __sys_sendmsg+0x290/0x290 [ 1961.085933][ T3663] ? __lock_acquire+0x7d10/0x7d10 [ 1961.091037][ T3663] __se_sys_sendmsg+0x1bb/0x2a0 [ 1961.096037][ T3663] ? __x64_sys_sendmsg+0x80/0x80 [ 1961.101050][ T3663] ? lockdep_hardirqs_on+0x94/0x140 [ 1961.106304][ T3663] do_syscall_64+0x4c/0xa0 [ 1961.110836][ T3663] ? clear_bhb_loop+0x60/0xb0 [ 1961.115566][ T3663] ? clear_bhb_loop+0x60/0xb0 [ 1961.120308][ T3663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1961.126256][ T3663] RIP: 0033:0x7f6dc3d9c799 [ 1961.130729][ T3663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1961.150387][ T3663] RSP: 002b:00007f6dc4c5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1961.158859][ T3663] RAX: ffffffffffffffda RBX: 00007f6dc4015fa0 RCX: 00007f6dc3d9c799 [ 1961.166882][ T3663] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 1961.174957][ T3663] RBP: 00007f6dc4c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.182988][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.191014][ T3663] R13: 00007f6dc4016038 R14: 00007f6dc4015fa0 R15: 00007fffe4986c58 [ 1961.199067][ T3663] [ 1961.773942][ T3674] netlink: 'syz.5.9895': attribute type 3 has an invalid length. [ 1961.806932][ T3674] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.9895'. [ 1961.954620][ T3678] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9897'. [ 1962.073233][ T3678] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1962.100857][ T3678] CPU: 1 PID: 3678 Comm: syz.2.9897 Not tainted syzkaller #0 [ 1962.108337][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1962.118439][ T3678] Call Trace: [ 1962.121753][ T3678] [ 1962.124719][ T3678] dump_stack_lvl+0x188/0x24e [ 1962.129433][ T3678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1962.135629][ T3678] ? show_regs_print_info+0x12/0x12 [ 1962.140863][ T3678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1962.147100][ T3678] sysfs_warn_dup+0x8a/0xa0 [ 1962.151647][ T3678] sysfs_do_create_link_sd+0xc0/0x110 [ 1962.157049][ T3678] device_add+0x7ed/0xfb0 [ 1962.161421][ T3678] wiphy_register+0x1d9f/0x2ac0 [ 1962.166346][ T3678] ? cfg80211_event_work+0x40/0x40 [ 1962.171510][ T3678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1962.177728][ T3678] ? ieee80211_register_hw+0x2b3e/0x39f0 [ 1962.183396][ T3678] ieee80211_register_hw+0x2d00/0x39f0 [ 1962.188883][ T3678] ? lockdep_hardirqs_on+0x94/0x140 [ 1962.194130][ T3678] ? ieee80211_register_hw+0xee1/0x39f0 [ 1962.199704][ T3678] ? ieee80211_register_hw+0xee1/0x39f0 [ 1962.205293][ T3678] ? ieee80211_tasklet_handler+0x20/0x20 [ 1962.210973][ T3678] ? memset+0x1e/0x40 [ 1962.214988][ T3678] ? __hrtimer_init+0x186/0x270 [ 1962.219869][ T3678] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1962.225649][ T3678] hwsim_new_radio_nl+0xafa/0xce0 [ 1962.230720][ T3678] genl_family_rcv_msg_doit+0x22a/0x330 [ 1962.236291][ T3678] ? end_current_label_crit_section+0x170/0x170 [ 1962.242581][ T3678] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1962.248508][ T3678] ? bpf_lsm_capable+0x5/0x10 [ 1962.253214][ T3678] ? security_capable+0x85/0xb0 [ 1962.258096][ T3678] genl_rcv_msg+0x604/0x790 [ 1962.262639][ T3678] ? genl_bind+0x360/0x360 [ 1962.267089][ T3678] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1962.273103][ T3678] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1962.279463][ T3678] ? lock_chain_count+0x20/0x20 [ 1962.284357][ T3678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1962.290554][ T3678] netlink_rcv_skb+0x1fb/0x450 [ 1962.295349][ T3678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1962.301534][ T3678] ? genl_bind+0x360/0x360 [ 1962.305982][ T3678] ? netlink_ack+0x1170/0x1170 [ 1962.310797][ T3678] ? down_read+0x1a8/0x2d0 [ 1962.315253][ T3678] genl_rcv+0x24/0x40 [ 1962.319255][ T3678] netlink_unicast+0x74d/0x8d0 [ 1962.324058][ T3678] netlink_sendmsg+0x8ad/0xbd0 [ 1962.328864][ T3678] ? netlink_getsockopt+0x550/0x550 [ 1962.334104][ T3678] ? aa_sock_msg_perm+0x94/0x150 [ 1962.339078][ T3678] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1962.344385][ T3678] ? security_socket_sendmsg+0x7c/0xa0 [ 1962.349883][ T3678] ? netlink_getsockopt+0x550/0x550 [ 1962.355123][ T3678] ____sys_sendmsg+0x5be/0x970 [ 1962.359934][ T3678] ? __sys_sendmsg_sock+0x30/0x30 [ 1962.364999][ T3678] ? __import_iovec+0x315/0x500 [ 1962.369895][ T3678] ? import_iovec+0x6f/0xa0 [ 1962.374433][ T3678] ___sys_sendmsg+0x2a2/0x360 [ 1962.379154][ T3678] ? __sys_sendmsg+0x290/0x290 [ 1962.383996][ T3678] ? ktime_get_real_ts64+0x440/0x440 [ 1962.389341][ T3678] __se_sys_sendmsg+0x1bb/0x2a0 [ 1962.394233][ T3678] ? __x64_sys_sendmsg+0x80/0x80 [ 1962.399246][ T3678] do_syscall_64+0x4c/0xa0 [ 1962.403706][ T3678] ? clear_bhb_loop+0x60/0xb0 [ 1962.408417][ T3678] ? clear_bhb_loop+0x60/0xb0 [ 1962.413129][ T3678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1962.419058][ T3678] RIP: 0033:0x7fc38459c799 [ 1962.423510][ T3678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1962.443151][ T3678] RSP: 002b:00007fc385462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1962.451597][ T3678] RAX: ffffffffffffffda RBX: 00007fc384815fa0 RCX: 00007fc38459c799 [ 1962.459588][ T3678] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1962.467586][ T3678] RBP: 00007fc384632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1962.475602][ T3678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1962.483625][ T3678] R13: 00007fc384816038 R14: 00007fc384815fa0 R15: 00007ffe3237a088 [ 1962.491634][ T3678] [ 1963.732915][ T3709] netlink: 'syz.5.9906': attribute type 1 has an invalid length. [ 1963.800698][ T3709] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.9906'. [ 1964.121947][ T3718] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9910'. [ 1964.219085][ T3718] delete_channel: no stack [ 1964.250861][ T3718] delete_channel: no stack [ 1964.401956][ T3723] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9912'. [ 1964.458776][ T3723] netlink: zone id is out of range [ 1964.497718][ T3723] netlink: del zone limit has 4 unknown bytes [ 1966.231567][ T3745] netlink: 'syz.5.9918': attribute type 21 has an invalid length. [ 1966.249577][ T3745] netlink: 'syz.5.9918': attribute type 11 has an invalid length. [ 1966.583203][ T3760] netlink: 'syz.3.9923': attribute type 1 has an invalid length. [ 1966.615345][ T3760] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9923'. [ 1967.198548][ T3770] FAULT_INJECTION: forcing a failure. [ 1967.198548][ T3770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1967.227482][ T3770] CPU: 1 PID: 3770 Comm: syz.1.9928 Not tainted syzkaller #0 [ 1967.234946][ T3770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1967.245052][ T3770] Call Trace: [ 1967.248376][ T3770] [ 1967.251349][ T3770] dump_stack_lvl+0x188/0x24e [ 1967.256091][ T3770] ? show_regs_print_info+0x12/0x12 [ 1967.261350][ T3770] ? load_image+0x400/0x400 [ 1967.265909][ T3770] ? __lock_acquire+0x7d10/0x7d10 [ 1967.271005][ T3770] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1967.276717][ T3770] should_fail_ex+0x399/0x4d0 [ 1967.281436][ T3770] _copy_from_user+0x2c/0x170 [ 1967.286160][ T3770] ___sys_sendmsg+0x1c3/0x360 [ 1967.290907][ T3770] ? __sys_sendmsg+0x290/0x290 [ 1967.295726][ T3770] ? __lock_acquire+0x7d10/0x7d10 [ 1967.300813][ T3770] __se_sys_sendmsg+0x1bb/0x2a0 [ 1967.305705][ T3770] ? __x64_sys_sendmsg+0x80/0x80 [ 1967.310698][ T3770] ? lockdep_hardirqs_on+0x94/0x140 [ 1967.315940][ T3770] do_syscall_64+0x4c/0xa0 [ 1967.320404][ T3770] ? clear_bhb_loop+0x60/0xb0 [ 1967.325116][ T3770] ? clear_bhb_loop+0x60/0xb0 [ 1967.329828][ T3770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1967.335758][ T3770] RIP: 0033:0x7f6dc3d9c799 [ 1967.340199][ T3770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1967.359837][ T3770] RSP: 002b:00007f6dc4c5a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1967.368289][ T3770] RAX: ffffffffffffffda RBX: 00007f6dc4015fa0 RCX: 00007f6dc3d9c799 [ 1967.376333][ T3770] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 1967.384336][ T3770] RBP: 00007f6dc4c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1967.392334][ T3770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1967.400343][ T3770] R13: 00007f6dc4016038 R14: 00007f6dc4015fa0 R15: 00007fffe4986c58 [ 1967.408379][ T3770] [ 1967.634013][ T3773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9926'. [ 1967.910603][T32378] Bluetooth: hci5: command 0x0406 tx timeout [ 1970.423355][ T3747] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9919'. [ 1970.450763][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.458294][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.507296][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.520583][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.658332][ T3773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9926'. [ 1970.940038][ T3789] netlink: 'syz.2.9935': attribute type 21 has an invalid length. [ 1970.977601][ T3789] netlink: 'syz.2.9935': attribute type 11 has an invalid length. [ 1971.143255][ T3794] netlink: 'syz.0.9937': attribute type 1 has an invalid length. [ 1971.181973][ T3794] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9937'. [ 1971.432869][ T3800] netlink: 'syz.1.9941': attribute type 9 has an invalid length. [ 1971.484291][ T3800] netlink: 'syz.1.9941': attribute type 2 has an invalid length. [ 1971.508653][ T3800] netlink: 'syz.1.9941': attribute type 3 has an invalid length. [ 1971.543610][ T3800] netlink: 'syz.1.9941': attribute type 4 has an invalid length. [ 1971.574200][ T3800] netlink: 'syz.1.9941': attribute type 5 has an invalid length. [ 1971.613094][ T3800] netlink: 'syz.1.9941': attribute type 6 has an invalid length. [ 1971.656069][ T3800] netlink: 123956 bytes leftover after parsing attributes in process `syz.1.9941'. [ 1971.784913][ T3818] netlink: 'syz.3.9943': attribute type 29 has an invalid length. [ 1974.482187][ T3818] netlink: 'syz.3.9943': attribute type 29 has an invalid length. [ 1974.521829][ T3819] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9943'. [ 1975.149848][T32378] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1975.709648][ T3851] netlink: 'syz.2.9955': attribute type 1 has an invalid length. [ 1975.792803][ T3851] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.9955'. [ 1975.998586][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.006785][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.290710][ T3880] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 1977.296661][ T3880] syzkaller0: owner set to 0 [ 1977.708921][ T3894] device syzkaller0 entered promiscuous mode [ 1978.025903][ T3906] delete_channel: no stack [ 1978.031241][ T3906] delete_channel: no stack [ 1978.562455][ T3921] netlink: 'syz.2.9977': attribute type 21 has an invalid length. [ 1979.054378][ T3940] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9983'. [ 1979.387101][ T3951] FAULT_INJECTION: forcing a failure. [ 1979.387101][ T3951] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.399876][ T3951] CPU: 0 PID: 3951 Comm: syz.3.9985 Not tainted syzkaller #0 [ 1979.407300][ T3951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1979.417413][ T3951] Call Trace: [ 1979.420735][ T3951] [ 1979.423705][ T3951] dump_stack_lvl+0x188/0x24e [ 1979.428454][ T3951] ? show_regs_print_info+0x12/0x12 [ 1979.433730][ T3951] ? load_image+0x400/0x400 [ 1979.438303][ T3951] should_fail_ex+0x399/0x4d0 [ 1979.443037][ T3951] should_failslab+0x5/0x20 [ 1979.447607][ T3951] slab_pre_alloc_hook+0x59/0x310 [ 1979.452702][ T3951] kmem_cache_alloc+0x56/0x2f0 [ 1979.457520][ T3951] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1979.462972][ T3951] radix_tree_node_alloc+0x7e/0x3a0 [ 1979.468242][ T3951] idr_get_free+0x2af/0xa60 [ 1979.472864][ T3951] idr_alloc_cyclic+0x277/0x5c0 [ 1979.477801][ T3951] ? idr_alloc+0x2e0/0x2e0 [ 1979.482277][ T3951] ? do_raw_spin_lock+0x128/0x2f0 [ 1979.487364][ T3951] ? __radix_tree_preload+0x82/0x880 [ 1979.492711][ T3951] ? btf_alloc_id+0x30/0x2d0 [ 1979.497372][ T3951] btf_alloc_id+0x4f/0x2d0 [ 1979.501844][ T3951] btf_new_fd+0x5b8/0x780 [ 1979.506240][ T3951] __sys_bpf+0x612/0x780 [ 1979.510553][ T3951] ? bpf_link_show_fdinfo+0x380/0x380 [ 1979.515999][ T3951] ? lock_chain_count+0x20/0x20 [ 1979.520931][ T3951] __x64_sys_bpf+0x78/0x90 [ 1979.525424][ T3951] do_syscall_64+0x4c/0xa0 [ 1979.529936][ T3951] ? clear_bhb_loop+0x60/0xb0 [ 1979.534671][ T3951] ? clear_bhb_loop+0x60/0xb0 [ 1979.539427][ T3951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1979.545374][ T3951] RIP: 0033:0x7f4c8819c799 [ 1979.549868][ T3951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1979.569527][ T3951] RSP: 002b:00007f4c89103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1979.577998][ T3951] RAX: ffffffffffffffda RBX: 00007f4c88415fa0 RCX: 00007f4c8819c799 [ 1979.586144][ T3951] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 1979.594173][ T3951] RBP: 00007f4c89103090 R08: 0000000000000000 R09: 0000000000000000 [ 1979.602197][ T3951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1979.610243][ T3951] R13: 00007f4c88416038 R14: 00007f4c88415fa0 R15: 00007fff184669a8 [ 1979.618274][ T3951] [ 1980.187111][ T3967] netlink: 'syz.0.9991': attribute type 21 has an invalid length. [ 1981.194225][T32378] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 1981.203193][ T3992] netlink: 'syz.0.9999': attribute type 10 has an invalid length. [ 1981.238082][ T3995] netlink: 'syz.1.10000': attribute type 2 has an invalid length. [ 1981.255253][ T3992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9999'. [ 1981.275733][ T3992] batman_adv: batadv0: Adding interface: vlan1 [ 1981.282730][ T3992] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.308340][ T3995] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10000'. [ 1981.325648][ T3992] batman_adv: batadv0: Interface activated: vlan1 [ 1981.361346][ T3995] netlink: 4091 bytes leftover after parsing attributes in process `syz.1.10000'. [ 1981.451107][ T4000] netlink: 'syz.2.10001': attribute type 10 has an invalid length. [ 1981.759569][ T4000] team0 (unregistering): Port device team_slave_0 removed [ 1981.857867][ T4000] team0 (unregistering): Port device team_slave_1 removed [ 1983.147919][ T4015] netlink: 'syz.1.10006': attribute type 39 has an invalid length. [ 1984.286339][T32378] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1984.294160][T32378] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1985.264584][ T4079] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1985.271286][ T4079] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1985.856020][ T4095] netlink: 'syz.0.10032': attribute type 6 has an invalid length. [ 1985.870575][ T4095] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10032'. [ 1986.649297][T31495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1986.910719][ T4129] netlink: 'syz.5.10042': attribute type 10 has an invalid length. [ 1987.508452][ T4129] team0: Port device macvlan1 added [ 1988.127404][ T4162] netlink: 184 bytes leftover after parsing attributes in process `syz.1.10054'. [ 1989.182060][ T4181] netlink: 'syz.5.10061': attribute type 17 has an invalid length. [ 1989.205086][ T4181] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10061'. [ 1989.215951][ T4181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1989.652662][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10064'. [ 1992.235645][ T4229] netlink: 184 bytes leftover after parsing attributes in process `syz.0.10074'. [ 1993.869176][ T4261] FAULT_INJECTION: forcing a failure. [ 1993.869176][ T4261] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.915747][ T4261] CPU: 0 PID: 4261 Comm: syz.0.10083 Not tainted syzkaller #0 [ 1993.923307][ T4261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1993.933407][ T4261] Call Trace: [ 1993.936748][ T4261] [ 1993.939713][ T4261] dump_stack_lvl+0x188/0x24e [ 1993.944452][ T4261] ? show_regs_print_info+0x12/0x12 [ 1993.949701][ T4261] ? load_image+0x400/0x400 [ 1993.954251][ T4261] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1993.960294][ T4261] ? lock_chain_count+0x20/0x20 [ 1993.965205][ T4261] should_fail_ex+0x399/0x4d0 [ 1993.969932][ T4261] should_failslab+0x5/0x20 [ 1993.974489][ T4261] slab_pre_alloc_hook+0x59/0x310 [ 1993.979570][ T4261] ? sctp_add_bind_addr+0x89/0x350 [ 1993.984731][ T4261] __kmem_cache_alloc_node+0x4f/0x260 [ 1993.990146][ T4261] ? sctp_add_bind_addr+0x89/0x350 [ 1993.995318][ T4261] kmalloc_trace+0x26/0xe0 [ 1993.999804][ T4261] sctp_add_bind_addr+0x89/0x350 [ 1994.004794][ T4261] sctp_copy_local_addr_list+0x311/0x4e0 [ 1994.010493][ T4261] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1994.016266][ T4261] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1994.022391][ T4261] ? sctp_v4_is_any+0x31/0x50 [ 1994.027111][ T4261] ? sctp_copy_one_addr+0x93/0x660 [ 1994.032261][ T4261] sctp_bind_addr_copy+0xaf/0x3c0 [ 1994.037317][ T4261] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1994.043674][ T4261] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1994.049000][ T4261] ? __sctp_connect+0xd80/0xd80 [ 1994.053879][ T4261] ? __local_bh_enable_ip+0x136/0x1c0 [ 1994.059277][ T4261] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1994.064850][ T4261] ? security_sctp_bind_connect+0x85/0xb0 [ 1994.070603][ T4261] sctp_sendmsg+0x15b0/0x2940 [ 1994.075330][ T4261] ? sctp_getsockopt+0x8a0/0x8a0 [ 1994.080298][ T4261] ? __lock_acquire+0x7d10/0x7d10 [ 1994.085384][ T4261] ? aa_af_perm+0x340/0x340 [ 1994.089943][ T4261] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1994.096406][ T4261] ? inet_sendmsg+0xe5/0x2f0 [ 1994.101042][ T4261] ? inet_send_prepare+0x260/0x260 [ 1994.106188][ T4261] ____sys_sendmsg+0x5be/0x970 [ 1994.110992][ T4261] ? __sys_sendmsg_sock+0x30/0x30 [ 1994.116054][ T4261] ? __import_iovec+0x315/0x500 [ 1994.120938][ T4261] ? import_iovec+0x6f/0xa0 [ 1994.125464][ T4261] ___sys_sendmsg+0x2a2/0x360 [ 1994.130201][ T4261] ? __sys_sendmsg+0x290/0x290 [ 1994.135010][ T4261] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1994.141070][ T4261] ? __fget_files+0x445/0x4b0 [ 1994.145791][ T4261] __se_sys_sendmsg+0x1bb/0x2a0 [ 1994.150701][ T4261] ? __x64_sys_sendmsg+0x80/0x80 [ 1994.155682][ T4261] ? lockdep_hardirqs_on+0x94/0x140 [ 1994.160910][ T4261] do_syscall_64+0x4c/0xa0 [ 1994.165352][ T4261] ? clear_bhb_loop+0x60/0xb0 [ 1994.170056][ T4261] ? clear_bhb_loop+0x60/0xb0 [ 1994.174771][ T4261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1994.180702][ T4261] RIP: 0033:0x7f4266f9c799 [ 1994.185135][ T4261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.204770][ T4261] RSP: 002b:00007f4267e6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1994.213207][ T4261] RAX: ffffffffffffffda RBX: 00007f4267215fa0 RCX: 00007f4266f9c799 [ 1994.221204][ T4261] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1994.229203][ T4261] RBP: 00007f4267e6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.237204][ T4261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1994.245195][ T4261] R13: 00007f4267216038 R14: 00007f4267215fa0 R15: 00007ffd12d3a468 [ 1994.253199][ T4261] [ 1994.643179][ T4274] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10088'. [ 1994.711448][ T4274] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1994.760745][ T4274] CPU: 1 PID: 4274 Comm: syz.0.10088 Not tainted syzkaller #0 [ 1994.768315][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1994.778424][ T4274] Call Trace: [ 1994.781758][ T4274] [ 1994.784736][ T4274] dump_stack_lvl+0x188/0x24e [ 1994.789501][ T4274] ? show_regs_print_info+0x12/0x12 [ 1994.794757][ T4274] ? load_image+0x400/0x400 [ 1994.799344][ T4274] sysfs_warn_dup+0x8a/0xa0 [ 1994.803925][ T4274] sysfs_do_create_link_sd+0xc0/0x110 [ 1994.809360][ T4274] device_add+0x7ed/0xfb0 [ 1994.813778][ T4274] wiphy_register+0x1d9f/0x2ac0 [ 1994.818708][ T4274] ? cfg80211_event_work+0x40/0x40 [ 1994.823906][ T4274] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1994.830026][ T4274] ieee80211_register_hw+0x2d00/0x39f0 [ 1994.835574][ T4274] ? ieee80211_register_hw+0xee1/0x39f0 [ 1994.841185][ T4274] ? ieee80211_register_hw+0xee1/0x39f0 [ 1994.846806][ T4274] ? ieee80211_tasklet_handler+0x20/0x20 [ 1994.852509][ T4274] ? memset+0x1e/0x40 [ 1994.856539][ T4274] ? __hrtimer_init+0x186/0x270 [ 1994.861454][ T4274] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1994.867261][ T4274] hwsim_new_radio_nl+0xafa/0xce0 [ 1994.872375][ T4274] genl_family_rcv_msg_doit+0x22a/0x330 [ 1994.877982][ T4274] ? end_current_label_crit_section+0x170/0x170 [ 1994.884289][ T4274] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1994.890256][ T4274] ? bpf_lsm_capable+0x5/0x10 [ 1994.894988][ T4274] ? security_capable+0x85/0xb0 [ 1994.899909][ T4274] genl_rcv_msg+0x604/0x790 [ 1994.904487][ T4274] ? genl_bind+0x360/0x360 [ 1994.908958][ T4274] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1994.915374][ T4274] netlink_rcv_skb+0x1fb/0x450 [ 1994.920271][ T4274] ? genl_bind+0x360/0x360 [ 1994.924749][ T4274] ? netlink_ack+0x1170/0x1170 [ 1994.929607][ T4274] ? down_read+0x1a8/0x2d0 [ 1994.934094][ T4274] genl_rcv+0x24/0x40 [ 1994.938131][ T4274] netlink_unicast+0x74d/0x8d0 [ 1994.942979][ T4274] netlink_sendmsg+0x8ad/0xbd0 [ 1994.947819][ T4274] ? netlink_getsockopt+0x550/0x550 [ 1994.953090][ T4274] ? aa_sock_msg_perm+0x94/0x150 [ 1994.958093][ T4274] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1994.963437][ T4274] ? security_socket_sendmsg+0x7c/0xa0 [ 1994.968980][ T4274] ? netlink_getsockopt+0x550/0x550 [ 1994.974237][ T4274] ____sys_sendmsg+0x5be/0x970 [ 1994.979077][ T4274] ? __sys_sendmsg_sock+0x30/0x30 [ 1994.984161][ T4274] ? __import_iovec+0x315/0x500 [ 1994.989065][ T4274] ? import_iovec+0x6f/0xa0 [ 1994.993635][ T4274] ___sys_sendmsg+0x2a2/0x360 [ 1994.998391][ T4274] ? __sys_sendmsg+0x290/0x290 [ 1995.003238][ T4274] ? ktime_get_real_ts64+0x440/0x440 [ 1995.008604][ T4274] __se_sys_sendmsg+0x1bb/0x2a0 [ 1995.013519][ T4274] ? __x64_sys_sendmsg+0x80/0x80 [ 1995.018553][ T4274] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1995.024516][ T4274] do_syscall_64+0x4c/0xa0 [ 1995.028982][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 1995.033714][ T4274] ? clear_bhb_loop+0x60/0xb0 [ 1995.038458][ T4274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1995.044403][ T4274] RIP: 0033:0x7f4266f9c799 [ 1995.048867][ T4274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1995.068621][ T4274] RSP: 002b:00007f4267e6c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1995.077105][ T4274] RAX: ffffffffffffffda RBX: 00007f4267215fa0 RCX: 00007f4266f9c799 [ 1995.085140][ T4274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1995.093163][ T4274] RBP: 00007f4267032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1995.101190][ T4274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1995.109210][ T4274] R13: 00007f4267216038 R14: 00007f4267215fa0 R15: 00007ffd12d3a468 [ 1995.117238][ T4274] [ 1996.405191][ T4292] netlink: 'syz.3.10094': attribute type 3 has an invalid length. [ 1996.426617][ T4292] netlink: 'syz.3.10094': attribute type 1 has an invalid length. [ 1997.626645][ T4322] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10103'. [ 1998.457315][ T4339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10109'. [ 1998.556656][T13907] Bluetooth: hci0: command 0x0406 tx timeout [ 2000.489876][ T4374] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10118'. [ 2001.400074][ T4396] netlink: 'syz.5.10123': attribute type 2 has an invalid length. [ 2001.457824][ T4396] netlink: 'syz.5.10123': attribute type 1 has an invalid length. [ 2001.565095][ T4396] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.10123'. [ 2003.754752][ T4429] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10134'. [ 2005.267780][ T4459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10147'. [ 2005.504226][ T4459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10147'. [ 2005.531283][ T4462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10147'. [ 2005.551642][ T4463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10147'. [ 2008.897867][ T4505] netlink: 'syz.1.10160': attribute type 3 has an invalid length. [ 2008.931237][ T4505] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10160'. [ 2009.288261][ T4515] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10164'. [ 2009.821300][ T4526] netlink: 'syz.2.10168': attribute type 10 has an invalid length. [ 2009.991000][ T4526] device geneve0 entered promiscuous mode [ 2010.241843][ T4526] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2013.397056][ T4568] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10181'. [ 2013.737086][ T4576] FAULT_INJECTION: forcing a failure. [ 2013.737086][ T4576] name failslab, interval 1, probability 0, space 0, times 0 [ 2013.750718][ T4576] CPU: 1 PID: 4576 Comm: syz.3.10183 Not tainted syzkaller #0 [ 2013.758256][ T4576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2013.768368][ T4576] Call Trace: [ 2013.771700][ T4576] [ 2013.774677][ T4576] dump_stack_lvl+0x188/0x24e [ 2013.779415][ T4576] ? show_regs_print_info+0x12/0x12 [ 2013.784671][ T4576] ? load_image+0x400/0x400 [ 2013.789245][ T4576] ? br_vlan_info+0x460/0x460 [ 2013.793987][ T4576] should_fail_ex+0x399/0x4d0 [ 2013.798718][ T4576] should_failslab+0x5/0x20 [ 2013.803288][ T4576] slab_pre_alloc_hook+0x59/0x310 [ 2013.808370][ T4576] kmem_cache_alloc_node+0x5a/0x320 [ 2013.813613][ T4576] ? __alloc_skb+0xfc/0x7e0 [ 2013.818171][ T4576] __alloc_skb+0xfc/0x7e0 [ 2013.822572][ T4576] rtnl_bridge_notify+0xa1/0x250 [ 2013.827563][ T4576] rtnl_bridge_setlink+0x5e8/0x720 [ 2013.832733][ T4576] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 2013.837889][ T4576] ? rtnl_bridge_dellink+0x680/0x680 [ 2013.843222][ T4576] rtnetlink_rcv_msg+0x87c/0xfc0 [ 2013.848212][ T4576] ? rtnetlink_bind+0x80/0x80 [ 2013.852944][ T4576] ? __local_bh_enable_ip+0x136/0x1c0 [ 2013.858359][ T4576] ? lockdep_hardirqs_on+0x94/0x140 [ 2013.863600][ T4576] ? __local_bh_enable_ip+0x136/0x1c0 [ 2013.869006][ T4576] ? _local_bh_enable+0xa0/0xa0 [ 2013.873910][ T4576] ? __dev_queue_xmit+0x26b/0x37c0 [ 2013.879106][ T4576] ? __dev_queue_xmit+0x26b/0x37c0 [ 2013.884288][ T4576] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 2013.889542][ T4576] ? __dev_queue_xmit+0x26b/0x37c0 [ 2013.894731][ T4576] ? ref_tracker_free+0x68c/0x840 [ 2013.899872][ T4576] ? __copy_skb_header+0x3ba/0x4f0 [ 2013.905061][ T4576] ? refcount_inc+0x70/0x70 [ 2013.909629][ T4576] ? memcpy+0x3c/0x60 [ 2013.913690][ T4576] ? __copy_skb_header+0x3ba/0x4f0 [ 2013.918864][ T4576] ? __skb_clone+0x480/0x790 [ 2013.923575][ T4576] netlink_rcv_skb+0x1fb/0x450 [ 2013.928399][ T4576] ? rtnetlink_bind+0x80/0x80 [ 2013.933154][ T4576] ? netlink_ack+0x1170/0x1170 [ 2013.938000][ T4576] ? netlink_deliver_tap+0x2e/0x1b0 [ 2013.943261][ T4576] netlink_unicast+0x74d/0x8d0 [ 2013.948132][ T4576] netlink_sendmsg+0x8ad/0xbd0 [ 2013.953011][ T4576] ? netlink_getsockopt+0x550/0x550 [ 2013.958287][ T4576] ? aa_sock_msg_perm+0x94/0x150 [ 2013.963276][ T4576] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2013.968612][ T4576] ? security_socket_sendmsg+0x7c/0xa0 [ 2013.974158][ T4576] ? netlink_getsockopt+0x550/0x550 [ 2013.979431][ T4576] ____sys_sendmsg+0x5be/0x970 [ 2013.984267][ T4576] ? __sys_sendmsg_sock+0x30/0x30 [ 2013.989352][ T4576] ? __import_iovec+0x315/0x500 [ 2013.994276][ T4576] ? import_iovec+0x6f/0xa0 [ 2013.998832][ T4576] ___sys_sendmsg+0x2a2/0x360 [ 2014.003568][ T4576] ? __sys_sendmsg+0x290/0x290 [ 2014.008391][ T4576] ? __lock_acquire+0x7d10/0x7d10 [ 2014.013476][ T4576] __se_sys_sendmsg+0x1bb/0x2a0 [ 2014.018354][ T4576] ? __x64_sys_sendmsg+0x80/0x80 [ 2014.023350][ T4576] ? lockdep_hardirqs_on+0x94/0x140 [ 2014.028598][ T4576] do_syscall_64+0x4c/0xa0 [ 2014.033043][ T4576] ? clear_bhb_loop+0x60/0xb0 [ 2014.037744][ T4576] ? clear_bhb_loop+0x60/0xb0 [ 2014.042454][ T4576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2014.048381][ T4576] RIP: 0033:0x7f4c8819c799 [ 2014.052815][ T4576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2014.072529][ T4576] RSP: 002b:00007f4c89103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2014.080976][ T4576] RAX: ffffffffffffffda RBX: 00007f4c88415fa0 RCX: 00007f4c8819c799 [ 2014.088977][ T4576] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 2014.096974][ T4576] RBP: 00007f4c89103090 R08: 0000000000000000 R09: 0000000000000000 [ 2014.104968][ T4576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2014.112959][ T4576] R13: 00007f4c88416038 R14: 00007f4c88415fa0 R15: 00007fff184669a8 [ 2014.120982][ T4576] [ 2014.393717][ T4585] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10187'. [ 2014.781497][ T4593] netlink: 'syz.1.10185': attribute type 2 has an invalid length. [ 2014.789412][ T4593] netlink: 'syz.1.10185': attribute type 1 has an invalid length. [ 2014.966380][ T4593] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.10185'. [ 2015.519212][ T4615] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10194'. [ 2016.901336][ T4658] FAULT_INJECTION: forcing a failure. [ 2016.901336][ T4658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.940771][ T4658] CPU: 0 PID: 4658 Comm: syz.3.10209 Not tainted syzkaller #0 [ 2016.948315][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2016.958404][ T4658] Call Trace: [ 2016.961733][ T4658] [ 2016.964788][ T4658] dump_stack_lvl+0x188/0x24e [ 2016.969501][ T4658] ? show_regs_print_info+0x12/0x12 [ 2016.974730][ T4658] ? load_image+0x400/0x400 [ 2016.979261][ T4658] ? __lock_acquire+0x7d10/0x7d10 [ 2016.984323][ T4658] should_fail_ex+0x399/0x4d0 [ 2016.989022][ T4658] _copy_from_user+0x2c/0x170 [ 2016.993729][ T4658] __sys_bpf+0x2ea/0x780 [ 2016.998003][ T4658] ? bpf_link_show_fdinfo+0x380/0x380 [ 2017.003426][ T4658] ? lock_chain_count+0x20/0x20 [ 2017.008318][ T4658] __x64_sys_bpf+0x78/0x90 [ 2017.012783][ T4658] do_syscall_64+0x4c/0xa0 [ 2017.017233][ T4658] ? clear_bhb_loop+0x60/0xb0 [ 2017.021944][ T4658] ? clear_bhb_loop+0x60/0xb0 [ 2017.026655][ T4658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2017.032597][ T4658] RIP: 0033:0x7f4c8819c799 [ 2017.037044][ T4658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2017.056672][ T4658] RSP: 002b:00007f4c89103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2017.065132][ T4658] RAX: ffffffffffffffda RBX: 00007f4c88415fa0 RCX: 00007f4c8819c799 [ 2017.073128][ T4658] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 2017.081128][ T4658] RBP: 00007f4c89103090 R08: 0000000000000000 R09: 0000000000000000 [ 2017.089119][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2017.097124][ T4658] R13: 00007f4c88416038 R14: 00007f4c88415fa0 R15: 00007fff184669a8 [ 2017.105131][ T4658] [ 2017.330277][ T4669] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10213'. [ 2017.891429][T31478] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2018.024584][ T4683] netlink: 'syz.3.10218': attribute type 3 has an invalid length. [ 2018.100807][ T4683] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10218'. [ 2018.344533][ T4667] netlink: 'syz.0.10214': attribute type 2 has an invalid length. [ 2018.380802][ T4667] netlink: 'syz.0.10214': attribute type 1 has an invalid length. [ 2018.477963][ T4667] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.10214'. [ 2019.433579][ T4706] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10228'. [ 2019.984114][ T4713] netlink: 'syz.0.10227': attribute type 39 has an invalid length. [ 2020.600845][ T4713] device hsr_slave_1 left promiscuous mode [ 2021.331945][T13907] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 2024.406457][ T4770] device syzkaller0 entered promiscuous mode [ 2028.544879][ T4824] netlink: 'syz.0.10266': attribute type 3 has an invalid length. [ 2028.595761][ T4824] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10266'. [ 2031.805712][ T4778] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10254'. [ 2031.954764][ T4833] netlink: 'syz.3.10267': attribute type 5 has an invalid length. [ 2032.557322][ T4848] netlink: 'syz.1.10274': attribute type 3 has an invalid length. [ 2032.636117][ T4848] netlink: 'syz.1.10274': attribute type 4 has an invalid length. [ 2032.687591][ T4848] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.10274'. [ 2032.952492][ T4861] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10279'. [ 2033.973464][ T4891] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2033.981072][ T4891] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2034.303612][ T4902] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10294'. [ 2034.819549][ T4919] netlink: 'syz.2.10298': attribute type 41 has an invalid length. [ 2036.853556][ T4955] netlink: 'syz.0.10313': attribute type 10 has an invalid length. [ 2037.454019][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.460480][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.740148][ T4966] delete_channel: no stack [ 2038.019761][ T4979] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10321'. [ 2038.049537][ T4979] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10321'. [ 2038.128409][ T4983] netlink: 'syz.2.10323': attribute type 10 has an invalid length. [ 2038.157224][ T4984] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10321'. [ 2039.495768][ T5023] delete_channel: no stack [ 2040.086544][ T5031] device wlan1 entered promiscuous mode [ 2040.388916][ T5041] netlink: 'syz.2.10344': attribute type 10 has an invalid length. [ 2040.838477][ T5046] netlink: 'syz.2.10346': attribute type 2 has an invalid length. [ 2041.034745][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10343'. [ 2041.187574][ T5046] device 0 entered promiscuous mode [ 2041.459078][ T5057] netlink: 73368 bytes leftover after parsing attributes in process `syz.5.10349'. [ 2043.522142][ T5108] netlink: 'syz.5.10364': attribute type 10 has an invalid length. [ 2043.546910][ T5108] netlink: 55 bytes leftover after parsing attributes in process `syz.5.10364'. [ 2044.369496][ T5118] netlink: 'syz.5.10367': attribute type 10 has an invalid length. [ 2044.441531][ T5120] netlink: 'syz.2.10366': attribute type 21 has an invalid length. [ 2044.490717][ T5120] netlink: 'syz.2.10366': attribute type 10 has an invalid length. [ 2044.525487][ T5120] netlink: 'syz.2.10366': attribute type 12 has an invalid length. [ 2044.590513][ T5120] netlink: 'syz.2.10366': attribute type 13 has an invalid length. [ 2044.620939][ T5120] netlink: 'syz.2.10366': attribute type 14 has an invalid length. [ 2044.661013][ T5120] netlink: 'syz.2.10366': attribute type 15 has an invalid length. [ 2044.700572][ T5120] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.10366'. [ 2045.075630][ T5124] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10369'. [ 2045.304108][ T5124] device sit0 entered promiscuous mode [ 2045.662157][ T5134] validate_nla: 8 callbacks suppressed [ 2045.662177][ T5134] netlink: 'syz.2.10372': attribute type 2 has an invalid length. [ 2045.750158][ T5134] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.10372'. [ 2046.217828][ T5140] device wlan1 entered promiscuous mode [ 2047.021175][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10377'. [ 2047.162261][ T5152] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10375'. [ 2047.627806][ T5152] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10375'. [ 2047.759279][ T5158] netlink: 'syz.5.10379': attribute type 3 has an invalid length. [ 2047.808258][ T5158] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10379'. [ 2048.605518][ T5170] netlink: 'syz.5.10382': attribute type 3 has an invalid length. [ 2048.638584][ T5170] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.10382'. [ 2049.106065][T28810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2051.150626][ T5211] device wlan1 entered promiscuous mode [ 2051.648311][ T5219] device syzkaller0 entered promiscuous mode [ 2051.782432][ T5226] netlink: 'syz.5.10399': attribute type 21 has an invalid length. [ 2051.848358][ T5226] netlink: 'syz.5.10399': attribute type 11 has an invalid length. [ 2054.870608][T32378] Bluetooth: hci1: command 0x0406 tx timeout [ 2057.893998][T13907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2057.925872][T13907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2057.934324][T13907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2057.965724][T13907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2057.973922][T13907] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2057.988230][T13907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2059.469398][ T5246] netlink: 'syz.3.10407': attribute type 32 has an invalid length. [ 2059.479975][ T5246] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10407'. [ 2059.993002][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 2060.071229][T13907] Bluetooth: hci2: command 0x0409 tx timeout [ 2060.306977][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.318132][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.363368][ T5255] device bridge_slave_0 entered promiscuous mode [ 2060.404539][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.475854][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.528690][ T5255] device bridge_slave_1 entered promiscuous mode [ 2060.560189][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2060.582270][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2060.682564][ T5255] team0: Port device team_slave_0 added [ 2060.705049][ T5255] team0: Port device team_slave_1 added [ 2060.861541][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.868648][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.928086][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.965146][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.991991][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2061.069458][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2061.687608][ T5255] device hsr_slave_0 entered promiscuous mode [ 2061.707507][ T5255] device hsr_slave_1 entered promiscuous mode [ 2061.729560][ T5255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2061.739470][ T5255] Cannot create hsr debugfs directory [ 2061.987950][ T5255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2062.003067][ T5255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2062.018592][ T5255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2062.031166][ T5255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2062.128430][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2062.148754][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2062.152349][T13907] Bluetooth: hci2: command 0x041b tx timeout [ 2062.172768][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2062.191072][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 2062.207431][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2062.217666][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2062.227329][T31481] bridge0: port 1(bridge_slave_0) entered blocking state [ 2062.234556][T31481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2062.253520][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2062.265158][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2062.275313][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2062.284806][T31481] bridge0: port 2(bridge_slave_1) entered blocking state [ 2062.292038][T31481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2062.301597][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2062.326836][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2062.336569][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2062.349980][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2062.359190][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2062.378662][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2062.389328][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2062.410413][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2062.419559][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2062.429585][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2062.438939][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2062.451259][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2062.784440][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2062.792594][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2062.810652][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2063.332493][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2063.343096][T31481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2063.373425][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2063.391315][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2063.399964][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2063.408599][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2063.422647][ T5255] device veth0_vlan entered promiscuous mode [ 2063.442876][ T5255] device veth1_vlan entered promiscuous mode [ 2063.473034][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2063.484812][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2063.493869][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2063.503609][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2063.515920][ T5255] device veth0_macvtap entered promiscuous mode [ 2063.529912][ T5255] device veth1_macvtap entered promiscuous mode [ 2063.557203][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2063.573350][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.584402][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2063.599462][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.610023][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2063.624980][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.636292][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2063.653213][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.665586][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2063.677819][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2063.686780][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2063.698516][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2063.708353][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2063.725700][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2063.743352][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.767032][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2063.777818][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.788477][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2063.799030][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.809045][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2063.819564][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2063.832023][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2063.844335][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2063.858022][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2063.870016][ T5255] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.881433][ T5255] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.890509][ T5255] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.899251][ T5255] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.938948][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.015569][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.048158][T28810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2064.058017][T28810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2064.078875][T31479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2064.117366][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.135380][T31479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2064.144553][T31479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2064.170360][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.183810][T28810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2064.231890][T13907] Bluetooth: hci2: command 0x040f tx timeout [ 2065.500641][ T63] device hsr_slave_0 left promiscuous mode [ 2065.507255][ T63] device hsr_slave_1 left promiscuous mode [ 2065.532107][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2065.539619][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2065.548931][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2065.557287][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2065.569693][ T63] device bridge_slave_1 left promiscuous mode [ 2065.577718][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.589204][ T63] device bridge_slave_0 left promiscuous mode [ 2065.599169][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.628258][ T63] device veth1_macvtap left promiscuous mode [ 2065.634718][ T63] device veth0_macvtap left promiscuous mode [ 2065.646657][ T63] device veth1_vlan left promiscuous mode [ 2065.652644][ T63] device veth0_vlan left promiscuous mode [ 2066.321629][T13907] Bluetooth: hci2: command 0x0419 tx timeout [ 2066.348260][ T63] team0 (unregistering): Port device team_slave_1 removed [ 2066.399075][ T63] team0 (unregistering): Port device team_slave_0 removed [ 2066.452502][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2066.503086][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2066.828581][ T63] bond0 (unregistering): (slave team0): Releasing backup interface [ 2066.868925][ T63] bond0 (unregistering): Released all slaves [ 2080.131882][ T9472] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2098.874376][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.880849][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2111.055778][T28810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2141.980745][T31485] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2160.313703][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.320043][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2172.905358][T31479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2182.870653][T13907] Bluetooth: hci2: command 0x0406 tx timeout [ 2203.830064][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2221.753342][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.759686][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2234.754988][T31481] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2265.679764][T28810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2283.192613][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.198992][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2296.604588][T31485] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2327.529202][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2344.632752][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.639125][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2358.454066][T28810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)